• 0
Sign in to follow this  
Disgruntled&Annoyed

Help removing tcpservices & 64 dll's

Question

Can someone please help me in removing the two tcpservices dll's.

 

As everyone else is experiencing I've deleted the software but been left with these two dll's.

 

I've tried using revo. No win.

 

If I leave them there it crashes my plex media server. If I delete them with move on boot software not only does plex stop working entirely but so does move on boot, zone alarm, apple software's as well as a whole host of others.

 

I've tried resetting the TCP ip stack but that makes no difference.

 

Thanks in advance.

Share this post


Link to post
Share on other sites

12 answers to this question

Recommended Posts

  • 0

Hi,

 

Let us see what's going on in your computer.

Please, download Farbar Recovery Scan Tool (FRST) and save it on the desktop:
For 64 bits Windows: http://download.bleepingcomputer.com/farbar/FRST64.exe
For 32 bits Windows: http://download.bleepingcomputer.com/farbar/FRST.exe

Start the FRST program.

Read the disclaimer and click Yes to accept it.
Click Scan button.
When done, FRST will create two log files, called FRST.txt and Addition.txt, on the desktop.

Please, attach them to your reply (press More Reply Options button to see how to attach files).

Share this post


Link to post
Share on other sites
  • 0

Thanks for your help,

 

FRST came up with an error the first time I tried to run it. Something about not being able to save a file. It ran the second time though.

 

Please find attached.

 

attachicon.gifAddition.txt

attachicon.gifFRST.txt

You're welcome :)

 

Please, start Notepad.

Copy all text that is in the box:

 

CreateRestorePoint:
CloseProcesses:
Winsock: Catalog9 01 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [345360 2015-08-22] (Lavasoft Limited)
Winsock: Catalog9 02 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [345360 2015-08-22] (Lavasoft Limited)
Winsock: Catalog9 03 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [345360 2015-08-22] (Lavasoft Limited)
Winsock: Catalog9 04 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [345360 2015-08-22] (Lavasoft Limited)
Winsock: Catalog9 16 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [345360 2015-08-22] (Lavasoft Limited)
Winsock: Catalog9-x64 01 C:\WINDOWS\system32\LavasoftTcpService64.dll [425744 2015-09-30] (Lavasoft Limited)
Winsock: Catalog9-x64 02 C:\WINDOWS\system32\LavasoftTcpService64.dll [425744 2015-09-30] (Lavasoft Limited)
Winsock: Catalog9-x64 03 C:\WINDOWS\system32\LavasoftTcpService64.dll [425744 2015-09-30] (Lavasoft Limited)
Winsock: Catalog9-x64 04 C:\WINDOWS\system32\LavasoftTcpService64.dll [425744 2015-09-30] (Lavasoft Limited)
Winsock: Catalog9-x64 16 C:\WINDOWS\system32\LavasoftTcpService64.dll [425744 2015-09-30] (Lavasoft Limited)
C:\WINDOWS\system32\LavasoftTcpService64.dll
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
Reboot:
and paste in Notepad. Check that no files have been split on two lines.

Save the file as fixlist.txt on the desktop.

 

Exit all programs.

Start FRST, please.

Click the Fix button.

Wait until the tool has finished.

 

It creates a log file, called Fixlog.txt, on the desktop.

Please, paste the content of that file in your reply.

 

 

You need to run some kind of uninstallation/removal tool from Kaspersky since there are several Kaspersky drivers installed, and there can be conflicts between them and ZoneAlarm.

Share this post


Link to post
Share on other sites
  • 0

I have the same problem...good grief it is aggravating. I ran FRST and attached the files

Hi Cajunfit,

 

Please, start Notepad.

Copy all text that is in the box:

CreateRestorePoint:
CloseProcesses:
Winsock: Catalog9 01 C:\Windows\SysWOW64\LavasoftTcpService.dll [347976 2015-06-06] (Lavasoft Limited)
Winsock: Catalog9 02 C:\Windows\SysWOW64\LavasoftTcpService.dll [347976 2015-06-06] (Lavasoft Limited)
Winsock: Catalog9 03 C:\Windows\SysWOW64\LavasoftTcpService.dll [347976 2015-06-06] (Lavasoft Limited)
Winsock: Catalog9 04 C:\Windows\SysWOW64\LavasoftTcpService.dll [347976 2015-06-06] (Lavasoft Limited)
Winsock: Catalog9 15 C:\Windows\SysWOW64\LavasoftTcpService.dll [347976 2015-06-06] (Lavasoft Limited)
Winsock: Catalog9-x64 01 C:\Windows\system32\LavasoftTcpService64.dll [429392 2015-06-06] (Lavasoft Limited)
Winsock: Catalog9-x64 02 C:\Windows\system32\LavasoftTcpService64.dll [429392 2015-06-06] (Lavasoft Limited)
Winsock: Catalog9-x64 03 C:\Windows\system32\LavasoftTcpService64.dll [429392 2015-06-06] (Lavasoft Limited)
Winsock: Catalog9-x64 04 C:\Windows\system32\LavasoftTcpService64.dll [429392 2015-06-06] (Lavasoft Limited)
Winsock: Catalog9-x64 15 C:\Windows\system32\LavasoftTcpService64.dll [429392 2015-06-06] (Lavasoft Limited)
S2 LavasoftTcpService; C:\Program Files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.2\LavasoftTcpService.exe [X]
C:\Program Files (x86)\Lavasoft
C:\Windows\system32\LavasoftTcpService64.dll
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
EmptyTemp:
Reboot:

and paste in Notepad. Check that no files have been split on two lines.

Save the file as fixlist.txt on the desktop.

 

Exit all programs.

Start FRST, please.

Click the Fix button.

Wait until the tool has finished.

 

It creates a log file, called Fixlog.txt, on the desktop.

Please, paste the content of that file in your reply.

 

 

I can't see an antivirus program in the computer. You have IObit Malware Fighter but it isn't an antivirus program and it isn't updated.

 

Java 8 Update 31

is an old version with vulnerabilities that can be exploited by a web page to infect the computer.

Share this post


Link to post
Share on other sites
  • 0

Thanks again

 

I believe I still have the Lavasofttcpservices.dll file in wow64, although the Lavasofttcpservices64.dll file has had its extension changed to xbad??

 

Can you tell me which Kapersky drivers as ive never had any of their products installed.

 

Fix result of Farbar Recovery Scan Tool (x64) Version:04-10-2015
Ran by Kev (2015-10-04 17:53:53) Run:1
Running from C:\Users\Kev\Downloads
Loaded Profiles: Kev (Available Profiles: Kev & UpdatusUser & DefaultAppPool)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CreateRestorePoint:
CloseProcesses:
Winsock: Catalog9 01 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [345360 2015-08-22] (Lavasoft Limited)
Winsock: Catalog9 02 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [345360 2015-08-22] (Lavasoft Limited)
Winsock: Catalog9 03 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [345360 2015-08-22] (Lavasoft Limited)
Winsock: Catalog9 04 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [345360 2015-08-22] (Lavasoft Limited)
Winsock: Catalog9 16 C:\WINDOWS\SysWOW64\LavasoftTcpService.dll [345360 2015-08-22] (Lavasoft Limited)
Winsock: Catalog9-x64 01 C:\WINDOWS\system32\LavasoftTcpService64.dll [425744 2015-09-30] (Lavasoft Limited)
Winsock: Catalog9-x64 02 C:\WINDOWS\system32\LavasoftTcpService64.dll [425744 2015-09-30] (Lavasoft Limited)
Winsock: Catalog9-x64 03 C:\WINDOWS\system32\LavasoftTcpService64.dll [425744 2015-09-30] (Lavasoft Limited)
Winsock: Catalog9-x64 04 C:\WINDOWS\system32\LavasoftTcpService64.dll [425744 2015-09-30] (Lavasoft Limited)
Winsock: Catalog9-x64 16 C:\WINDOWS\system32\LavasoftTcpService64.dll [425744 2015-09-30] (Lavasoft Limited)
C:\WINDOWS\system32\LavasoftTcpService64.dll
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
Reboot:
*****************

Restore point was successfully created.
Processes closed successfully.
"HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001" => key removed successfully
"HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002" => key removed successfully
"HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003" => key removed successfully
"HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004" => key removed successfully
"HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016" => key removed successfully
"HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001" => key removed successfully
"HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002" => key removed successfully
"HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003" => key removed successfully
"HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004" => key removed successfully
"HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000016" => key removed successfully
C:\WINDOWS\system32\LavasoftTcpService64.dll => moved successfully

========= netsh winsock reset catalog =========

Initialization Function InitHelperDll in NSHHTTP.DLL failed to start with error code 10107

Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.

========= End of CMD: =========

========= netsh int ip reset c:\resetlog.txt =========

Resetting Interface, OK!
Resetting Neighbor, OK!
Resetting Path, OK!
Resetting , failed.
Access is denied.

Resetting , OK!
Restart the computer to complete this action.

========= End of CMD: =========

 

The system needed a reboot..

==== End of Fixlog 17:54:51 ====

Fixlog.txt

Edited by Disgruntled&Annoyed

Share this post


Link to post
Share on other sites
  • 0

Thanks again

 

I believe I still have the Lavasofttcpservices.dll file in wow64, although the Lavasofttcpservices64.dll file has had its extension changed to xbad??

 

Can you tell me which Kapersky drivers as ive never had any of their products installed.

You're welcome :)

 

1. Sorry.

Can you delete C:\WINDOWS\SysWOW64\LavasoftTcpService.dll yourself now (it isn't used any more), or do you want FRST to do it?

 

2. Kaspersky drivers:

R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-07-24] (Kaspersky Lab ZAO)

S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [30328 2015-07-24] (Kaspersky Lab)

R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [162464 2015-07-24] (Kaspersky Lab ZAO)

R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [218784 2015-07-24] (AO Kaspersky Lab)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [899232 2015-07-24] (AO Kaspersky Lab)

 

See http://support.kaspersky.com/11166

 

 

3. If you don't want FRST to remove C:\WINDOWS\SysWOW64\LavasoftTcpService.dll, it's time to uninstall it:

Download OTC http://oldtimer.geekstogo.com/OTC.exe

Close all programs.

Start OTC program.

Click the CleanUp! button.

Select Yes when asked "Begin cleanup process".

If you are asked to reboot, select Yes.

If any logs remain on the computer you can remove them.

 

Share this post


Link to post
Share on other sites
  • 0

Thanks again,

 

ive removed the dll manually and run otc program.

 

All seems to be good except that now Nvidia Control Panel will not open. The process is shown in task manager but the application will not open and is not shown in the system tray.

 

EDIT: Scrap that last comment, one more re-start and it seems to be working fine again??

 

Thank you sooooo much for your help. The media server is running smoothly, no crashes thus far and no other reported problems.

 

Never would have achieved this without your help.

Edited by Disgruntled&Annoyed

Share this post


Link to post
Share on other sites
  • 0

Thanks again,

 

ive removed the dll manually and run otc program.

 

All seems to be good except that now Nvidia Control Panel will not open. The process is shown in task manager but the application will not open and is not shown in the system tray.

 

EDIT: Scrap that last comment, one more re-start and it seems to be working fine again??

 

Thank you sooooo much for your help. The media server is running smoothly, no crashes thus far and no other reported problems.

 

Never would have achieved this without your help.

My pleasure :)

 

I'm glad the computer is working well again.

Share this post


Link to post
Share on other sites
  • 0

I attached the fixlog. It looks like it removed the TCP processes. I had removed earlier versions of Anti-virus and did not remember to update with a new one. I will also update Java. If you see anything in the fixlog that means I am not in the clear, please let me know.

 

Thanks,

 

Cajunfit

Fixlog.txt

Share this post


Link to post
Share on other sites
  • 0

I attached the fixlog. It looks like it removed the TCP processes. I had removed earlier versions of Anti-virus and did not remember to update with a new one. I will also update Java. If you see anything in the fixlog that means I am not in the clear, please let me know.

 

Thanks,

 

Cajunfit

Fixlog.txt looks good.

 

If you still have C:\WINDOWS\SysWOW64\LavasoftTcpService.dll, please delete it.

 

If you don't want FRST to remove C:\WINDOWS\SysWOW64\LavasoftTcpService.dll, it's time to uninstall it:

Please, download OTC http://oldtimer.geekstogo.com/OTC.exe

Close all programs.

Start OTC program.

Click the CleanUp! button.

Select Yes when asked "Begin cleanup process".

If you are asked to reboot, select Yes.

If any logs remain on the computer you can remove them.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this