Author Topic: Win32/Small.CA Virus ?  (Read 11401 times)

0 Members and 1 Guest are viewing this topic.

Stang

  • Guest
Win32/Small.CA Virus ?
« on: February 05, 2012, 03:38:30 PM »
My Windows 7 laptop just gave me an Action Center alert that I was infected with Win32/Small.CA and that I should run a virus scan program (Avast) to delete it. Ran Avast scan and no virus found.  I Tried to run MBAM and when I did the update before the run Avast alerted to a virus in MBAM setup.  it said it (MBAM setup) was infected with Win32:trojan-gen and moved it to the chest.

I am running the old (not updated) version of MBAM right now on a full scan but while it was running I thought I would post to see if this is a real problem or a false thing.

Thanks.  When MBAM finishes I will attach all my logs.

UPDATE 1 - added MBAM log
UPDATE 2 - added Aswmbr log
UPDATE 3 - Added OTL Files
« Last Edit: February 05, 2012, 04:45:30 PM by Stang »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76035
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Win32/Small.CA Virus ?
« Reply #1 on: February 05, 2012, 04:02:59 PM »
I Tried to run MBAM and when I did the update before the run Avast alerted to a virus in MBAM setup.  it said it (MBAM setup) was infected with Win32:trojan-gen and moved it to the chest.

This was a FP and has been fixed.
Please update your VPS.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: Win32/Small.CA Virus ?
« Reply #2 on: February 05, 2012, 08:42:09 PM »
My Windows 7 laptop just gave me an Action Center alert that I was infected with Win32/Small.CA
Did it show any file information? ex. file location?

Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."

Stang

  • Guest
Re: Win32/Small.CA Virus ?
« Reply #3 on: February 05, 2012, 09:16:58 PM »
Windows Action Center didnt say where the file was located..... here is what the 'details' say......



 
Remove the Win32/Small.CA virus from your computer
This problem was caused by Win32/Small.CA, a known computer virus.


Click to go online to the Microsoft Corporation website to learn about the solution

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: Win32/Small.CA Virus ?
« Reply #4 on: February 05, 2012, 09:42:49 PM »
Remove the Win32/Small.CA virus from your computer
This problem was caused by Win32/Small.CA, a known computer virus.


Click to go online to the Microsoft Corporation website to learn about the solution
Action Center isn't an antivirus.
See: http://windows.microsoft.com/en-US/windows7/How-does-Action-Center-check-for-problems

Do you have Windows Defender enabled?  Are you experiencing any problems?
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."

Stang

  • Guest
Re: Win32/Small.CA Virus ?
« Reply #5 on: February 05, 2012, 10:59:03 PM »
Remove the Win32/Small.CA virus from your computer
This problem was caused by Win32/Small.CA, a known computer virus.


Click to go online to the Microsoft Corporation website to learn about the solution
Action Center isn't an antivirus.
See: http://windows.microsoft.com/en-US/windows7/How-does-Action-Center-check-for-problems

Do you have Windows Defender enabled?  Are you experiencing any problems?

Windows Defender is enabled and updated.  I dont think I have any problems but the message bothers me.  I updated MBAM successfully and found no problems.   Why did that message pop up all of a sudden ?

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: Win32/Small.CA Virus ?
« Reply #6 on: February 05, 2012, 11:15:35 PM »
Remove the Win32/Small.CA virus from your computer
This problem was caused by Win32/Small.CA, a known computer virus.


Click to go online to the Microsoft Corporation website to learn about the solution
Action Center isn't an antivirus.
See: http://windows.microsoft.com/en-US/windows7/How-does-Action-Center-check-for-problems

Do you have Windows Defender enabled?  Are you experiencing any problems?

Windows Defender is enabled and updated.  I dont think I have any problems but the message bothers me.  I updated MBAM successfully and found no problems.   Why did that message pop up all of a sudden ?
No clue. I don't use Windows Defender.

Can you perform a manual scan with Windows Defender, and if it detects, will it produce the file location?

If it does not detect this time, it could be a false positive on microsoft's case.
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."

Stang

  • Guest
Re: Win32/Small.CA Virus ?
« Reply #7 on: February 06, 2012, 02:57:21 AM »
I did the manual scan with Windows Defender..... nothing found. (3 hours)

Time to forget about it ?    Did the logs show any problems ?

Thanks