Virtumonde.sdn and ptipbmf.dll

[benroberts]

I think we are getting false positives of a vitumonde.sdn infection within C:\Windows\system32\ptipbmf.dll

Operating System: Windows XP Professional - fully patched
Browser and Version: Internet Explorer 7.0.5730.11
Version of Spybot S&D: 1.6.0.31
Date of the latest update: 5/11/08
Where did the false positive occur: Scan result

There are various other users suffering the same issue:
http://forums.vnunet.com/thread.jspa?messageID=1140816

ptipbmf.dll seems to be the driver for RAID-Controler by Promise:
http://www.neuber.com/taskmanager/process/ptipbmf.dll.html

I hope you can prove one way or the other!
Thanks, Ben

[PS if you need more info just ask]

[Yodama]

hello,

yes this is a false positive, please apply the F/P-Fixes from the Spybot S&D updates or the detection updates scheduled for release today.