PDA

View Full Version : Is this Virtumonde detection real?



lonewolf147
2005-12-19, 15:53
SS&D keeps detecting these two registry entries as being Virtumonde. But it can't fix them. I've downloaded the Symantec Virtumonde cleaner, but it says it can't find any Virtumonde on my system. I've tried manually deleting the registry entries, but Windows won't allow it, saying they are in use.

The two detected entries are:
HKEY_LOCAL_MACHINE\Software\Classes\MSEvents.MSEvents
and
HKEY_LOCAL_MACHINE\Software\Classes\MSEvents.MSEvents.1

Thanks,
Lonewolf

Zenobia
2005-12-19, 20:29
You could ask for help in the Malware Removal forum.

The instructions are here:
http://forums.spybot.info/showthread.php?t=288

The malware forum:
http://forums.spybot.info/forumdisplay.php?f=22