Windows Vista Home Premium
Win32:Small-JKW
- How was it detected? back-ground scanner! message occur on opening a file downloaded through a torrent of slysofts dvd mobil
- source of the file, http://thepiratebay.org/search/slysoft/0/99/0 (old file no longer there just updated one!
- Downloaded 4/10/2008
- File name with extension.(2.exe) C:\Users\WarrenCalvo\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Docs\Utils
- What was the exact wording
Scanning of selected files
Action was completed successfully!
Virus has been detected!
File Name: 2.exe
FileID: 8
Virus Description: Win32:Small-JKW [trj]
Scanning of selected files
Program will try to scan 1 selected file(s) in the Chest
Move files to temporary folder: C:\Users\WARREN~1\AppData\Local\Temp_avast4_\unp7244218.tmp
FileID: 0000000008 Original file name: C:\Users\WarrenCalvo\AppData\Local\Temp\ir_ext_temp_0\AutoPlay\Docs\Utils\2.exe New folder: C:\Users\WARREN~1\AppData\Local\Temp_avast4_\unp7244218.tmp\8.exe
Scan files in the temporary folder: C:\Users\WARREN~1\AppData\Local\Temp_avast4_\unp7244218.tmp
C:\Users\WARREN~1\AppData\Local\Temp_avast4_\unp7244218.tmp\8.exe Win32:Small-JKW [trj]
Action was completed successfully!
6. Now go back and do nothing yet. Scan the particular file once again with your AV product.
A. The message is in the same wording: maybe positive alert
B. If the message is not in the same wording or the scan does not find up anything this could be a false positive.
7. Check with an on line scanner or update to jotti for a second opinion. Jotti resides at http://virusscan.jotti.org/
8. Go get informed ask a Virus Encyclopedia or Virus Central, put a question on a forum.
9. Make an informed decision on the basis of what you have found.
10. Inform others about what you have learned, if the file came from a reliable source, author, programmer etc. send a friendly e-mail with your findings. This will help us all.
Special Note: it was thrown into the chest immediatley when Avast picked it up but I have noticed a problem with my touchpad ever since that same day. It became over sensitive and multiclicking by itself even though Im not double clicking. while moving the curser It selects and drags due to it clicking by itself when i move the desktop options task bar everything. Please help me! I don’t know either if this virus is a back door or what harm it can do as I found very little information on this trojan. Want to avoid reformating if possible.
This one below is old but still in chest I want to eliminate if I can.
Win32:Small-BTX
- ?
- ?
- 5/21/2006
- F:
5: Scanning of selected files
Action was completed successfully!
Virus has been detected!
File Name: host.exe
FileID: 4
Virus Description: Win32:Agent-ILR [trj]
Virus has been detected!
File Name: host.exe
FileID: 4
Virus Description: Win32:Small-ABY [trj]
Virus has been detected!
File Name: host.exe
FileID: 4
Virus Description: Win32:Small-BTX [trj]
Scanning of selected files
Program will try to scan 1 selected file(s) in the Chest
Move files to temporary folder: C:\Users\WARREN~1\AppData\Local\Temp_avast4_\unp71361961.tmp
FileID: 0000000004 Original file name: F:\host.exe New folder: C:\Users\WARREN~1\AppData\Local\Temp_avast4_\unp71361961.tmp\4.exe
Scan files in the temporary folder: C:\Users\WARREN~1\AppData\Local\Temp_avast4_\unp71361961.tmp
C:\Users\WARREN~1\AppData\Local\Temp_avast4_\unp71361961.tmp\4.exe[Embedded#08004] Win32:Agent-ILR [trj]
C:\Users\WARREN~1\AppData\Local\Temp_avast4_\unp71361961.tmp\4.exe[Embedded#10a1a] Win32:Small-ABY [trj]
C:\Users\WARREN~1\AppData\Local\Temp_avast4_\unp71361961.tmp\4.exe Win32:Small-BTX [trj]
Action was completed successfully!
DOES ANYONE KNOW IF THE PROBLEM WITH msiltcfg.dll IS A BIG DEAL? I SAW THE ERRORS IN THE LOGS BUT THE ONLY PROBLEM IVE EVER NOTICED IS THAT WITH THIS HP PAVILLION WITH VISTA CERTAIN PAGES THAT POP OPEN A VIDEO BOX WONT OPEN THEM AND SAYS CANT OPEN THE PAGE WHILE MY DESKTOP AT HOME CAN? DONT KNOW IF ITS RELATED…
Thanks a bunch!
I hope i followed the instructions well.