|
Answer» Hey Everyone, I ran a ROUTINE avg virus scan this a.m.....no virus found! When I looked at the test results, the last five items listed were as follows:
C:WINDOWS/SYSTEM32/kernel32.dll C:WINDOWS/SYSTEM32/wsock32.dll C:WINDOWS/SYSTEM32/user32.dll C:WINDOWS/SYSTEM32/shell32.dll C:WINDOWS/SYSTEM32/ntoskrnl.exe
At the top of the page under "results" all the way down has "ok" listed, but when it GOT to these last five items, instead of "ok" it says "change" and then under "status" for these last five items it says "changed".
Is this something to be alarmed about? I did recently remove the 40gb hdd and replaced it with a new 80gb, and then reloaded os xp-sp2. I was WONDERING if this may be the cause of the "changed" status.?
Any feed back would be greatly appreciated! Thanks
run a spysweeper......program like adaware/spysweeper etc......these references seem to point to IE.??.... or .some program maybe trying to alter your registry.......Here are descriptions of those processes... Also, YOU DO HAVE A VIRUS!!!
ntoskrnl.exe --- http://www.processlibrary.com/directory/files/ntoskrnl/index.php
kernel32.dll --- TROJAN! http://www.processlibrary.com/directory/files/kernel32/index.php
wsock32.dll --- http://www.processlibrary.com/directory/files/wsock32/index.php
user32.dll --- http://www.processlibrary.com/directory/files/user32/index.php
shell32.dll --- TROJAN! http://www.processlibrary.com/directory/files/shell32/index.php
Remove the trojans as soon as possible!
[glb]Flame[/glb]http://www.majorgeeks.com/downloads31.html Thank-you for your responses....I'm currently have AVG Spybot Ad-Aware SE CCleaner CW Shredder
on my pc. I ran AVG----no virus came up Spybot--also clean While I was running Ad-Ware, AVG popped up and said it detected a Trojan HORSE. I quarantined it and let the scan finish then went into Vault and deleted it. Re-ran everything and all came up clear. Is there a specific file to look for in Registry, H-Keys that would determine if it is actually gone? Seems like thats where I went one other time when I got a virus and deleted the file.
Thanks for your help!your ok.......avg///and the rest have scanned the reg....clean bill of health.....go surfing.......mind the water is hot THANK-YOU MERLIN_2!
I feel much better now! Really appreciate the help!no problem........we aim to please...the family forum of the net.....You should install a firewall as well.
Quote When the System Areas Test detects a change, the Accept changes button is made available. Click it if you want the amended object to be incorporated in the System Areas Test database. If you do not accept the changes then AVG Free will alert you the next time you run the System Areas Test again.
Does anyone know where the button is? DO NOT REMOVE kernel32.dll or shell32.dll, they are not trojans but important windows files.(Marlene should know that becuase of the links)
[glb]Flame[/glb]
Quotekernel32.dll --- TROJAN! shell32.dll --- TROJAN!
Reading the links is how I found out, I hope Marlene reads them.That's why I put them there!
[glb]Flame[/glb]But where's the button to accept the changes
|