Norton 360

[Kannan]

Couple of hours back, I started hearing some kind of internet radio playing and couldn’t see any window or instances of browser working in background.

After some few minutes hunting in task manager and running Norton Insight, found out a new process "stdrt.exe" is running.

Also I can see an item in Windows 7 Volume Mixer named "Name not available." which is now muted and unable to mute it.

Also this takes up lot of resources.

Found out this seems to be a malware. Lot of people have reported it but Norton is marking this process as legitimate process.

Also I am not able to remove this malware. Need help.

Windows Process Properties:

Process Location: C:\Windows\Temp\mrtA37F.tmp

Process: stdrt.exe

Process Name: Windows Media Center Diagnostic Application

Currently I am using Norton 360 latest version.

[Kannan · Accepted solution]

Problem solved. Followed "toilet goat" solution at http://www.sevenforums.com/system-security/76867-stdrt-exe-running-windows-temp-2.html

Solution:

1. Using DOS Prompt, go to  "<system drive>:\windows\syswow64" folder. E.g. c:\windows\syswow64
2. Type "dir /p" and check if the file adbcnsl.exe is listed. If file not found try checking c:\windows\system32
3. If listed type "del adbcnsl.exe".  
4. Goto Task Manager, Switch to "Processes" tab, click "Show processes from all users" button.
5. Locate "stdrt.exe" process, right click and select "Properties" menu.
6. In the properties window, make note of the "Location" in "General" tab.
7. Now kill that process.
8. Open the location where "stdrt.exe" is located and delete the file "stdrt.exe". Sometime it can be found under multiple folder inside temp folder starting with "mprt_".
9. Goto registry editor and search for "stdrt.exe", delete all the keys which contain that entry.
10. Now restart the machine and you should not be able to see the "stdrt" process.

Oh by the way I am disappointed at Symantec for not finding this as a malware. This has been running across internet for almost in months now. Don't know why I am paying for 360 product :(

[frankty]

hello, i got the same virus but when i go to cmd and try to delete the file it says that  the process cant be delete because its being used please anwser quick how do i solve this