win32/small.ca [Solved]

Are you able to let me know exactly what file that the Windows Action Center is detecting??

well, apparently its not showing it now, lol. It was this warning that brought me here in the first place. It said something along the lines of "windows detected win32/Small.ca a known computer virus, blah blah blah," but when I clicked on "view message details" it thought really hard for a few seconds before deciding to make the warning disappear. So I guess it doesn't detect anymore. That being said, any ideas why videos and images are still being weird, if it isn't related to this virus? maybe something wasn't updated properly?

Ok great! Glad to hear that the detection is not there any longer. I am not seeing anything jumping out at me malware related. What program are you using to watch videos on?? Like you said…there may needs to be a new update or reinstall of whatever program it is. The ZeroAccess rootkit that we were removing damages systems all in different ways. At least yours was recoverable.

no specific program or video player. Just any images or videos that are streaming through the internet seem to have trouble. I've found the majority of images seem to load fine now, while nearly every video just quits loading and stops like it hit the end of the video when it clearly has not. Even if I rewind/restart the video, it will stop in the same place every time after that. I've been trying to find various software updates that might be out of date (video drivers, java, flash, etc.) but everything says its up to date and working… Any chance it could be related to my isp?

It could be related to your ISP yes… You might try starting a new topic in the Windows forum here at What the Tech and see what the techs there have to say. I don't see any malware that is there any longer so they might have some information you could try out. Be sure, if you do start a new topic, to post a link back to here so that they can see what it is we have been doing.

Alright, got a job to go to now, so I'll have to start looking into that a bit later. Otherwise, you were amazing Jeff! Thank you so much for your time and help! I can breathe much easier now knowing that stuff is off my computer!

No problem…when you get done with them come back and we will remove the tools that we used.

So after a bit of troubleshooting and whatnot the problem is finally resolved. Turns out it was an incredibly easy fix. My wireless adapter got updated drivers for a different version of the same adapter. This completely messed with the way the internet worked, though it did still work to an extent, oddly enough, despite having incorrect drivers. so, with that being said… I'm back! I can't imagine it's too difficult to remove these tools?

Good to hear it got fixed up.

Providing there are no other malware related problems…

[external image: Posted Image]IT APPEARS THAT YOUR LOGS ARE NOW CLEAN

This infection appears to have been cleaned, but I can not give you any absolute guarantees. As a precaution, I would go ahead and change all of your passwords as this is especially important after an infection.
———-

The following will implement some cleanup procedures as well as reset System Restore points:

Press the Windows key + R and this will open the Run text box. Copy/paste the following text into the Run box as shown and click OK.
Combofix /Uninstall
(Note: There is a space between the ..X and the /U that needs to be there.)

[external image: Posted Image]
———-

Any of the logs that you created for use in the forums or remaining tools that have not yet been removed can be deleted so they aren't cluttering up your desktop. If you did not have Malwarebytes Antimalware before, I would keep it and run it weekly.
———-

Here are some tips to reduce the potential for spyware infection in the future:

1. Make your Internet Explorer more secure - This can be done by following these simple instructions:

• From within Internet Explorer click on the Tools menu and then click on Options.
• Click once on the Security tab
• Click once on the Internet icon so it becomes highlighted.
• Click once on the Custom Level button.
• Change the Download signed ActiveX controls to Prompt
• Change the Download unsigned ActiveX controls to Disable
• Change the Initialize and script ActiveX controls not marked as safe to Disable
• Change the Installation of desktop items to Prompt
• Change the Launching programs and files in an IFRAME to Prompt
• Change the Navigate sub-frames across different domains to Prompt
• When all these settings have been made, click on the OK button.
• If it prompts you as to whether or not you want to save the settings, press the Yes button.
• Next press the Apply button and then the OK to exit the Internet Properties page.

2. FireFox If you use Firefox, I recommend installing the following add-ons to help make your Firefox browser more secure:
NoScript
AdBlock Plus

3. Use and update an anti-virus software - I can not overemphasize the need for you to use and update your anti-virus application on a regular basis. With the ever increasing number of new variants of malware arriving on the scene daily, you become very susceptible to an attack without updated protection.

4. Firewall
Using a third-party firewall will allow you to give/deny access for applications that want to go online. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a firewall in its default configuration can lower your risk greatly. **There are firewalls that could be downloaded and used but I would personally only recommend using one of the following two below:
Online Armor Free
Agnitum Outpost Firewall Free

5. Make sure you keep your Windows OS current. Windows XP users can visit Windows update regularly to download and install any critical updates and service packs. Windows Vista/7 users can open the Start menu > All Programs > Windows Update > Check for Updates (in left hand task pane) to update these systems. Without these you are leaving the back door open.

6. WOT (Web of Trust) As "Googling" is such an integral part of internet life, this free browser add on warns you about risky websites that try to scam visitors, deliver malware or send spam. It is especially helpful when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites. WOT has an add-on available for Firefox, Internet Explorer as well as Google Chrome.

7. Finally, I strongly recommend that you read Miekiemoes' great advice How to prevent malware.

Please reply to this thread once more if you are satisfied so that we can mark the problem as resolved.

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.