Windows system file comparisons

[Bludd]

Could anyone with XP32 SP3 with all the latest updates check these files in the Windows\System32 folder:

advapi32.dll
mswsock.dll
logonui.exe

If you could give me the sizes in bytes, the version numbers and MD5 checksum I would be very much obliged.

 

[Zaphod]

For what localization?

 

[Blazkowicz]

try the sfc command ( sfc /? ), its purpose is precisely to check such system files and replace them with a correct version.
Though I don't know if that thing can get compromised itself

 

[Bludd]

For what localization?

English (United States).

try the sfc command ( sfc /? ), its purpose is precisely to check such system files and replace them with a correct version.
Though I don't know if that thing can get compromised itself

I ran ut, but I don't trust it 100% now.

 

[Davros]

sfc will compare files against the xp cd wont it ?
the xp cd might not be xp sp3

advapi32.dll (5.1.2600.2180)
Size on disk: 604 KB (618,496 bytes)
size: 602 KB (616,960 bytes)

mswsock.dll (5.1.2600.2180)
Size on disk: 240 KB (245,760 bytes)
size: 239 KB (245,248 bytes)

logonui.exe (6.0.2900.2180)
Size on disk: 504 KB (516,096 bytes)
502 KB (514,560 bytes)

 

[Bludd]

I don't need size on disk, I need the size.

Also, my checksums are different. What are the versions of your files, Davros?

I am EN-US, though. That may be the difference.

 

[Davros]

edited last post...

 

[Bludd]

Thanks, Davros.

My files are not the same versions as yours.
advapi32.dll (5.1.2600.5755)
mswsock.dll (5.1.2600.5625)
logonui.exe (6.0.2900.5512)

Anyway, I the reason I was concerned about these files is that Autoruns suddenly showed them (I have Autoruns set to hide signed Microsoft and Windows entries), but now that I have rebooted, Autoruns doesn't show them any more.

When I ran sfc /scannow, it didn't touch those files.

Oh well, probably nothing.