Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Win 7 Action Center reports pc is infected with win32/Small.ca trogan

26 Dec 2012   #1
Chirpy

Widows 7 Professional x64
 
 
Win 7 Action Center reports pc is infected with win32/Small.ca trogan

Hello,

My Windows 7 action center has told me to "remove the Win32/Small.CA virus from your computer". Although it provides very little assistance in removing the virus. The message first appeared on the 26 Dec 2012.

My computer has blue screened several times over the last month although recovers very easily.

I have scanned with, Comodo Internet Security Complete 2012, Malwarebytes, tdsskiller, ComboFix, ESET, windows defender, HitmanPro and SuperAntiSpyware. None of thes found any problems.

I have read in forums that this is one of the worst trogans although I am yet to find a solution. I am wondering if it is a false positive identified by Windows.

Any help would be greatly appreciated.

Thanks


My System SpecsSystem Spec
.
26 Dec 2012   #2
marsmimar

Microsoft Community Contributor Award Recipient

 
 

Hello chirpy and welcome to Seven Forums.

This Microsoft forum thread discusses the win32/Small.ca trojan in some detail. Apparently the Action Center reports it but traditional scans don't find it. This malware always seems to end with a period followed by a series of one, two, or three letters representing a specific country or area. The .ca would indicate Canada. For a more generalized look-up I searched for win32/Small and found a possible fix from Dr.Web.

Windows 7 and how to remove Win32/Small.CA virus - Microsoft Community

Dr.Web Anti-virus - How To Remove Virus (Trojan-Downloader.Win32.Small.dac) - [DRWEBHK.COM]
My System SpecsSystem Spec
26 Dec 2012   #3
Chirpy

Widows 7 Professional x64
 
 
How to resolve the win32/Small.CA trogan

marsmimar

Thanks for your response.

Quick question for you - Understanding that The .ca would indicate Canada. Is the .CA the point of origin or the place of infection.

I am in Australia so I expect that the .CA is the point of origin.

Is that a fair assumption?

Thanks
My System SpecsSystem Spec
.

27 Dec 2012   #4
marsmimar

Microsoft Community Contributor Award Recipient

 
 

From what I could gather, it could be either one. In this particular case I would guess that .ca would indicate point of origin. But I'm guessing it's also possible that this specific malware might have originated as a .cn, from oh let's say China, circled the globe a few times, got changed along the way, and eventually came to you as a .ca.
My System SpecsSystem Spec
27 Dec 2012   #5
Borg 386

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1, Win 10
 
 

It wouldn't hurt to run Windows Defender Offline after you look at the other links & apply the actions. However, be sure to make this on a clean PC, not the infected one as this can compromise the scanner.

I suggest this as, unfortunately, viruses/malware tends to invite other nasty stuff onto your PC.

If you want to be 100% sure that your PC is trustworthy again, then a clean install is your best option.

Clean Install Windows 7
My System SpecsSystem Spec
27 Dec 2012   #6
Chirpy

Widows 7 Professional x64
 
 

Hi

I have run DR Web Cure IT! and Security Space although they have not identified the trogan.

I will now run Windows Defender Offline as suggested by Borg 386.

I am still hoping that it is a false positive?

Should I uninstall Dr Web Security Space?

I am currently running
- Comodo Internet Security Complete 2012 - used mainly for the firewall.
- Bitdefender Total Security 2013 - used for Anti-Virus
- Malwarebytes - used for scanning files that I am not sure about.

All of the above have been uninstalled as required by Dr Web Security Space.
My System SpecsSystem Spec
Reply

 Win 7 Action Center reports pc is infected with win32/Small.ca trogan




Thread Tools




Similar help and support threads
Thread Forum
This week my main pc was infected with Ransom:win32/Croti
This week my main pc was infected with Ransom:win32/Croti. My main protection program is MS Security Essentials. I was a bit surprised since I routinely keep my virus def.s up to date & stay off of any risky (??) sites. (You’ve heard it all many timesJ) No other PC’s on my Home Network appear to...
System Security
Infected by virtool.win32/obfuscator.XZ
Hi Got up this morning to a message that I had a problem. I scanned with MSE and it found virtool.win32/obfuscator.XZ but when I tried to 'clean' the system it seemed to fail. I found a similar post in this forum and so I ran F-secure and here is the report (I think this is what you...
System Security
How can I be sure if I am still infected with "Win32/Small.CA" virus".
Hi I got a "Solve PC Issues" (white flag) saying "Remove the Win32/Small.CA virus". I am running MSE (Microsoft Security Essentials) on Windows 7 Pro (x64). So I did an update followed by a full scan using MSE. I then ran - Malware Anti-Virus - SUPERAntispyware - Microsoft Safety Scanner...
System Security
Infected by virtool.win32/obfuscator.XZ on Windows 7
Hi All, My last MSE scan was in October of 2012, did a scan last night and found that I'm infected with virtool.win32/obfuscator.XZ. I tried to do some research before posting and found these two threads that are relatively recent: 1. Solved: Please help removing virtool:win32/obfuscator.XZ...
System Security
Win32:Small-CHC[Trj]
huy, I suddenly started getting these random pop-ups with Avast 5.0 It says that I got a Win32:Small-CHC virus. It creates folders in the c/windows/temp directory but then Avast moves it to Quarintine. What is causing this? I've tried updating Avast and Malwarebytes. Done scans with both Done a...
System Security
themeui.dll infected with Win32.HLLM.Graz.based
Recently run DrWeb and got this message on Build 7000 :/ Anyone else?
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 05:26.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App