Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: What the heck is the APCTLSP


18 Mar 2010   #1

Windows 7
 
 
What the heck is the APCTLSP

I have a file on my desktop and in my documents folder that reappears every time I cancel it. It is a text file.

Here is the file:
00001348 00004728 03/18/10:06:29:12:026,8 DllMain Called: 1

00001348 00004728 03/18/10:06:29:12:027,5 PCTLsp.dll: DLL_PROCESS_ATTACH (0)
00001348 00004728 03/18/10:06:29:12:027,5 Program: <qw.exe>
00001348 00004728 03/18/10:06:29:12:028,2 WSPStartup IN PCTOOLS over [MSAFD Tcpip [UDP/IP]]
00001348 00004728 03/18/10:06:29:12:029,5 PRE WSPStartup: 0, stopCapture:0
00001348 00004728 03/18/10:06:29:12:029,5 WSPStartup Calling INI_InitModules
00001348 00004728 03/18/10:06:29:12:030,2 INI_InitModules: Start
00001348 00004728 03/18/10:06:29:12:031,0 Create SECURITY_DESCRIPTOR, os =6

00001348 00004728 03/18/10:06:29:12:032,5 INI_InitModules: globalName=1, secAttr=1
00001348 00004728 03/18/10:06:29:12:033,5 INI_InitSharedMem: Open Global\PCTLspSettings
00001348 00004728 03/18/10:06:29:12:033,5 INI_InitSharedMem:Open Setting Share memory (00000430)183
00001348 00004728 03/18/10:06:29:12:034,5 INI_InitSharedMem:CreateFileMapping
00001348 00004728 03/18/10:06:29:12:035,5 INI_InitSharedMem: MapViewOfFile
00001348 00004728 03/18/10:06:29:12:036,5 INI_InitSharedMem: End
00001348 00004728 03/18/10:06:29:12:036,5 INI_InitModules: shareMem OK
00001348 00004728 03/18/10:06:29:12:037,5 INI_InitModules: LSHHASH_Init OK
00001348 00004728 03/18/10:06:29:12:037,5 INI_InitModules: PCTHOOK_Init OK
00001348 00004728 03/18/10:06:29:12:038,2 CFS_Init: iInited=0,ref=0, iCommponentInit=0,active=0
00001348 00004728 03/18/10:06:29:12:039,5 INI_InitModules: CFS_Init (0)
00001348 00004728 03/18/10:06:29:12:045,5 Layered over 3 protocols
00001348 00004728 03/18/10:06:29:12:046,5 Layer is PCTOOLS over [MSAFD Tcpip [TCP/IP]]
00001348 00004728 03/18/10:06:29:12:046,5 Layer is PCTOOLS over [MSAFD Tcpip [UDP/IP]]
00001348 00004728 03/18/10:06:29:12:047,5 Layer is PCTOOLS over [MSAFD Tcpip [RAW/IP]]
00001348 00004728 03/18/10:06:29:12:048,5 LoadLibrary on: C:\Windows\system32\mswsock.dll
00001348 00004728 03/18/10:06:29:12:049,5 NextProcTable.WSPStartup = 0x737B9125 [MSAFD Tcpip [TCP/IP]]
00001348 00004728 03/18/10:06:29:12:050,5 LoadLibrary on: C:\Windows\system32\mswsock.dll
00001348 00004728 03/18/10:06:29:12:050,5 NextProcTable.WSPStartup = 0x737B9125 [MSAFD Tcpip [UDP/IP]]
00001348 00004728 03/18/10:06:29:12:051,5 LoadLibrary on: C:\Windows\system32\mswsock.dll
00001348 00004728 03/18/10:06:29:12:051,5 NextProcTable.WSPStartup = 0x737B9125 [MSAFD Tcpip [RAW/IP]]

Any idea which program is installing this file? How do I prevent its reappearing?

My System SpecsSystem Spec
.

18 Mar 2010   #2

Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86
 
 

Hello,
This seems to be a PC Tools bug. The file pctlsp.dll is installed by PC Tools Antivirus (free version) in the directory C:\Program Files\Common File\PC Tools\LSP.
My System SpecsSystem Spec
18 Mar 2010   #3

MS Windows 7 Ultimate SP1 64-bit
 
 

PvtMatter,
Download Malware Bytes Antimalware from MalwareBytes.ORG Malwarebytes.org

and definitely not from MalwareBytes.com

Download Microsoft Security Essentials http://www.microsoft.com/security_essentials/

Disable and remove your current Antivirus software.

Install and Run MalwareBytes antimalware (a quick scan will probably suffice).
Let MalwareBytes antimalware remove any bad guys.

Install and run Microsoft Security Essentials.

You're computer is now safe and sound.
My System SpecsSystem Spec
.


18 Mar 2010   #4

windows 7 ultimate 64 bit,Windows 7 ultimate 32 bit,Windows XP sp3 home
 
 

1. as pointed earlier its related to pctools.
2.its not malicious....
pctlsp.dll | ThreatExpert statistics
PCTLsp.dll - What is PCTLsp.dll? - PC Tools Layered Service Provider
3.if you are using pctools av then read this...
Please confirm. "all versions" does not include the free version? - PC Tools Community Forum
Quote:
End of support for PC Tools AntiVirus™


From the 8 March 2010, PC Tools will begin phasing out support for all versions of PC Tools AntiVirus. PC Tools AntiVirus will no longer be available for purchase or renewal, and if you’re registered for the Automatic Renewal Service we will not renew your subscription. We will continue to support existing customers with signature updates and customer support until end of March 2011.
My System SpecsSystem Spec
19 Mar 2010   #5

Windows 7
 
 

Thank God I have another computer and can access this forum after my "changes & fixes" were applied.

Thanks guys for all the suggestions. Here is the complete story:

I originally installed PC Tools Antivirus because MS Essentials would not install. I ran the uninstall program but the program was still shown in C:\Program Filesx86\common files. I could not delete the LSP file since it said the program was in use (I had rebooted after the uninstall). I downloaded Malwarebytes from the .org location, ran the complete scan and had no infections. I found a couple of items in the Registry relating to PC Tools and uninstalled them. After I uninstalled PC Tools antivirus, I downloaded AVD free and installed it. Ran the full version of registry booster and all errors were fixed.
Later, I re downloaded MS Essentials and attempted an install. Received message, "Can't complete installation, error ox80070643."
Deleted AVG program and restarted computer. Lost ability to connect to internet. Ran troubleshooting on that program but could not connect so that's where I am....no internet, no antivirus programs installed (at least that I can detect) Registry booster uninstalled but Malwarebytes still installed.

I would add, I ran a virus scan with AVG and no viruses were detected.

I hesitated to do a system restore because I didn't want to undo the "good things" I had done, only the bad thing (lost the internet). But I did do a system restore. But no internet. Tried different restore points.... still have no internet but when I run troubleshooting it says I am connected! Go figure.

Tried restoring Windows from Previously created system image. It worked..have internet but still cannot delete in C:\ProgramFiles\common\PC tools.

So in summation I want MS Essentials to install. But apparently, I need to get the open PC tools off my computer IF that is what keeps MS Essentials from loading. Please help.
My System SpecsSystem Spec
19 Mar 2010   #6

windows 7 ultimate 64 bit,Windows 7 ultimate 32 bit,Windows XP sp3 home
 
 

My System SpecsSystem Spec
19 Mar 2010   #7

Windows 7
 
 

Thanks Thathargat..tried those...didn't work. Still have one .dll file, PCTLsp.Dll that I can't delete. I guess that is what is showing Windows Security Essentials that I still have an antivirus program open.
My System SpecsSystem Spec
19 Mar 2010   #8

MS Windows 7 Ultimate SP1 64-bit
 
 

PvtMatter,
If you boot into SafeMode using an administrator account, can you delete the file?
If not, go to a command prompt, go to where that file is located and try to delete it. If you can't then use the ATTRIB command to view its attributes, then once again use the ATTRIB command to remove any system, hidden, read-only attributes and delete the file.
If you are not familiar with the ATTRIB command then ATTRIB /?

If your efforts here fail, then download, run and install autoruns.exe Run Auroruns as administrator and go searching for anything related to your antivirus program and uncheck any of them that you find. close program and reboot.

Autoruns for Windows
My System SpecsSystem Spec
19 Mar 2010   #9

Windows 7
 
 

Thanks Karlsnooks. Here's what happens when I tried your suggestions.

1. Could not delete the file in Safe mode.
2. Tried the CMD approach...nothing
3. Downloaded Autoruns. Found PC ToolsKDS core driver. Deleted it. Had 4 other PC Tools entries....PC Layered Services. Could not delete them ...said they were tied to a Winsock. All I could do was disable them. When I did the items in step 3, my computer would not restart. Did repair and restore and now I am back to square 1.

PC tools is running and I can't figure a way to kill the D@#$ program.
My System SpecsSystem Spec
19 Mar 2010   #10

MS Windows 7 Ultimate SP1 64-bit
 
 

PvtMatter,
Go back into Autoruns and only Disable. Do not delete.
If after a shutdown and reboot, you then find some of the deletions again, then your anti-virus program is a nasty piece of malware. Contact the AV company and ask what procedure to follow. If none of these work, then I'm out of ideas.
My System SpecsSystem Spec
Reply

 What the heck is the APCTLSP




Thread Tools



Similar help and support threads for2: What the heck is the APCTLSP
Thread Forum
What the heck is this? Gaming
What the heck is that doing there? General Discussion
What the heck is going on? Performance & Maintenance
Oh Heck Chillout Room
What The Heck?! General Discussion
Where the heck is My Documents now? General Discussion
What the heck is going on here? General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 09:21 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33