That all looks OK, the digital signature verifies. I wouldn't be concerned about the certificate being out of date; it's exactly the same on a fresh Windows 10 21H2 installation.
shellext.dll virus/malware?
I just recently run autorun and saw the 3(in red) processes and I thought that it could be a virus, considering I just tried pirating software because I wasn't being careful. I have tried to delete it multiple times, but everytime I delete it it comes back after rebooting. Is this bad or is it normal?
Windows for home | Windows 10 | Security and privacy
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
7 answers
Sort by: Most helpful
-
_AW_ 67,206 Reputation points Volunteer Moderator2022-04-26T01:01:14+00:00 Right click on the file and select Properties > Digital Signatures
Double click on the listing in the Signature List
If that says the digital signature is OK, then Autoruns is misfiring.
Unfortuantely, Autoruns development since the change to the v14 builds, has been rather buggy.
-
Anonymous
2022-04-25T19:01:22+00:00 So I ran the Malwarebytes and even TDSSkiller yet nothing was detected. However, when I did the system scan, it said it found corrupt files and repaired them, which removed those files in autoruns. But once again, upon reboot, they come back up again. Edit: Just ran a powershell scan, it said nothing was detected, then when I hit refresh on autoruns, it disappears. So at this point I'm really not sure whats up. Edit #2: Im not sure if that has to do with anything, but when I delete the red files, and flick power switch on the back of my pc, when I turn my pc back on the files dont appear. They only appear if I press restart in windows.
-
_AW_ 67,206 Reputation points Volunteer Moderator2022-04-25T03:40:42+00:00 Hi, that entry is normal though it shouldn't be unverified.
I suggest you scan with Malwarebytes.
https://www.malwarebytes.com/mwb-download
Set Malwarebytes to scan for rootkits as shown in the link below:
Then to check the integrity of system files, from an administrator Command Prompt or Powershell, run:
sfc /scannow
Let me know how things go.