Trojan:WIN32/Small

[wahoozle]

I am having a problem. I use windows live one care as my anti-virus software, and when i am on the computer it keeps popping up telling me that i have a virus. it calls it "Trojan:WIN32/Small" and i try to clean it, but it wont do anyhting. I have tried using spybot, but still it is there. I found out that it copies a file over and over in C:\windows. the file is slvuyde.bgi, and each copy made adds x's on to the end like slvuyde.bgi slvuyde.bgixx slvuyde.bgixxxx. it does this constantly. i shredded all of those files, but they just start copying over again. i need some help on figuring this thing out please.

[Snake08]

See this thread for more help : Trojan win32.small.buy
getting rid of win32/FakeSpyguard
Trojan Win32/Vundo.Gen!
How to remove Trojan Win32 ?

[Steve123]

Hey try to delete it manually and just follow the below steps. It should be done on your own risk.

1) First try to delete the following processes mul_.exe, msgked.exe, services.exe, msgked.exe, msgked.exe omn your system.

2) Then try to unregister the following DLLs and reboot 2.01.00.dll.ljo.dll, mjice.dll, plenb.dll in Windows\system32\objna.dll in Windows\system\

3) Then try to delete the following registry entries from your system.
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\msmc
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\services process

4) And, finally remove the following files from your system 2.01.00.dll, mul_.exe.ljo.dll, mjice.dll, msgked.exe, plenb.dll in Windows\system32\services.exe in Windows\system32\config\msgked.exe, objna.dll in Windows\system\msgked.exe in Windows\temp\

[wahoozle]

Steve123,

I already tried all that. none of those files exist, so i am unable to delete and unregister the processes and dll's.

I was wondering, what if i performed a system restore from way before the trojan was in my computer? would that work?

[Big Fish]

Kill the following processes
mul_.exe, msgked.exe, services.exe, msgked.exe, msgked.exe

Unregister the following DLLs and reboot
2.01.00.dll.
ljo.dll, mjice.dll, plenb.dll in Windows\system32\
objna.dll in Windows\system\

Delete these registry entries
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\msmc
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\services process

Remove the following files
2.01.00.dll, mul_.exe.
ljo.dll, mjice.dll, msgked.exe, plenb.dll in Windows\system32\
services.exe in Windows\system32\config\
msgked.exe, objna.dll in Windows\system\
msgked.exe in Windows\temp\

[Zachary]

I dont think that system restore will solved your problem. but if you want to give try you cam do it by login asAdministrator go to My Computer icon on the desktop and click Properties. click System Restore tab, and turn it off Turn off System Restore, Click Apply -Yes -OK. now Continue with the scan/clean process. Files under the _Restore folder can now be deleted. Re-enable System Restore by clearing Turn off System Restore launched. hope it helps