Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

KEY:

  • L = Legit, O = Open to Debate, X = Malware/Bad

Name Process Details
XClient Server Runtime Procescsrss.exeAdded by the WORM_SDBOT.BTI WORM! Note: This worm rojan is located in C:%WINDIR% folder. Malicious a
LClient Server Runtime Processcsrss.exeMicrosoft Client Server Runtime Process
XClients Server Runtime Processcsrss.exeAdded by the W32/Sdbot-CPF WORM! Note: This worm rojan is located in C:%WINDIR% This is not the legi
XClients Server Runtime Process (Windows Internet)csrss.exeAdded by the W32/Sdbot-CPF WORM! Note: This worm rojan is located in C:%WINDIR% folder.
XMicrosoft Windows Update (msupdate)csrss.exeAdded by an unknown TROJAN! Note: This has nothing to do with Microsoft Windows Update and this is n
XSyscheck (Syscheck)csrss.exeAdded by the Troj/LdPinch-AL TROJAN! Note: This is not the legitimate Windows process csrss.exe (Whi
XWindows Client/Server Runtime Server Subsystem (WCSRSS)wcsrss.exeAdded by the W32/Tilebot-DA WORM! Note: This worm rojan is located in C:WindowsSystem (Win9x/Me) C:%
XWindows Client/Server Runtime Service (csrss)csrss.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:Windowsi
XWindows Object Managercsrss.exeW32.Banish.A@mm - Symantec Description: Randomly copied characteristics of an already existing servi
XWindows Security Drivers (csrs)csrss.exeAdded by an unknown TROJAN! Note: This has nothing to do with Microsoft Windows Update and this is n
XWindows TCP/IP Socket Driver (winsck)csrss.exeAdded by TROJ_RANKY.HW TROJAN! Note: This worm rojan is located in C:%WINDIR%winsock This is not the
XWindows Time Sync (wservtime)csrss.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm rojan is located in C:%WINDIR%