Recently been have malwarebytes pop up warning me that it has blocked a process accessing websites - many different ones.
The process in question is named csrss.exe and described as "Microsoft Security Client User Interface".
The thing is, it's running from the /Users/<me>/Appdata/Local/Temp/phantomows folder.
Sometimes the file phantomows.zip appears here too after I've deleted the phantomows folder.
Ran scans with Nod32/MS Security Essentials/Malwarebytes AntiMalware and nothing was reported.
Should I be worried?