Quote Originally Posted by dg76 View Post
So then winsock32 is bad? The reason I ask is because it is in so many places in the registry. I saw the Sophos write up online, but had never heard of them before so I did not trust it. You are saying all instances of winsock32 should go?
To answer our question, I would say yes, this is a baddie and needs to go.

But, further analysis is needed to determine exactly which baddie it is... there are a number of different baddies that use winsock32.exe. The path where it runs from and Reg keys differ among the various baddies and we'd need to pin them down.

Perhaps a WinPFind2 Log......?

I am heading out the door, but Judy will be able to help you and I really don't want to step on her toes


Best Luck
PP