This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

W32/Small.CA

Hello

in our enterprse we work with SEC5 and Enpoint 10.0.2, on Win7 enterprise 64b

Recently we got several workplaces where we get the message from Windows ActionCenter, that a (well known) virus was found and must be removed. This is called W32/Small.CA.

Question is now, why does Sophos not detect this threat ? When doing a full system scan, nothing is found.

Best regards

Marco

:22933


This thread was automatically locked due to age.
Parents
  • I just got some update:

    This is a possilbe Microsoft false positive which was widely reported. See here:

    http://answers.microsoft.com/en-us/windows/forum/windows_7-security/windows-7-and-how-to-remove-win32smallca-virus/a6606dfb-a067-47b6-b353-3882a7c83cbe?page=2

    Somebody wrote there:..

    ...I suggest you turn off Windows Defender for a day or 2 & then see if the "warning" goes away.

    Press Windows-key
    type in Windows Defender
    select it and press Enter-key
    Press the Tools icon
    Press the Real-time protection on the left side.
    Then UN-check the box "Use real-time protection"
    Apply & exit applet

    Tell us what results you get.

    and.

    ...Thanks for your response.  Unfortunately, there is not much I can add.  The Windows Action Center reported, "Remove the Win32/Small.CA virus."  After going through all the steps you've read, I manually archived the message and there were no follow-up messages.  When I click on the archived message, there is no information other than an advisory to go online to learn about the solution.

    Maybe someone sense this as useful...

    :24489
Reply
  • I just got some update:

    This is a possilbe Microsoft false positive which was widely reported. See here:

    http://answers.microsoft.com/en-us/windows/forum/windows_7-security/windows-7-and-how-to-remove-win32smallca-virus/a6606dfb-a067-47b6-b353-3882a7c83cbe?page=2

    Somebody wrote there:..

    ...I suggest you turn off Windows Defender for a day or 2 & then see if the "warning" goes away.

    Press Windows-key
    type in Windows Defender
    select it and press Enter-key
    Press the Tools icon
    Press the Real-time protection on the left side.
    Then UN-check the box "Use real-time protection"
    Apply & exit applet

    Tell us what results you get.

    and.

    ...Thanks for your response.  Unfortunately, there is not much I can add.  The Windows Action Center reported, "Remove the Win32/Small.CA virus."  After going through all the steps you've read, I manually archived the message and there were no follow-up messages.  When I click on the archived message, there is no information other than an advisory to go online to learn about the solution.

    Maybe someone sense this as useful...

    :24489
Children
No Data