Re: Processes terminating abruptly (CRRSCR32.EXE)

From: Ney André de Mello Zunino (zunino_at_undl.org.br)
Date: 03/25/04 

Date: Thu, 25 Mar 2004 18:20:04 -0300

Curtis Koenig [MSFT] wrote:

> The CRRSCR32.exe does not appear to be a valid Microsoft file and a quick
> Google search also turned up no data. This could be a new virus, a renamed
> virus, or a new variant. You should contact your anti-virus provider and
> ask them to take a look at this.

Thank you for your response. Just for the record, I would like to report
that the virus managed to sabotage the entire system. After getting rid
of the CRRSCR32.exe executable (via a "safe-mode" shell), I logged in
normally, but any attempt to launch applications would result in error
messages saying Windows could not locate the executables. The funny
thing is that I would search for them using the searching facility and
they would be there. I don't know exactly what got damaged by the virus,
but it simply made the system become unusable.

Regards, 

-- 
Ney André de Mello Zunino

Relevant Pages

  • Re: guys blows face off with shell
    ... was downloaded and executed that appeared to be a virus scanner - not ... Unfortunately there have been exploitable bugs in mail clients, which allowed executables to be executed using this mechanism. ... These are unlikely to be a problem in modern systems, buffer overruns in the JPEG library or similar is where the biggest risk is, but there are methods to protect against that as well in modern systems, which separate out executable and data storage memory space. ... RAID 0 for striping, RAID 1 for mirroring. ...
    (rec.pyrotechnics)
  • Re: w
    ... There is no such thing as a buffer overflow allowing access to memory not allocated to your user process. ... My point is that if a system is designed correctly from the start, viruses etc. are not a problem. ... For it to be possible for viruses to exist on a system, all you need is to allow for a program to generate executables, and the ability to overwrite other files. ... If you CAN write a program which generates executables, and you CAN overwrite other files, then to implement a virus, all you have to do is write a program which reads in existing executables, and overwrites them with a new executable which does the same thing as the original executable, plus the contents of the original virus. ...
    (comp.lang.java.programmer)
  • RE: Possibly Unknown Virus? Care to help me analyze?!?
    ... Subject: Possibly Unknown Virus? ... I have run strings against the executables, ... 15-day free trial of StillSecure Border Guard. ...
    (Incidents)
  • Re: Gamma Function
    ... There's a real barrier between DOS and Windows: ... The Windows virus writers are interested in spreading their perversity ... over the internet and cannot use DOS programs. ... It attached itself to one of my executables, ...
    (sci.physics.relativity)
  • Re: Gamma Function
    ... There's a real barrier between DOS and Windows: ... The Windows virus writers are interested in spreading their perversity ... over the internet and cannot use DOS programs. ... It attached itself to one of my executables, ...
    (sci.physics.relativity)
Quantcast