| Port No | 22456 |
| Service Name | Win32.Small.f |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | This Trojan downloads an executable file from a specified address and executes it upon downloading. The downloaded file, which is given a specific name by this malware's edit-server component, could also be another malware. It runs on Windows 95, 98, ME, NT, 2000 and XP. |
| Reference Link | Win32.Small.f |
| Attack | Solutions: Windows ME/XP Cleaning Instructions Windows Millennium Edition (ME) and Windows XP have a feature known as System Restore, which creates backups of certain files in the _Restore folder. The System Restore feature usually backs up files with EXE or COM extensions, which may include infected files and malware programs. Files in the _Restore folder are protected and can only be accessed using System Restore. This feature must be disabled first before Trend Micro antivirus can access and clean these files. The following procedure disables the System Restore feature, allowing you to clean systems running Windows ME and XP: Windows ME Right-click the My Computer icon on the desktop and select Properties. Click the Performance tab. Click the File System button. Click the Troubleshooting tab. Select Disable System Restore. Click Apply>Close>Close. When prompted to restart, click Yes. Press F8 while the system restarts. Choose Safe Mode then hit the Enter key. Scan your system with Trend Micro antivirus and delete all files detected as TROJ_ACIDREIN.20. To do this, Trend Micro customers must download the latest pattern file and scan their system. Other email users can use HouseCall, Trend Micro's free online virus scanner. Re-enable System Restore by clearing Disable System Restore and restarting your system normally. Windows XP Click Start, right-click the My Computer icon and click Properties. Click the System Restore tab. Select Turn off System Restore on all drives. Click Apply>Yes>OK. Scan your system with Trend Micro antivirus and delete all files detected as TROJ_ACIDREIN.20. To do this, Trend Micro customers must download the latest pattern file and scan their system. Other email users can use HouseCall, Trend Micro's free online virus scanner. Re-enable System Restore by clearing Turn off System Restore on all drives. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.