Threat Database Trojans Trojan:Win32/Crastic.gen!B

Trojan:Win32/Crastic.gen!B

By Domesticus in Trojans

Threat Scorecard

Ranking: 16,586
Threat Level: 90 % (High)
Infected Computers: 1,687
First Seen: July 3, 2013
Last Seen: August 25, 2023
OS(es) Affected: Windows

Trojan:Win32/Crastic.gen!B is a Trojan that distributes and installs another malware threats on the corrupted PC. Trojan:Win32/Crastic.gen!B can only execute from removable drives. Trojan:Win32/Crastic.gen!B deletes restore points generated by the Windows System Restore tool, making it complicated to restore the attacked PC to a pre-affected condition. While being installed on the infected computer system, Trojan:Win32/Crastic.gen!B makes system alterations by adding infected files and modifying the Windows Registry. Trojan:Win32/Crastic.gen!B might carry the file name %TEMP%\Adobe_Flash_Player_11.37.2743.ex, which specifies that it might masquerade as an Adobe Flash Player installer. The file might also be called 'autorun.exe' if it exists in removable drives. The file uses the default Windows folder icon. If the computer users double-clicks on it, it opens the root folder of the drive in which it is located. It does this in an effort to trick the victimized PC user into believing that it's a folder.

File System Details

Trojan:Win32/Crastic.gen!B may create the following file(s):
# File Name Detections
1. %TEMP%\Adobe_Flash_Player_11.37.2743.exe
2. %windir%\csrss.dll

Registry Details

Trojan:Win32/Crastic.gen!B may create the following registry entry or registry entries:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wcsrss\Parameters "ServiceDll" = "%windir%\csrss.dll"
HKEY_LOCAL_MACHINEM\SYSTEM\CurrentControlSet\Services\Wcsrss "ImagePath" = "%SystemRoot%\system32\svchost.exe -k Wcsrss"

Trending

Most Viewed

Loading...