PDA

View Full Version : Virtumonde.sdn after todays update



EC120
2009-05-13, 19:11
I just finished scan after downloading today's updates, and Spybot found the following file as Virtumonde.sdn > iwlandrvxpver.dll in C:\windows

http://www.picpower.net/images/qw5v7me65ztuk6rcvdh.jpg

I sent iwlandrvxpver.dll to virustotal which can be seen here:
https://www.virustotal.com/analisis/025930054ef1cee46ef1a1ac5b25c96e

file properties
http://www.picpower.net/images/fteo689vxznk9os0s81s.jpg

Running Spybot 1.6.2.46, detection update 5/13/2009 on XP SP3 IE7.
Thank you for your advice.

Matt
2009-05-13, 19:44
Hi EC120,

could be a false positive: How to report False Positives (http://forums.spybot.info/showthread.php?t=19117).

More information:
Infected Files. How To Submit. Please do not attach or link them here. (http://forums.spybot.info/showthread.php?t=1699) :thanks:

EC120
2009-05-14, 01:38
Thanks Matt,

reported and submitted.

Yodama
2009-05-14, 07:45
Thank you for sending in the requested file.

I can confirm that it is a false positive. Please set Spybot S&D to exclude this from further detections until the false positive is fixed with the next detection update scheduled for 2009-05-20.