wstdmode.dll won't go away?
I have the antivirus software StopZilla. There's this supposed trojan called "wstdmode" that it detects every time I restart the computer and log in. I've removed the virus about 8 times now, and it keeps coming back. It's in a different location every time. I couldn't find anything helpful about wstdmode, so may I have some assistance?
- TamimLv 79 years agoFavorite Answer
+First download the latest versions of the following on +another, clean machine+ and burn to CD or copy to a USB memory stick+
RKill http://www.bleepingcomputer.com/download/anti-viru... this page has a variety of different filenames to download to fool the virus, which will try to block RKill from running. Remember the filename of the version you downloaded.
CCleaner (cleans out caches) http://www.ccleaner.com
Avast! 4 Home: http://www.avast.com/eng/download-avast-home.html
Download these to your desktop and before running them, then change the names of the malwarebyte and combofix files to
Follow these steps in order Don't skip ahead.
Now, start the machine in Safe Mode with networking (hit the F8 function key as the machine boots up, and choose Safe mode)
Turn off System Restore on your machine, but only until you get this fixed - many of these trojans get copied into the System Restore files, which anti-virus programs aren't allowed to touch and the viruses could reinstall themselves from there. My Computer > Properties > System Restore.
The malware actively blocks programs and tools, so before you can start cleaning, you need to get the malware entries out of the registry, and stop the malware's current processes from running.
Double-click FixNCR.reg to run it to clean the registry
Now double click the RKill file (whatever name you downloaded it as) to run it. Wait for it, it could take a while. If the fake antivirus program throws a warning on the screen and blocks RKill, leave the warning up on the screen and run RKill again.
Do not reboot your computer If you reboot it will just load the malware in again.
Then run CCleaner (it'll make scanning faster because it will delete a bunch of temp files and save you from having to scan those.) If the virus blocks CCleaner from running, proceed to the next step.
Then run Malwarebytes (mblah), and clean everything it says.
Then run ComboFix (comfix), and clean everything it says. If it tells you to reboot your machine during the process, do so immediately.
Then install and run Avast - tell Avast to do a boot-scan - click on "schedule boot-scan" - and restart the computer
Let it start and do the Avast boot scan
Then turn System Restore back on.
Now install the antivirus program of your choice to do continuous scanning, and make sure you keep it up to date
Always keep your Windows, web browser and Java software up to date - frequent patches are released to plug security holes.
- hudanichLv 44 years ago
i'm annoying to befriend yet while somebody has taken the time and capability to realize this, i'm impossible to shake. So no count if it quite is somebody I particularly understand I basically roll with the push yet while that's somebody who has made the attempt to befriend me i do no longer shop off yet i will basically stand and undergo it. reliable question, what do you do?
- Mike SLv 79 years ago
Go to Start > Run > type cmd and then click the "OK" button.
Unregister wstdmode.dll file, type in the directory path + "regsvr32 /u wstdmode.dll "and press the "Enter" button. A message will pop up that says you successfully unregistered the file.
Restart your computer,after you power on your computer, repeatedly press the F8 key,choose Safe Mode and presss Enter. Delete wstdmode.dll . Restart your computer.
- Anonymous9 years ago
This Video will help you get rid of all the viruses just follow the steps