interop.SHDoc.dll

[Guenillou]

Hi All, can anyone tell me what "interop.SHDoc.dll" is? It was detected in a quick scan by Malwarebytes. Some sites say it is a Windows file...at least the "SHDoc.dll" is and a necessary file. It was found in my C:\Users\"mycomputer"\AppData\Roaming\WinLive...folder. Thanks for your help.

[AdvancedSetup]

Please post your Quick Scan log from MBAM as well as run a DDS scan and post back those logs too.

Please run the following scanner and send back the logs.

Download DDS from one of the locations below and save to your Desktop

dds.scr

dds.com

Temporarily disable any script blocker if your Anti-Virus/Anti-Malware has it.

How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Once downloaded you can disconnect from the Internet and disable your Ant-Virus temporarily if needed.

Then double click dds.scr or dds.com to run the tool.

Click the Run button if prompted with an Open File - Security Warning dialog box.

A black DOS console should open and run for a moment.

When done, DDS will open two (2) logs:

1. DDS.txt
   
2. Attach.txt
   

• Save both reports to your desktop
  
• Please include the following logs in your next reply: DDS.txt and Attach.txt
  You can ignore the note about zipping the Attach.txt file in most cases.
  

Thanks

[Guenillou]

I have attached the 2 files. Thanks for your help.

DDS.txt

attach.txt

[AdvancedSetup]

Please update MBAM and do another Quick Scan and let me know if this is still detected or not.

[Guenillou]

I had left the file in Quarantine. The program would not let me restore it so I deleted it. After a reboot, updating Malwarebytes and running the scan again, the program found nothing. So I guess it's ok now. I'm just worried that the file was an important file detected as a false/positive. Thanks for your help! Ray

[exile360]

When a file has been removed by the scanner, it cannot be restored from quarantine until you've rebooted your system. That being said, I did find information after doing some web searching indicating that a file by that name in that location does indeed indicate the presence of an actual infection, so I do not believe that this was a false positive, but at this point that cannot be determined without the file itself.

If the file/detection returns, please don't hesitate to contact us again so that we ma investigate further and determine definitively whether or not this was a false positive.

Thanks

[Guenillou]

Thanks again for your help. I will let you know if the infection returns. I am waiting for the program to run it's own scan routine to see the results.