Backdoor.Win32.Small.gmi & Hupigon

Hi, PC is running XPHome, AVG 8 Av & Firewall. I run Lavasoft's Ad-Aware manually on the weekend to supplement the (almost) daily running of AVG.

On the weekend - & much to my surprise Ad-Aware notified me of a hupigon infection of Superantispyware.exe! Now I recall SAS requesting that I authorise an update last week. It does this from time to time and I thought nothing of this and so clicked 'yes'; I believe it was a new version including language updates. If SAS.exe really was infected at source, then does this mean that the download site has been hacked & infected. Or is it a false positive?

Anyhow, I did some quick research on the web and decided that as no other symptoms were present I should let Ad-Aware 'clean' SAS.exe and then I uninstalled SAS via the control panel. As I use it very rarely.

I then ran Kasperski Online Scanner this evening. It found Backdoor.Win32.Small.gmi in a trial download of Guitar Pro V5 demo software. This is not detected by MBAM or AVG. Could this be another false positive?

Your guidance much appreciated.

Regards, David

Hello there David.

Please try a couple of these free online scanners to see if anything has slipped by your protection:
(Be advised that some of these scanners will pickup things in "quarantine" from other anti-virus programs - so review the results carefully)

http://www.pandasecurity.com/homeusers/solutions/activescan/
http://us.mcafee.com/root/mfs/default.asp
http://housecall.trendmicro.com
http://www.bitdefender.com/scan8/ie.html
http://support.f-secure.com/enu/home/ols.shtml
http://onlinescan.avast.com/
http://ca.com/us/securityadvisor/virusinfo/scan.aspx
http://www.eset.com/onlinescan/

http://www.kaspersky.com/virusscanner Scan Only - no removal


If you find that you're infected (or the scan doesn't complete or closes unexpectedly), post in the Am I Infected forum located here: http://www.bleepingcomputer.com/forums/f/103/am-i-infected-what-do-i-do/

regards,
The weatherman

If you run the suggested scans and come up with something, I would post in the Am I Infected forum?.
I'm more leery of AdAware than SAS

Thanks guys. Sounds like time to put the kettle on and get the biscuits out! Will let you know what I find. Regards, David