Allhellbrokeloose Posted October 8, 2018 ID:1274198 Share Posted October 8, 2018 I think I really messed up with this one, I deleted yes deleted not quarantined both the files from my computer, only to find out minutes later that they were false positives and have no TCPSVCS in either my system 32 or my WOW64 folder I've tried everything, restore wouldn't fix it because for some reason that setting was disabled I've tried sfc /scannow but for some reason the hashkeys don't match for either the one on my computer OR the one in the store, my last hope is a bizzare set of circumstances that have allowed microsoft to roll back culminative updates.... My question is, how much less secure am I with TCPSVCS-less if that doesn't work? Link to post Share on other sites More sharing options...
Allhellbrokeloose Posted October 8, 2018 Author ID:1274203 Share Posted October 8, 2018 H-hello? Link to post Share on other sites More sharing options...
Staff shadowwar Posted October 8, 2018 Staff ID:1274209 Share Posted October 8, 2018 Can you attach the mbam service log here. Its located in : C:\ProgramData\Malwarebytes\MBAMService\logs Link to post Share on other sites More sharing options...
Allhellbrokeloose Posted October 8, 2018 Author ID:1274210 Share Posted October 8, 2018 MBAMSERVICE.LOG Link to post Share on other sites More sharing options...
Staff shadowwar Posted October 8, 2018 Staff ID:1274213 Share Posted October 8, 2018 Ok need a couple more files so i can figure out what files you deleted and get them to you. Can you zip up the files in this folder and attach them here? C:\ProgramData\Malwarebytes\MBAMService\ScanResults At least the ones going back a few days. Thanks. Link to post Share on other sites More sharing options...
Allhellbrokeloose Posted October 8, 2018 Author ID:1274217 Share Posted October 8, 2018 Results.zip If you need more just say so. Link to post Share on other sites More sharing options...
Staff shadowwar Posted October 8, 2018 Staff ID:1274223 Share Posted October 8, 2018 (edited) Attached are the files. Please extract them to the directories. C:\WINDOWS\SYSTEM32\TCPSVCS.EXE C:\WINDOWS\SYSWOW64\TCPSVCS.EXE They are different so make sure you extract the labeled zip to the correct location. TCPSVCSsystem32.zip TCPSVCSsyswow64.zip After they are in place you may want to reboot. Also make sure MBAM is up to date so these arent re detected. Edited October 8, 2018 by shadowwar Link to post Share on other sites More sharing options...
Allhellbrokeloose Posted October 8, 2018 Author ID:1274226 Share Posted October 8, 2018 I appreciate the sentiment, but it says " Sorry, there is a problem This attachment is not available. It may have been removed or the person who shared it may not have permission to share it to this location. Error code: 2C171/1 " Link to post Share on other sites More sharing options...
dcollins Posted October 8, 2018 ID:1274230 Share Posted October 8, 2018 @Allhellbrokeloose can you try again? The files are downloading properly for me Link to post Share on other sites More sharing options...
Allhellbrokeloose Posted October 8, 2018 Author ID:1274232 Share Posted October 8, 2018 1 minute ago, dcollins said: @Allhellbrokeloose can you try again? The files are downloading properly for me It's still the same message. Link to post Share on other sites More sharing options...
Allhellbrokeloose Posted October 8, 2018 Author ID:1274238 Share Posted October 8, 2018 Is there a post marker I have to hit to download files because it says in the header of that message that I do not have permission to do that (I assume it means download files) could you send it to my E-mail? Link to post Share on other sites More sharing options...
Staff cli Posted October 8, 2018 Staff ID:1274239 Share Posted October 8, 2018 I've sent you a PM with the files. If it doesn't work, we'll have to find an alternative method. Link to post Share on other sites More sharing options...
Staff cli Posted October 8, 2018 Staff ID:1274242 Share Posted October 8, 2018 OK, PM-ing the files worked and he/she said that they'll try it tomorrow. Link to post Share on other sites More sharing options...
Minns Posted October 9, 2018 ID:1274454 Share Posted October 9, 2018 Guys, can you please help me with this as well? I deleted the quarantined files, not even thinking they could be false positives since nothing like this has happened to my computer before. I think they are the same files the op was talking about, the extracted log from the scan report says: C:\WINDOWS\SYSTEM32\TCPSVCS.EXE, Trojan.PasswordStealer, C:\WINDOWS\SYSWOW64\TCPSVCS.EXE. I guess they are pretty pivotal parts for the functioning of the machine? I'm not a very tech savvy person, so I didn't know. My machines been working ok since the purge. Maybe a little slower when I have many processes/ updates working at the same time. Can you please tell me what I should do to make this right? I already Did the scannow -command, but it didn't manage to repair the corrupt files. Link to post Share on other sites More sharing options...
Staff shadowwar Posted October 9, 2018 Staff ID:1274472 Share Posted October 9, 2018 can you please get me the logs as in this post: Link to post Share on other sites More sharing options...
Minns Posted October 9, 2018 ID:1274480 Share Posted October 9, 2018 scan results.zip Link to post Share on other sites More sharing options...
Staff shadowwar Posted October 9, 2018 Staff ID:1274501 Share Posted October 9, 2018 Just a tip for everyone here. Please leave files in quarantine for at least a few days. Malwarebytes disables them so they cant possibly run while in quarantine. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now