We use AVG 7.0 Network edition. One of our users came across this "Warning" message when running a quickscan of her PC:

Warning

Object C:\Windows\System32\shell32.dll changed.



I've never seen this message in my experience with AVG. Is it something to be concerned about? What does it mean?

Thanks.

Hi Brian1!

Welcome to Computer Cops! Future replies should be much quicker if you ever post again.

One way to check such findings is to go to one of the many online free antivirus scanners and get a 2nd opinion. Turn off your resident AV when doing the scan of course so you do not get conflicts.

HouseCall Free Online Virus Scanner
and run the online virus scan. Please select the Autoclean option when prompted.

Or, use RAV antivirus at http://www.ravantivirus.com/scan/

This message is indicating that the changes to that file appear suspicious yet may or may not be caused by a virus or trojan. Most of the newer AV's monitor file changes just like MS File Checker does.

Another route would be to make a copy of that file, zip it and then email it to AVG Support to let them look at it and determine if it is indeed infected or not.


Best regards


_______________________________________
NOTE FROM FORUM HOSTS: This thread is now closed. Should you need it reopened, please PM a Host/mod. Everyone else having a similar issue, please launch a new topic for yourselves. Thank you.