Anyone know anything about destruct.wincrash 1.0?

Discussion in 'Trojan Defence Suite' started by Soul_Flame, Apr 4, 2002.

Thread Status:
Not open for further replies.
  1. Soul_Flame

    Soul_Flame Guest

    I found this on my system during a full system scan.  Did a google search and found info on a nasty little trojan called backdoor.wincrash, but didn't see anything about destruct.wincrash.  Any info would be appreciated.
     
  2. Dan Perez

    Dan Perez Guest

    Re: Anyone know anything about destruct.wincrash 1

    It is very likely the same. The string before the period in the name is classificatory (if that is a word) and may vary depending whose list you are looking at. You probably already have the link but in case it comes in handy...

    http://securityresponse.symantec.com/avcenter/venc/data/backdoor.wincrash.html
     
  3. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Re: Anyone know anything about destruct.wincrash 1

    Hi Soul_Flame,

    A simple trojan - the link provided is a good one :)
    You might also notice (Flipscreen util) in the detection, or a second detection with this file. This is not dangerous, but was an included part of the trojan, it simply flips the users screen upside down. This has become a common feature of the major trojans, Wincrash was an early trojan and one of the first to have this function (albeit in a separate 4k exe)
     
Thread Status:
Not open for further replies.