Trojan Vanti Spyware - fm2cu77

Discussion in 'ewido anti-spyware forum' started by dwl33, Jul 25, 2006.

Thread Status:
Not open for further replies.
  1. dwl33

    dwl33 Registered Member

    Joined:
    Jul 25, 2006
    Posts:
    2
    ewido found a file fm2cu77.dll in my system, claimed it is a Trojan spyware. I deleted the file and it comes back the next time I start my computer. What is this spyware do and how do I get rid of it?
     
  2. Tommy

    Tommy Registered Member

    Joined:
    Dec 24, 2002
    Posts:
    1,169
    Location:
    Buenos Aires - Munic
    Last edited: Jul 26, 2006
  3. ASpace

    ASpace Guest

    Since this is DLL and since it could be resident , you have to disable System Restore

    Because of the fact malware is a program,
    System Restore also stores all malware tracks and when restarting,it can
    replicate some infected system stuff and the malware will be back !!!


    Turn System Restore OFF
    >>> Right click on My Computer->Properties->System Restore
    Check Turn off system restore.Click OK


    System Restore FAQ:
    http://www.microsoft.com/technet/prodtechnol/winxppro/plan/faqsrwxp.mspx
     
  4. dwl33

    dwl33 Registered Member

    Joined:
    Jul 25, 2006
    Posts:
    2
    I turned off system restore, deleted the file, it still comes back to me.
     
  5. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Hi dwl33, welcome to Wilders.

    Please turn System Restore back on before following any further cleaning steps, as at this point in time you have not indicated the infection is even located within System Restore. This way at least if you follow any incorrect advice you will have a restore point to fall back on.

    Cheers :D
     
  6. ASpace

    ASpace Guest


    Then , may be this DLL is created by another program (exe) and everytime you delete the dll , the other creates it again . Probably this exe is not detected by Ewido . Try the General cleaning instructions by Blackspear
    Hope this helps ! :thumb:
     
  7. Tommy

    Tommy Registered Member

    Joined:
    Dec 24, 2002
    Posts:
    1,169
    Location:
    Buenos Aires - Munic
    @dwl33
    Can you send me the dll to my eMail? Please zip or rar the dll, protected with a password, so that my AV scanner can't scan and delete it during the download. I will try to identify which virus it is to find apropiate measure for deleting it from your machine.
    Mail me
     
    Last edited: Jul 28, 2006
Thread Status:
Not open for further replies.