Share via

shellext.dll virus/malware?

Anonymous
2022-04-25T03:13:11+00:00

I just recently run autorun and saw the 3(in red) processes and I thought that it could be a virus, considering I just tried pirating software because I wasn't being careful. I have tried to delete it multiple times, but everytime I delete it it comes back after rebooting. Is this bad or is it normal?

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

7 answers

Sort by: Most helpful
  1. _AW_ 67,206 Reputation points Volunteer Moderator
    2022-04-26T03:09:43+00:00

    That all looks OK, the digital signature verifies. I wouldn't be concerned about the certificate being out of date; it's exactly the same on a fresh Windows 10 21H2 installation.

    20+ people found this answer helpful.
    0 comments No comments
  2. _AW_ 67,206 Reputation points Volunteer Moderator
    2022-04-26T01:01:14+00:00

    Right click on the file and select Properties > Digital Signatures

    Double click on the listing in the Signature List

    If that says the digital signature is OK, then Autoruns is misfiring.

    Unfortuantely, Autoruns development since the change to the v14 builds, has been rather buggy.

    9 people found this answer helpful.
    0 comments No comments
  3. Anonymous
    2022-04-26T01:50:43+00:00

    this is what is says

    6 people found this answer helpful.
    0 comments No comments
  4. Anonymous
    2022-04-25T19:01:22+00:00

    So I ran the Malwarebytes and even TDSSkiller yet nothing was detected. However, when I did the system scan, it said it found corrupt files and repaired them, which removed those files in autoruns. But once again, upon reboot, they come back up again. Edit: Just ran a powershell scan, it said nothing was detected, then when I hit refresh on autoruns, it disappears. So at this point I'm really not sure whats up. Edit #2: Im not sure if that has to do with anything, but when I delete the red files, and flick power switch on the back of my pc, when I turn my pc back on the files dont appear. They only appear if I press restart in windows.ImageImage

    4 people found this answer helpful.
    0 comments No comments
  5. _AW_ 67,206 Reputation points Volunteer Moderator
    2022-04-25T03:40:42+00:00

    Hi, that entry is normal though it shouldn't be unverified.

    I suggest you scan with Malwarebytes.

    https://www.malwarebytes.com/mwb-download

    Set Malwarebytes to scan for rootkits as shown in the link below:

    https://www.malwarebytes.com/solutions/rootkit-scanner#:~:text=Click%20the%20Gear%20icon%20and,Malwarebytes%20quickly%20scans%20your%20device

    Then to check the integrity of system files, from an administrator Command Prompt or Powershell, run:

    sfc /scannow

    Let me know how things go.

    4 people found this answer helpful.
    0 comments No comments