What is this Trojan

[B.W.]

Can anybody help me by telling what Win 32:Small-HJL [Trj] is and what it
does? I have tried searching for this Trojan but can't find it.

TIA

B.W.

 

[Milo (MSPSS)]

alright since probe method didnt show it, start with this

Go to Start>run

1. type temp
( delete everything you can delete on that said folder do same action to all
other below)
2. type %temp%
3. type prefetch


Now remove the system restore points
by going to control pane> system icon> System Properties console>System
Restore tab * check the box for "turn off system restore" confirm ( Do the
opposite to restore such after )

Then if you are using a different browser other than IE dump all cookies
I would recommend using such for scans

1. http://www.microsoft.com/defender
2. http://www.safer-networking.org/en/mirrors/index.html
3. http://www.ewido.net/en/download/ ( uninstall after usage trial version
only )

Proceed with installation of all 3 application at a time, then update them
and run a scan with them.


--
Milo
MSPSS


"B.W." wrote:

> Can anybody help me by telling what Win 32:Small-HJL [Trj] is and what it
> does? I have tried searching for this Trojan but can't find it.
>
> TIA
>
> B.W.
>
>
>

 

[B.W.]

Thanks for that Milo. But I'm afraid I don't know enough about what I can
and cannot delete from those folders. Is there any way Windows can do that
for me automatically?

B.W.


"Milo (MSPSS)" <v-4jpaca@mssupport.microsoft.com> wrote in message
news:CB890B36-BB88-44A6-BD96-BBC88E87246D@microsoft.com...
> alright since probe method didnt show it, start with this
>
> Go to Start>run
>
> 1. type temp
> ( delete everything you can delete on that said folder do same action to
> all
> other below)
> 2. type %temp%
> 3. type prefetch
>
>
> Now remove the system restore points
> by going to control pane> system icon> System Properties console>System
> Restore tab * check the box for "turn off system restore" confirm ( Do the
> opposite to restore such after )
>
> Then if you are using a different browser other than IE dump all cookies
> I would recommend using such for scans
>
> 1. http://www.microsoft.com/defender
> 2. http://www.safer-networking.org/en/mirrors/index.html
> 3. http://www.ewido.net/en/download/ ( uninstall after usage trial version
> only )
>
> Proceed with installation of all 3 application at a time, then update them
> and run a scan with them.
>
>
> --
> Milo
> MSPSS
>
>
> "B.W." wrote:
>
>> Can anybody help me by telling what Win 32:Small-HJL [Trj] is and what it
>> does? I have tried searching for this Trojan but can't find it.
>>
>> TIA
>>
>> B.W.
>>
>>
>>

 

[Malke]

B.W. wrote:
> Thanks for that Milo. But I'm afraid I don't know enough about what I can
> and cannot delete from those folders. Is there any way Windows can do that
> for me automatically?
>
> B.W.

I'm going to pop in here with more step-by-step instructions. Also, most
of us who remove malware for a living do *not* suggest removing System
Restore points *before* the computer is cleaned. Yes, the trojan will be
in the Restore Points but in almost all cases will not be active unless
you do a System Restore. The idea is to have a way back (System
Restore), even if the way back results in a still-infected machine.

Follow these general malware removal steps:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://pcdid.com/Multi_AV.htm - download

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may
be so infested that Windows will need to be clean-installed. Have all
your data backed up before you take the machine into a shop.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

 

[B.W.]

Thanks Malke for all that info but as you have guessed correctly that is all
a bit much for a non tech person like me. May I just tell what I had
already done.

I was made aware of this Trojan in my weekly scan with the free version of
Avast, it was moved to the virus vault. I then updated and ran Spybot which
found a similar named item I don't remember the exact name, (and I cant find
a log in Spybot) it may be what was in the Avast vault? I removed it.
I then ran Defender manually, (which incidentally I thought was already
running automatically on my machine, doesn't it do this), it found nothing,
I ran Spybot again it found nothing. I ran Avast AV it found nothing.

I then removed System Restore Points.

I had not deleted those temp folders as I didn't know what I could take out
or not.

I still don't know what this particular Trojan does to the machine. I have
a desktop connected to this laptop to share the internet connection is there
a chance this would be infected? AVG says it's clean at the moment.

Do you think I need to take this laptop to a tech still?

Sorry to be carrying on so long with this query but as you can imagine for a
non tech person it's all very baffling.

Many thanks for everyone's help.

B.W.



"Malke" <notreally@invalid.invalid> wrote in message
news:%239EF$gp1HHA.4680@TK2MSFTNGP03.phx.gbl...
> B.W. wrote:
>> Thanks for that Milo. But I'm afraid I don't know enough about what I
>> can and cannot delete from those folders. Is there any way Windows can
>> do that for me automatically?
>>
>> B.W.
>
> I'm going to pop in here with more step-by-step instructions. Also, most
> of us who remove malware for a living do *not* suggest removing System
> Restore points *before* the computer is cleaned. Yes, the trojan will be
> in the Restore Points but in almost all cases will not be active unless
> you do a System Restore. The idea is to have a way back (System Restore),
> even if the way back results in a still-infected machine.
>
> Follow these general malware removal steps:
>
> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> Include scanning with David Lipman's Multi_AV and follow instructions to
> do all scans in Safe Mode. Please see the special Notes regarding using
> Multi_AV in Vista.
>
> http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
> http://pcdid.com/Multi_AV.htm - download
>
> Standard caveat: If the procedures look too complex - and there is no
> shame in admitting this isn't your cup of tea - take the machine to a
> professional computer repair shop (not your local version of
> BigComputerStore/GeekSquad). Please be aware that not all local shops are
> skilled at removing malware and even if they are, your computer may be so
> infested that Windows will need to be clean-installed. Have all your data
> backed up before you take the machine into a shop.
>
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User

 

[Malke]

B.W. wrote:
> Thanks Malke for all that info but as you have guessed correctly that is all
> a bit much for a non tech person like me. May I just tell what I had
> already done.
>
> I was made aware of this Trojan in my weekly scan with the free version of
> Avast, it was moved to the virus vault. I then updated and ran Spybot which
> found a similar named item I don't remember the exact name, (and I cant find
> a log in Spybot) it may be what was in the Avast vault? I removed it.
> I then ran Defender manually, (which incidentally I thought was already
> running automatically on my machine, doesn't it do this), it found nothing,
> I ran Spybot again it found nothing. I ran Avast AV it found nothing.
>
> I then removed System Restore Points.
>
> I had not deleted those temp folders as I didn't know what I could take out
> or not.
>
> I still don't know what this particular Trojan does to the machine. I have
> a desktop connected to this laptop to share the internet connection is there
> a chance this would be infected? AVG says it's clean at the moment.
>
> Do you think I need to take this laptop to a tech still?

If your machine is clean, there is no point in taking it to a tech. You
can remove anything in a Temp file. If a file is in use, Windows won't
let you delete it.

There is always a chance that other Windows machines on a Local Area
Network can be infected if one of the computers gets a network-aware
worm. If your desktop is adequately protected with a current version
antivirus (not earlier than 2006 and with an active subscription) then
most probably the desktop is also clean. Run a few antivirus/antispyware
scans to be sure.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User