virtumonde.sdn detected every time i scan!

[girlgrg]

hello,

i think i have a problem. i am not sure if it's a false alarm but every time i scan my laptop with spybot s&d, it finds a virtumonde.sdn. i click on the fix button and it does fix it every time but then .. when i re-scan.. it finds it again!

i am losing my mind over this, i have not slept in two days.. well nights.. anyyyy help will be much appreciated!

thank you in advance for your time and effort although.. whoever helps me will be getting a lot of "pleases" and "thank you's" and a lot of sentences beginning with either "can you teach me how to.." or well.."could you tell me how to..."

cheers,
roshni

[tashi]

Hello girlgrg,

The topic you posted to in the Spybot-S&D forum: Virtumonde.sdn and Lojack False Positive (http://forums.spybot.info/showthread.php?p=318940#post318940)


http://forums.spybot.info/showpost.php?p=318940&postcount=2

Thank you for reporting this false positive.
I can confirm the false positive with the rpcnet.dll, this will be fixed with the update scheduled for 2009-06-24.

To confirm and fix the false positive with the rpcnet.exe however we do require the file for analysis. Please zip the file and send it to detections@spybot.info

Until the fix is applied you can exclude repnet.dll and rpcnet.exe from the scan result by right clicking the items in the Spybot S&D scan result and select "exclude this detection from further searches"

This particular forum is for the removal of malware and the procedure is here:
"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Best regards.