Jump to content


Member Since 18 Feb 2012
Offline Last Active Feb 20 2012 05:36 PM

Topics I've Started

csrss.exe trojan.agent!

18 February 2012 - 07:15 PM


When I do a quick scan I always get these 3 things that come up.

A file and memory process called "csrss.exe" trojan agent.
Then a malware trace registry key.

I then continue to delete using malwarebytes however upon reboot the same 3 things pop up again. It's really starting to worry me.

Here is the log from malwarebytes quick scan.

Malwarebytes Anti-Malware

Database version: v2012.02.18.03

Windows 7 x64 NTFS
Internet Explorer 8.0.7600.16385
Matt :: MATT-PC [administrator]

19/02/2012 00:02:32
mbam-log-2012-02-19 (00-10-17).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 231023
Time elapsed: 7 minute(s), 4 second(s)

Memory Processes Detected: 1
C:\Users\Matt\AppData\Local\Temp\csrss.exe (Trojan.Agent) -> 6028 -> No action taken.

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 1
HKCU\Software\VB and VBA Program Settings\SrvID (Malware.Trace) -> No action taken.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Users\Matt\AppData\Local\Temp\csrss.exe (Trojan.Agent) -> No action taken.


If anyone could please help I would be very grateful.