WinBatch Tech Support Home

Database Search

If you can't find the information using the categories below, post a question over in our WinBatch Tech Support Forum.

TechHome

Winsock
plus
plus
plus
plus
plus
plus
plus
plus
plus
plus

Can't find the information you are looking for here? Then leave a message over on our WinBatch Tech Support Forum.

Winsock Extender Virus Issue


The Winsock Extender is a file that is distributed as part of WinBatch. It contains functions which allow communication between host computers, Internet Service Providers and supported networks. These functions include high level operations (including ftp, http, smtp, pop3, and ping) as well as low level operations consisting of various direct WinSock calls. These functions can be used within WinBatch scripts or can be compiled into WinBatch executables.

Apparently the older version of our Winsock Extender dll ( WWWSK34I.DLL ) has been implicated as a virus by some antivirus utlities. There is a backdoor trojan called Backdoor.WinBach which allegedly utilizes the WWWSK34I.DLL. This has caused some antivirus ulitities to mark this file as a virus and delete it. This can cause existing WinBatch scripts that depend on this dll to fail.

Note: The implicated file ( WWWSK34I.DLL ) is an older version of our Winsock Extender. The latest version of this file is named WWWSK44I.DLL. You can restore the older version of Winsock Extender file ( WWWSK34I.DLL ) from your WinBatch CD or download an archived version ftp://ftp.windowware.com/wwwftp/wb01/wwwsk34i.zip You can also update to the latest version of WinBatch, which contains an updated version of the Winsock Extender (WWWSK44I.DLL ), which is not flagged by the antivirus utilities. For update details visit our website at http://renewals.winbatch.com .


Update:

The Symantec Antivirus definitions relaeased on Jan 25th 2007 mistakenly flag wwwsk34i.dll as a malicious file and remove it. We've talked to Symantec and this problem has been resolved with newer definitions. The definitions no longer flag that file as malicious. Symantec Support was also going to put some details in their knowledge base.

If you have this issue, just update your definitions from Symantec.


Article ID:   W16897
File Created: 2007:07:03:14:26:46
Last Updated: 2007:07:03:14:26:46