virtumonde.sdn detected every time i scan!

girlgrg

New member
hello,

i think i have a problem. i am not sure if it's a false alarm but every time i scan my laptop with spybot s&d, it finds a virtumonde.sdn. i click on the fix button and it does fix it every time but then .. when i re-scan.. it finds it again!

i am losing my mind over this, i have not slept in two days.. well nights.. anyyyy help will be much appreciated!

thank you in advance for your time and effort although.. whoever helps me will be getting a lot of "pleases" and "thank you's" and a lot of sentences beginning with either "can you teach me how to.." or well.."could you tell me how to..."

cheers,
roshni
 
Hello girlgrg,

The topic you posted to in the Spybot-S&D forum: Virtumonde.sdn and Lojack False Positive


http://forums.spybot.info/showpost.php?p=318940&postcount=2
Thank you for reporting this false positive.
I can confirm the false positive with the rpcnet.dll, this will be fixed with the update scheduled for 2009-06-24.

To confirm and fix the false positive with the rpcnet.exe however we do require the file for analysis. Please zip the file and send it to detections@spybot.info

Until the fix is applied you can exclude repnet.dll and rpcnet.exe from the scan result by right clicking the items in the Spybot S&D scan result and select "exclude this detection from further searches"

This particular forum is for the removal of malware and the procedure is here:
"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)

Best regards.
 
Back
Top