LocationOld

crss.exe Tipo de proceso: Malware.
Troyano Delf.EZR que afecta a plataformas Microsoft Windows. Deshabilita la ejecución automática de otros programas.

Troj/Delf-EZR is a Trojan for the Windows platform.

When first run Troj/Delf-EZR copies itself to <Windows>\crss.exe and creates the following files:

<Startup>\ntdll.lnk
<System>\ras\syskl32.sys
<System>\winsysbg.dll

Troj/Delf-EZR sets the following registry entries, disabling the automatic startup of other software:

HKLM\SYSTEM\CurrentControlSet\Services\srservice
Start
4

The following registry entry is set:

HKCU\Software\Microsoft\Windows\CurrentVersion\Settings
LocationOld
<pathname of the Trojan executable>