BigHotStud Posted June 24, 2023 Share Posted June 24, 2023 Hello, I've recently discovered &SysReset and found a csrss.exe file in it, right under the "Scratch" folder. It seems to have been last modified in 2019 and another computer, which I also reset, also has a csrss.exe file, but that file was last modified in 2021 (before I reset it). I'm somewhat suspicious of this file considering, from my knowledge, csrss.exe should only exist in Sys32, though, I've scanned my computer numerous times with Kaspersky and a different 2nd opinion scanner (HitmanPro). Neither of them detect anything wrong. The file has valid digital signatures. The main reason why I'm so concerned is because my computer did have a malware infection. Though, I performed a PC reset via Windows and thought that was it. I'm adding the VirusTotal link for it: https://www.virustotal.com/gui/file/8ebf4096d28a78e8ab36e5084784acc90464eb4a74d972c942f147ea59e5134b/community Link to comment Share on other sites More sharing options...
Berny Posted June 24, 2023 Share Posted June 24, 2023 @BigHotStud A Kaspersky scan with no detections means your system is clean. Link to comment Share on other sites More sharing options...
BigHotStud Posted June 24, 2023 Author Share Posted June 24, 2023 3 hours ago, Berny said: @BigHotStud A Kaspersky scan with no detections means your system is clean. But what about miners and RATs? Have you ever heard of csrss being located here? Link to comment Share on other sites More sharing options...
Berny Posted June 25, 2023 Share Posted June 25, 2023 @BigHotStud Please see this Topic Also Virus Total is showing → "undetected" Link to comment Share on other sites More sharing options...
BigHotStud Posted June 25, 2023 Author Share Posted June 25, 2023 7 hours ago, Berny said: @BigHotStud Please see this Topic Also Virus Total is showing → "undetected" Fair enough, though, again, doesn't csrss.exe being located outside of the Windows folder something to be worried about? Link to comment Share on other sites More sharing options...
Berny Posted June 25, 2023 Share Posted June 25, 2023 @BigHotStud For a second opinion please contact Kaspersky Technical Support. Link to comment Share on other sites More sharing options...
Recommended Posts
Please sign in to comment
You will be able to leave a comment after signing in
Sign In Now