trojan.small.bo

trojan.small.bo
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Anti-Virus Software    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
trojan.small.bo dxrpse 06-08-2006
Posted by dxrpse on June 8, 2006, 1:56 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I haven't been able to find a solution to this posting so please bear
with me. I have a computer which was connected to the internet via DSL.
I can no longer connect to it, and have found a htm file with a
spy-sheriff link. I cannot find any of the suspicious tasks running
cause the disabletaskmgr is set to 1 in the registry. If I change it
back to 0 and reboot somthing changes it back to 1. I was using an old
version of mozilla, and had java enabled. (I know that is vulnerable
now). I can ping the wireless router and get replies from it. I
purchased spy doctor and ran it and found trojan.small.bo and hopfully
stuffed it away. However I am not able to get online for updates or to
register spy doctor. So I am stuck. Any suggestions would be
appreciated.

Thanks


Posted by Art on June 8, 2006, 2:10 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

>I haven't been able to find a solution to this posting so please bear
>with me. I have a computer which was connected to the internet via DSL.
>I can no longer connect to it, and have found a htm file with a
>spy-sheriff link. I cannot find any of the suspicious tasks running
>cause the disabletaskmgr is set to 1 in the registry. If I change it
>back to 0 and reboot somthing changes it back to 1. I was using an old
>version of mozilla, and had java enabled. (I know that is vulnerable
>now). I can ping the wireless router and get replies from it. I
>purchased spy doctor and ran it and found trojan.small.bo and hopfully
>stuffed it away. However I am not able to get online for updates or to
>register spy doctor. So I am stuck. Any suggestions would be
>appreciated.

Google is your friend:

http://www.k7computing.com/virusinfo/TrojanSmallBO.htm
http://www.sarc.com/avcenter/venc/data/trojan.jupillites.html

Art
http://home.epix.net/~artnpeg

Posted by David H. Lipman on June 8, 2006, 4:49 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| I haven't been able to find a solution to this posting so please bear
| with me. I have a computer which was connected to the internet via DSL.
| I can no longer connect to it, and have found a htm file with a
| spy-sheriff link. I cannot find any of the suspicious tasks running
| cause the disabletaskmgr is set to 1 in the registry. If I change it
| back to 0 and reboot somthing changes it back to 1. I was using an old
| version of mozilla, and had java enabled. (I know that is vulnerable
| now). I can ping the wireless router and get replies from it. I
| purchased spy doctor and ran it and found trojan.small.bo and hopfully
| stuffed it away. However I am not able to get online for updates or to
| register spy doctor. So I am stuck. Any suggestions would be
| appreciated.
|
| Thanks



Two part reply..

Perform Part 1 then perform Part 2.

If the first two parts don't work, perform the alternate section.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.

If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to JRE/JSE
Version 5.0. There are vulnerabilities in them and they are actively being
exploited.
This is most likely why you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of Sun
Java
to Version 5 on the PC that they be removed and Sun Java JRE/JSE Version 5.0
Update 7
be installed ASAP.

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version...

C:\Program Files\Java\jre1.5.0_07


http://www.java.com/en/download/manual.jsp



Part 1
-----------

Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool --
SmitRem.exe
http://noahdfear.geekstogo.com/click%20counter/click.php?id=1

http://www.bleepingcomputer.com/forums/topic43659.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it
will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if
you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have
to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in
your bowser
but your PC will automatically be shutdown. It is suggested that you move the
report out of
c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of
the HTML
report for each session.


ALTERNATE:

Part 1
-----------

Secured2K's SpyAxe, PSGuard, Smitfraud, Sinnaka and Alemod removal tool.

http://secured2k.home.comcast.net/tools/AntiPuper.exe

http://forums.mcafeehelp.com/viewtopic.php?t=65072


Part 2
-----------

S!ri's SmitfraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php


Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Similar ThreadsPosted
Trojan small ayl caught by NOD but now what? October 25, 2005, 7:56 pm
Trojan horse Dropper.Small.15.0. June 5, 2005, 8:45 am
Trojan horse Dropper.Small.24.A0 October 21, 2005, 8:26 am
Trojan-Downloader.Small - How'd I get it ? March 5, 2007, 10:57 am
downloader.small.27.k August 11, 2005, 9:28 am
Looking for small footprint AV September 8, 2005, 9:15 pm
win32.small.ciw February 16, 2006, 6:41 pm
What is this, (TR/Dldr.small.cml.7) April 14, 2006, 7:58 pm
Best AV, with small resource usage?? November 25, 2006, 2:03 pm
Small Business Antivirus Software December 9, 2005, 5:10 pm

The site map in XML format XML site map

Contact Us | Privacy Policy