This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

win32/small.ca [Solved]

24 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

had to go online and pay for the removal of the virus

That is very unwise as many of the online "experts" who charge are uneducated in current malware and will just advise "clean-up" programs but don't know what they are cleaning up.

The experts here and at other top malware forums co-operate and exchange knowledge for the good of all and charge nothing.

That said, I'd be happier with another scan plus an online scan before you re-install Bit Defender and if they are clear, we'll tidy up and I'll give you my recommendations.

Download Malwarebytes-Anti-Malware

Click here.
  • double-click mbam-setup.exe and follow the prompts to install the program.
  • at the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware. and Launch Malwarebytes' Anti-Malware, then click Finish..
  • if an update is found, it will download and install the latest version.
  • once the program has loaded, select Perform quick scan, then click Scan.
  • when the scan is complete, click OK, then Show Results to view the results.
  • be sure that everything is checked, and click Remove Selected.
  • when removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. (see Note below)
  • the log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • copy and paste the contents of that report in your next reply and exit MBAM.
NOTE: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

================================================

Run ESET Online Scan

This can take several hours to run depending on the size of your hard drive and amount of data on it.

IMPORTANT Please make sure you uncheck the box next to Remove found threats. Eset will detect anything that looks even slightly suspicious, which could include legitimate program files. If you do not uncheck the box, Eset will automatically remove all suspicious files which could leave some of your software inoperable.

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Hold down Control and click on the following link to open ESET OnlineScan in a new window.

ESET OnlineScan
  • click the Eset online Scanner button.
  • for alternate browsers only: (Microsoft Internet Explorer users can skip these steps)


    click on esetinstaller.exe to download the ESET Smart Installer. Save it to your desktop.
    double click on the Eset installer icon on your desktop.

  • check Yes, I accept the Terms of Use
  • click the Start button.
  • accept any security warnings from your browser.
  • check Scan archives
  • click Advanced settings and select the following:


    scan potentially unwanted applications
    scan for potentially unsafe applications
    enable Anti-Stealth technology

  • click the Start button.
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take quite a long time.
  • when the scan completes, push List of found threats
  • click on Export to Text file and save the file to your desktop using a unique name, such as ESETScan. Note - if ESET doesn't find any threats, no report will be created.
  • click on the back button.
  • click on Finish
If a log has been produced post it in your next reply together with the Mbam.txt log.

Satchfan
Malware Bytes: Malwarebytes Anti-Malware 1.70.0.1100 www.malwarebytes.org Database version: v2013.04.03.06 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16521 kay :: KAY-PC [administrator] 4/3/2013 11:57:50 AM mbam-log-2013-04-03 (11-57-50).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 210058 Time elapsed: 2 minute(s), 35 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end)
Eset Scan: C:\Users\kay\Documents\SoftonicDownloader_for_desktop-currency-converter.exe a variant of Win32/SoftonicDownloader.E application C:\Users\kay\Downloads\GraboidVideoSetup-3.05-Complete.exe Win32/Graboid application
Please copy all text in the code box below and paste it into Notepad:

C:\Users\kay\Documents\SoftonicDownloader_for_desktop-currency-converter.exe 
C:\Users\kay\Downloads\GraboidVideoSetup-3.05-Complete.exe
  • save the Notepad file to your desktop and name it delfiles.bat
  • save type as "All Files"
  • on your desktop, double-click on delfiles.bat to run it, (a black CMD window will flash, then disappear - this is normal).
Can you tell me if there are any remaining problems: if not, I’ll send recommendations and instructions to tidy up.

Satchfan
OK, when I double clicked on the delfiles I got the black window but then it wanted me to accept the license agreement for both products? Do I do that?
This is a mistake on my part because I gave you the wrong instruction.

If "currency converter " has been installed, remove it by going to Start, Control Panel, Programs and Features. Right click on it and then Uninstall.

Delete the previous "delfiles.bat".

Please copy all text in the code box below and paste it into Notepad:

@echo off
del /f /s /q " C:\Users\kay\Documents\SoftonicDownloader_for_desktop-currency-converter.exe"
del /f /s /q “C:\Users\kay\Downloads\GraboidVideoSetup-3.05-Complete.exe”
del %0
  • save the Notepad file to your desktop and name it newdelfiles.bat
  • save type as "All Files"
  • on your desktop, double-click on newdelfiles.bat to run it, (a black CMD window will flash, then disappear - this is normal).
Satchfan
Your computer appears to be clean.

Now that you’re free from malware, as long as your computer seems to be running well, please follow these simple steps to tidy up you computer and decrease the likelihood of getting infected again:

Uninstall Combofix

Follow these steps to uninstall Combofix
  • click START then RUN
  • now type Combofix /uninstall in the runbox and click OK.
Note the space between the X and the /, it needs to be there.
🖼Click to load external image (Posted Image)
  • please follow the prompts to uninstall Combofix.
  • once it's finished uninstalling itself you will receive a message saying Combofix was uninstalled successfully.
===================================================

Uninstall OTL
  • double-click OTL.exe
  • click the CleanUp! button.
  • select Yes when the Begin cleanup Process? prompt appears.
  • if you are prompted to reboot during the cleanup, select Yes.
  • the tool will delete itself once it finishes, if not delete it by yourself.
NOTE: If you receive a warning from your firewall or other security programs regarding OTL attempting to contact the internet, please allow it to do so.

===================================================

Uninstall AdwCleaner
  • double click on adwcleaner.exe to run the tool
  • click on Uninstall
  • confirm with Yes.
You can delete all other logs and programs we’ve used that are on your desktop. Just click on them and press Delete.

===================================================

Update installed programs

Your versions of Java and Adobe Reader are out-of-date and need to be removed and updated.

To remove them:
  • click Start, Control Panel, Programs and Features
  • scroll down the list and look for any of the above entries:
  • click on any version of Java or Adobe Reader and then on Remove.
Visit Adobe and download the latest version of Acrobat Reader.

Having the latest updates ensures there are no security vulnerabilities in your system.

NEXT

Install the latest version of Java:

Java

NOTE – when you install Java, before clicking on Install, be sure to Uncheck “Install the Ask Toolbar and make Ask my default search provider”

🖼Click to load external image (Posted Image)

===================================================

Recommended programs

Update and run Malwarebytes. This really is an excellent program that you should also update and run on a regular basis, probably weekly.

===================================================

It’s important to keep programs up to date so that malware doesn't exploit any old security flaws.

FileHippo Update Checker is an extremely helpful program that will tell you which of your programs need to be updated.

===================================================

MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.

===================================================

I also recommend that you read the following:

How to prevent malware by miekiemoes


Finally, if the random crashes persist, I suggest you start a topic in our Windows forum here.


I will keep this open for 24 hours in case you have any problems, after which I’ll close the topic.

Safe computing

Satchfan
Satchfan, I want to thank you for taking the time to help me. I feel confident that my computer is free of any virus,etc. I'll initiate your recommendations, although that MVPS host sounds a little beyond my level of competency, I'll work on it and get it done tomorrow as I can see that would be great way to reduce unwanted and harmful stuff. If I do ever have another issue, I'll be sure to post on Whatthetech.com.

I want to thank you for taking the time to help me.

You are welcome and you did well in helping to sort it out.

Feel free to come back any time you think there is a problem.

Have a good look around the forum as there is plenty to read and, apart from Virus & Malware, there are other forums you may be interested in or need help from.

Regards

Satchfan

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI