Winsock - Revision history

CCRDude: /* Similar commands */ added WinSecCenter

2008-05-29T09:47:37Z

Similar commands: added WinSecCenter

New page

{{SbiCmdInfo
|SYNTAX = Winsock
|PENAME = SpybotSD.exe
|PEVERSION = 1.3 or later
|GROUP = Windows API
|MINUPDATE = n/a
|ADVFILEPARAMS = no
|ADVREGPARAMS = no
|ADVBUILDPARAMS = yes (fourth)
|ADVSPECIALPARAMS = no
}}Can be used to remove Layered Service Providers.
Special care needed. Do not use without asking official advise!

==Usage==
Winsock:<drivername(string)>,<anywhere(boolean)>,<filename(string)>[,advanced build parameters]

===Examples===
Winsock:"MalwareLSPName","0"
Would detect all drivers whose names begin with MalwareLSPName.

===Description===
This is a very powerful command, allowing you to remove Winsock driver entries, which is an absolute necessity before removing the associated files, since otherwise Internet access will be broken. Take special care with generic names; often, both malware and legit applications have just copied sample code without even changing the default driver name.

# The first parameter may be either a full or partial name.
# The second parameter needs to be set to ''1'' to allow substring matching anyway, set to ''0'' to have the matching begin at the first letter.
# The filename field supports [[AlgoPrefix|Algo-Prefixes]].

===Scan Results===
* A special entry allowing you to properly remove the problem using the Windows API.

==See also==
* [[Advanced build parameters]]
* [[AlgoPrefix]]

===Similar commands===
* [[HostRedirect]]
* [[TCPIPAddress]]
* [[WinSecCenter]]

[[Category:SBI Commands]]

CCRDude: /* Usage */ fixed var names

2008-02-22T16:51:41Z

Usage: fixed var names

← Older revision		Revision as of 16:51, 22 February 2008
Line 13:		Line 13:

	==Usage==		==Usage==
	Winsock:<~~driver name~~(string)>,<anywhere(boolean)>,<filename(string)>[,advanced build parameters]		Winsock:<drivername(string)>,<anywhere(boolean)>,<filename(string)>[,advanced build parameters]

	===Examples===		===Examples===
	Winsock:"~~New.Net~~","0"		Winsock:"MalwareLSPName","0"
	Would detect all drivers whose names begin with New.Net.		Would detect all drivers whose names begin with New.Net.

CCRDude: added info box

2008-02-22T14:22:08Z

added info box

← Older revision		Revision as of 14:22, 22 February 2008
Line 1:		Line 1:
	Can be used to remove Layered Service Providers.		{{SbiCmdInfo
			\|SYNTAX = Winsock
			\|PENAME = SpybotSD.exe
			\|PEVERSION = 1.3 or later
			\|GROUP = Windows API
			\|MINUPDATE = n/a
			\|ADVFILEPARAMS = no
			\|ADVREGPARAMS = no
			\|ADVBUILDPARAMS = yes (fourth)
			\|ADVSPECIALPARAMS = no
			}}Can be used to remove Layered Service Providers.
	Special care needed. Do not use without asking official advise!		Special care needed. Do not use without asking official advise!

	==Usage==		==Usage==
	Winsock:<driver name>,<(boolean)~~anywhere~~>,<filename>[,advanced build parameters]		Winsock:<driver name(string)>,<anywhere(boolean)>,<filename(string)>[,advanced build parameters]

	===Examples===		===Examples===

CCRDude: /* Similar commands */

2008-02-18T13:24:08Z

Similar commands

← Older revision		Revision as of 13:24, 18 February 2008
Line 28:		Line 28:

	[[Category:SBI Commands]]		[[Category:SBI Commands]]
	~~[[Category:SBI Commands (current)]]~~

CCRDude at 13:15, 18 February 2008

2008-02-18T13:15:02Z

← Older revision		Revision as of 13:15, 18 February 2008
Line 3:		Line 3:

	==Usage==		==Usage==
	Winsock:[driver name],[(boolean)anywhere],[~~filename]~~,<advanced build parameters>		Winsock:<driver name>,<(boolean)anywhere>,<filename>[,advanced build parameters]

	===Examples===		===Examples===
Line 15:		Line 15:
	# The second parameter needs to be set to ''1'' to allow substring matching anyway, set to ''0'' to have the matching begin at the first letter.		# The second parameter needs to be set to ''1'' to allow substring matching anyway, set to ''0'' to have the matching begin at the first letter.
	# The filename field supports [[AlgoPrefix\|Algo-Prefixes]].		# The filename field supports [[AlgoPrefix\|Algo-Prefixes]].

			===Scan Results===
			* A special entry allowing you to properly remove the problem using the Windows API.

	==See also==		==See also==

CCRDude at 14:18, 17 February 2008

2008-02-17T14:18:16Z

← Older revision		Revision as of 14:18, 17 February 2008
Line 9:		Line 9:
	Would detect all drivers whose names begin with New.Net.		Would detect all drivers whose names begin with New.Net.

			===Description===
			This is a very powerful command, allowing you to remove Winsock driver entries, which is an absolute necessity before removing the associated files, since otherwise Internet access will be broken. Take special care with generic names; often, both malware and legit applications have just copied sample code without even changing the default driver name.

	~~===Description===~~
	# The first parameter may be either a full or partial name.		# The first parameter may be either a full or partial name.
	# The second parameter needs to be set to ''1'' to allow substring matching.		# The second parameter needs to be set to ''1'' to allow substring matching anyway, set to ''0'' to have the matching begin at the first letter.
	# The filename field supports [[AlgoPrefix\|Algo-Prefixes]].		# The filename field supports [[AlgoPrefix\|Algo-Prefixes]].

Line 25:		Line 26:
	[[Category:SBI Commands]]		[[Category:SBI Commands]]
	[[Category:SBI Commands (current)]]		[[Category:SBI Commands (current)]]
	~~[[Category:ToDo]]~~

CCRDude at 18:46, 16 February 2008

2008-02-16T18:46:30Z

← Older revision		Revision as of 18:46, 16 February 2008
Line 1:		Line 1:
	~~Important: the anywhere boolean determines whether the driver name field needs a full or partial match~~. ~~Filename with wildcards OR ALGO-PREFIXED, or a GUID~~.		Can be used to remove Layered Service Providers.
			Special care needed. Do not use without asking official advise!

	==Usage==		==Usage==
Line 5:		Line 6:

	===Examples===		===Examples===
			Winsock:"New.Net","0"
			Would detect all drivers whose names begin with New.Net.


	===Description===		===Description===
			# The first parameter may be either a full or partial name.
			# The second parameter needs to be set to ''1'' to allow substring matching.
			# The filename field supports [[AlgoPrefix\|Algo-Prefixes]].

	==See also==		==See also==
			* [[Advanced build parameters]]
			* [[AlgoPrefix]]

	===Similar commands===		===Similar commands===
			* [[HostRedirect]]
			* [[TCPIPAddress]]

	[[Category:SBI Commands]]		[[Category:SBI Commands]]
	[[Category:SBI Commands (current)]]		[[Category:SBI Commands (current)]]
	[[Category:ToDo]]		[[Category:ToDo]]

CCRDude: New page: Important: the anywhere boolean determines whether the driver name field needs a full or partial match. Filename with wildcards OR ALGO-PREFIXED, or a GUID. ==Usage== Winsock:[driver nam...

2008-02-16T18:19:41Z

New page: Important: the anywhere boolean determines whether the driver name field needs a full or partial match. Filename with wildcards OR ALGO-PREFIXED, or a GUID. ==Usage== Winsock:[driver nam...

New page

Important: the anywhere boolean determines whether the driver name field needs a full or partial match. Filename with wildcards OR ALGO-PREFIXED, or a GUID.

==Usage==
Winsock:[driver name],[(boolean)anywhere],[filename],<advanced build parameters>

===Examples===

===Description===

==See also==

===Similar commands===

[[Category:SBI Commands]]
[[Category:SBI Commands (current)]]
[[Category:ToDo]]