Solved! Use CSRSS.EXE (Trojan Downloader) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

CSRSS.EXE – Trojan Downloader removal

File MD5 Virus Alias
CSRSS.EXE d4f7f33037bcdc3ad2713f12ed323299 Trojan Downloader
CSRSS.EXE d4f7f33037bcdc3ad2713f12ed323299 Trojan Generic
CSRSS.EXE d4f7f33037bcdc3ad2713f12ed323299 Trojan Hllw
CSRSS.EXE d4f7f33037bcdc3ad2713f12ed323299 Worm Autorun
CSRSS.EXE d4f7f33037bcdc3ad2713f12ed323299 Trojan Agent

CSRSS.EXE size: 130050 bytes
CSRSS.EXE hash: D4F7F33037BCDC3AD2713F12ED323299

Created files:

C:\windows\system32\~A~m~B~u~R~a~D~u~L~\csrss.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\lsass.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\services.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\smss.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\winlogon.exe

Detected by UnHackMe:

CSRSS.EXE
Default location: %SYSDIR%\~A~M~B~U~R~A~D~U~L~\CSRSS.EXE

Dropper information:
MD5: 672fb9cea8a89536c2c7708bb08adfd6
File size: 130050 bytes

Leave a Reply