Additionally, you can verify legitimate files haven't been modified by downloading a fresh copy of the version you're running from the members area and comparing those files to what included in the stock archive.