CSRSS.exe gives memory usage warning

Norton Security | Norton Internet Security
1

Hi,

 

Maybe someone can help me?

I have NIS 2012 and it gives a warning of excessive memory usage by csrss.exe

I have tried the Norton power eraser and it too says there is something with csrss.exe, it want to clean this file.

(external scan did not function)

 

But i have tried this before with for example Malwarebytes and it crashes my pc when it want to quarantine/delete the file.

 

I have attached the log file from NIS (it's in dutch).

And also the logfile from power eraser

 

Is it a virus or something else?

 

Thanks

 

2

Looks like a Trojan /Worm that even if you remove those 2 objects you need to find the extras on a reboot the infection rebuilds itself so that the objects reappear

 

 

c:\users\bart\appdata\roaming\client\csrss.exe

0.00

0.00

gzyf

 

 

D05FAB1486D8EA4814A7B24C578DB1A2

26C14831DE484B40E8B36EF117E7EBD1D49A78A056B2E5F6D4486DFE8F383D23

256524289

 

 

C:\Users\Bart\AppData\Roaming\Client\csrss.exe

c:\users\bart\appdata\roaming\client

HKEY_USERS\S-1-5-21-2850922155-3426192056-2419056759-1001\Software\Microsoft\Windows\CurrentVersion\Run\"Client-Server-Runtimeprocess"

 

 

Quads

 

 

3

Thanks for the respons.

 

What's the best way of cleaning it?

4

I now tried a bootable cd with bitdefender (which uses linux i think) and it was able to remove the virus :smileyhappy:

Now running a full scan, but so far it's looking good.