Hello,

I've recently discovered &SysReset and found a csrss.exe file in it, right under the "Scratch" folder. It seems to have been last modified in 2019 and another computer, which I also reset, also has a csrss.exe file, but that file was last modified in 2021 (before I reset it). I'm somewhat suspicious of this file considering, from my knowledge, csrss.exe should only exist in Sys32, though, I've scanned my computer numerous times with Kaspersky and a different 2nd opinion scanner (HitmanPro). Neither of them detect anything wrong. The file has valid digital signatures.

The main reason why I'm so concerned is because my computer did have a malware infection. Though, I performed a PC reset via Windows and thought that was it.

I'm adding the VirusTotal link for it:
https://www.virustotal.com/gui/file/8ebf4096d28a78e8ab36e5084784acc90464eb4a74d972c942f147ea59e5134b/community

 

@BigHotStud

A Kaspersky scan with no detections means your system is clean.

3 hours ago, Berny said:

@BigHotStud

A Kaspersky scan with no detections means your system is clean.

But what about miners and RATs?

Have you ever heard of csrss being located here?

@BigHotStud

Please see this Topic
Also Virus Total is showing → "undetected"

7 hours ago, Berny said:

@BigHotStud

Please see this Topic
Also Virus Total is showing → "undetected"

Fair enough, though, again, doesn't csrss.exe being located outside of the Windows folder something to be worried about?

@BigHotStud

For a second opinion please contact Kaspersky Technical Support.