Threat Database Trojans Trojan.Perseus

Trojan.Perseus

By CagedTech in Trojans

Threat Scorecard

Ranking: 6,033
Threat Level: 80 % (High)
Infected Computers: 184,710
First Seen: January 25, 2016
Last Seen: September 7, 2024
OS(es) Affected: Windows

SpyHunter Detects & Remove Trojan.Perseus

File System Details

Trojan.Perseus may create the following file(s):
# File Name MD5 Detections
1. crmsvc.exe 5712dc0ac4aad9754f6d50ac4cf6454a 1,611
2. lxgqbvcm.sjo.exe 363a75eeee98feac931e39b89d3bff87 1,418
3. crmsvc.exe 354481ab99a003727b1f805c610b9acf 1,392
4. crmsvc.exe e6f7c3e99a3ffb570ae13538f276a9cf 1,338
5. crmsvc.exe 5fc86a10fc6e7c6b317efc10ed2b3fe8 913
6. wwxuw4a5.oew.exe 522632e65cb3f68810f39d09644675d7 580
7. crmsvc.exe 914671241ff4de4d9ee023baa46ba7d8 575
8. izrciwok.g2t.exe cac89452037aacb74c58b47733f81a14 566
9. crmsvc.exe 1772c49d9e032b03806f75db32a288da 541
10. crmsvc.exe c54a13cfb822313746902670be1d53fa 530
11. uef24npp.tzg.exe 3fb83a058707e020b344b49e170252a0 458
12. crmsvc.exe 4fcc5fe10fe90edc76bee55bf1748ac3 450
13. ulvh0omb.3u4.exe a8e25dfbb26362002a7c1d617c0ad493 397
14. crmsvc.exe a356501212c1682dcb22ec08d237f662 381
15. crmsvc.exe f3275da1094ccc02e972dcebd083201f 375
16. crmsvc.exe 904e1f91f9ab952f2bf6f1ce2eb30f6a 350
17. crmsvc.exe 5036165f7f8e3550ab802f26fb1b9350 308
18. CRMSvc.exe 5339f76fb75b7bb4f2c2175ab8af5eb3 259
19. crmsvc.exe 5f29a6cb9de01ba81edcb736ad746209 246
20. crmsvc.exe ab146fef6161f2d3f5f5b18719c6cb4c 169
21. crmsvc.exe 535d4164840e7e73288eb6bba513c2a7 139
22. crmsvc.exe 2092c10dc2e117bf7088af73000bcd92 121
23. f43253jc.y5d.exe 388562f5fa4fb78db6aad6162bbf4cc3 111
24. crmsvc.exe 8fde482364b22f12134a2bb3522a23bc 97
25. crmsvc.exe e4548f87581134f5a5509928f952e083 70
26. crmsvc.exe 83ce053fdb7ec99d30d0d9049c306133 43
27. desktop.ini.exe dbc235d703a79e14228e9330406e8fd2 24
More files

Registry Details

Trojan.Perseus may create the following registry entry or registry entries:
Regexp file mask
%ALLUSERSPROFILE%\Theobald.dll
%APPDATA%\Google Chrome.exe
%APPDATA%\proxifier\proxy.exe
%LOCALAPPDATA%\Invisible[RANDOM CHARACTERS].exe
%LOCALAPPDATA%\manger folder.exe
SOFTWARE\CRMSvc
SYSTEM\ControlSet001\services\CRMSvc
SYSTEM\ControlSet001\services\eventlog\Application\CRMSvc
SYSTEM\ControlSet002\services\CRMSvc
SYSTEM\ControlSet002\services\eventlog\Application\CRMSvc
SYSTEM\CurrentControlSet\services\CRMSvc
SYSTEM\CurrentControlSet\services\eventlog\Application\CRMSvc

Directories

Trojan.Perseus may create the following directory or directories:

%ALLUSERSPROFILE%\catalog update
%APPDATA%\CRMSvc
%APPDATA%\Microsoft\Windows\DsvHelper
%WINDIR%\SysWow64\config\systemprofile\AppData\Roaming\CRMSvc
%WINDIR%\System32\config\systemprofile\AppData\Roaming\CRMSvc

Trending

Most Viewed

Loading...