Win32/Small.CA virus removal

Nikki39 · 26 Jun 2013

Hi

Can anyone help me get rid of this virus?
Windows Action centre is telling me I have the Win32/Small.CA virus and it stopped my PC working on the 19th June. Since then I have run various antivirus software (Sophos, Malwarebytes, Microsoft security scanner) but none of them have found anything (well Sophos found a trojan hanging off a Firefox updater but that has been destroyed and the Action Centre notification hasn't changed).
Today I ran a full scan using Windows Defender offline in case the virus was preventing the antivirus software from running properly but still nothing has been found.
However - my PC is running really strangely and randomly grinds to a halt while doing nothing significant so I'm sure that there must be something amiss but I'm now a bit clueless as to what is going on and how to fix it. If Windows Action centre is detecting this virus then why is nothing else?

Any help much appreciated
Thanks

VistaKing · 26 Jun 2013

Click here DDS

Click on Download Now button

When the download is complete . Drag the DDS program from the Downloads folder to your Desktop

Double click the DDS icon on the Desktop then click the Run button to run the tool.

Place a check next to attact.txt and click Start . When done, DDS will open two logs

DDS.txt
Attach.txt

Save two logs onto your desktop and upload them with your reply

cottonball · 26 Jun 2013

Nikki39,

In addition to doing the above, please do the following to check what is the cause of the problem...

First, please download the Farbar Recovery Scan Tool
Select the 64-bit version.

Save it to the Desktop.

Double-click the downloaded file to run it.
When the tool opens click Yes to disclaimer.
Press the Scan button.
FRST64 makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).

Please provide the FRST.txt in your reply. <<---

The first time the tool is run, it also makes another log: Addition.txt
Also post the Addition.txt in your reply. <<---

Also, download Farbar Service Scanner

Save to the Desktop

Make sure the following options are checked:
- Internet Services
- Windows Firewall
- System Restore
- Security Center
- Windows Update
- Windows Defender
Press: Scan
FSS creates a log, FSS.txt, on the Desktop.

Please provide the FSS.txt in your reply. <<---

Thanks!

Nikki39 · 26 Jun 2013

Hi VistaKing & Cottonball

Many thanks for you quick replies !

Here's all the files from the scans I ran.

Hopefully they can shed some light on it all! Just in case it makes a difference - I just switched users to my husbands account on this machine and his action centre isn't showing the virus so I guess its just my user account that gets the dubious pleasure!!!

Thanks
Nikki

cottonball · 26 Jun 2013

Nikki39,

The reports provided do not appear to have the presence of a virus.

The system has the Sophos AV, as well as Windows Defender. There seems to be a conflict there...

Try disabling Windows Defender for a day or two, and post back if the warning goes away.

To disable Windows Defender:

Click Start orb > All Programs > Accessories
Right-click Command Prompt and select Run as Administrator...
At the blinking cursor of the Command Prompt, copy/paste (with mouse) the following commands inside the code box, one at a time:
Code:
```
 
sc config WinDefend start= disabled
sc stop WinDefend
```
Press: Enter after each command.

Nikki39 · 10 Jul 2013

Hi Cottonball

Thanks for your reply and apologies for not getting back to you sooner - I've been on holiday. I did as you suggested but the virus message didn't go away (Windows has archived it though!!). However my hard drive now seems to be failing as messages have started popping up this morning from Windows to that effect. I'm now frantically backing up anything that wasn't already backed up (not much thankfully) before I do anything else but I'm now wondering if the performance issues I was experiencing were totally unrelated to any virus (or non virus as it would seem). My hard drive is only 12 months old so I'm a bit cross right now but looks like I'm on my way to having to buy a new hard drive!!!

Many thanks for your help
Nikki

jumanji · 10 Jul 2013

From the System Specs I see that you have a DELL Desktop.

Have you made the recovery Disks for your System?

Is your system still under warranty/extended warranty?

Once you have backed up all important data, run the HDD manufacturer's Diagnostic/repair utility and check the status of your hard drive.

( You can find it in Device Manager > Disk Drives. DELL mostly uses Seagate drives. If it is a Seagate, you can download SeaTools for DOS here
SeaTools for DOS | Seagate
and create a bootable pen drive with Rufus
Rufus - Create bootable USB drives the easy way
to run it.)

Nikki39 · 10 Jul 2013

Hi Jumanji

the original dell system is several years old and when the original hard drive failed last year I just replaced the hard drive so no manufacturers warranty unfortunately :-( I'm pretty sure it was a Samsung hard drive I bought for it.

I've not made recovery disks for the system (how do I do that?)

Thanks for the tip about the diagnostic / repair utility - I'll give that a go and see what it comes up with.

Thanks
Nikki

jumanji · 10 Jul 2013

I understand that SeaTools for DOS can be run on Samsung drives.