CSRSS.EXE – Trojan-Ransom Winlock

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

CSRSS.EXE – Trojan-Ransom Winlock removal

File MD5 Virus Alias
CSRSS.EXE 29c632488b5573c3ef7b672698039461 Trojan-Ransom Winlock
CSRSS.EXE 29c632488b5573c3ef7b672698039461 Trojan Generic
CSRSS.EXE 29c632488b5573c3ef7b672698039461 Trojan Agent
CSRSS.EXE 29c632488b5573c3ef7b672698039461 Trojan Crypt

CSRSS.EXE size: 844800 bytes
CSRSS.EXE hash: 29C632488B5573C3EF7B672698039461

Created files:

%TEMP%\IXP000.TMP\csrss.exe
%TEMP%\IXP000.TMP\Grabber.exe

Detected by UnHackMe:

CSRSS.EXE
Default location: %TEMP%\IXP000.TMP\CSRSS.EXE

Dropper information:
MD5: 27798f2ce4f912263a5ff3146ae3ae02
File size: 641536 bytes

Leave a Reply