DPService toolbar protector

system · 2015-05-10T14:44:08.000Z

I am running Avast Internet Security 2015 (free version) and having problems trying to remove a toolbar protector - DPService - that was found when running Browser Cleanup. When asked if I wanted to remove it, I clicked ‘Completely Remove’. Result was a no action as the response was “Your browsers appear to be free from add-ons that have a poorreputation”. After immediately running the scan again, the result is the same and get yet the same warning regarding DPSerive toolbar protector. I searched online for DPService tool bare protector without success. What is this threat and how do I remove it??? I fer it may be slowing my Internet search responses.

TwinHeadedEagle · 2015-05-10T14:44:50.000Z

Hello,

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Scan with Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

system · 2015-05-10T15:18:44.000Z

Results are attached …

TwinHeadedEagle · 2015-05-10T15:22:04.000Z

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[B] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/B]

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
[*]Press the Fix button just once and wait.
[*]If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
[*]When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

[*]Right-click on
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/51a612a8b27e2-Zoek.png
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[]Wait patiently until the main console will appear, it may take a minute or two.
[]In the main box please paste in the following script:

createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b

[*]Make sure that Scan All Users option is checked.
[*]Push Run Script and wait patiently. The scan may take a couple of minutes.
[*]When the scan completes, a zoek-results logfile should open in notepad.
[*]If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)

Post its content into your next reply.

system · 2015-05-10T16:29:31.000Z

Thanks for your help! Requested results are in:

TwinHeadedEagle · 2015-05-10T16:34:12.000Z

Very good. How is your PC behaving now?

system · 2015-05-10T16:53:09.000Z

Firefox browser is still sluggish and am receiving same warning from Avast Browser Cleanup.

See attached screen shot.

TwinHeadedEagle · 2015-05-10T17:13:17.000Z

I don’t know what is Avast reporting, but I do not see anything similar to DPService in reports. Your browsers are just fine. It is probably some leftover. What happens when you press Completely Remove?

system · 2015-05-10T17:25:09.000Z

The same response as before we tried all this… It tells me everything is OK as the attached screen shot depicts. However, this repeats itself and DPService is never removed!

Any evidence of other violations? Malwarebytes reports nothing and Super-Anti-Spyware reports various tracking cookies (but they always reappear after removal).

My question is where and why Avast is reporting this warning?

May need some software development team involvement.

>:( >:(

TwinHeadedEagle · 2015-05-10T17:26:10.000Z

We should wait for someone to see this. Anyway, my work is done, your PC isn’t infected.

system · 2015-05-10T17:31:31.000Z

I believe it might be a F/P for:

() C:\Windows\System32\DptfParticipantProcessorService.exe
() C:\Windows\System32\DptfPolicyConfigTDPService.exe

I had a topic like this in the Spanish forum and essexboy reviewed the logs and he did not find anything either.

https://forum.avast.com/index.php?topic=170726.0

DPService can be related with several tipes of programs from AOL to DVDPlayer.

system · 2015-05-10T17:41:21.000Z

So how does this help me?

system · 2015-05-10T17:48:16.000Z

It says it is a toolbar. Do you have such a toolbar ? No? Yes ?. If no one else reports it here, you can report it to Avast virus lab as a F/P. Meanwhile you can tell your BrowserCleanup to ignore it.

system · 2015-05-10T17:50:54.000Z

I don’t have a toolbar anything similar to this one. I have searched and did not find one.

How does one open a F/P?

system · 2015-05-10T17:58:22.000Z

You can not attach any file as false/positive because we do not know which is it, but you can let Virus Lab know what is going on by directing them to this threat by filling out this report.

https://support.avast.com/Tickets/Submit/&cls04&ptf01&lic04&scr05

essexboy · 2015-05-10T18:10:20.000Z

R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation) R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation) R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation) R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation)

system · 2015-05-13T03:21:48.000Z

Avast is also finding the DPservice toolbar on my computer too. Just like jwpetr when every I click to remove it Avast says it’s gone but when I refresh it’s back. Other antivirus software like malwarebytes don’t find it.

I tried restoring my computer to factory settings, but when I download and run avast again, DPService is back.

Does anyone know what the dpservice toolbar is and what it does?
What else could we try?

system · 2015-05-13T12:42:00.000Z

We believe it is a F/P on the services and files essexboy mentioned above. Ignore it meanwhile. I reported it to mods, see if they can find anything.

polonus · 2015-05-13T12:58:55.000Z

Haven’t we been there before: https://blog.avast.com/2013/12/28/what-bugged-avast-users-this-year-unwanted-toolbars-that-cling-like-ivy-to-browsers/

polonus

system · 2015-05-13T18:29:40.000Z

dpservice doesn’t appear to be an actual toolbar.There’s no actual toolbar in internet explorer. It doesn’t show up in internet explorer addons either.

Announcements