I repeatedly keep getting the below alert from McAfee: "The file C:\WINDOWS\csrss.exe is infected by the New Malware.j trojan and cannot be deleted." I have installed and ran "hijackthis" but this forum states not to post the result unless asked for. I would be massively grateful for a little advice as to how to get rid of it. Also how dangerous to my home security is the particular trojan? With thanks in advance. Jon

With a little luck you'll have two. Mine are: C:\WINNT\system32\CSRSS.exe C:\WINNT\ServicePackFiles\i386\csrss.exe So if the SP one is not infected, I would copy it over the bad one. ===================================== If at first you don't succeed, you're about average. M2

Thank you very much for your prompt reply. However, being a complete idiot and extremely ignorant when it comes to computers, Im not too sure what you mean!?!

I think Mechanix2Go had in mind replacing the infected file with a good one if you happened to have one elsewhere. On my XP SP2 I have only one copy and that is in c:\windows\system32. It is version 5.1.2600.2180 and its size is 6144 bytes. I would first download and run this freebie which is primarily a trojan finder/fixer: A-SQUARED FREE - JUST DOWN PAGE Make sure you update it online after installing it so that you have the latest virus definitions. If that doesn't help then we can consider file replacement although XP often resists this action with system files. Try typing sfc /scannow in the Run box to see if this finds and replaces the file (it takes a while to run through). Also search for the file and let us know how many copies you have, where they are located, their version numbers and the bracketed sizes given in "Properties". When a file is in the wrong place or the wrong size is usually infected. [Our resident log reading expert has not been around for some time] DerekW

Well I did the trojan finder thing and it seems to have gone! so touch wood thats fixed it! Thank you for your time. Its much appreciated

Lets hope so. I've had a fair degree of success with that program so its worth keeping on board if you have room. By the way, if you ever need to run sfc /scannow make sure you include the space - seems it matters. Thx for popping back to let us know. DerekW