Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: AVG routine scan  (Read 9370 times)

0 Members and 1 Guest are viewing this topic.

Marlene2

  • Guest
AVG routine scan
« on: June 22, 2005, 09:24:04 AM »
Hey Everyone,
I ran a routine avg virus scan this a.m.....no virus found! :)
When I looked at the test results, the last five items listed were as follows:

C:WINDOWS/SYSTEM32/kernel32.dll
C:WINDOWS/SYSTEM32/wsock32.dll
C:WINDOWS/SYSTEM32/user32.dll
C:WINDOWS/SYSTEM32/shell32.dll
C:WINDOWS/SYSTEM32/ntoskrnl.exe

At the top of the page under "results" all the way down has "ok" listed, but when it got to these last five items, instead of "ok" it says "change" and then under "status" for these last five items it says "changed".  

Is this something to be alarmed about?  I did recently remove the 40gb hdd and replaced it with a new 80gb, and then reloaded os xp-sp2. I was wondering if this may be the cause of the "changed" status.?

Any feed back would be greatly appreciated!
Thanks


merlin_2

  • Guest
Re: AVG routine scan
« Reply #1 on: June 22, 2005, 10:56:57 AM »
run a spysweeper......program like adaware/spysweeper etc......these references seem to point to ie.??.... or .some program maybe trying  to alter your registry.......
« Last Edit: June 22, 2005, 10:58:34 AM by merlin_2 »

Flame

  • Moderator


  • Prodigy

  • Think, dream, see, be... Everything.
  • Thanked: 6
    • Yes
  • Certifications: List
  • Experience: Guru
  • OS: Other
Re: AVG routine scan
« Reply #2 on: June 22, 2005, 10:59:16 AM »
Here are descriptions of those processes... Also, YOU DO HAVE A VIRUS!!!

ntoskrnl.exe --- http://www.processlibrary.com/directory/files/ntoskrnl/index.php

kernel32.dll  --- TROJAN! http://www.processlibrary.com/directory/files/kernel32/index.php

wsock32.dll  --- http://www.processlibrary.com/directory/files/wsock32/index.php

user32.dll  --- http://www.processlibrary.com/directory/files/user32/index.php

shell32.dll  --- TROJAN! http://www.processlibrary.com/directory/files/shell32/index.php

Remove the trojans as soon as possible!

[glb]Flame[/glb]

merlin_2

  • Guest
Re: AVG routine scan
« Reply #3 on: June 22, 2005, 11:00:29 AM »

Marlene2

  • Guest
Re: AVG routine scan
« Reply #4 on: June 22, 2005, 03:01:48 PM »
Thank-you for your responses....I'm currently have
AVG
Spybot
Ad-Aware SE
CCleaner
CW Shredder

on my pc.  I ran AVG----no virus came up
Spybot--also clean
While I was running Ad-Ware, AVG popped up and said it detected a Trojan Horse.  I quarantined it and let the scan finish then went into Vault and deleted it.  Re-ran everything and all came up clear.  Is there a specific file to look for in Registry, H-Keys that would determine if it is actually gone?  Seems like thats where I went one other time when I got a virus and deleted the file.

Thanks for your help!

merlin_2

  • Guest
Re: AVG routine scan
« Reply #5 on: June 22, 2005, 03:15:44 PM »
your ok.......avg///and the rest have scanned the reg....clean bill of health.....go surfing.......mind the water is hot :)

Marlene2

  • Guest
Re: AVG routine scan
« Reply #6 on: June 22, 2005, 03:19:15 PM »
THANK-YOU MERLIN_2!

I feel much better now!
Really appreciate the help!

merlin_2

  • Guest
Re: AVG routine scan
« Reply #7 on: June 22, 2005, 03:25:27 PM »
no problem........we aim to please...the family forum of the net.....

Raptor

  • Guest
Re: AVG routine scan
« Reply #8 on: June 22, 2005, 05:18:22 PM »
You should install a firewall as well.

Fed

  • Moderator


  • Sage
  • Thanked: 35
    • Experience: Experienced
    • OS: Windows XP
    Re: AVG routine scan
    « Reply #9 on: June 22, 2005, 05:49:06 PM »
    Quote
    When the System Areas Test detects a change, the Accept changes button is made available. Click it if you want the amended object to be incorporated in the System Areas Test database. If you do not accept the changes then AVG Free will alert you the next time you run the System Areas Test again.


    Does anyone know where the button is?  ???

    Fed

    • Moderator


    • Sage
    • Thanked: 35
      • Experience: Experienced
      • OS: Windows XP
      Re: AVG routine scan
      « Reply #10 on: June 22, 2005, 05:55:34 PM »
      DO NOT REMOVE
      kernel32.dll or shell32.dll, they are not trojans but important windows files.

      Flame

      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: AVG routine scan
      « Reply #11 on: June 22, 2005, 07:05:36 PM »
      (Marlene should know that becuase of the links)  ;)

      [glb]Flame[/glb]

      Fed

      • Moderator


      • Sage
      • Thanked: 35
        • Experience: Experienced
        • OS: Windows XP
        Re: AVG routine scan
        « Reply #12 on: June 22, 2005, 08:13:36 PM »
        Quote
        kernel32.dll  --- TROJAN!
        shell32.dll  --- TROJAN!

        Reading the links is how I found out, I hope Marlene reads them.

        Flame

        • Moderator


        • Prodigy

        • Think, dream, see, be... Everything.
        • Thanked: 6
          • Yes
        • Certifications: List
        • Experience: Guru
        • OS: Other
        Re: AVG routine scan
        « Reply #13 on: June 22, 2005, 09:10:30 PM »
        That's why I put them there!  ;D

        [glb]Flame[/glb]

        Fed

        • Moderator


        • Sage
        • Thanked: 35
          • Experience: Experienced
          • OS: Windows XP
          Re: AVG routine scan
          « Reply #14 on: June 22, 2005, 09:14:06 PM »
          But where's the button to accept the changes  ???