AVG test results showing something

Hi I've done a scan with AVG today and in the test results it says that the test was completed sucessfully and that no threats were found. However in the virus results tab of the test results it comes up with these 2 objects,
C:\windows\system32\kernel32.dll
C:\windows\system32\shell32.dll
The result for both is "change" and the status for both is "changed.
Is this something I should be concerned about, my computer seems to be running fine otherwise.

 

Ok I've done all scans etc as required. Attached are the log files. Panda Active Scan was the only 1 to find anything.

 

Here are the other 2 scan logs.

 

Download Pocket KillBox

• Save it to your desktop or a place easy to find.
• Do not run it yet

Now scan with HijackThis and check the boxes for the following entries:
( Make sure ALL browser windows are closed when you click FIX )

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

Again, make sure ALL browser windows are closed when you click FIX.

Next, run CCleaner to clean up cookies and temp files.

Locate PocketKillbox
(Procede with this step even if they do not show in blue)

Now, Copy and Paste C:\WINDOWS\system32\authz.exe into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click YES and allow your PC to reboot.

• If you get an error message about Pending Operations, just reboot your computer manually.

After you complete the above, procede with the next step of this fix.

Next Reset Web Settings & Default Security Settings

To Reset Web Settings:
Right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.

If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK

To Default Security Settings:
Right click on your desktop Internet Explorer icon and select Properties. Then click the Security Tab and click Default Level for Internet, Local Intranet, Trusted Sites, and Restricted Sites.

Note for IE 7 users:
Select Internet Options, then the Advanced Tab and then the Reset button under Reset Internet Explorer Settings.

After you complete the above, reboot and let me know how things are running.

 

This is normal for AVG, it does this on mine. Not sure exactly what it means but I don't believe it's anything to worry about.

 

Hi I've done everything as asked, everything seems to be running ok. However as the computer was running (or at least seemed to be) OK before, I ran a scan with panda active scan and it came up with some of the things from the 1st scan. Not sure if its anything to worry about. I've attached the scan log and a new HJT log.

 

Just run CCleaner and it will address the Panda detections. Also, you need to delete the Killbox backup folder.

Are you having any current problems?

 

OK. Everything is now done with no current problems. many thanks.

 

Your Welcome!

You should see this article on How to Protect yourself from malware!

Surf Safely!