What is this Trojan

What is this Trojan

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
What is this Trojan B.W. 08-03-2007
---> RE: What is this Trojan =?Utf-8?B?TWlsb...08-03-2007
Posted by B.W. on August 3, 2007, 6:15 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Can anybody help me by telling what Win 32:Small-HJL [Trj] is and what it
does? I have tried searching for this Trojan but can't find it.

TIA

B.W.



Posted by =?Utf-8?B?TWlsbyAoTVNQU1Mp?= on August 3, 2007, 11:02 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
alright since probe method didnt show it, start with this

Go to Start>run

1. type temp
( delete everything you can delete on that said folder do same action to all
other below)
2. type %temp%
3. type prefetch


Now remove the system restore points
by going to control pane> system icon> System Properties console>System
Restore tab * check the box for "turn off system restore" confirm ( Do the
opposite to restore such after )

Then if you are using a different browser other than IE dump all cookies
I would recommend using such for scans

1. http://www.microsoft.com/defender
2. http://www.safer-networking.org/en/mirrors/index.html
3. http://www.ewido.net/en/download/ ( uninstall after usage trial version
only )

Proceed with installation of all 3 application at a time, then update them
and run a scan with them.


--
Milo
MSPSS


"B.W." wrote:

> Can anybody help me by telling what Win 32:Small-HJL [Trj] is and what it
> does? I have tried searching for this Trojan but can't find it.
>
> TIA
>
> B.W.
>
>
>

Posted by B.W. on August 4, 2007, 1:25 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Thanks for that Milo. But I'm afraid I don't know enough about what I can
and cannot delete from those folders. Is there any way Windows can do that
for me automatically?

B.W.


> alright since probe method didnt show it, start with this
>
> Go to Start>run
>
> 1. type temp
> ( delete everything you can delete on that said folder do same action to
> all
> other below)
> 2. type %temp%
> 3. type prefetch
>
>
> Now remove the system restore points
> by going to control pane> system icon> System Properties console>System
> Restore tab * check the box for "turn off system restore" confirm ( Do the
> opposite to restore such after )
>
> Then if you are using a different browser other than IE dump all cookies
> I would recommend using such for scans
>
> 1. http://www.microsoft.com/defender
> 2. http://www.safer-networking.org/en/mirrors/index.html
> 3. http://www.ewido.net/en/download/ ( uninstall after usage trial version
> only )
>
> Proceed with installation of all 3 application at a time, then update them
> and run a scan with them.
>
>
> --
> Milo
> MSPSS
>
>
> "B.W." wrote:
>
>> Can anybody help me by telling what Win 32:Small-HJL [Trj] is and what it
>> does? I have tried searching for this Trojan but can't find it.
>>
>> TIA
>>
>> B.W.
>>
>>
>>



Posted by Malke on August 4, 2007, 9:06 am
If you were  Registered and logged in, you could reply and use other advanced thread options
B.W. wrote:
> Thanks for that Milo. But I'm afraid I don't know enough about what I can
> and cannot delete from those folders. Is there any way Windows can do that
> for me automatically?
>
> B.W.

I'm going to pop in here with more step-by-step instructions. Also, most
of us who remove malware for a living do *not* suggest removing System
Restore points *before* the computer is cleaned. Yes, the trojan will be
in the Restore Points but in almost all cases will not be active unless
you do a System Restore. The idea is to have a way back (System
Restore), even if the way back results in a still-infected machine.

Follow these general malware removal steps:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://pcdid.com/Multi_AV.htm - download

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may
be so infested that Windows will need to be clean-installed. Have all
your data backed up before you take the machine into a shop.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Posted by B.W. on August 4, 2007, 9:09 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Thanks Malke for all that info but as you have guessed correctly that is all
a bit much for a non tech person like me. May I just tell what I had
already done.

I was made aware of this Trojan in my weekly scan with the free version of
Avast, it was moved to the virus vault. I then updated and ran Spybot which
found a similar named item I don't remember the exact name, (and I cant find
a log in Spybot) it may be what was in the Avast vault? I removed it.
I then ran Defender manually, (which incidentally I thought was already
running automatically on my machine, doesn't it do this), it found nothing,
I ran Spybot again it found nothing. I ran Avast AV it found nothing.

I then removed System Restore Points.

I had not deleted those temp folders as I didn't know what I could take out
or not.

I still don't know what this particular Trojan does to the machine. I have
a desktop connected to this laptop to share the internet connection is there
a chance this would be infected? AVG says it's clean at the moment.

Do you think I need to take this laptop to a tech still?

Sorry to be carrying on so long with this query but as you can imagine for a
non tech person it's all very baffling.

Many thanks for everyone's help.

B.W.



> B.W. wrote:
>> Thanks for that Milo. But I'm afraid I don't know enough about what I
>> can and cannot delete from those folders. Is there any way Windows can
>> do that for me automatically?
>>
>> B.W.
>
> I'm going to pop in here with more step-by-step instructions. Also, most
> of us who remove malware for a living do *not* suggest removing System
> Restore points *before* the computer is cleaned. Yes, the trojan will be
> in the Restore Points but in almost all cases will not be active unless
> you do a System Restore. The idea is to have a way back (System Restore),
> even if the way back results in a still-infected machine.
>
> Follow these general malware removal steps:
>
> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> Include scanning with David Lipman's Multi_AV and follow instructions to
> do all scans in Safe Mode. Please see the special Notes regarding using
> Multi_AV in Vista.
>
> http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
> http://pcdid.com/Multi_AV.htm - download
>
> Standard caveat: If the procedures look too complex - and there is no
> shame in admitting this isn't your cup of tea - take the machine to a
> professional computer repair shop (not your local version of
> BigComputerStore/GeekSquad). Please be aware that not all local shops are
> skilled at removing malware and even if they are, your computer may be so
> infested that Windows will need to be clean-installed. Have all your data
> backed up before you take the machine into a shop.
>
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User



Similar ThreadsPosted
Trojan August 2, 2005, 8:42 pm
Trojan August 19, 2005, 6:31 pm
trojan by icq November 4, 2005, 6:40 am
Trojan November 7, 2005, 3:45 pm
trojan November 8, 2005, 3:46 pm
Trojan.moo December 18, 2005, 3:23 pm
Trojan! ? August 14, 2006, 9:52 pm
ssu.exe is it trojan ??? March 21, 2007, 5:49 pm
Possible trojan??? April 30, 2007, 12:40 pm
Trojan Horse June 28, 2005, 11:58 pm

The site map in XML format XML site map

Contact Us | Privacy Policy