csrss, lsass, winlogon, etc...

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by zackisaiah, May 8, 2006.

  1. zackisaiah

    zackisaiah Private E-2

    I did a checkup with ProcessLibrary.com and discovered several unwanted processes running on my computer. I followed the MajorGeeks.com seven steps before posting, and these are the processes still running after a fresh reboot:

    csrss.exe (Trojan.W32.Rontokbro)
    lsass.exe (Trojan.W32.Windang, Trojan.W32.Spybot & backdoor.W32.ratsou)
    rundll32.exe (Backdoor.W32.Ranky)
    services.exe (Trojan.W32.Sober)
    smss.exe (trojan.w32.Sufiage)
    spoolsv.exe (Backdoor.Ciadoor.B/Iambigbrother spyware)
    svchost.exe (Trojan.W32.Neshuta)
    winlogon.exe (Trojan.W32.Rontokbro)

    I'm running an AMD Athlon 64 Processor 4000+, 1.0GB RAM, NVIDIA GeForce 6800 GT

    There are no major side effects, although I've noticed an overall lag when using the computer for Photoshop and Windows Media when there was no lag before. Occasionally the cpu usage jumps to 100% and sits there for a while when no programs are running, though I can't figure out the pattern for when this happens.

    A hijackthis log is attached, along with the bdscan.txt and Activescan.txt reports. Thanks in advance for your help!
     

    Attached Files:

    zackisaiah, May 8, 2006
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You are misreading the information on those pages. You do not have any of those malware problems. All those processes can be either good or bad. It depends on where they are running from. If they are in the system32 folder (where yours are), they are valid Windows processes.

    Based on your logs, you have no malware issues.
     
    chaslang, May 8, 2006
    #2
  3. zackisaiah

    zackisaiah Private E-2

    Well whaddya know...

    Thanks a lot for taking a look!
     
    zackisaiah, May 8, 2006
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome!
     
    chaslang, May 8, 2006
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds