lavasoftTcpservice64.dll

[Rarogar]

Hi, I see that a lot of the same problem has been posted here so I was hoping I could get help with this issue as well. I have tried everything I could think of, and even things I did not think of, to remove this file from my computer but it simply won't go away. LavasoftTcpservice64.dll is located in my Windows/System32 folder, and will absolutely not be deleted. I have tried cmd, which tells me Access is Denied. I have tried right clicking and deleting, which tells me other programs are using it. It does not appear in the uninstall a program window. Safe mode deleting does not work. Malwarebytes does not pick it up, and I cannot target it with the program for some reason (nor any file, for that matter). I am desperate to get this off my computer because it blocks the installation of Guild Wars 2. If anyone could please help me, I would very much appreciate it.

 

 

Addition.txt

FRST.txt

MalWareScan.txt

[AdvancedSetup]

Hello @Rarogar and

Let's reset your browsers back to default settings please.

 

Please visit each of the following sites and let's reset all of your browsers back to defaults to prevent unexpected issues.
If you are not using one of the browsers but it is installed then you may want to consider uninstalling it as older versions of some software can pose an increase in the potential for an infection to get in.

Internet Explorer
How to reset Internet Explorer settings

Microsoft Edge
How to Reset Microsoft Edge in Windows 10

Firefox
Click on Help / Troubleshooting Information then click on the Refresh Firefox button.

Chrome
Reset Chrome back to defaults to completely clear out issues with Chrome.

• First, go to >> Google Sync << and sign into your account. Make sure you know your password as this will clear it from the browser.
• Scroll down until you see the   "reset sync" button to clear your data from the server and remove your passphrase.
• Now, close all Chrome windows. Chrome cannot be running for the next step. If needed, print this information or use another browser to read the information.
• Press the Windows key + R at the same time, to bring up the run dialog box.
  • 
• Type in (or copy/paste) the following and press Enter:     %localappdata%\Google\Chrome\User Data\Default\

1. Press Ctrl + A to select all the files and folders.
2. Hold down Ctrl + A and click once on the files "Bookmarks" and "Bookmarks.bak". This will unselect them.
3. With all the files selected (except for your Bookmarks), press the Delete key and click Yes to delete the files and folders.
4. Example of all files and folders selected, except Bookmarks

 

Restart your computer now and make sure there are no longer any redirects or other browser issues. 

 

Once you're done with that then run the following again.

 

Post back the logs as an attachment when ready.

STEP 01

• If you're already running Malwarebytes 3 then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
• If you don't have Malwarebytes 3 installed yet please download it from here and install it.
• Once installed then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
• Once the scan is completed click on the Export Summary button and save the file as a Text file to your desktop or other location you can find, and attach that log on your next reply.
• If Malwarebytes won't run then please skip to the next step and let me know on your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

• Right-click on the program and select Run as Administrator to start the tool.
• Accept the Terms of use.
• Wait until the database is updated.
• Click Scan.
• When finished, please click Clean.
• Your PC should reboot now if any items were found.
• After reboot, a log file will be opened. Copy its content into your next reply.

 

RESTART THE COMPUTER again before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens, click Yes to disclaimer.
• Press the Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here.
• Please attach the Additions.txt log to your reply as well.

 

Thanks

Ron

 

[Rarogar]

I have done every step here to the letter.

 

 

Addition.txt

AdwCleaner[S0].txt

FRST.txt

MalWareScan2.txt

[AdvancedSetup]

The log you posted for AdwCleaner was the SCAN log. Do you have the CLEAN log? Did you tell AdwCleaner to remove what it found?

How is the computer running now?

Are there still any signs of an infection?

 

[Rarogar]

Sorry about that, here is the clean log.

The computer has always run okay but the lavasoft file is still in the Windows/System32 folder, and it is impeding the Guild Wars II application.

I was hoping to get some kind of tailored fix for it like this:

Would that be possible? I do appreciate the time you've given me.

AdwCleaner[C0].txt

[AdvancedSetup]

It does not show in either logs. How are you sure it is causing an issue?

I don't see any lavasoft  in either logs.

Ron

 

[Rarogar]

Because when I do the crash report from trying to install Guild Wars two, it shows the lavasoft file as the problem, and it can't be a coincidence that everyone else has had problems with the same file, from what I've researched. 

I don't think it has shown up on anyone's logs, which is why so many people have reported it on these forums because they can't get rid of it.

i can provide screenshots of the where the file is and the crash report, if you want.

[AdvancedSetup]

Well nothing is reporting it as a malware threat, which is the difference. We're here to try to detect and remove malware not repair games.

That said, please give me the exact path of the file or folder and I'll help you remove it.

Thanks

Ron

 

[AdvancedSetup]

Sorry, meant this for another user. Please send me the path to the file or folder you want to remove.

Edited December 18, 2017 by AdvancedSetup

[Rarogar]

I'm sorry, it sounds like I may have offended somehow or overstepped my bounds by asking for help with this. I was just desperate to get rid of this file and saw that many people had posted about the same thing on here and gotten it resolved, so I thought I could try it too. I'm not asking for anyone to repair a game, I just need help removing a file which is causing problems. I thought that categorized it as malware, regardless of whether or not it can hide from scans.

Here is the path:

"C:\Windows\System32\LavasoftTcpService64.dll"

 

[AdvancedSetup]

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

Thanks

Ron

 

[Rarogar]

Thanks! It looks like everything is back to normal now. Lavasoft is gone, and there are no more issues with any of my programs.

 

 

Fixlog.txt

[AdvancedSetup]

Great, glad to hear all is working well again for you @Rarogar

I'll go ahead then and close your topic.

Take care and stay safe out there and have a great Holiday

Ron

 

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread.

Thanks