PDA

View Full Version : Virtumonde



OliverH
2007-08-27, 14:43
Hi,
Since Saturday Spybot detects virtumonde on my computer. So I tried to get rid of it, but it doesn't work. It is said that the NWIPXSPX.DLL is affected, so I checked this dll with various programms. They didn't find anything. I also read some threads in various forums concerning Virtumonde, but my problem seems to be special, because I found nothing comparable. Spybot seems to be the only programm that detects Virtumonde on my computer. I got this Kaspersky report and also a f-secure report. But there was no virus found. Also AntWir found nothing. And I don't have any troubles while using the internet (no popups etc.; I am running Mozilla). So I have no idea why there is a detection of Virtumonde in spybot? Thank you for the support.
Oliver

pskelley
2007-08-27, 16:22
Hello Oliver and welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
"BEFORE you POST" (READ this Procedure before Requesting Assistance)
http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read this information so we are on the same page.

Let's see if I can help you a bit, first:

NWIPXSPX.DLL <<< looks like it has something to do with Netware? You use it? If you want to check it for infections, here are free scanners:
http://virusscan.jotti.org/
http://www.kaspersky.com/scanforvirus
http://www.virustotal.com/

If you had the Vundo trojan you would know it, it is a prolific popup maker directing folks to rouge spyware programs (fraud).

If Spybot S&D is the only program finding it, you may need to update and immunize. You can also post questions here:
http://forums.spybot.info/forumdisplay.php?f=4 <<< Spybot forum
http://forums.spybot.info/forumdisplay.php?f=16 <<< false positives

If Kaspersky and f-secure are finding nothing, chances are there is nothing to find. In order for me to look more, you would need to follow the directions pinned to the top of the forum and posted above.

Thanks

OliverH
2007-08-27, 16:55
Thank you for the quick support,
After posting this thread I recognized that there is also a forum in German language. So I will try to get help there which will be much easier for me (concerning the language). I'm sorry about wasting your time...but I'm new here and it's hard to read all these advices when you think that you are infected..... So you can close my thread now.
Again thanks a lot
Oliver

pskelley
2007-08-27, 17:02
Member is moving to the German language forum and requests this topic be closed.

Thanks