CLSID List Results
BHOs, Toolbars, SHs, Explorer Bars
BHOs, Toolbars, SHs, Explorer Bars
| CLSID | Name | Filename | Description | Status |
| {81DBAB16-CA34-c433-BE80-11E6692428A8} | Windows Internet Security | csrcs.dll | Unidentified parasite - should you have any information about this application, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks! | X BHO |
Startup List Results
Startup Entry
Startup Entry
| Name | Filename | Description | Status |
| Windows Custom Services | CSRCS.EXE | Added by the W32/Spybot-EI WORM! Note: Located in \%WINDIR%\%System%\ | X |
| Client Server | csrcs.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\System\ Note: Use SDFix under supervision. | X |
| csrcs | csrcs.exe | Added by the Generic.i!F4AB3D1D Trojan. Note: Located in %windir%\system32 | X |
| Microsofts | csrcs.exe | Added by the Mal/Malat-A malware. Note: Located in \%Windir%\System\ | X |
Active Setup List Results
Active Setup - Installed Component
Active Setup - Installed Component
| CLSID | Name | Filename | Description | Status |
| {6FBA1221-C10B-5373-C69D-12A6577D9995} | (no name) | csrcs.exe | Infostealer trojan of Brazilian origin, see this ThreatExpert Report | X |
| {AENGFU3AA-B277-11d2-9CBD-0000F87A369} | (no name) | csrcs.exe | Infostealer trojan, see this ThreatExpert Report and here | X |
| {78D38B77-3832-DADD-0000-85AF37857340} | (no name) | csrcs.exe | Infostealer trojan, detected by Trend Micro as TROJ_DLOADER.TLR - also see here | X |
| {AENGFU3AA-B277-11D2-9CBD-0000F87A369E} | (no name) | csrcs.exe | Infostealer trojan, detected by Kaspersky antivirus as Trojan-Downloader.Win32.Genome.cfnq - also see here | X |