TROJAN Virus SYSTEM32:VCRT80.EXE

The Trojan SYSTEM32:VCRT80.EXE will be in the c:\documents and also in the settings along with other trojan called dfghjxs.exe and dfghxjxs.exe.Most of the time dfghjxs tries to get into the internet.The other trojan mostly appears during the startup of the system when the windows has finished loading.Most probably msn messenger will be the last to load on to the computer.The drive system will sometimes stops functioning when this file invades the system.

Running Process

The boot mode is normal

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\dumprep.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Curse\CurseClient.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Dell Support Center\gs_agent\dsc.exe
C:\WINDOWS\system32\dwwin.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE

Statistics about Testabd.exe

68.75% incidents across the world shows that this virus is a threat while 31.25% is found not to be a threat.China is found to be the possibe country of origin of the file Testabd.exe.

The threats associated with Testabd.exe

Threat Alias Number of Incidents
W32.Virut.CF [Symantec] 12
W32/Scribble-B [Sophos] 12
Trojan.Win32.Agent2 [Ikarus] 10
Win32/Virut.E [AhnLab] 10
Virus.Win32.Virut.ce [Kaspersky Lab] 9
Win32.SuspectCrc [Ikarus] 9
Trojan.Win32.Agent2.hhw [Kaspersky Lab] 8
Virus:Win32/Virut.BM [Microsoft] 8
W32/Virut.n [McAfee] 3
Win-Trojan/Agent2.66760 [AhnLab] 3
PE_VIRUX.A [Trend Micro] 2
Trojan.Win32.Agent2.hsk [Kaspersky Lab] 2
Virus:Win32/Virut.gen!E [Microsoft] 2
Infostealer.Gampass [Symantec] 1
Mal/Generic-A [Sophos] 1
New Win32.g4 [McAfee] 1
PE_VIRUT.XP [Trend Micro] 1
PE_VIRUX.A-2 [Trend Micro] 1
PWS:Win32/Wowsteal.AO [Microsoft] 1
Trojan:Win32/Thunmal.A [Microsoft] 1
Trojan-Dropper.Win32.Agent.alvd [Kaspersky Lab] 1
Virus.Win32.Virut.q [Ikarus] 1
Virus.Win32.Virut.q [Kaspersky Lab] 1
Virus:Win32/Virut.AE [Microsoft] 1
Virus:Win32/Virut.gen!O [Microsoft] 1
W32.Virut.U [Symantec] 1
W32/Vetor-A [Sophos] 1
W32/Virut.gen [McAfee] 1
Win32.Virut.Gen.5 [PC Tools] 1
Win32/Virut.D [AhnLab] 1