Close

Results 1 to 5 of 5
  1. #1
    DF Jedi doughboy's Avatar
    Join Date
    Jul 2001
    Location
    Beckenham
    Posts
    2,141
    Thanks
    139
    Thanked:        90
    Karma Level
    341

    Help Do I have a virus/malicious software? phantomows folder running csrss.exe

    Hey guys,

    Recently been have malwarebytes pop up warning me that it has blocked a process accessing websites - many different ones.

    The process in question is named csrss.exe and described as "Microsoft Security Client User Interface".

    The thing is, it's running from the /Users/<me>/Appdata/Local/Temp/phantomows folder.

    Sometimes the file phantomows.zip appears here too after I've deleted the phantomows folder.

    Ran scans with Nod32/MS Security Essentials/Malwarebytes AntiMalware and nothing was reported.

    Should I be worried?

  2. #2
    DF Super Moderator
    DejaVu's Avatar
    Join Date
    Nov 2005
    Location
    Essex
    Posts
    9,090
    Thanks
    1,828
    Thanked:        3,990
    Karma Level
    954

    Default Re: Do I have a virus/malicious software? phantomows folder running csrss.exe

    It's a relatively new case and I think should have been dealt with by Malwarebytes by now.
    You are right though, it is malicious -

    [Only registered and activated users can see links. ]

    Apparently removing Java solves it, but that is probably just because the program runs if Java. It's a work around.

    Thanks to DejaVu

    doughboy (9th January 2017) 


  3. #3
    DF Jedi doughboy's Avatar
    Join Date
    Jul 2001
    Location
    Beckenham
    Posts
    2,141
    Thanks
    139
    Thanked:        90
    Karma Level
    341

    Default Re: Do I have a virus/malicious software? phantomows folder running csrss.exe

    Thanks DejaVu.

    Removed Java as a start.

    On a side note I always assumed Malwarebytes Premium 3 was an extra cost as I'd already paid for a legit version of the original. DL'd the trial and it lapped up my reg details - happy days.

    No time to do a new scan now but will update when I can. I have that temp folder currently popping up when windows starts as I'm paranoid now.

  4. #4
    DF Jedi doughboy's Avatar
    Join Date
    Jul 2001
    Location
    Beckenham
    Posts
    2,141
    Thanks
    139
    Thanked:        90
    Karma Level
    341

    Default Re: Do I have a virus/malicious software? phantomows folder running csrss.exe

    No sign since the removal of Java.

    Mbam 3 found nothing. Also tried another one called Zemana Antimalware - again no hits.

    Obviously glad that it's no longer active, but not at rest since the root cause hasn't been found.

    If I reinstall Java it may come back - it's lurking somewhere on my machine out of sight of the scanners

  5. #5
    DF Super Moderator
    evilsatan's Avatar
    Join Date
    Jul 2004
    Location
    Essex
    Posts
    19,881
    Thanks
    1,078
    Thanked:        3,147
    Karma Level
    1530

    Default Re: Do I have a virus/malicious software? phantomows folder running csrss.exe

    Quote Originally Posted by doughboy View Post
    Thanks DejaVu.

    Removed Java as a start.

    On a side note I always assumed Malwarebytes Premium 3 was an extra cost as I'd already paid for a legit version of the original. DL'd the trial and it lapped up my reg details - happy days.

    No time to do a new scan now but will update when I can. I have that temp folder currently popping up when windows starts as I'm paranoid now.
    Originally the MBAM licence were lifetime so looks like they are honouring that

    Try running ADWCleaner, it was recently acquired by Malwarebytes and I use this in conjunction with MBAM when cleaning machines. Also look in your web browsers for any extensions/add-ons you don't want.


Similar Threads

  1. real time folder sync software FREE
    By CallmeGoose in forum PC Software
    Replies: 9
    Last Post: 28th February 2017, 11:32 AM
  2. [FREE] Free software: File & Folder Shredder DF exclusive software
    By Detector in forum Cheapskates Corner
    Replies: 12
    Last Post: 13th September 2012, 03:22 AM
  3. need software to make a folder(albums) library
    By rusty in forum PC Software
    Replies: 2
    Last Post: 27th December 2009, 08:23 AM
  4. Malicious Software Removal Tool
    By Raptor in forum Windows 7 Tutorials
    Replies: 0
    Last Post: 8th September 2009, 08:40 PM
  5. Folder locking software for Nokia 6300
    By superchelseafc in forum Android Phones & Tablets
    Replies: 0
    Last Post: 1st January 2008, 09:18 PM

Social Networking Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •