Author Topic: "Win32. Small.NNE"  (Read 1844 times)

0 Members and 1 Guest are viewing this topic.

Offline firmpillow

  • Newbie
  • *
  • Posts: 5
"Win32. Small.NNE"
« on: August 14, 2012, 07:56:47 PM »

"Trojen downloader (Win32:Small.NNE) blocked... Avast! often says.

and sometimes (Url:Mal).

this below is a link to a picture of the one of the warnings

Is it a false positive?

Kwartet! said:
Ah, the visicom thingy.

The same problem showed up on the Dutch forum a few days ago (

Visicom_antiphising intends to block phishing attempts and, according to their website hxxp:// they are using Panda malware definitions. Most likely, this is a false positive caused by the fact that Panda (still?) does not encrypt their definitions.

It is obvious that visicom cannot work when avast blocks it from downloading definitions. Did avast store the definitions file in its viruschest? If so, it could be uploaded to virustotal. And maybe from the viruschest to avast as being a false positive.


but why would it specifically give warning for trojens.? I am confused, a little help?
"Ad-aware" and "windows defender" detects nothing, in my main files, ...

Do I do a system restore to yesturday, or further?
« Last Edit: August 14, 2012, 08:43:25 PM by firmpillow »

Offline Pondus

  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 34314
Re: "Win32. Small.NNE"
« Reply #1 on: August 14, 2012, 09:08:00 PM »
Do a forum search on visicom
Chief Wiggum: Uh, no, you got the wrong number. This is 9-1…2.

Offline Kwartet!

  • Full Member
  • ***
  • Posts: 175
Re: "Win32. Small.NNE"
« Reply #2 on: August 14, 2012, 09:26:14 PM »
Hi firmpillow,

Consensus seems to be that Panda antivirus should be blamed for not encrypting their malware definitions., and then the later entries.

Ad-aware and Windows Defender don't find anything on your harddisk, since avast Web shield (see the warning you uploaded) blocked this download. Hurray for webshield.

Webshield generates a report file C:\Documents and Settings\All users\Application Data\AVAST Software\Avast\report\webshield.txt that, on my pc, only contains gems like the following:
* avast! Real-time Shield Scan Report
* This file is generated automatically
* Started on: Tuesday, August 14, 2012 4:20:27 PM
Hey, at least it should not say Real-time shield, but Webshield. But I digress, maybe you could find something meaningful in this file.

Avast virus chest same story: some files that were placed there from scans, nothing from webshield.

Why trojans? Since visicom is not an antivirusprogram, I suppose they omit virus definitions from their signature files?

No need to restore your system, just uninstall visicom, whatever it is named.

Athlon64x2, 2GB, XPProSP3, 32 bit | Windows Firewall | FF15 sandboxed by Avast, NoScript, TrafficLight, WOT | AIS7.0.1466, EMET, USB-set | MBAM (on-demand)

Offline firmpillow

  • Newbie
  • *
  • Posts: 5
Re: "Win32. Small.NNE"
« Reply #3 on: August 15, 2012, 01:14:43 AM »
Thanks!!!.... I just found that out. by reading enough other people posts....and your conclusions, to them.
So I went ahead and uninstalled the anti-phishing thing.

So...No alerts...I'm glad no virus(s).
Thanks for getting around to my question...anyway!!

Wonderful job you (the 2 or 3 involved).
I am impressed...elatedly the end. :D :D  ;D
(I got the paid version of Avast the meantime so ...even better)