1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Virus Corrupted WINSOCK32.DLL

Discussion in 'Earlier Versions of Windows' started by AJD2, Nov 18, 2001.

Thread Status:
Not open for further replies.
Advertisement
  1. AJD2

    AJD2 Thread Starter

    Joined:
    Jan 11, 2001
    Messages:
    9
    Hi

    I contracted a virus (hybris worm) and my antivirus software told me that affected file was winsock32.dll and that I must replace it with a clean version.

    My question is - how do I get hold of a clean version on winsock32.dll and is it as simple as deleting the 'dirty' file and putting a clean version of the file in the same folder??

    Thanks for your help

    Andy.
     
  2. eddie5659

    eddie5659 Moderator Malware Specialist

    Joined:
    Mar 19, 2001
    Messages:
    35,992
    Hiya

    Do this to extract a new copy of wsock32.dll to the System folder at c:\windows\system and be sure you did rename any other wsock32.dll files to wsock32.old

    You only want to have one wsock32.dll file on the drive and it should be in the System folder.

    Start | Run type in SFC and press enter. At the bottom of the dialog box select "Extract one file from the installation disk". Now key in Wsock32.dll and click on Start. Insert your W98 CD or obviously skip this step if your W98CD is loaded on the hardrive. If the "Restore From" box is empty, click on Browse and point it to the Win98 folder on the W98 CD in your CDRom drive or if you have no W98 CD try c:\windows\options\cabs. The "Save File To" should already be defaulted to c:\windows\system. Click on OK to restore it. You'll be prompted to backup the current one, just take the defaults. Then follow the prompts to restart the PC so the new copy of the file is loaded.

    Also, have you fully removed the virus?

    http://www.symantec.com/avcenter/venc/data/w95.hybris.gen.html

    Was this what you found? If not, what was the full name?

    Also, go here and doublecheck that we have removed all the components. Downlaod Startup Log, install and run it. Allow the DOS window to close, then copy/paste the list:

    http://home.earthlink.net/~rmbox/Reticulated/Toys.html

    Regards

    eddie
     
  3. TonyKlein

    TonyKlein Malware Specialist

    Joined:
    Aug 26, 2001
    Messages:
    10,392
  4. AJD2

    AJD2 Thread Starter

    Joined:
    Jan 11, 2001
    Messages:
    9
    Thanks, guys for your detailed responses - i'll give those a shot and let you know how it went.

    Cheers!

    Andy.
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/58939

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice