Cheat Engine

.exe · Cheater Reputation: 0 Joined: 28 Dec 2009 Posts: 46

help me, when i used my flash drive in my PC a folder name SAMBORSKI or SOMBORSKI appeared and malwarebytes detected it and it was deleted. when i used it again, the folder appeared again.

iTz SWAT · Posted: Wed Sep 01, 2010 9:06 am Post subject:

If you mean csrss.exe then I believe that is a System process.

.exe · Cheater Reputation: 0 Joined: 28 Dec 2009 Posts: 46

no, it's cssrs.exe

Daniel. · Posted: Wed Sep 01, 2010 10:11 am Post subject:

.exe · Cheater Reputation: 0 Joined: 28 Dec 2009 Posts: 46

this is the picture of it

AhMunRa · Posted: Wed Sep 01, 2010 1:23 pm Post subject:

One common way to spread malware these days is via USB. Most likely the device is infected hence this bogus CSSRS.exe trying to impersonate a legit file CSRSS.exe

http://www.greatis.com/appdata/d/c/cssrs.exe_Removal.htm

http://www.sophos.com/security/analyses/viruses-and-spyware/w32agobotgb.html

.exe · Cheater Reputation: 0 Joined: 28 Dec 2009 Posts: 46

i tried the 1st link, it doesn't work and the other link need some information and i can't fill it all up. can you give me some other software that would help me? thanks!

Domoo · Posted: Thu Sep 02, 2010 6:37 am Post subject:

Try Spybot SnD

AhMunRa · Posted: Thu Sep 02, 2010 7:45 am Post subject:

Do as Domoo suggested and try Spybot Seach and Destroy.
Try a registry repair.
Try Adaware, been years since I used it.

.exe · Cheater Reputation: 0 Joined: 28 Dec 2009 Posts: 46

i tried Spybots Search and Destroy, it detected cookies(9) only. i think it can't remove that process Sad

AhMunRa · Posted: Thu Sep 02, 2010 9:19 am Post subject:

You could always try manually. Also when you run Spybot do it in SafeMode. If it is resident at runtime it may be write protected in which case Spyware removal will fail.

.exe · Cheater Reputation: 0 Joined: 28 Dec 2009 Posts: 46

manually is crucial for me xD but I'll try it if there's no other option. I'll try to run SpyBot in safemode, and tell the result Smile