I've been a long time user of NOD32 and ventured to a website the other day that contained the Virtumondo trojan. NOD32 detected the trojan, alerted and offered the usual Terminate/Quit; but, I found after terminating that the trojan was installed nonetheless. It consisted of many avenues of intrusion including vtsqq.dll in the system32 directory, registry changes and winlogin hooks. Though I know no AV program is 100% accurate, I'm curious why all this was installed with all modules of NOD32 running except EMON. To rid the PC of the intrusion, I had to step back to a prior system restore date along with manual deletion of the dll. Clean up was successful.