Virtumundo/ Vundo

[Sjoeii]

ESS isn't detecting the Vundo trojan.
I thuoght everything was fine. But when I wanted to run a scan with Superantispyware it began to run like crazy. I was full with this ugly malware.

ESS didn't do or warn me for anything. Even after running a scan it didn't find a thing.!!!!!!???

[cupez80]

does it detected on nod32 ? if not then its not about ess but signature :D

[Sjoeii]

Just working with ESS. Aftre the latest update it did find the malware. It says it is detecting and deleting, but it is not deleting.

But good thing it is detecting it.
Now just figuring out how to get rid of it

[cupez80]

AFAIK you need special tool to deal with virtumundo

[Sjoeii]

I know.
tried several. All say there is nothing. ESS is making me crazy with pop ups.

[Marcos]

ESS keeps detecting the payload downloaded by a Virtumonde dll injected in a running process. The problem with detection is not a problem of ESS. Please drop an email to support[at]eset.com along with a link to this thread.

[Sjoeii]

Thanx

Allready done.
In the meantime I'm running several fixes

[Sjoeii]

As I can see it is fixed.
It is a shame ESS couldn't detect and delete.

[Longboard]

@Sjoeii

lol, where are you going: just 2 weeks ago when you were testing NAV/NIS you got loaded up as well.

Maybe Send your favourite web pages to all the antimalware vendors would you and to the hostfile operators as well.

;)

[Sjoeii]

haha
Well I'm affraid it is the same one.
I thuoght it was gone