On my `autoruns` list I checked three files under the same key, with a series of numbers as names and they came up as malware.
The `registry key`is HKLM\Software\Classes\Folder\Shellex\ColumnHandlers .
The name (after clicking on the file on the autoruns list) was shown at the bottom as shell32.dll
In the search results the file name identified as maleware is shell32.dll,
Is the comma significant?
I tried to delete a file with the same name from System32, but kept getting a message that it could not be deleted! However a quick check on Google came up with conflicting advice about doing so! Hence the question about the comma.
Any advice from yourselves would be appreciated please. Regards JohnCe.
XP MediaCentreEdition, Version2002. ServicePack2. Pentium4, 3GHz. 2.5GB,Ram. Dell Dimension DMO51.
Found another in :-HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers