[dreaming<>demon]

I ran a scan with my AV (AVG free) and it noted that there had been a 'change' made to both my kernel32.dll and my shell32.dll,
so I checked them out, and compared them to ones that are offered for download.

The ones that I downloaded are from here :

http://www.dll-files.com/dllindex/dl...shtml?kernel32
http://www.dll-files.com/dllindex/dl....shtml?shell32

the downloaded versions size :

shell32.dll = 1,391,376 bytes (1.32MB)

kernel32.dll = 471,040 bytes (460KB)

the ones currently in my system32 folder :

kernel32.dll = 984,064 bytes (961KB)

shell32.dll = 8,453,632 bytes (8.06MB)

-----------------------------------------------------------------------

If I replace the files with the downloaded versions, it does it, but after around 4-6 seconds, it turns itself back into the larger version of the file...

Is this a virus?

[Jam3s-Zer0]

No they are fine. Just leave them.

If you want someone to check if you have a virus, run thru the guide at the top if the page and make sure you post a HijackThis log which is the last step.