How to Remove DLL Files
What is a DLL file?
DLL (Dynamically Link Library) is an executable file that permits programs to share code to perform one or more predefined functions. A DLL file can be used by several programs at the same time. The benefit of having DLL files is that they don’t get loaded into random access memory (RAM) along with the main program, which saves up space in RAM. So instead of all the coding being built into the program, it uses a particular DLL file that, with a simple call, can execute the operation for it.
Why is it important to remove malicious DLLs?
Most DLL files are essential for the running of your programs but there are other malicious programs, such as browser hijackers and browser plugins, that are usually made up of DLL files that can alter your system settings to allow attackers gain access on your computer.
If you’re really serious about removing unwanted DLL files, make sure you use Windows Add/Remove programs first (how to use Add/Remove programs). Most applications come with an uninstall program that will remove the unwanted DLL files. But be aware the uninstall utility will assume that certain files are shared and it will have no way of knowing which other programs use them or whether these programs are present on your machine. This results in DLLs being left behind that can recreate the malicious program on reboot.
To remove a specific DLL, you should use Regsvr32 (Regsvr32.exe) to register and unregister DLL files which is already built in your Windows operation system’s package.
Learn how to remove spyware DLL files from your computer.
Unregister Spyware DLL Files Manually
Warning: Unregistering spyware DLL files is difficult and risky. If you unregister the wrong DLL file, your computer may crash and important data may be lost. As a precautionary measure, please back up important files and set a System Restore point (click Start > All Programs > Accessories > System Tools > System Restore, and follow the on-screen instructions) or run a spyware check with a trusted anti-spyware program to automatically detect spyware.
To start unregistering DLL files, you will need to follow these steps:
- Open the Command Prompt window
Press the “Start” button on your taskbar and click on “Run” to start the “Run” tool. In the field, type “cmd” and press the “OK” button.
- Locate the DLL file
After opening the Command Prompt window, locate the exact DLL path as shown on the screenshot below. Type “cd” in order to change the current directory, press the “space” button, enter the full path to the DLL file and press the “enter” button on your keyboard. If you want to display the contents of the directory, use the “dir” command.
- Unregister the unwanted DLL
In the directory where you want to remove the DLL, type “regsvr32 /u [DLL_NAME]“ and press the “Enter” button.
- Unregistering succeeded
If the DLL was unregistered successfully, a confirmation message will be displayed.
If you want to undo the removal, you can perform it by typing “regsvr32″ without the /u key, just type “regsvr32 [DLL_NAME]“ to undo the changes.
Posted: June 6, 2006 | By SpywareRemove
MoreRate this article:
(8 votes, average: 3.88 out of 5)
Loading ...
I have a virus wmsetup.dll, and everytime i try to access it through CMD, it denies me access. My virus scanner Prevx3.0 can’t delete it. Help?
RESTART RESTART RESTART AFTER YOU DO IT !!! IT WORKS !!! THANK YOU !!!
Thanks to bscholesboogie.
If i may add though, you can verify if the bugs that you’ve deleted are still there by issuing this command:
dir bugfilename
… while still at the directory of the deleted bugs.
Again, thanks a lot.
sorry…but i omitted the word “not” on my first message…actually it’s not really working…i always fail deleting the personal anti-virus.
it’s working..
it gives error like” module “spp.dll” was loaded but call to DllUnregisterServer failed with error 0*80070005.”
plz help i figure it out the sality exe file in drive D which was the xvl.pdf.. then how i can find the sality Dll only..
what software can detect only the sality dll.. and not the sality exe file.. so that I can unrgstrd in regsvr32..
Plzzz. help me……
I have this virus of some sort, wstutzer.dll. Tryed to delete it through cmd,regsvr32,but it says access denied.My antivirus picks it up very frequently,and also says access denied when it tries to delete it.Have anybody seen this dll. before?Can somebody guide me in a way so I can delete this? Greatly appreciated!!
THANK YOU VERY MUCH 4 THE INFORMATION!!!! FINALLY!!! After HOURS looking on USELESS forums n trying to find ANY removal program that could help me to delete a F****** dll, I finally did it! Im not sure if it will work 4 all of them but in my case was SIMPLE N EASY! Congratulations n TYVM AGAIN!!
I get the pop up ‘ The applicaton or DLL C: WINDOWS system 32 lozohana.dll is not a valid windows image. Please check this agaisnt your installation diskette. ‘
Safe mode hasn’t worked, when I reboot it pops up again, and my anti virus has detected ‘vondu’ among other things but this has continued.
Please Help!!
I need help I have a dll file that keeps showing “something” within it. I am freaking out! SDmodul.dll everytime i try to find it manually it means access denied I have no clue how to remove this thing and apparently its been in my computer since 2007 and Im lost. Any help would be great appreciated.
thanks you
I have 2 .dll files on my pc that look very dodgy and start up as a internet explorer add on even after i disable them. the two files are:
jkyxom.dll
yijokuwu.dll
the second one of which has a creatin date of 01/01/1601 :S
tried your advice but aparently the files cant be registered. it says on my manage add-ons section that the two files are in my windows\system32 folder but I cant find them and neither can my pc.
help please
thank you
I’ve got the dll “ddcBUkjH.dll” (C:\Windows\System32\ddcBUkjH.dll), Trend says its a TROJ_GENERIC.DIT.
Cant seem to remove it with the regsvr. HELP!
Hi
I daily need to register number of dll files before open a secure site. ofter register the files it work but when system restart we need to register the files again , what the setting so that files are registere permanently……..
Thanks bscholesboogie, This worked for me after I found the dll files were really killing my computer.
First I couldn’t get rid of them, then I found your post.
It worked the first time.
Thanks,
Steve
# bscholesboogie Says:
March 18th, 2008 at 6:44 pm
bob was correct. To get rid of a Vundo-type Explorer Addon .dll, you have to use the Windows Recovery Console. Here’s how (at least for WindowsXP SP2):
1. Insert your WindowsXP disc (my computer is a Dell laptop; I had to request an OS disc from Dell Support)
2. Press any key to boot from CD (if you don’t see this message, you may have to change your boot order; Press F2 at the beginning of boot to bring up the menu)
3. After the necessary drivers load, press r to load the Windows Recovery Console
4. Type (w/out quotes) cd C:\WINDOWS\System32
5. Type (w/out quotes) DELETE (whatever your bug’s name is; IMHO HijackThis is the best utility for locating it/them).
6. Type EXIT
7. Reboot in Normal mode and verify that the file is gone.
8. Be more careful next time about what websites you visit.
also i think this virus shut down my security then 2 seconds later my update finished(for windows and avg) and they turned right back on. pls help im freaking nervous >
i have a virus fakealert and .vbs agent which is basically the same one i think the fake alert has win32 and dll
i cant remove it because it says that can cause system instability and avg free ont remove it how do i remove please help me
am not able to remove some drivers from my PC. i had installed internet download manager and the trial period of 30 days expired. an error message is always appearing on my desktop saying some system files got corrupted by the IDM. i want to completely remove the IDM files from my PC. please help.thanks
I also picked up one of the TR/VundoGen trojans called pmnlligh.dll in my System32 folder and tried most of the techniques mentioned in this very helpful thread. Unfortunately the Unlocker trick didn’t work even moving the Recycle Bin right next to the file in SafeMode, because my quickest movement taking less than 1 second set off the error messages and repeatedly blocked it from a successful conclusion. I didn’t have an OEM Win XP disk, only a Dell XP disk that seemed to lack the Windows Recovery Console application completely. So if anyone has this “difficult to remove”, unwanted dll problem in a DELL Computer, I stumbled on an easy solution. If you can figure out how to enter UPON BOOTUP the tiny built-in Norton Ghost partition on your Dell hard drive (NOT the Dell section for hardware), and fumble around with the unfamiliar dialog boxes and buttons, you will find a complete mini layout of your hard drive without any of the main windows drivers running yet. I was easily able to delete the troublesome dll without any argument. I can’t find any mention of this secret compartment in the Dell literature. Maybe some sharp person on Dell Computers on this thread can tell us how to go into the partition the right way since it is so helpful!
Easy fix everyone, do it often – too much.
1. Sort the files in Windows\system32 by date modifed.
2. record the names fo the files, there are .ini files usually too.
2b. Open IE choose TOOLS – MANAGE ADDONS and disable the similar named DLL’s loaded as addons.
3. Boot with a Windows XP or Vista CDROM (or many other boot CDROMS).
4. Choose R during boot for Repair, then go to the CONSOLE – DO NOT REPAIR IT !!!
5. Wait for the keyboard prompt to finish then logon with Administrator password
6. Browse to Windows\System32 – and delete the files – i usually do a DIR F* for files taht begin with “F”, etc.
7. Type DEL NAME_OF_FILE
8. When finished- reboot, they are gone.
9. Then I usually download Spybot S&D or Similar to cleanup the rest
10. go into IE – TOOLS – INTERNET OPTIONS and last two tabs – reset everything.
Works every time -
I inadvertantly downloaded a backdoor trojan that created a "usrcntra32.dll" file in my Sys32 directory. It would not let me edit the registry or even access the Symantec web site. Of course it wouldn’t let me delete it either.
What I finally had to do to get rid of it was to use a dos-based file manager program (On Hiren’s Boot CD v6.0).
I have always used Fat32 as my file system, and once again, was glad I do. I booted to the CD and opened one of the 6 file management programs on the CD. I deleted the file.
Then I re-booted into safe mode as administrator, ran regedit and deleted all entries found with that file name.
Re-booted normally into XP and the file was finally gone and did not return.
Help!
I have the ever evill
ntdll64.dll
on
C:\WINDOWS\system32
i hate it and every time i try to remove it in the command prompt it never works right for me
i tried to follow everything in the command prompt that http://www.spywareremove.com/removentdll64dll.html told me but it says that it “is not recognized as an internal or external command, operable program or batch file”.
plase help me!!!
step by step would greatly appreciated!
Hi everybody *******to remove those annoying .dll files that were infected by the almighty trojan virus…refer back to the posting of March 18th 2008 from bscholesboogie i did that and it worked awsome.
Not 100% out of the woods yet, but i had a VUNDO on my system until about 5 minutes ago. I looked it up by following the path manually, one by one through the c drive, to systems 32, to the ooocvw.dll file, then i put it on my desktop. After that, I changed the name and rebooted my computer. It came right off after that, now I can download automatic updates and put up my firewalls successfully again. W00h00! Hope this helps…
i have the iifedcca.dll and maybe another, (haven’t tried to delete the other until if figure how to delete this one). i stopped the popups by going to Tools, Internet Options, Advance, unchecking Third Party Browser Extentions then restarting. i lost my ‘Y’ahoo quick reference browser icon (but still have the basic yahoo toolbar) and the Google toolbar, only temporarily, until i figure out how to delete the dll. now, i have no popups. apparently, google and ‘Y’ toolbars and the unwanted popups work on the same 3rd party premise this dll creates. now i can work on this problem without being annoyed. hope this helps. keep the delete suggestions comming.
The solution I found was booting in Safe Mode, turning off Inherited permissions for the suspect DLL file, deleting the Everyone permission on this DLL file, setting a System Deny All permission on this DLL file, and giving myself full Allow, then reboot in Safe Mode again, delete the DLL file and delete any instances of it from the registry.
Hi All,
I was try this :
regsvr32 /u haozs0.dll
but this error occurred:
haozs0.dll was loaded but the DllUnregisterServer entry point was not found.
this file can not be registered.
now i have been having problems with internet explorer every hour or so i will be connected to the internet but it wont show any pages except the error page and it is more frequent.
what pathetic loser would send viruses over the internet to destroy peoples computers at no benefit besides knowing that they caused problems i mean what is wrong with these losers
any help will be apreciated
i have windows xp and i dont know what i downloaded but in C:\windows\system32 there is something called WlanGINA.dll and it causes me to not be able to use the advanced log in welcome screen and user switching which is annoying because it is a shared computer i have tried the run cmd regsvr32 way of deleting it but it doesnt work because it says WlanGINA.dll ws loaded, but the DllUnregisterServer entry point was not found. This file can not be registered
is there any way i can find out what program installed it and delete the entire program or erase just the file or even override it not letting me use the welcome screen because as far as i know that is the only problem
My millions thanks go to Jimmy from India, and Milton, and of cause, this Website. Because of you, I finally remove the evil jkkkCRKB.dll file.
1. Downloading the unlocker program.
2. Reboot to the safe mode
3. Run cmd (Comman Prompt) from the Start button. Try to delete the dll file – del jkkkCRKB.dll, and you can.t, since …
4. Then right-click the evil dll file, select unlocker. Then you know which processes linked to the evil dll file.
5. Kill the associated processes. In my case, two processes: explore.exe and winlogon.exe.
6. In Comman Prompt, delete the dll file again. It works THIS TIME.
Happy New Year to you ALL. John
Persistent random .dll trojan removal SOLVED
For some very persistent trojans, the “Reboot in Safe mode/unregister/delete DLLs” doesn’t work. This was true for a random .dll/ini generating trojan that showed itself as an IE (6) add-on as a random .dll. The only way I’ve been able to remove this from my machine is
1. Boot into a recovery console
2. cd \windows\system32
3. dir *.dll
4. Copy every dll with today’s date into a “bad” folder, and then delete them (“move” not supported by recovery console).
I know this is not convenient, as a Windows restore CD is required, but no matter how many times I unregistered these .dlls in Safe Mode, deleted them, or took them out of the IE add-ons menu or registry start-up, they kept coming back. Now I’m clean.
“Loadlibrary ‘sqlserver.dll’ failed. Access denied.”
i got this error message as my pop up. help me plsss
If anyone know how to find and remove trojan from
C:/windows/system32/netprp.dll – a variant od win32/spy.goldun.NDW trojan
please let me know at mail:
grad[at]cg.yu
thanx
For those that cannot delete files that they *know* they want gone due to malware evilness and all previously mentioned attempts fail, visit knoppix.net to download an .iso of Knoppix Linux. Download, burn to CD (not the iso, make sure to write the iso) boot from CD. It is linux that runs from a bootable CD and will allow you to browse a windows partition and delete the files in most cases. Good luck!
arghhh! my pc automatically shuts off after the window command prompt opens.. how can i remove these dll files then???
Hi this Jimmy from India, here i want to thank Mr. Milton who gave an ultimate solution to this dangerous problem. Thank you very much once again Mr. Milton and I suggest and recommend everybody to follow the steps given by Mr. Milton. Believe me its a sure shot solution to disgusting .dll files. Every other solutions did not work for me. Thanx to Mr. Milton and http://www.spywareremove.com... you rockkkkk…
Hi I have a dll file which nothing seems able to remove from my system and it is driving me insane. It is opdjrv.dll and nothing upon nothing will remove it. has anyone got any suggestions how I can get rid of it.
Thanks
Sorry wrong post. This is the one
http://s70.photobucket.com/albums/i118/Missionoftri/?action=view¤t=viruscopy.jpg
Hey,
I have the virus agcutils.dll, I have tried to remove it manually but I dont know which files to remove.
Tool>Manage Add-ons>Enable or Disable Add-ons.
But the problem is I dont know which ones to remove. Also, Im not very computer litterate so that might be part of the problem. Is there any way I can know which add ons to delete?
(This is my second time trying to write this because the virus crashes my internet explorer)
This worked for me:
Boot in safe mode with command prompt.
Delete the dll file from the command window
upon start up my computer tells me that this is not a windows application and can’t be ran. How do I get rid of this? This has slowed my laptop down to the point where if I want to open any application it takes 3 to 5 minutes if I don’t have to try and open it several times. DLLC:1PROGRA~1\MYWEBS~1\bar\2.bin1M3PLUGIN.DLL
All,
I had the same problems that several of you reported…couldn’t remove a dll because it was in use and everytime I removed the registry entries they came back. Here are the steps I completed to successfully remove it:
reboot in safe mode
try to delete the file (mine wouldn’t allow me to)
rename the file (mine allowed me to do this)
reboot again in safe mode
try to delete the file (mine worked this time!)
remove the registry entries, and they were gone for good this time
I hope this helps everyone.
ok i am sorry to waste your time i am unexperienced with computers , it appears all i had to do was restart , then i could drag the folder str8 to the rcycle , i guess this is what unregistering allows , sorry for wasting spac e on this board , as i said i am new to this stuff but learning fast thanks o this board , keep up the good work you have helped me mroe than i can say and owe you many thanks
My laptop was infected by virtumonde so a couple of dlls were created in my system32 folder they appear when i use the manage add-ons tool but can’t be disabled. Spybot can’t get rid of them and when i try to delete them manually i get that in use can’t delete message. Using this method gives me that ‘was loaded, but the DIIUnregisterServer entry point was not found’ message so i guess that means the same thing as you can’t delete them when they are being used.
I was going to use the method suggested by matt but they are loaded as modules of winlogon and lsass not explorer so i doubt it will work.
Looks like i’m back to square one.
All you have to do is right click on the .dll file.
click share and remove your sharing rights.
delete the .dll file and it will just leave you alond
I have the same problem as “Jim November 4th, 2007 at 1:21 am”, I had dll that I couldn’t delete (not even safe mode would delete it), it would be detected deleted at startup but was still there. I solved the this problem by rebooting to the recovery console and deleting. this worked. no more pop ups but the google search links still redirect to a different link. Can you help about the google link problem.
I have the same problem as Jim (November 2007)
I managed to delete .dll files and the anti virus and anti spyware does not detects anything, but any i search on google leads to the wrong link. Some secure webpages will not load e.g mcafee.com and support.microsoft.com. Can you help?
Off topic but who the hell actually benefits from infecting other people’s computers with their VirtuMonde or whatever-the-hell-it’s-called crap? I would *really* love to know that. Someone needs to beat the sh*t out of those morons. Sorry for the language but it looks like i’ll be better off reinstalling Windows and that p**ses me off big time. I’ve always been enormously careful, ran and updated my antivirus, ran Spybot, Windows Updates and so on. And now this. The Internet is getting ever nastier. I’d run Solaris or BSD on my laptop if it weren’t for that X11 piece of cr*p they include, and the fact that I need Windows for several purposes and due to hardware issues. Oh well. Anyways, thanks for all this info on your website, guys. Great job, keep it up.
how can i delete the credu.dll file in system32 ? it is infected with a trojan and I tried everything but it just won’t get deleted?