Win32:Small-EAE [Trj] in C:\Recycler\Info.exe

Viruses and worms
1

Good Morning

For several days now, I have had Avast pop up with a message that C:\recycler\info.exe is infected with the Win32:Small-EAE [trj] trojan. It offers to delete, Move or Rename it for me. Any of the options seems to do something, the screen disappears (offering to Delete it at next boot (which is ticked)) and then re-appears again with the same message. On doing a Boot time Scan, it finds the infected file again, offers to delete it (to which I say yes) and then everything boots fine, only to be greeted by the same Warning again within a couple of seconds of logon. So I am forced to disable Avast (never a good thing), just to be able to work.

I have emptied the recylce bin, scanned the recycle bin seperately and looked for the C:\recycler\info.exe file, but I cannot seem to get rid of this particular Trojan or Avast detecting it and not being able to delete it.

Help would be much appreciated.

Regards
Wolf Laudien

2

You may well get help quicker registering on a malware help forum, rather than waiting for somebody from one of those forums to visit here.

http://www.bleepingcomputer.com/combofix/how-to-use-combofix#forums

3

:slight_smile: Hi :

“Trojans” are best dealt with by antiSPYWARE/antiTROJAN program(s); do
you have any of these types of programs on your computer ? IF no, I
recommend you start with the FREE Version of “SUPERAntiSpyware” from
www.superantispyware.com .

4

Thanks fopr the advice. I downloaded superantispyware, scanned my system and as with Adaware and Spybot S&D, nothing was found.

As suggested, I shall try on other forums to see if I can get some help. I am a bit concerned that the Avast software is unable to cope with my problem. I’ll have a looksee and perhaps find something, which I shall post here for informations sake

Thanks again

Wolf

5

Also make sure you update your system. As far as i remember, SP2 update blocked malware from being able to write inside Recycle folder…