WebProxy - sockins32.dll - Program Information

bleepingcomputer.com

Welcome Guest (Log In | Create Account)

New Member? Join for free.

BleepingComputer.com -> Startup Programs Database -> sockins32.dll Information

This is an undesirable program.

This file has been identified as a program that is undesirable to have running on your computer. This consists of programs that are misleading, harmful, or undesirable.

If the description states that it is a piece of malware, you should immediately run an antivirus and antispyware program. If that does not help, feel free to ask us for assistance in the forums.

Name:	WebProxy
Filename:	sockins32.dll
Command:	sockins32.dll
Description:	Identified as a variant of the Win32:Agent-TEV malware. This infection will have its file shown as missing in a HJT log. In realty, though, this file does exist. It is also known to be a rogue anti-spyware advertiser for Antispy Spider. Last but not least, this infection has been seen to be bundled with the MBR rootkit.
File Location:	%System%
Startup Type:	This startup entry is started automatically via the following Windows Registry keys: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ ShellServiceObjectDelayLoad Under that key will be a value containing the listed CLSID which can be found under HKEY_CLASSES_ROOT\CLSID\ and contains the filename that is to be loaded.
CLSID:	{66186F05-BBBB-4a39-864F-72D84615C679}
HijackThis Category:	O21 Entry
Note:	%System% is a variable that refers to the Windows System folder. By default this is C:\Windows\System for Windows 95/98/ME, C:\Winnt\System32 for Windows NT/2000, or C:\Windows\System32 for Windows XP/Vista/7.
Removal Instructions:	How to remove AntiSpySpider and sockins32.dll (Removal Instructions)

This entry has been requested 4364 times.

Search for another program:

Advanced Search

Disclaimer

It is assumed that users are familiar with the operating system they are using and comfortable with making the suggested changes. BleepingComputer.com will not be held responsible if changes you make cause a system failure.

This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.