Winsock Layered Service Provider - How do I tell if I have a problem?

Unknown
edited October 2005 in Spyware & Virus Removal
Microsoft Anti Spyware had a new pop up window that appeared today warning me about a new Winsock Layered Service Provider. I really don't know what to do or even what to look. Heck, I don;t even know if I really have a problem. In my HijackThis scan nothing a Winsock Layered Service Provider section did not appear even though I have seen it in other logs. Here is my log

Logfile of HijackThis v1.99.1
Scan saved at 3:23:55 PM, on 10/1/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
E:\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
E:\Eraser\eraser.exe
E:\Microsoft AntiSpyware\gcasDtServ.exe
E:\Firefox\firefox.exe
D:\Zipped\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [gcasServ] "E:\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKCU\..\Run: [Eraser] e:\Eraser\eraser.exe -hide
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: download.windowsupdate.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1122235586584
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


Should I be worried? Is there anything suspicious on my computer?

Thanks,
Christian

Comments

  • TroganTrogan London, UK
    edited October 2005
    Your log is clean so nothing to be worried about. :)

    Can I mark this thread resolved?
  • prophet665
    edited October 2005
    Trogan_1000 wrote:
    Your log is clean so nothing to be worried about. :)

    Can I mark this thread resolved?


    Thanks for taking a look at my log. So if HijackThis is not reporting any WLSP problems, what is the Microsoft Anti Spyware detecting?

    Oh...and just for you Trogan....

    UP THE IRONS! :D
  • TroganTrogan London, UK
    edited October 2005
    I'm not sure what Microsoft Anti-Spyware is detecting but if it hasn't affected your computer than ignore of the time being :)
    prophet665 wrote:
    ...Oh...and just for you Trogan....

    UP THE IRONS! :D
    hmm, what do you mean? You talking about MANCHESTER UNITED? :thumbsup:
  • prophet665
    edited October 2005
    Trogan_1000 wrote:
    I'm not sure what Microsoft Anti-Spyware is detecting but if it hasn't affected your computer than ignore of the time being :)
    hmm, what do you mean? You talking about MANCHESTER UNITED? :thumbsup:

    Nope...Up The Irons is the West Ham United team slogan.

    Once again...thanks for looking at the log file.
  • TroganTrogan London, UK
    edited October 2005
    No problem :thumbsup:

    Hope you stick around. Please consider joining the Folding@Home Project.

    More info at www.joinfolding.com :)
This discussion has been closed.