How to remove csrs.exe
csrs.exe
The module csrs.exe has been detected as Adware.Agent
File Details
Product Name: | Microsoft® Windows® Operating System |
Company Name: | Microsoft Corporation |
MD5: | a6f1e20930341867bba00ecb540a9847 |
Size: | 6 MB |
First Published: | 2018-12-05 18:14:18 (6 years ago) |
Latest Published: | 2019-11-29 03:18:29 (5 years ago) |
Status: | Adware.Agent (on last analysis) | |
Analysis Date: | 2019-11-29 03:18:29 (5 years ago) |
Common Places:
%system% |
%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5 |
%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5 |
%system% |
%system% |
%profile%\efault user\local settings\temporary internet files\content.ie5 |
%system% |
%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5 |
%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5 |
%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files |
Geography:
25.0% | ||
18.8% | ||
12.5% | ||
12.5% | ||
12.5% | ||
12.5% | ||
6.3% |
OS Version:
Windows Server 2008 R2 | 85.7% | |
Windows Server 2003 | 14.3% |
Analysis
Subsystem: | Windows CUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x00400000 |
Entry Address: | 0x0000779a |
PE Sections:
Name | Size of data | MD5 |
.text | 128000 | 83d209c1cb42f196076b0b806d37f6ee |
.rdata | 45568 | 7881067ccbd6c373e2a388de0ee98b35 |
.data | 2560 | 9feaed8c93f4a5b5b9a365d49e7facd3 |
.gfids | 512 | 45c9e970b68ba03dad926e5dc49f1d09 |
.rsrc | 61440 | 4fb18aec29bf98fb530af090cb849575 |
.reloc | 6144 | c3aec152305abf246078fa5b1e108c45 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for csrs.exe