1. Check if OS is WinXP or Win7.
2. For WinXP look at all files in an beyond "C:\Documents and Settings".
3. Match file size.
4. Matches sha1.
5. For Win7 look at all files in "C:\Users" and beyond.
Evaluation time depends on number of user profiles.
if (name of operating system as lowercase = "winxp") then ((name of it, pathname of it, sha1 of it, size of it) as string) of it whose (size of it=36840 and sha1 of it="
Change these entries to the file you want to find.
<file>, <path>, <sha1>, <size>
name.exe, C:\Documents and Settings\Administrator\
Bigfix does not do md5 so you have to use sha1.
There should be no false-positives in your results.
Do NOT do the entire C:\ directory. It will eat up your cycles. (You've been warned. So if you go ahead and do it anyway, do it at night when nobody is logged on.)
If you know the exact folder to look in then you can make the script much faster by getting rid of the "descendants of folder" part.