dreaming<>demon
In Runtime
- Messages
- 134
I ran a scan with my AV (AVG free) and it noted that there had been a 'change' made to both my kernel32.dll and my shell32.dll,
so I checked them out, and compared them to ones that are offered for download.
The ones that I downloaded are from here :
http://www.dll-files.com/dllindex/dll-files.shtml?kernel32
http://www.dll-files.com/dllindex/dll-files.shtml?shell32
the downloaded versions size :
shell32.dll = 1,391,376 bytes (1.32MB)
kernel32.dll = 471,040 bytes (460KB)
the ones currently in my system32 folder :
kernel32.dll = 984,064 bytes (961KB)
shell32.dll = 8,453,632 bytes (8.06MB)
-----------------------------------------------------------------------
If I replace the files with the downloaded versions, it does it, but after around 4-6 seconds, it turns itself back into the larger version of the file...
Is this a virus?
so I checked them out, and compared them to ones that are offered for download.
The ones that I downloaded are from here :
http://www.dll-files.com/dllindex/dll-files.shtml?kernel32
http://www.dll-files.com/dllindex/dll-files.shtml?shell32
the downloaded versions size :
shell32.dll = 1,391,376 bytes (1.32MB)
kernel32.dll = 471,040 bytes (460KB)
the ones currently in my system32 folder :
kernel32.dll = 984,064 bytes (961KB)
shell32.dll = 8,453,632 bytes (8.06MB)
-----------------------------------------------------------------------
If I replace the files with the downloaded versions, it does it, but after around 4-6 seconds, it turns itself back into the larger version of the file...
Is this a virus?