Hi guys and girls, Windows 7 Action Centre has reported that I need to remove the Win32/small.ca virus. It's managed to automatically archive the message as well. From my research I've seen that this little virus is a nasty piece of work (curse the prick who wrote it). I've scanned with Norton 360, Malware Bytes Anti-Malware, SUPERAnti-Spyware and now trying STOPzilla as well. None of these have picked it up. I read that the virus resides in the following files; [%PROFILE_TEMP%]\winlogon.exe - Only 1 instance of this is running and it's the legit one [%SYSTEM%]\qch29sr.dll - This one doesn't exist on my PC [%WINDOWS%]\inetloader.dll - This one doesn't exist on my PC PLEASE help guys!

You probably should turn off system restore http://housecall.trendmicro.com/ http://www.microsoft.com/download/en/details.aspx?id=5201 http://www.spywaredb.com/remove-trojandropper-win32-small-ca/ http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Virus%3aWin32%2fSmall.R

Did you find a way to remove it? I have the same little buggar!

I too am in need of some information on removing this virus for a friend of mine. Let me know of any solutions you have discovered.