Home Malware Programs Trojans Win32.SuspectCrc

Win32.SuspectCrc

Posted: November 18, 2009

Win32.SuspectCrc is another malicious Trojan horse that may represent security risk for a compromised PC system or a network environment. Win32.SuspectCrc should not be taken lightly and contains characteristics of a severe security risk. Win32.SuspectCrc penetrates the system without the user's knowledge or permission and easily contacts a remote server to download other harmful parasites onto the infected computer. Symptoms include your computer screen flipping upside down or inverting and documents or messages printing on your printer by themselves. For the safety of your computer, Win32.SuspectCrc should be removed immediately.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 c:\Bassam\%UserName%=\%UserName%
    2 c:\Bassam\Process=\[filename of the sample #1]
    3 c:\Bassam\Process=\[System Process]
    4 c:\Bassam\Process=\alg.exe
    5 c:\Bassam\Process=\csrss.exe
    6 c:\Bassam\Process=\explorer.exe
    7 c:\Bassam\Process=\IEXPLORE.EXE
    8 c:\Bassam\Process=\lsass.exe
    9 c:\Bassam\Process=\msmsgs.exe
    10 c:\Bassam\Process=\services.exe
    11 c:\Bassam\Process=\smss.exe
    12 c:\Bassam\Process=\spoolsv.exe
    13 c:\Bassam\Process=\svchost.exe
    14 c:\Bassam\Process=\System
    15 c:\Bassam\Process=\VMwareService.exe
    16 c:\Bassam\Process=\VMwareUser.exe
    17 c:\Bassam\Process=\winlogon.exe
Loading...