Avast WEBforum

Other => Viruses and worms => Topic started by: Stang on February 05, 2012, 03:38:30 PM

Title: Win32/Small.CA Virus ?
Post by: Stang on February 05, 2012, 03:38:30 PM
My Windows 7 laptop just gave me an Action Center alert that I was infected with Win32/Small.CA and that I should run a virus scan program (Avast) to delete it. Ran Avast scan and no virus found.  I Tried to run MBAM and when I did the update before the run Avast alerted to a virus in MBAM setup.  it said it (MBAM setup) was infected with Win32:trojan-gen and moved it to the chest.

I am running the old (not updated) version of MBAM right now on a full scan but while it was running I thought I would post to see if this is a real problem or a false thing.

Thanks.  When MBAM finishes I will attach all my logs.

UPDATE 1 - added MBAM log
UPDATE 2 - added Aswmbr log
UPDATE 3 - Added OTL Files
Title: Re: Win32/Small.CA Virus ?
Post by: Asyn on February 05, 2012, 04:02:59 PM
I Tried to run MBAM and when I did the update before the run Avast alerted to a virus in MBAM setup.  it said it (MBAM setup) was infected with Win32:trojan-gen and moved it to the chest.

This was a FP and has been fixed.
Please update your VPS.
Title: Re: Win32/Small.CA Virus ?
Post by: !Donovan on February 05, 2012, 08:42:09 PM
My Windows 7 laptop just gave me an Action Center alert that I was infected with Win32/Small.CA
Did it show any file information? ex. file location?

Title: Re: Win32/Small.CA Virus ?
Post by: Stang on February 05, 2012, 09:16:58 PM
Windows Action Center didnt say where the file was located..... here is what the 'details' say......



 
Remove the Win32/Small.CA virus from your computer
This problem was caused by Win32/Small.CA, a known computer virus.


Click to go online to the Microsoft Corporation website to learn about the solution
Title: Re: Win32/Small.CA Virus ?
Post by: !Donovan on February 05, 2012, 09:42:49 PM
Remove the Win32/Small.CA virus from your computer
This problem was caused by Win32/Small.CA, a known computer virus.


Click to go online to the Microsoft Corporation website to learn about the solution
Action Center isn't an antivirus.
See: http://windows.microsoft.com/en-US/windows7/How-does-Action-Center-check-for-problems

Do you have Windows Defender enabled?  Are you experiencing any problems?
Title: Re: Win32/Small.CA Virus ?
Post by: Stang on February 05, 2012, 10:59:03 PM
Remove the Win32/Small.CA virus from your computer
This problem was caused by Win32/Small.CA, a known computer virus.


Click to go online to the Microsoft Corporation website to learn about the solution
Action Center isn't an antivirus.
See: http://windows.microsoft.com/en-US/windows7/How-does-Action-Center-check-for-problems

Do you have Windows Defender enabled?  Are you experiencing any problems?

Windows Defender is enabled and updated.  I dont think I have any problems but the message bothers me.  I updated MBAM successfully and found no problems.   Why did that message pop up all of a sudden ?
Title: Re: Win32/Small.CA Virus ?
Post by: !Donovan on February 05, 2012, 11:15:35 PM
Remove the Win32/Small.CA virus from your computer
This problem was caused by Win32/Small.CA, a known computer virus.


Click to go online to the Microsoft Corporation website to learn about the solution
Action Center isn't an antivirus.
See: http://windows.microsoft.com/en-US/windows7/How-does-Action-Center-check-for-problems

Do you have Windows Defender enabled?  Are you experiencing any problems?

Windows Defender is enabled and updated.  I dont think I have any problems but the message bothers me.  I updated MBAM successfully and found no problems.   Why did that message pop up all of a sudden ?
No clue. I don't use Windows Defender.

Can you perform a manual scan with Windows Defender, and if it detects, will it produce the file location?

If it does not detect this time, it could be a false positive on microsoft's case.
Title: Re: Win32/Small.CA Virus ?
Post by: Stang on February 06, 2012, 02:57:21 AM
I did the manual scan with Windows Defender..... nothing found. (3 hours)

Time to forget about it ?    Did the logs show any problems ?

Thanks