Hi. The value on Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad - The value name WebCheck = {E6FB5E20-DE35-11CF-9C87-00AA005127ED} is a virus?
Hi
May I ask why you are messing with your Registry?
If you want a complete check to see if it’s malicious check out; https://forum.avast.com/?topic=53253.0
Attach MBAM, FRST and aswMBR.
Note: I think aswMBR takes a while now. So run it, then go have a Tea or Coffee.
Your question really doesn’t make sense.
The entry itself is legitimate and part of the OS.
What matters is the keys that are in it.
It can be added there (or a existing one changed) by malware.
Since you have to ask, you are not capable of handling the registry.
I strongly suggest to stay away from it unless a expert guide you.
Follow the instructions in the link Michael gave you.
Normally this isn’t a virus: http://www.neuber.com/taskmanager/process/webcheck.dll.html
pol
Sorry me. I did not say that was the Eusing Utilities reported that this danger. See this link: http://www.filedropper.com/dangerous. But I also think it is not malware.
Can you attach the logs so we can have a look? Make sure it isn’t dangerous?
It was clearly asked and instructed to ATTACH the logs.
Forgot mbam log. Now follows.
http://www.filedropper.com/mbamlog_1
What part of ATTACH is it you do not understand ?
Hello. I just like to know if the following registry value: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ ShellServiceObjectDelayLoad - The value name WebCheck = {E6FB5E20-DE35-11CF-9C87-00AA005127ED} is a virus ?. Mbam and Avast do not show, but Eusing Utilities (http://www.filedropper.com/dangerous) reports as dangerous. Is not it dangerous? Only this.
Why are you asking again ?
Why do you not listen and attach the logs so we can have a look at them ?
We can’t help you if you don’t listen.
His important log files.
That is a legitimate MS CLSID
Here are the logs. Unfortunately the “aswMBR.exe” does not work. I closed Avast, closed the Mbam and still does not work. Annex follows the default photo called “aswMBR do not work till end.jpg”. The English translation is: Avast! Antirootkit stopped working. A problem has made the program to stop working correctly. The windows will close the program and notify you if a solution is available. I did not know why the “asMBR” does not work. Sorry for errors, it is the first time I post in this forum.
What problems are you experiencing ? As the CLSID is legitimate http://www.systemlookup.com/O21/222-SYSDIR_webcheck_dll.html
Hi!. No problem. I was just doing a routine check when Eusing Utilities program found a key in the registry with a danger. I used Avast, the MBAM and found nothing. That is why I asked here in the forum if anyone would know what it is.