I hope Im in the right place. i apologize if Im not. I was told to submit these files to you all, said youll know where it came from. Here is the link to my thread on SB S&D malware forum.

http://forums.spybot.info/showthread.php?t=24278

Im attatching the files

Thanks for uploading the files, you've uploaded them to the right place.

corpo.dll is well detected by AV companies. Result: 30/32 (93.75%).

msram.dll is very new malware which I will add to the malware listserv which will e-mail it to all the anti-malware companies.


AhnLab-V3 2008.2.15.11 2008.02.15 -
AntiVir 7.6.0.67 2008.02.15 -
Authentium 4.93.8 2008.02.15 -
Avast 4.7.1098.0 2008.02.14 -
AVG 7.5.0.516 2008.02.15 -
BitDefender 7.2 2008.02.15 -
CAT-QuickHeal None 2008.02.15 -
ClamAV 0.92.1 2008.02.15 -
DrWeb 4.44.0.09170 2008.02.15 -
eSafe 7.0.15.0 2008.02.14 -
eTrust-Vet 31.3.5539 2008.02.15 -
Ewido 4.0 2008.02.15 -
FileAdvisor 1 2008.02.15 -
Fortinet 3.14.0.0 2008.02.15 -
F-Prot 4.4.2.54 2008.02.14 -
F-Secure 6.70.13260.0 2008.02.15 -
Ikarus T3.1.1.20 2008.02.15 not-a-virus:AdWare.Win32.BHO.ar
Kaspersky 7.0.0.125 2008.02.15 -
McAfee 5230 2008.02.14 -
Microsoft 1.3204 2008.02.14 -
NOD32v2 2879 2008.02.15 -
Norman 5.80.02 2008.02.15 -
Panda 9.0.0.4 2008.02.15 -
Prevx1 V2 2008.02.15 Generic.Malware
Rising 20.31.30.00 2008.02.14 -
Sophos 4.26.0 2008.02.15 -
Sunbelt 2.2.907.0 2008.02.14 IEBrume
Symantec 10 2008.02.15 -
TheHacker 6.2.9.220 2008.02.14 -
VBA32 3.12.6.1 2008.02.14 -
VirusBuster 4.3.26:9 2008.02.15 -
Webwasher-Gateway 6.6.2 2008.02.15 -


Additional information
File size: 189440 bytes
MD5: c68a44823cc82086c1087e0511bec3b1
SHA1: 179435c98f06abd9c6569f34c0020a244da31eff
PEiD: -
packers: UPX
packers: UPX
packers: UPX
Prevx info: http://info.prevx.com/aboutprogramtext.asp?PX5=F9627F0400BDC10DE4E50289944FD1001DADB0AE