Norton 360 inform me some times that download of LivePassModuleMain.dll is OK but I have never downloaded it.
I use norwegian but you should be able to understand the messages I have enclosed.
First I have tried to search my whole system (win xp) and all my storages, but this dll isn't there.
I don't like this download and ask for a method to block the file.
Hi, xlarge; welcome to our community!
I've done a bit of research on this file, and my best synthesis of what I found--especially since you're seeing it as a repeated download--is that it may be an active malware infection on your machine, that's masquerading as a legitimate Windows process.
At this point, it is best to refer you to the recommended forums, where an expert "removalist" can work with you one-on-one in real time to dig these things out. Some of our best folks here have checked them out to make sure that they are capable, and competent to deal with rootkits and other nasties. Most of them handle tricky Windows problems as well.
http://community.norton.com/t5/Tech-Outpost/Malware-Removal-Forum-Recommendations/td-p/1059145
Just sign up for one of their free accounts--where required--and go to the forums; don't click on any of the ads! Note that some of these forums (like qmalwareremoval and bleepingcomputer) require that once they begin working with you, you not consult any other sources on your infection until it's resolved--and will close your case if you do. This is important, to avoid confusion (and really bad outcomes) resulting from trying to follow several people's advice at once! LOL
Good luck, and please let us know how it turns out!
V/R,
--DistEd2
Thank you for the answer.
You wrote about the repeated download - and I have to add that this didn't happen very often and only when I have loaded a certain page http://www.abcnyheter.no/
which is one of the most used newpaper-collection page in Norway.
I have never seen the dll-warning (after loading) from any other web-site. Therefore I think it is very rare if this should be som malware og infection.
Well, bear in mind that many other legitimate sites (the most recent high-profile case being Yahoo! See http://www.cnn.com/2014/01/05/tech/yahoo-malware-attack/index.html ) have been compromised and used to deliver malware, so you might want to get your system checked out just to be safe. Ultimately, of course, that's your own decision.
What I found in researching the file were some sites saying that this file is a part of Windows used to execute other code. This claim, if accurate, would not tend to suggest the file appearing as a download. It would also suggest that you would be able to find the file on your machine. Some other sites claimed it to be associated with a program called LivePass, produced by a company called Conviva (which ckecks as "OK" in Norton SafeWeb, but has no user ratings to back that up). And still others say it's a virus, or in some cases a virus that tries to mask itself by calling the temporary files it downloads by a name associated with a normal part of Windows.
So...putting all this together--you're seeing downloads of this file which is supposedly a part of Windows (and thus would already be on your PC), or part of some program without much of a reputation one way or the other, when you visit a particular website. But when you go looking for this file on your system, it's nowhere to be found. There is apparently a piece of malware out there that does download a file by this name. To me, that suggests something that's at least suspicious enough to have the pros take a look at it, and make sure it's not sending your personal finacial details to a cybercriminal somewhere.
Besides, in your initial post, you said you don't like this file being downloaded without your knowledge. Whether it turned out to be associated with malware on your machine or you got a clean bill of health, (1) you would know, instead of just making an educated guess--which is all either you or I are doing here--and (2) they would straighten it out for you, which I can't.
I still think that's a good precautionary measure. But perhaps someone else will have a different idea. @SendOfJive is particularly knowledgeable about the inner workings of Windows, so maybe he'llhave something better to offer.
Good luck, whichever way you decide to go!
V/R,
--DistEd2
Hallo,
It was not my intention to oppose against your very convincing conclution.
I shall now of course contact the Malware-removal-forum right away.
Thank you very much for your kind assistance and advice.
xlarge
Oh, no worries. I don't mean to present my conclusion as anything stronger than it is, either: the bottom line is I don't know what this thing is--and when I did a little research to try to find out, I found a lot of conflicting information--none of it from sites I recognized as authoritative. So all I have to go on is logic and a predisposition to caution when I'm advising somebody else on the health of their computer!
In the absence of SoJ or somebody else coming along and saying, "Oh, that's just X; here's all you have to do," that just leaves me with passing you to the folks who will get you to a safe resolution whatever this turns out to be!
No offense taken--and hopefully none given, either!
V/R,
--DistEd2
Hi again,
I have done several search after this dll. Nothing really found, but I can add that it comes only from the above mentioned webpage. Further I can se it have been loaded (Norton tells me in the down-right corner of the screen) and that it is OK.
I have also enclosed a pic from yesterday There Norton have found version number also. Many users - good ...
Therefore I'm going to close the case. One last question still remains and that is where on earth the dll beeing saved. I can't find it on my harddrive and I did not find seconds after it loaded with hijackthis. It seems that it only is used loading the page and then dissapairs.
Loading the page again som time later same day the dll is loaded again.