View Full Version : "Out of Memory" on "Virtumonde" during a scan
trypetide
2017-10-27, 19:17
Hi!
So like the title said, during a normal scan with Spybot (1.6.2.0 / 1.6.6.32),
a few reported errors appeared during the "virtumonde" steps with "out of
memory" warnings...
I can assure you that this computer of mine as sufficient RAM and that nothing
out or the ordinary was going in RAM/CPU wise.
I tried to search a bit on the web about this little one, found multiple "old" threads,
some tools (Eset, ComboFix, SAS, etc...) but to no avail: only Spybot reacts like below.
http://www.mirari.fr/Rwrh
So I was wondering if something was going on with it, or if I missed a step
along the way to eradicate what seems to be remnant of "Virtumonde".
Waiting for your instructions/requests of scans or logs to post again.
Thanks in advance~
That does not indicate that you necessarily have those malware infections on your computer. It means that there was an error during the Spybot scan at the point where Spybot was scanning for Virtumonde and scanning your download directory. You could try scanning with Spybot again to see if those errors were just a one time thing, or if you still get an 'error during check out of memory' again. Please post back afterwards if the errors came back or not. :)
trypetide
2017-10-29, 12:35
You could try scanning with Spybot again to see if those errors were just a one time thing, or if you still get an 'error during check out of memory' again. Please post back afterwards if the errors came back or not. :)
Okay, so I did multiple scans before/during/after trying to destroy what seemed to be Virtumonde on my PC, before coming to post here.
And here's the last attempt, with a minor difference in the third line:
http://www.mirari.fr/vtw0
So, still more or less the same.
What next? =O
This is a little off topic, but I wanted to say thank you for posting the screenshots of the Spybot scan. That makes it easier to see what is going on with it, and is much appreciated. :)
Going further here would be guesswork on my part, so I think next it would be best if you contacted Team Spybot:
https://www.safer-networking.org/support/ticket/technical/
Don't worry, perhaps it's a simple fix. Good luck. :)
trypetide
2017-10-31, 12:42
Well, you're welcome then ^^
Hoping it would be just "that", so I sent a ticket.
Will report here whenever I get an answer~
trypetide
2018-01-29, 18:05
A little late for a reply (My Life™)
OK. After waiting for a while, the answer I got was basically
"Welp, just deactivate it in the search options."
Indeed, deactivating it does work, but that's beyond the point, isn't?
"The reason why issues like yours might arise is in the meantime a lot of new signatures where added"
But adding signatures will cause problems to ancient signatures... Because?
And after SO many years using it on many systems, why now?
So in short, we'll never know what and why the soft did that.
Well, at least if someone sees that in the future, they'll know what their ~solution~ is =]
[ Case Closed ]
A little late for a reply (My Life™)
No problem at all. Thank you very much for posting back the answer you received. :)
Hi, I am very sorry you got this unsatisfying reply from our support. "out of memory" might mean two things: first, virtumonde detection rules are memory intensive. That means when running the scan with lots of other programs, computer memory might be in use and cannot be allocated to the scanning task.
two: there might be an error with the scanning task allocating the memory or the rules are causing this error. As Virtumonde is an old product which is not found that much anymore, it might be okay to deactivate the product to avoid this error. You can activate it again if you suspect to be infected.
seagreen
2018-02-20, 01:30
This is exactly my issue. I'm running SS&D ver. 1.6.2.46 and am getting this same error and like the OP, the PC I'm using has more than enough memory. As can be seen from the screen shot I'm not actually sure that Spybot completed the scan. :confused:
From reading this thread, it sounds like tech support has no solution for this issue.
Hi!
So like the title said, during a normal scan with Spybot (1.6.2.0 / 1.6.6.32),
a few reported errors appeared during the "virtumonde" steps with "out of
memory" warnings...
I can assure you that this computer of mine as sufficient RAM and that nothing
out or the ordinary was going in RAM/CPU wise.
I tried to search a bit on the web about this little one, found multiple "old" threads,
some tools (Eset, ComboFix, SAS, etc...) but to no avail: only Spybot reacts like below.
http://www.mirari.fr/Rwrh
12998
You could always try what (m/f) posted above. Virtumonde is an older product, so you could set it to be ignored, unless you suspected that you might be infected with it. :)