Jump to content


Photo

TROJ_SMALL.IQ


  • This topic is locked This topic is locked
5 replies to this topic

#1 VashonDude

VashonDude

    Forum Deity

  • Trusted Advisor
  • PipPipPipPipPip
  • 1,255 posts

Posted 17 May 2004 - 03:01 PM

This morning I found out my work computer got hit by the TROJ_SMALL.IQ virus :o :angry: . The following file was infected: C:\Program Files\Windows Media Player\wmplayer.exe

It nailed my computer Saturday afternoon (I normally turn it off when I leave the office, but IT staff told all XP users to keep their computers on so a patch could be installed).

It couldn't be cleaned. A google search came up empty. Anyone here know anything about this virus?

-- LB

Edited by VashonDude, 17 May 2004 - 03:04 PM.

Want to help in the fight against malware? Join the SWI boot camp.

#2 Tuxedo Jack

Tuxedo Jack

    Creator of TuxPE, a Cat5-o'-9-Tails, Etherkillers, and more

  • Expert
  • PipPipPipPipPip
  • 1,757 posts

Posted 17 May 2004 - 05:30 PM

Sounds like a variant of CWS - you know, the variant that appends itself to wmplayer?

Just delete the .exe and reinstall WMP. You'll be fine.
Signature file is under revision. This will be back shortly.

#3 VashonDude

VashonDude

    Forum Deity

  • Trusted Advisor
  • PipPipPipPipPip
  • 1,255 posts

Posted 18 May 2004 - 10:12 AM

Here's what's in the version tab from properties:

Company: Microsoft Corporation
File version: 8.00.00.4487
Internal name: WMPLAYER.EXE
Language: English (United States)
Original file name: WMPLAYER.EXE
Product name: Microsoft® Windows Media Player
Product version: 8.00.00.4487

On the general tab:

Size: 508 KB (520,192 bytes)
Created: Tuesday, June 03, 2003, 8:19:54 AM
Modified: Wednesday, August 28, 2002, 2:41:28 PM

I'm wondering if this happened as a result of this incident from last week.

-- LB
Want to help in the fight against malware? Join the SWI boot camp.

#4 Shadowless

Shadowless

    Member

  • New Member
  • Pip
  • 2 posts

Posted 18 May 2004 - 09:49 PM

I just got a Trojan yesterday called Downloader. small. In my main drive there was an .EXE file. just sitting there. After checking with AVG anti virus, I saw it was a virus, so I deleted it. The I found it got to me through the e-mail so I had to find it and delete it out of my Deleted mail folder. I reinfected my self doing it, but once I got the file off my main drive again. I was clean clean. Hope this helped.

#5 VashonDude

VashonDude

    Forum Deity

  • Trusted Advisor
  • PipPipPipPipPip
  • 1,255 posts

Posted 21 May 2004 - 12:19 PM

Looks like it was a false alarm. I did a virus scan this morning and no viruses were found.

-- LB
Want to help in the fight against malware? Join the SWI boot camp.

#6 dave38

dave38

    Devout Murphyite!

  • Emeritus
  • PipPipPipPipPip
  • 8,508 posts

Posted 11 October 2004 - 03:40 PM

Glad we could help!

If you need this topic reopened, please request this by sending the moderating team an email with the address of the thread. This applies only to the original topic starter. Everyone else please begin a New Topic.
Be wary of strong drink. It may make you shoot at tax collectors, and miss!
Please support SWI forum




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button