Trojan Vanti Spyware - fm2cu77

ewido found a file fm2cu77.dll in my system, claimed it is a Trojan spyware. I deleted the file and it comes back the next time I start my computer. What is this spyware do and how do I get rid of it?

 

I googled a little bit and it seams to be a variation of the Win32 Trojan Rootkit. If so, it is a Backdoor and clasified as dangerous. Does your Antivirus/AntiTrojan soft not catch it?

Check this out: http://www.viruslist.com/en/viruses/encyclopedia?virusid=38054

 

Since this is DLL and since it could be resident , you have to disable System Restore

Because of the fact malware is a program,
System Restore also stores all malware tracks and when restarting,it can
replicate some infected system stuff and the malware will be back !!!


Turn System Restore OFF
>>> Right click on My Computer->Properties->System Restore
Check Turn off system restore.Click OK


System Restore FAQ:
http://www.microsoft.com/technet/prodtechnol/winxppro/plan/faqsrwxp.mspx

 

I turned off system restore, deleted the file, it still comes back to me.

 

Hi dwl33, welcome to Wilders.

Please turn System Restore back on before following any further cleaning steps, as at this point in time you have not indicated the infection is even located within System Restore. This way at least if you follow any incorrect advice you will have a restore point to fall back on.

Cheers

 

Then , may be this DLL is created by another program (exe) and everytime you delete the dll , the other creates it again . Probably this exe is not detected by Ewido . Try the General cleaning instructions by Blackspear
Hope this helps !

 

@dwl33
Can you send me the dll to my eMail? Please zip or rar the dll, protected with a password, so that my AV scanner can't scan and delete it during the download. I will try to identify which virus it is to find apropiate measure for deleting it from your machine.
Mail me