Invalid signature (Windows)

Module: File Watch

Supported Platforms: Windows 2000, Windows 2003, Windows 2008, Windows Vista, Windows XP

This check reports files with CRC, MD5, or combined file signatures that do not match signatures and signature types that are defined in the File Signatures template. Use the name list to enable or disable the selected File Signatures templates. These templates are identified by .fs file extensions.

The following table lists the error messages for the check.

Table: Error messages for Invalid signature

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESMM_SIG_NOTMATCH

Category: Policy Compliance

  • Windows 2000 (45939)

  • Windows 2003 (215339)

  • Windows 2008 (215839)

  • Windows Vista (215539)

  • Windows XP (49139)

Title: File signature does not match template

Description:The file signature does not match the signature that is specified in the File Signatures template. If the change is authorized, update the template file. If the change is not authorized, restore the file from a backup.

Severity: yellow-1

Correctable: false

Snapshot Updatable: false

Template Updatable: true

Information Field Format: [%s]

String ID: ESMM_FILE_NOTEXIST

Category: Policy Compliance

  • Windows 2000 (45941)

  • Windows 2003 (215341)

  • Windows 2008 (215841)

  • Windows Vista (215541)

  • Windows XP (49141)

Title: Mandatory file does not exist

Description:The file is defined as mandatory in the File Signatures template, but it does not exist. Add the missing file to the system or change the requirement for the file in the template.

Severity: yellow-3

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_NO_TEMPLATE

Category: Policy Compliance

  • Windows 2000 (45943)

  • Windows 2003 (215343)

  • Windows 2008 (215843)

  • Windows Vista (215543)

  • Windows XP (49143)

Title: No template specified

Description:No template was enabled, so the listed check or option could not be executed. Enable a template with the appropriate file extension and rerun the module.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]