Help please? May still have virus I dont know

[Josh7]

Like an Idiot I download a virus and I should have seen it coming. I quickly found it and ended it's process in the task manager. I download Superantispyware removal and it only found cookies. But then I went into my Mcafee qurranted files and found this (Picture below)

When the virus installed it popped up a fake anti-virus is the .EXE file showed below associated with fake ant-virus?

Also - I no csrss.exe is a critical file. But is it a virus? I tried deleting it says the same message as anything you try to delete but if it such a critical file why should I be aloud to?

My Mcafee didn't pick up anything else but these 3. Even running a scan right now. Nothing. Should I worry?

Thanks

 

[Borg 386]

I don't trust McAfee myself, I've had bad experiences with it.

D/L & installing MSE would be the easy path and let it remove it.

http://www.microsoft.com/security_essentials/

Information and removal instructions for syssvc:

How to remove SYSSVC.EXE|Virus Com

BTW, MSE will run and play well with McAfee if you decide to install it. Doesn't hurt to have an extra layer of protection.

 

[G1LLY]

Have you tried running a scan with Malwarebytes' Anti-Malware?

Also maybe try Hitman Pro - Downloads - SurfRight

Another thing to try is go to a System Restore point before you got the virus

 

[Jacee]

Establishing Whether Csrss.exe is a Windows Process Or a Virus

Syssvc.exe is a Trojan/Backdoor.
Backdoor Trojans provide the author or ‘master’ of the Trojan with remote ‘administration’ of victim machines. Unlike legitimate remote administration utilities, they install, launch and run invisibly, without the consent or knowledge of the user. Once installed, backdoor Trojans can be instructed to send, receive, execute and delete files, harvest confidential data from the computer, log activity on the computer and more.
If your computer was used for online banking or has credit card information on it, all passwords should be changed immediately to include those used for email, eBay and forums.
You should consider them to be compromised.
They should be changed by using a different computer and not the infected one, if not an attacker may get the new passwords and transaction information.
Banking and credit card institutions should be notified of the possible security breech.
More info can be found below:

How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?
How to report ID theft, fraud, drive-by installs, hijacking and malware? Security | DSLReports.com, ISP Information
When should I re-format? How should I reinstall?
When should I re-format? How should I reinstall? Security | DSLReports.com, ISP Information

 

[Josh7]

I don't trust McAfee myself, I've had bad experiences with it.

D/L & installing MSE would be the easy path and let it remove it.

http://www.microsoft.com/security_essentials/

Information and removal instructions for syssvc:

How to remove SYSSVC.EXE|Virus Com

BTW, MSE will run and play well with McAfee if you decide to install it. Doesn't hurt to have an extra layer of protection.

May I ask why you don't trust Mcafee? And I don't like security essentials it's installed on my PC already and it's disabled can't remove it. And at the person who suggested system restore...this is a good idea I just fear it will make my system run slow...what do you think should I?

 

[Josh7]

Have you tried running a scan with Malwarebytes' Anti-Malware?

Also maybe try Hitman Pro - Downloads - SurfRight

Another thing to try is go to a System Restore point before you got the virus

I tried MWB,

It found this exactly what I was looking for

This look like it be it though?

 

[Jacee]

Be sure that everything is checked, and click Remove Selected (MBam)

 

[parabellum]

I'd also post a HiJackThis log for review, just to make sure everything is gone.

 

[Jacee]

Unfortunately, HJT isn't going to show that backdoor trojan

 

[parabellum]

Unfortunately, HJT isn't going to show that backdoor trojan

But it may bring something else up, so it would be a good idea to run it anyway. To the OP, I also forget to mention ComboFix if something is still wrong. That should kill any remaining malware.

 

[Jacee]

Combofix won't run on 64 bit.

 

[Borg 386]

May I ask why you don't trust Mcafee? And I don't like security essentials it's installed on my PC already and it's disabled can't remove it. And at the person who suggested system restore...this is a good idea I just fear it will make my system run slow...what do you think should I?

Ummm...where to start........

It hosed a lot of XP systems....OK, mistakes happen.

About 2 months after that debacle, it upgraded it's security center and hosed itself on Win 7 Machines, including mine. It hosing itself so badly that going back 2 or 3 restore points didn't fix it, and it also kindly corrupted several of my 7 files. I had to fix my PC as well as several friends who had the same problem.

Not being satisfied with having hosed XP & 7 OS's, it turned it's sights on Vista machines, where it did the same thing with an "update" a couple months later.

It continually told me that my flash drive was "Okie Dokie" when MSE caught several worms/viruses that were going around school. Even after MSE confirmed the viruses, I once again scanned it with McAfee and it still said "Lookin good".

That is why I don't, and never will, trust it. What AV is the best is always under debate and what you use is up to you. I would suggest looking at this:

http://www.sevenforums.com/system-security/72070-whats-best-anti-virus.html