File HASH

Question

Hi, I'm not sure if I'm in the correct thread/category but here's my issue. I need to check the integrity of some .dll files in all of our Windows Servers and the checking is base on their specific hash keys. A sample of a file is linkinfo.dll
I tried to check its hash by using MD5 checker software and the result is listed on the screenshot below:
How do I check if the hash key is valid or if it has been compromised?
Regards,
Jeff

Answer 1

Hi
I agree with Rayzilt, I never seen a official list of file MD5, but I seen a KB that help to make that (but like Rayzilt's told, you still need another VM to compare);
From http://support.microsoft.com/kb/841290
How to verify the hash values for the files in the Windows directory and in all sub-directories
You can also build a hash database of your sensitive files and verify them regularly.
To create the database and to save it to the C:\Temp directory, type the following command:
fciv.exe -add %systemroot% -r -XML c:\temp\windows-hashes.XML
To list the contents of the database to the console, type the following command:
fciv.exe -list -XML c:\temp\windows-hashes.XML
To verify the contents of the XML database against the current file system files, type the following command:
fciv -v -XML c:\temp\windows-hashes.XML
Regards, Philippe
Don't forget to mark as answer or vote as helpful to help identify good information. ( linkedin endorsement never hurt too :o) )
Answer an interesting question ? Create a
wiki article about it!