RE: Processes terminating abruptly (CRRSCR32.EXE)

From: Curtis Koenig [MSFT] (curtisko_at_online.microsoft.com)
Date: 03/25/04 

Date: Wed, 24 Mar 2004 23:51:57 GMT

The CRRSCR32.exe does not appear to be a valid Microsoft file and a quick
Google search also turned up no data. This could be a new virus, a renamed
virus, or a new variant. You should contact your anti-virus provider and
ask them to take a look at this. 

--
Curtis Koenig
Support Engineer
Product Support Services, Security Team
MCSE, MCSES, CISSP
This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit.  Thanks!
--------------------
>From: =?ISO-8859-1?Q?Ney_Andr=E9_de_Mello_Zunino?= <zunino@undl.org.br>
>Newsgroups: microsoft.public.security.virus
>Subject: Processes terminating abruptly (CRRSCR32.EXE)
>Date: Wed, 24 Mar 2004 09:56:43 -0300
>
>Hello.
>
>Earlier today, I downloaded a utility and, before executing it, I ran it 
>through my antivirus software, which found nothing. I then started the 
>application, which presented a "DLL not found" error message and closed. 
> From that moment on, I noticed that my running processes would abrupty 
>and involuntarily terminate. Trying to launch new processes would have 
>the same result.
>
>I managed to identify the offending process from the task manager 
>application (before it closed). It is called CRRSCR32.EXE and, even if I 
>manage to kill it, it will be run again by the time I start a process 
>(anyone, apparently).
>
>I rebooted my system through Linux and did a search on the Windows' C:\ 
>partition. The CRRSCR32.exe file is located in C:\Windows\System32 
>directory.
>
>Has anybody seen or known about this? If so, is this a new virus? Are 
>there any other consequence besides the termination of applications? How 
>should I proceed to safely remove it? Will booting in safe mode and 
>deleting the file do?
>
>Thank you,
>
>-- 
>Ney André de Mello Zunino
>

Relevant Pages

  • Re: WindowsXP Delayed Response -I dont know how else to describe it :
    ... Task Manager and msconfig will not suffice in searching down most viruses/spyware/adware that runs hidden in a stealth mode. ... You need to run a full system virus scan with a fully up-to-date virus app and then check for any other nasties. ... Copy HJT to it's own folder, this is where the log files will be saved. ... Read the quick start here on how to create a log file that can be copied/pasted into a forum that can provide assistance on removal of unwanted pests. ...
    (microsoft.public.windowsxp.basics)
  • Re: can not open e-mail attachment
    ... "A quick Google search with the exact" ANYTHING ie. virus ... the questions posted to these Newsgroups. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: PLEASE Help -- Windows very slow starting up
    ... Google Search "NEWDOT" ... Is NEWDOT~2.DLL spyware or a virus? ... > I also have been having a problem after system loading and coming on, ... >>> when the startup sound plays. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Lost Task Manager
    ... Or do they act the same way as Task Manager? ... If they act the same way, you most likely have a virus. ... No need to uninstall Norton. ... >> Trend Micro - Free online virus Scan ...
    (microsoft.public.windowsxp.basics)
  • Re: HELP - Corrupted WindowsTaskManager
    ... To get the Task Manager tabs back double click anywhere on the border. ... not a virus or scumware. ... The icon in the tray is the Task Manager. ... > neat interface to control startup apps; ...
    (microsoft.public.windowsxp.help_and_support)