Reference Citations - HerongYang.com - v2.95, by Herong Yang
mswsock.dll!WSPStartup +0x102b
'mswsock.dll - Microsoft Windows Sockets 2.0 Service Provider' tutorial was cited in a forum post in 2008.
The mswsock.dll - Microsoft Windows Sockets 2.0 Service Provider tutorial was cited in a forum post in 2008.
Subject: mswsock.dll!WSPStartup+0x102b Date: November 27, 2008 Author: jialg Source: http://www.eggheadcafe.com/software/aspnet/33565303 /mswsockdllwspstartup0x.aspx >I would like to know if anyone knows that why my Windows Application >is running an Extra Thread (ThreadCount = MyThread'sCount + 1). >I think that (Extranious) thread was initiated by mswsock.dll >executable. But I didn't use this executable for any perticular >reason. This thread has start address as it is in Subject >line(mswsock.dll!WSPStartup+0x102b). It can be seen through >ProcssesExplorer. ... It may not easy to figure out the creator of that extra thread (possibly we need to set breakpoints on CreateThread APIs and trace who creates the threads), however, mswsock.dll!WSPStartup reminds me of a technique related to Winsock 2 LSP and spyware Trojans. I'd like to first make some guesses of the reason for the extra thread, then I will provide the test steps that can help us narrow down the problem. ======================== My Guesses of the Reason Guess 1. mswsock.dll is the DLL that implements the Winsock 2 SPI (Service Provider Interface) as the Basic Server Provider in the Winsock 2 SPI architecture. (https://www.herongyang.com/Windows/Winsock-mswsock-dll-Microsoft-Windo ws-Socket.html). Is it possible that some antivirus software or firewall program injects its DLL into your process to trace the app's network behaviors and creates that extra thread? To verify this guess, you may look at the list of DLLs loaded by your app in Process Explorer -> View menu -> Low Pane View -> DLLs. Are there any DLLs belonging to your Antivirus software or firewall? Looking at the complete call-stack of the extra thread may also help. You can view the call-stack in Process Explorer by double-clicking the process -> turn to the Threads tab -> double-clicking the extra thread. Is there any abnormal module name in the call-stack? Another possibility is some spyware Trojans. https://www.herongyang.com/Windows/Winsock-2-LSP-and-Spyware-Trojan.htm l. The above verification method can also be applied to this possibility. However, spyware trojans may use the same module name as Microsoft's modules, thus, we need to pay more attention to the path of the modules. ...
Table of Contents
Service Oriented Computing for Dynamic Virtual Learning Environments
Migrating files to new computer
►mswsock.dll!WSPStartup +0x102b
edu.uiuc.ncsa.soap.SOAPUtil.java
Put icons on bookmarks sidebar folders
Blob Storage via REST from Java?
java.lang.OutOfMemoryError: unable to create new native thread
SSLHandshakeException unable to find valid certification...
Using response.setContentType to switch HTML to Word
Automatic Creation of Different Types of Test Subjects
ISM 6121 Information Systems Implementation
Time out bei Aufruf von WebService (php-Script)
Store and retrieve Chinese characters using Coldfusion MX7 and MySQL5.0
converting VCD player to DVD player
Using ASP.Net c# To add/edit/delete data (ms access)
A UML/SPT Model Analysis Methodology
Creation d'un nouvel utilisateur sous SQL Server 2000
No Suitable Driver connecting jdk1.5 with javaDB derby
Acessar MSAccess com Hibernate
SiLu – Riktlinjer för spelmotor
JDBC help needed; java.lang.NoClassDefFoundError
CSV export of tickets has wrong encoding