O20 - AppInit_DLLs: sockspy.dll,wbsys.dll

Discussion in 'other security issues & news' started by lynchknot, Oct 26, 2004.

Thread Status:
Not open for further replies.
  1. lynchknot

    lynchknot Registered Member

    Joined:
    Jun 26, 2004
    Posts:
    904
    Location:
    SW WA
    Hello, does anyone know how to remove? I tried 2x with HJT but it won't go. Thanks.
     
    lynchknot, Oct 26, 2004
    #1
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,491
    Location:
    Netherlands
    Pieter_Arntz, Oct 26, 2004
    #2
  3. dvk01

    dvk01 Global Moderator

    Joined:
    Oct 9, 2003
    Posts:
    3,131
    Location:
    Loughton, Essex. UK
    sockspy.dll is part of bitdefender antivirus so it won't go while bitdefender is installed and running

    wbsys.dll is part of windows blinds

    Not all appinit dll's are bad and a lot of genuine applications put them in that location so they start before the main part of windows loads

    Especially useful for an antivirus or a windows skinning tool

    Edit:

    Damn it!! Pieter is quicker typing than me

    but 2 answers the same are better than none
     
    dvk01, Oct 26, 2004
    #3
  4. lynchknot

    lynchknot Registered Member

    Joined:
    Jun 26, 2004
    Posts:
    904
    Location:
    SW WA
    Well, I don't have Bitdefender (unless it's in an "all-in-one" tool) and i've had WB installed for a long time and have never seen that entry.

    HJT says it's a rare entry (under AppInit) and usually by a trojan

    **edit - maybe Giant AS uses bit defender as it's "real time protection" - which would mean, i've got 2 AV's running.
     
    Last edited: Oct 26, 2004
    lynchknot, Oct 26, 2004
    #4
  5. dvk01

    dvk01 Global Moderator

    Joined:
    Oct 9, 2003
    Posts:
    3,131
    Location:
    Loughton, Essex. UK
    They are not so rare nowadays but HJT has only been showing them since 1.98.1 so not very long

    but if you haven't got bitdefender then post your HJt log so I can look it over and se if it Might belong to something else
     
    dvk01, Oct 26, 2004
    #5
  6. lynchknot

    lynchknot Registered Member

    Joined:
    Jun 26, 2004
    Posts:
    904
    Location:
    SW WA
    Thanks dvko1 - :)

     
    lynchknot, Oct 26, 2004
    #6
  7. dvk01

    dvk01 Global Moderator

    Joined:
    Oct 9, 2003
    Posts:
    3,131
    Location:
    Loughton, Essex. UK
    Sockspy.dll is a dll that scans incoming packets at winsock level and is used by several other antiviruses apart from Bitdefendr

    I have found it in Bullguard and I am assuming it is part of Giant antispyware or possibly even winpatrol

    I can almost 200% guarantee it isn't bad otherwise KAV would definitely have screamed
     
    dvk01, Oct 26, 2004
    #7
  8. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,491
    Location:
    Netherlands
    Pieter_Arntz, Oct 26, 2004
    #8
  9. lynchknot

    lynchknot Registered Member

    Joined:
    Jun 26, 2004
    Posts:
    904
    Location:
    SW WA
    Yes, I think that is the one. (translator) - I does not work too well. I tried it once and I think it just uses bablefish - which, to me, is a joke (not good) - I do understand it is hard to translate though.
     
    lynchknot, Oct 26, 2004
    #9
  10. lynchknot

    lynchknot Registered Member

    Joined:
    Jun 26, 2004
    Posts:
    904
    Location:
    SW WA
    Well, something is wrong. After rebooting and entering my password, it is stuck on "loading your personal settings" - been 15 minutes so for.
     
    lynchknot, Oct 26, 2004
    #10
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...