s.exe+b.dll+p.dll

Sherry.ai

1：
s.exe：08F619DD2D18E434C6A4CDA8879963F8
b.dll：CC16FC44E62CC4AF3BDA2792F9A648E4
d.dll：D8E6E4C64A8B56F900F71DDA5BC4D787

kalynn84

Win32:Agent-GRW [Trj]

benq80282

Avira AntiVir
1.rar
  [0] Archive type: RAR
    --> p.dll
      [DETECTION] Is the TR/Agent.49152 Trojan
    [NOTE]      A backup was created as '4ae48c21.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!

傻猪猪米走鸡

2009/10/1 9:46:38        文件系统实时防护        文件        C:\Sandbox\Galaxy\DefaultBox\drive\E\我的文档\Downloads\1\p.dll        可能是 Win32/Adware.WSearch 应用程序 的变种        通过删除清除 - 已隔离        NT AUTHORITY\SYSTEM        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2009/10/1 9:46:21        文件系统实时防护        文件        C:\Sandbox\Galaxy\DefaultBox\user\current\AppData\Local\Temp\Rar$EX00.722\s.exe        Win32/Adware.BHO.GBP 应用程序 的变种        通过删除清除 - 已隔离        NT AUTHORITY\SYSTEM        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2009/10/1 9:46:21        文件系统实时防护        文件        C:\Sandbox\Galaxy\DefaultBox\user\current\AppData\Local\Temp\Rar$EX00.722\p.dll        可能是 Win32/Adware.WSearch 应用程序 的变种        通过删除清除 - 已隔离        NT AUTHORITY\SYSTEM        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.

Palkia

就是这个嘛

http://bbs.kafan.cn/thread-548920-1-2.html

尤金卡巴斯基

To KL

wliao

微点

Roboon

Roboon：费尔过得一干二净

hj5abc

[Scan path] G:\1.rar
>G:\1.rar/b.dll - OK  - 上報
>G:\1.rar/p.dll infected with Trojan.DownLoad.49138
>G:\1.rar/s.exe infected with Trojan.DownLoader.origin -上報
G:\1.rar - archive contains infected objects

[ 本帖最后由 hj5abc 于 2009-10-1 17:20 编辑 ]

尤金卡巴斯基

Hello,

b.dll - Trojan.Win32.Pugolbho.dr

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

p.dll - not-a-virus:AdWare.Win32.BHO.itz

This file is an Advertizing Tool, It's detection will be included in the next
update of extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

s.exe_ - Trojan-Downloader.Win32.Adload.kxx

This file is already detected. Please update your antivirus bases.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.