How to remove the ibm00002 virus

Most antivirus programs identify ibm00002.dll as malware—for instance Avast identifies it as Win32:Sinowal, and Microsoft identifies it as PWS:Win32/Sinowal.gen!D.

The free file information forum can help you find out how to remove it. If you have additional information about this file, please leave a comment or a suggestion for other users.

Click to Run a Free Virus Scan for the ibm00002.dll malware

Ibm00002.dll file information

The process appears to belong to software OIN by unknown.

Description: Ibm00002.dll is not essential for Windows and will often cause problems. Ibm00002.dll is located in a subfolder of "C:\Program Files\Common Files". Known file sizes on Windows 10/8/7/XP are 81,416 bytes (20% of all occurrences), 113,626 bytes, 81,424 bytes, 81,392 bytes or 58,130 bytes. 
A .dll file (Dynamic Link Library) is a special type of Windows program containing functions that other programs can call. This .dll file can be injected to all running processes and can change or manipulate their behavior. There is no information about the author of the file. The program has no visible window. The service has no detailed description. It is able to record keyboard inputs. It is not a Windows core file. ibm00002.dll appears to be a compressed file. Therefore the technical security rating is 100% dangerous; however you should also read the user reviews.

Uninstalling this variant: If you run into problems with ibm00002.dll, you may want to completely remove OIN (Control Panel ⇒ Uninstall a Program).

Recommended: Identify ibm00002.dll related errors

Important: You should check the ibm00002.dll process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

  Joshua Hicks  
wer nicht dumm ist hat ihn schon gelöscht^^\DELETE!!!
disables firewal ... and don`t allows me to activate it
McAfee says it's a "PWS_JA" trojan O_O
    (further information)
Apparently part of the TORPIG virus. Cant be deleted manually. Attempts to open in NOTEPAD and save with replaced text doesnt work. Rename doesnt work. Killbox wont kill it, neither will HIJACK THIS.
  Random Tux  
Disables firewall as above poster mentions also seems to have a keylog component aimed for Eve online and WoW accounst, delete asap and change your passwords

Summary: Average user rating of ibm00002.dll: based on 10 votes with 7 user comments. 10 users think ibm00002.dll is dangerous and recommend removing it.

Do you have additional information? Help other users!
What do you know about ibm00002.dll:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving ibm00002 issues

The following programs have also been shown useful for a deeper analysis: Security Task Manager examines the active ibm00002 process on your computer and clearly tells you what it is doing. Malwarebytes' well-known anti-malware tool tells you if the ibm00002.dll on your computer displays annoying ads, slowing it down. This type of unwanted adware program is not considered by some antivirus software to be a virus and is therefore not marked for cleanup.

A clean and tidy computer is the key requirement for avoiding PC trouble. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

Other processes

ibm00002.dll [all]