Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

AVG Detects 'Changed' files in System32


  • Please log in to reply

#1
Matt_T

Matt_T

    Member

  • Member
  • PipPip
  • 74 posts
I use AVG Free Edition and lately it's been reported that the following files are "Changed":

user32.dll
shell32.dll
ntoskrnl.dll

all of them in C:\WINDOWS\system32\

Should I be worried? I don't know.

What do I need to do if so?

Many thanks...

Matt :tazz:
  • 0

Advertisements


#2
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
Those files are often changed by windows update, so if you ran windows update and then got the message, no, don't worry.
  • 0

#3
Matt_T

Matt_T

    Member

  • Topic Starter
  • Member
  • PipPip
  • 74 posts
Thanks for this.

I haven't run Windows Update lately though.

The three files have been coming up as 'changed' for about 7 days now. AVG scans every day.

Six days ago it found and deleted a virus, but the 'changed' thing was happening the day before that virus was found.

Meanwhile, 'shell32.dll' has been coming up on its own as 'changed' for at least a month now.

Are further investigations needed? Or are things still OK d'you think?

Thanks for helping! :tazz:

Matt
  • 0

#4
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
find the files

right click them, choose properties, choose VERSION tab....

copy the info down and report back
  • 0

#5
Matt_T

Matt_T

    Member

  • Topic Starter
  • Member
  • PipPip
  • 74 posts
Ok here goes.....

user32.dll Ver: 5.1.2600.2622
shell32.dll Ver: 6.0.2900.2620
ntoskrnl.exe Ver: 5.1.2600.2622

:tazz:
  • 0

#6
Matt_T

Matt_T

    Member

  • Topic Starter
  • Member
  • PipPip
  • 74 posts
Ok here goes.....

user32.dll Ver: 5.1.2600.2622
shell32.dll Ver: 6.0.2900.2620
ntoskrnl.exe Ver: 5.1.2600.2622

:tazz:
  • 0

#7
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
they all look good to me...more recent than mine, but I don;t have sp2 on this machine
  • 0

#8
Matt_T

Matt_T

    Member

  • Topic Starter
  • Member
  • PipPip
  • 74 posts
Great. Many thanks. :tazz:
  • 0

#9
Matt_T

Matt_T

    Member

  • Topic Starter
  • Member
  • PipPip
  • 74 posts
A quick PS (if that's OK).

I've been having no luck eradicating WindUpdates spyware from my PC too.

I've posted info and a HJT log in the Spyware Forum on two occasions but had no replies.

Am I doing anything wrong? I think I've followed all the posting rules.

Just wondered if you had any tips. No worries if not.

Thanks again for all your help :tazz:
  • 0

#10
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
A polite bump is always acceptable

Also, join Geekstogo and become a spyware fighter! Those folks are overworked....
  • 0

#11
Matt_T

Matt_T

    Member

  • Topic Starter
  • Member
  • PipPip
  • 74 posts
Cheers.

But if the fight against spyware is down to my scarce techie knowledge, we're in trouble for sure(!).

Matt
  • 0

#12
StarHawk

StarHawk

    Member

  • Member
  • PipPipPip
  • 189 posts
Matt asked above

I use AVG Free Edition and lately it's been reported that the following files are "Changed":

user32.dll
shell32.dll
ntoskrnl.dll


If you know these files are staying unchanged don't worry. This is a minor Bug in AVG which is easily fixed. It is probably caused by an incorrect data file AVG creates and uses, avg7qt.dat. If you find this file and delete it AVG will recreate it the next time you scan your system and these files should quit showing up as "Changed". This file should be located at C:\.

I hope this helps :tazz:

StarHawk

Edited by StarHawk, 04 May 2005 - 12:23 PM.

  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP