This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Win32/Small.CA virus [Closed]

27 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hi, OCD, 1) I couldn't find or locate and provide the ComboFix result at "C:\ComboFix.txt" file as required. 2) Findings from the SFC scan as per below image; a) πŸ“ŽDuring_scan.JPG B) πŸ“ŽAfter_scan.JPG As per above image result, same problem happen if i try it again and again. scan cannot complete at all. 3) Changes on performance I'll update it later because i've notice nothing yet.
Hi fulladd,

The error you encountered happens if the TrustedInstaller (Windows Modules Installer) service is disabled. Use these steps to reset the service startup type.
  • Click Start, type Services.msc
  • Double-click Windows Modules Installer
  • Set its Startup type to Demand
  • Click OK.
Next

Repeat the System File Checker (SFC)
  • Click on the Start button and in the Search programs and files box type the following:

    • command
  • Don't press Enter, just let the search results populate above.
  • In the search results, locate the Programs section.
  • Locate the Command Prompt shortcut and right-click on it.
  • Select Run as administrator.
  • Click Yes on the User Account Control window that appears.
  • Important: If you are see a User Account Control window but also a message that says To continue, type an administrator password, and then click Yes, then your user account must be a standard account, not an administrator account. Before you can click Yes and open an elevated command prompt, you'll need to type the password of another user on your Windows 7 computer that has administrator level privileges.
  • Note: You will not see this window at all if your User Account Control settings are turned all the way down. See How To Disable User Account Control in Windows 7 for more information.
  • An elevated Command Prompt window will appear.

    • Type: sfc /scannow (There's a space between sfc and /scannow.)
  • Type: exit to close the command prompt window
  • Include the findings in your next reply
In your next post please provide the following:
  • Findings from the SFC scan
  • Any change in computer's performance?
Hi, OCD, 1) I cannot follow the steps to reset the service startup type because I cannot "Set its Startup type to Demand". Please refer below image; πŸ“ŽWindow_Modules_Installer_.JPG Due to that I've choose / apply "automatic". Every time after this computer restart by itself I've found that the "startup type" will back to "Disabled". 2) After I click on the Start button and in the Search programs I type "command" I cannot find "command Prompt" shortcut. refer below image; πŸ“Ž18_01_13.JPG Thus, i just type "cmd" and follow the rest of your instruction. But the scan cannot complete it because this computer will restart and back to "Window Error Recovery". If I'm able to scan it and this computer not go to "Window Error Recovery" the scan still fail to complete as per below image; πŸ“Žsfc_scannow.JPG 3) Kindly also advice as per below image which always appears. πŸ“ŽProcess.JPG
Hi fulladd,

Refer to the ComboFix User's Guide

  • Download ComboFix from the following location:

    Link

    * IMPORTANT !!! Place ComboFix.exe on your Desktop
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with ComboFix.
    You can get help on disabling your protection programs here
  • Double click on ComboFix.exe & follow the prompts.
  • Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal.
  • When finished, it shall produce a log for you. Post that log in your next reply

    Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

    β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
  • Ensure your AntiVirus and AntiSpyware applications are re-enabled.

    β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
NOTE: If you encounter a message "illegal operation attempted on registry key that has been marked for deletion" and no programs will run - please just reboot and that will resolve that error.

In your next post please provide the following:
  • ComboFix.txt

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI