Error Loading Sockins32
Error loading sockins32.dll Discussion in 'Malware Removal' started by jctan, Nov 3, 2008. jctan Private E-2 Many months ago my laptop got infected w/ AntiSpySpider, and I used many malware removal programs. Everything seemed back to normal, except at every start-up, I get this "Error loading sockins32.dll" msg. Today, laptop boots up to the welcome screen only, and won't continue on to the desktop screen. I tried booting up in safe mode, and thank God the safe mode works. Did this happen bec. the malware wasn't removed properly, or that other things like registry, etc., were not put back to normal? Pls. help! Thank you!!! jctan, Nov 3, 2008 #1 jctan Private E-2 I ran Malwarebytes again, but no malware found, so no use attaching its log file. Here's my MGlogs.zip (in Safe Mode) just in case. Thanks again. Attached Files: MGlogs.zip File size: 45.8 KB Views: 3 jctan, Nov 3, 2008 #2 TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member What tools did you use? Did you follow the instructions HERE? TimW, Nov 4, 2008 #3 (You must log in or sign up to reply here.) Show Ignored Content Share This Page Your name or email address: Do you already have an account? No, create an account now. Yes, my password is: Forgot your password? Stay logged in MajorGeeks.Com Support Forums Home Forums > ----------= PC, Desktop and Laptop Support =------ > Malware Removal > MajorGeeks.Com Menu MajorGeeks.Com \ All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ NEW! PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics) Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds Home Forums Forums Quick Links Search Forums Recent Posts Members Members Quick Links Notable Members Current Visitors Recent Activity Menu Search Search titles only Posted by Member: Separate names with a comma. Newer Than: Search this thread only Search this forum only Display results as threads Useful Searches Recent Posts More... Help Home Top RSS Terms and Rules All content Copyright ©2000 - 2015 MajorGeeks.comForum software by XenForo™ ©
sockins32 really is present. Sockins32.dll is also known to be an advertiser for Antispy Spyder and is bundled with the MBR rootkit. Sockins32.dll has the following registry key that allows this file to startup automatically: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\
ShellServiceObjectDelayLoad
You will also find a value containing a listed CLSID. This can be found under HKEY_CLASSES_ROOT\CLSID\ and has the filename to be loaded. Antispy Spyder is actually a rogue anti-spyware program. This rogue anti-spyware program is installed and advertised through the malware sockins32.dll. http://forums.majorgeeks.com/index.php?threads/error-loading-sockins32-dll.173503/ You will find the sockins32 file in C:\Windows\System32. When the infection is running, advertisements will open in Internet Explorer. The advertisements will tell you that your security is at risk and that you should install Antispy Spyder to remove the risk. If you do this, you will find your desktop hijacked. A security warning will also show up. You http://www.dll-error-fixes.com/remove-sockins32dll-antispy-spyder-rogue-program/ will be directed to a site instructing you to install Antispy Spyder. You may also find your pages in Internet Explorer opening Russian sites in a random fashion. Installing and running Antispy Spyder will give you a warning that your computer is infected. However, there will be no details of what the infection is. If you want to know what infections are present, you will have to pay for a copy of the software. This tactic is common among rogue anti-spyware programs. They scare the user into purchasing what they hope to be protection but which, in truth, is actually more malware. Removing sockins32.dll and Antispy Spyder may prove to be difficult. The programs are designed to make uninstallation difficult. They do this by disabling the regedit.exe program and the Windows Task Manager. Symptoms in a HijackThis log The file may be missing in a HijackThis log even if sockins32.dll is actually present. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://c:/windows/homepage.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file://c:/windows/homepage.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://c:/windows/homepage.htm
List Welcome Guide More BleepingComputer.com → Security → Virus, Trojan, Spyware, and Malware Removal Logs Javascript Disabled Detected You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access http://www.bleepingcomputer.com/forums/t/147702/malware-still-here/ full functionality. BLEEPINGCOMPUTER NEEDS YOUR HELP! BleepingComputer is being sued by Enigma Software because of a negative review of SpyHunter. A case like this could easily cost hundreds of thousands of dollars. If we have ever helped you in the past, please consider helping us. To learn more and to read the lawsuit, click here. CONTRIBUTE TO OUR LEGAL DEFENSE All unused funds will be donated to error loading the Electronic Frontier Foundation (EFF). LET OTHERS KNOW Tweet If you accept cookies from this site, you will only be shown this dialog once!You can press escape or click on the X to close this box. Register a free account to unlock additional features at BleepingComputer.com Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their error loading sockins32 computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site. Click here to Register a free account now! or read our Welcome Guide to learn how to use this site. Malware Still Here Started by itsmeandy , May 19 2008 02:40 PM This topic is locked 7 replies to this topic #1 itsmeandy itsmeandy Members 12 posts OFFLINE Gender:Male Location:norway Local time:01:14 AM Posted 19 May 2008 - 02:40 PM I have experienced that explorer.exe has encountered problems on startup and closed, and the same for services.exe which means shutdown in 1 min.Deckard's System Scanner v20071014.68Run by Jarle on 2008-05-19 21:06:10Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 5 Restore Point(s) --6: 2008-05-19 19:06:13 UTC - RP248 - Deckard's System Scanner Restore Point5: 2008-05-19 19:04:58 UTC - RP247 - Installed Ad-Aware 20074: 2008-05-18 19:41:04 UTC - RP2