Winsock32...problem or not?

[dg76]

So then winsock32 is bad? The reason I ask is because it is in so many places in the registry. I saw the Sophos write up online, but had never heard of them before so I did not trust it. You are saying all instances of winsock32 should go?

As far as it being in my processes under control/alt/del, it is not there and hasn't been. I was just concerned about it b/c I had found it in Hijack This, and it was not present in previous logs before this.

As far as the Ewido log, I must have missed something as I did not see the option for the log, just to remove the couple things on there.

[PhilliePhan]

So then winsock32 is bad? The reason I ask is because it is in so many places in the registry. I saw the Sophos write up online, but had never heard of them before so I did not trust it. You are saying all instances of winsock32 should go?

To answer our question, I would say yes, this is a baddie and needs to go.

But, further analysis is needed to determine exactly which baddie it is... there are a number of different baddies that use winsock32.exe. The path where it runs from and Reg keys differ among the various baddies and we'd need to pin them down.

Perhaps a WinPFind2 Log......?

I am heading out the door, but Judy will be able to help you and I really don't want to step on her toes


Best Luck
PP

[jholland1964]

Download WinPFind2
Download WinPFind.zip and extract it to your C:\ folder. This will create a folder called WinPFind in the C:\ folder. Inside c:\WinPFind is a file called WinPFind.exe. Double-click on this file to launch the program. Once it is launched, click on the Start Scan button and wait for it to finish. This program will scan large amounts of files on your computer for known patterns so please be patient while it works as it can take a while, upwards to 30 minutes or more.

When it is done, it will show the results of the scan. Click on the Copy to Clipboard button and then paste the contents of the log here.