Possibly manipulated system files and pkzip crc-32

I am getting paranoid about possibly manipulated system files and .dlls.
Examples: mdraw, ddraw, ddhelp, mprexe

My first in-depth check has been DDHELP which has an *apparently* valid
byte count of 49152. However, It shows a date of 5-11-98 22:22:00 and I
question that hour/minute stamp.

Further,

I am sometimes showing too many established TCP connections via NETSTAT (a
DOS command) and for UDP nbsession,nbname, and nbdatagram repeat themselves
as well as showing 1027 and 1069 active.

I wonder if they could be infected in SYSBCKUP as well as SYSTEM.

PKZIP has a CRC-32 display that could be useful and i wonder if anyone has
ever used this, or is this a valid way to check the integrity of a file?

FACE

Correction: make that DDHELP datestamp 4-23-99 22:22:00

FACE

On Mon, 26 Jul 2004 08:16:18 -0400, FACE in
microsoft.public.win98.performance wrote:

I am getting paranoid about possibly manipulated system files and .dlls.
Examples: mdraw, ddraw, ddhelp, mprexe

My first in-depth check has been DDHELP which has an *apparently* valid
byte count of 49152. However, It shows a date of 5-11-98 22:22:00 and I
question that hour/minute stamp.

Further,

I am sometimes showing too many established TCP connections via NETSTAT (a
DOS command) and for UDP nbsession,nbname, and nbdatagram repeat themselves
as well as showing 1027 and 1069 active.

I wonder if they could be infected in SYSBCKUP as well as SYSTEM.

PKZIP has a CRC-32 display that could be useful and i wonder if anyone has
ever used this, or is this a valid way to check the integrity of a file?

FACE