crsss.exe

[sggaunt]

This file is dumped by an Rbot variant and I got this and several instances of the 'downloader' trogen at the week end then spent a couple of hours cleaning up.
What is a bit worrying is that the file 'crsss.exe' is still present in my System32 folder (though not running and instances removed from launch points 'run keys')
but non of the anti virus spyware tools I have seems to see it as a threat AVG7 Free, Adaware SE, SybotSD, Stinger (too old for this ?)
Even a specific scan of the file with AVG 7 Free shows it as clear, anyone know why this might be and am I ok to delete it manually?


Steve
Be excellent to each other and Party on!

 

[BadBigBen]

Hi there, yes, you can delete this badie...

make sure though that you have system restore turned off before you do this, and best would be to delete the file from Safety Mode...

This badie is listed in the Trend Micro Security Information site as the Worm RBOT.ACY ...



Ben

If it works don't fix it! If it doesn't use a sledgehammer...