Jump to content
Microsoft Windows Bulletin Board

What is this Trojan


Recommended Posts

Posted

Can anybody help me by telling what Win 32:Small-HJL [Trj] is and what it

does? I have tried searching for this Trojan but can't find it.

 

TIA

 

B.W.

Guest Milo (MSPSS)
Posted

alright since probe method didnt show it, start with this

 

Go to Start>run

 

1. type temp

( delete everything you can delete on that said folder do same action to all

other below)

2. type %temp%

3. type prefetch

 

 

Now remove the system restore points

by going to control pane> system icon> System Properties console>System

Restore tab * check the box for "turn off system restore" confirm ( Do the

opposite to restore such after )

 

Then if you are using a different browser other than IE dump all cookies

I would recommend using such for scans

 

1. http://www.microsoft.com/defender

2. http://www.safer-networking.org/en/mirrors/index.html

3. http://www.ewido.net/en/download/ ( uninstall after usage trial version

only )

 

Proceed with installation of all 3 application at a time, then update them

and run a scan with them.

 

 

--

Milo

MSPSS

 

 

"B.W." wrote:

> Can anybody help me by telling what Win 32:Small-HJL [Trj] is and what it

> does? I have tried searching for this Trojan but can't find it.

>

> TIA

>

> B.W.

>

>

>

Posted

Thanks for that Milo. But I'm afraid I don't know enough about what I can

and cannot delete from those folders. Is there any way Windows can do that

for me automatically?

 

B.W.

 

 

"Milo (MSPSS)" <v-4jpaca@mssupport.microsoft.com> wrote in message

news:CB890B36-BB88-44A6-BD96-BBC88E87246D@microsoft.com...

> alright since probe method didnt show it, start with this

>

> Go to Start>run

>

> 1. type temp

> ( delete everything you can delete on that said folder do same action to

> all

> other below)

> 2. type %temp%

> 3. type prefetch

>

>

> Now remove the system restore points

> by going to control pane> system icon> System Properties console>System

> Restore tab * check the box for "turn off system restore" confirm ( Do the

> opposite to restore such after )

>

> Then if you are using a different browser other than IE dump all cookies

> I would recommend using such for scans

>

> 1. http://www.microsoft.com/defender

> 2. http://www.safer-networking.org/en/mirrors/index.html

> 3. http://www.ewido.net/en/download/ ( uninstall after usage trial version

> only )

>

> Proceed with installation of all 3 application at a time, then update them

> and run a scan with them.

>

>

> --

> Milo

> MSPSS

>

>

> "B.W." wrote:

>

>> Can anybody help me by telling what Win 32:Small-HJL [Trj] is and what it

>> does? I have tried searching for this Trojan but can't find it.

>>

>> TIA

>>

>> B.W.

>>

>>

>>

Guest Malke
Posted

B.W. wrote:

> Thanks for that Milo. But I'm afraid I don't know enough about what I can

> and cannot delete from those folders. Is there any way Windows can do that

> for me automatically?

>

> B.W.

 

I'm going to pop in here with more step-by-step instructions. Also, most

of us who remove malware for a living do *not* suggest removing System

Restore points *before* the computer is cleaned. Yes, the trojan will be

in the Restore Points but in almost all cases will not be active unless

you do a System Restore. The idea is to have a way back (System

Restore), even if the way back results in a still-infected machine.

 

Follow these general malware removal steps:

 

http://www.elephantboycomputers.com/page2.html#Removing_Malware

 

Include scanning with David Lipman's Multi_AV and follow instructions to

do all scans in Safe Mode. Please see the special Notes regarding using

Multi_AV in Vista.

 

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions

http://pcdid.com/Multi_AV.htm - download

 

Standard caveat: If the procedures look too complex - and there is no

shame in admitting this isn't your cup of tea - take the machine to a

professional computer repair shop (not your local version of

BigComputerStore/GeekSquad). Please be aware that not all local shops

are skilled at removing malware and even if they are, your computer may

be so infested that Windows will need to be clean-installed. Have all

your data backed up before you take the machine into a shop.

 

 

Malke

--

Elephant Boy Computers

http://www.elephantboycomputers.com

"Don't Panic!"

MS-MVP Windows - Shell/User

Posted

Thanks Malke for all that info but as you have guessed correctly that is all

a bit much for a non tech person like me. May I just tell what I had

already done.

 

I was made aware of this Trojan in my weekly scan with the free version of

Avast, it was moved to the virus vault. I then updated and ran Spybot which

found a similar named item I don't remember the exact name, (and I cant find

a log in Spybot) it may be what was in the Avast vault? I removed it.

I then ran Defender manually, (which incidentally I thought was already

running automatically on my machine, doesn't it do this), it found nothing,

I ran Spybot again it found nothing. I ran Avast AV it found nothing.

 

I then removed System Restore Points.

 

I had not deleted those temp folders as I didn't know what I could take out

or not.

 

I still don't know what this particular Trojan does to the machine. I have

a desktop connected to this laptop to share the internet connection is there

a chance this would be infected? AVG says it's clean at the moment.

 

Do you think I need to take this laptop to a tech still?

 

Sorry to be carrying on so long with this query but as you can imagine for a

non tech person it's all very baffling.

 

Many thanks for everyone's help.

 

B.W.

 

 

 

"Malke" <notreally@invalid.invalid> wrote in message

news:%239EF$gp1HHA.4680@TK2MSFTNGP03.phx.gbl...

> B.W. wrote:

>> Thanks for that Milo. But I'm afraid I don't know enough about what I

>> can and cannot delete from those folders. Is there any way Windows can

>> do that for me automatically?

>>

>> B.W.

>

> I'm going to pop in here with more step-by-step instructions. Also, most

> of us who remove malware for a living do *not* suggest removing System

> Restore points *before* the computer is cleaned. Yes, the trojan will be

> in the Restore Points but in almost all cases will not be active unless

> you do a System Restore. The idea is to have a way back (System Restore),

> even if the way back results in a still-infected machine.

>

> Follow these general malware removal steps:

>

> http://www.elephantboycomputers.com/page2.html#Removing_Malware

>

> Include scanning with David Lipman's Multi_AV and follow instructions to

> do all scans in Safe Mode. Please see the special Notes regarding using

> Multi_AV in Vista.

>

> http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions

> http://pcdid.com/Multi_AV.htm - download

>

> Standard caveat: If the procedures look too complex - and there is no

> shame in admitting this isn't your cup of tea - take the machine to a

> professional computer repair shop (not your local version of

> BigComputerStore/GeekSquad). Please be aware that not all local shops are

> skilled at removing malware and even if they are, your computer may be so

> infested that Windows will need to be clean-installed. Have all your data

> backed up before you take the machine into a shop.

>

>

> Malke

> --

> Elephant Boy Computers

> http://www.elephantboycomputers.com

> "Don't Panic!"

> MS-MVP Windows - Shell/User

Guest Malke
Posted

B.W. wrote:

> Thanks Malke for all that info but as you have guessed correctly that is all

> a bit much for a non tech person like me. May I just tell what I had

> already done.

>

> I was made aware of this Trojan in my weekly scan with the free version of

> Avast, it was moved to the virus vault. I then updated and ran Spybot which

> found a similar named item I don't remember the exact name, (and I cant find

> a log in Spybot) it may be what was in the Avast vault? I removed it.

> I then ran Defender manually, (which incidentally I thought was already

> running automatically on my machine, doesn't it do this), it found nothing,

> I ran Spybot again it found nothing. I ran Avast AV it found nothing.

>

> I then removed System Restore Points.

>

> I had not deleted those temp folders as I didn't know what I could take out

> or not.

>

> I still don't know what this particular Trojan does to the machine. I have

> a desktop connected to this laptop to share the internet connection is there

> a chance this would be infected? AVG says it's clean at the moment.

>

> Do you think I need to take this laptop to a tech still?

 

If your machine is clean, there is no point in taking it to a tech. You

can remove anything in a Temp file. If a file is in use, Windows won't

let you delete it.

 

There is always a chance that other Windows machines on a Local Area

Network can be infected if one of the computers gets a network-aware

worm. If your desktop is adequately protected with a current version

antivirus (not earlier than 2006 and with an active subscription) then

most probably the desktop is also clean. Run a few antivirus/antispyware

scans to be sure.

 

 

Malke

--

Elephant Boy Computers

http://www.elephantboycomputers.com

"Don't Panic!"

MS-MVP Windows - Shell/User

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...