I have McAfee installed on a (full) trial preiod as my computer is still quite new. It has recently found four Trojans/Memory Trojans but it cannot clean, delete or quarantine them. The info that McAfee gives is: The file C:/WINDOWS/system/csrss.exe is infected by the New Malware.j trojan and cannot be cleaned. AND The file C:/Program Files/Window Media Player/skins/Data/smss.exe is infected by the New Malware.j trojan and cannot be cleaned. As mentioned in the title, Lavasoft Adaware and Spybot don't even find it/them and although I don't (yet?) notice any adverse effects on my computer I would like to clean it of these trojans. Can anybody help me find a way to zap these please? Thanks cxgcxg

Please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified. Please download HJTsetup.exe from this link http://www.thespykiller.co.uk/files/HJTsetup.exe to your desktop. Doubleclick on the HJTsetup.exe icon on your desktop. By default it will install to C:\Program Files\Hijack This. Continue to click "next" in the setup dialogue boxes until you get to the "Select Addition Tasks" dialogue. Put a check by "Create a desktop icon" then click "Next" again. Continue to follow the rest of the prompts from there. At the final dialogue box click "Finish" and it will launch Hijack This. Click on the "Do a system scan and save a logfile" button. It will scan and the log should open in notepad. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log and post it in this thread. Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly. Please download SmitFraudFix from this link http://siri.urz.free.fr/Fix/Smitfra... Then extract the contents to your desktop. !!!! Only run option #1 as runing the other options on an uninfected computer will damage the desktop.!!!! Open the "SmitfraudFix" folder and double-click "smitfraudfix.cmd" Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present). Please copy/paste the content of that report into your next reply. Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.

Run System file checker (SFC) to replace the C:/WINDOWS/system/csrss.exe file. To do this you need the windows XP install CD. To run SFC click Start - Run - type SFC press <enter>. C:/Program Files/Window Media Player/skins/Data/smss.exe is part of windows media player. Uninstall WMP and reinstall to remove this infected file. If you have other infected files similar methods to replace the files are necessary. Compaq Presario SR1720NX Desktop Computer AT&T SBC Yahoo DSL Home Linksys Router/2 computers