Here is a bit of info from Bleeping computers about
winsock32.dllName: System
Filename: winsock32.dll
Command: C:\Windows\System32\winsock32.dll
Description: Added by the Troj/Agent-SH Trojan.
File Location: %System%
Startup Type: This startup entry is started automatically from a Run, RunOnce, RunServices, or RunServicesOnce entry in the registry.
CLSID: (4F69BFF9-3901-4D8A-8926-C9B29794CA95)
HijackThis Category: O4 Entry
Note: %System% is a variable that refers to the Windows System folder. By default this is C:\Windows\System for Windows 95/98/ME, C:\Winnt\System32 for Windows NT/2000, or
C:\Windows\System32 for Windows XP.
Is it
kernell32.dll with two l's or kernel32.dll one lwinsock.dll Windows Socket 16-Bit DLLTry downloading and running HijackThis 1.99.1 form Meriji.org
HijackThis Download PageRun HijackThis and post the text file to
HijackThis log file analysisorNetworkTechs log file analysis