Hey guys,

Recently been have malwarebytes pop up warning me that it has blocked a process accessing websites - many different ones.

The process in question is named csrss.exe and described as "Microsoft Security Client User Interface".

The thing is, it's running from the /Users/<me>/Appdata/Local/Temp/phantomows folder.

Sometimes the file phantomows.zip appears here too after I've deleted the phantomows folder.

Ran scans with Nod32/MS Security Essentials/Malwarebytes AntiMalware and nothing was reported.

Should I be worried?