I found that doesn't work.
I fixed my laptop last night... I found a setting in the
registry for a "winsock2 driver" and from what I know this
isn't needed so I deleted that key and searched the
registry and found the .exe file hidden all over.
The .exe file I had was vga4r32 (or something similar) but
from what others are saying in posting's I've read last
night and today this file has a variable name. It's a
variant of the W32/Spybot worm, spread by Kazaa, however
everything I read about this worm wasn't true on my
systems and actually the hive below wasn't always present
and the location below.
I found it at:
Locate the HKEY_LOCAL_MACHINE entries:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Winsock2
driver
It was also found at:
Locate the HKEY_LOCAL_USER entries:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Winsock2
driver
Search the hard drive for the .exe associated with the
registry key and delete is as well.
Try this site
http://www.symantec.co.jp/avcenter/venc/data/w32.spybot.dr.
html