hello everybody
the last scan of updated S&D found Virtumonde.sdn on c:\windows\system32\encapi32.dll that was an old file referring to Microsoft Encarta.
The result of the scan is attached.
Well I think it could be a false positive.
Please have a look
Live long and prosper