Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.
Hi all, please see this major site announcement: https://www.boards.ie/discussion/2058427594/boards-ie-2026

I think I have a trojan on my laptop

  • 01-03-2014 03:37PM
    #1
    xK Marcus
    Registered Users, Registered Users 2 Posts: 220 ✭✭


    I noticed my laptop being quite slow, so I opened up process explorer to check out what was going on, and there are two csrss.exe running, one of which was using up a fair bit of my cpu (not anymore), and also about 15 svchost.exe running, which is more then there should be I believe, a couple of which are also using up a decent amount of cpu. I googled some stuff about it and many results say that it could be a trojan. I ran a scan with Avast, but it says it found nothing.


Comments

  • #2
    rolliepoley
    Closed Accounts Posts: 2,871 ✭✭✭rolliepoley


    Get this a scan.

    https://www.malwarebytes.org/


  • #3
    xK Marcus
    Registered Users, Registered Users 2 Posts: 220 ✭✭xK Marcus


    rolliepoley wrote: »
    Get this a scan.

    https://www.malwarebytes.org/

    Ok, running that scan now, shouldn't take too long, I'll post when finished.


  • #4
    xK Marcus
    Registered Users, Registered Users 2 Posts: 220 ✭✭xK Marcus


    Scan completed, nothing found.


  • #5
    PropJoe10
    Registered Users, Registered Users 2 Posts: 5,526 ✭✭✭PropJoe10


    Try making a boot disc/USB with Avast and boot into it. It scans outside Windows and can often pick up things that a scan inside Windows will miss. Open the Avast interface, click on Tools >> Rescue CD.


  • #6
    gouche
    Registered Users, Registered Users 2 Posts: 420 ✭✭gouche


    It's not uncommon to have more than one instance of csrss.exe in Task Manager.
    Likewise, multiple instances of svchost are not uncommon either.

    If you're concerned you can use a tool like What's Running to get more information on the processes running on your computer including their run directory.


  • Advertisement
  • #7
    xK Marcus
    Registered Users, Registered Users 2 Posts: 220 ✭✭xK Marcus


    gouche wrote: »
    It's not uncommon to have more than one instance of csrss.exe in Task Manager.
    Likewise, multiple instances of svchost are not uncommon either.

    If you're concerned you can use a tool like What's Running to get more information on the processes running on your computer including their run directory.

    Would that not be the same as Process Explorer?

    Where the path information should be, it says error opening process for both csrss.exe. And why was one of them using up so much cpu all of a sudden? same with some of the Svchost, I've never had so many of them running at one time I don't think, and at such usage. They've all slowed down now though.


  • #8
    JOSman
    Registered Users, Registered Users 2 Posts: 500 ✭✭✭JOSman


    Try "adwcleaner".


  • #9
    rolliepoley
    Closed Accounts Posts: 2,871 ✭✭✭rolliepoley


    What os are u using? windows saying it could be faulty profiles on the csrss.exe ones.


  • #10
    Charlie19
    Registered Users, Registered Users 2 Posts: 12,036 ✭✭✭✭Charlie19


    I find Advanced System Care does a thorough enough clean up along with Malwarebytes. Plenty of handy tools in the ASC toolbox.

    http://www.iobit.com/


  • #11
    xK Marcus
    Registered Users, Registered Users 2 Posts: 220 ✭✭xK Marcus


    Sorry for the delay guys, had to go out for a few hours.

    JOSman wrote: »
    Try "adwcleaner".

    Ok, I'll try that one now
    What os are u using? windows saying it could be faulty profiles on the csrss.exe ones.

    I'm using Windows 8.



    So if this scan also comes up clean, does that mean I should be more, or less worried?


  • Advertisement
  • #12
    zenno
    Closed Accounts Posts: 5,377 ✭✭✭zenno


    xK Marcus wrote: »
    I noticed my laptop being quite slow, so I opened up process explorer to check out what was going on, and there are two csrss.exe running, one of which was using up a fair bit of my cpu (not anymore), and also about 15 svchost.exe running, which is more then there should be I believe, a couple of which are also using up a decent amount of cpu. I googled some stuff about it and many results say that it could be a trojan. I ran a scan with Avast, but it says it found nothing.

    ________________________________________________________________

    Having multiple instances of csrss.exe in the task manager is normal. There should be one instance of csrss.exe for system processes and another instance for interactive logons. If you have multiple users logged in, you can have even more instances of crss.exe in the Task Manager.

    Your 15 svchost files are used for many things and would be normal, but there is a virus that can act and seem like a legitimate svchost file, so just scan with malwarebytes in safemode to be sure. Malwarebytes is more powerful in it's scanning in safe-mode.

    When in doubt, scan in safe-mode, always.

    You might want to do a Disk-fragmentation as well. Also a disk clean-up.


  • #13
    zenno
    Closed Accounts Posts: 5,377 ✭✭✭zenno


    xK Marcus wrote: »
    Scan completed, nothing found.

    Stupid question, but did you update malwarebytes before scanning ? if so, disregard this comment.


  • #14
    xK Marcus
    Registered Users, Registered Users 2 Posts: 220 ✭✭xK Marcus


    Ran the scan and it removed some stuff, but none of it related to the processes I'm having trouble with. And yes, all my software is up to date.


  • #15
    gouche
    Registered Users, Registered Users 2 Posts: 420 ✭✭gouche


    I wouldn't be overly worried about it then.
    As said, having multiple instances of system processes running is not uncommon and if multiple scans are showing up nothing then I'd say your ok.

    If you think the processes are using an excessive amount of resources then there could be an issue with them but I don't think you've a trojan.


  • #16
    xK Marcus
    Registered Users, Registered Users 2 Posts: 220 ✭✭xK Marcus


    gouche wrote: »
    I wouldn't be overly worried about it then.
    As said, having multiple instances of system processes running is not uncommon and if multiple scans are showing up nothing then I'd say your ok.

    If you think the processes are using an excessive amount of resources then there could be an issue with them but I don't think you've a trojan.

    Ok thanks, I'll keep an eye on it for now.


  • #17
    biko
    Registered Users, Registered Users 2 Posts: 81,060 ✭✭✭✭biko


    "I think I have a virus"


  • #18
    itsirishfarmer
    Banned (with Prison Access) Posts: 52 ✭✭itsirishfarmer


    do you have Lenovo computer


  • #19
    xK Marcus
    Registered Users, Registered Users 2 Posts: 220 ✭✭xK Marcus


    itsirishfarmer wrote: »
    do you have Lenovo computer

    No, Samsung


  • #20
    Paulie Gualtieri
    Closed Accounts Posts: 420 ✭✭Paulie Gualtieri


    This sounds like a silly program but superantispyware is really good for removing anything . its not great as a preventative program but its a really good as an after the fact virus removal tool.

    Give it a go.


  • #21
    tricky D
    Closed Accounts Posts: 9,698 ✭✭✭tricky D


    crap cleaner is worth giving a run. https://www.piriform.com/ccleaner‎


  • Advertisement
  • #22
    jimmy5694
    Registered Users, Registered Users 2 Posts: 82 ✭✭jimmy5694


    they say spybot is good aswell


  • #23
    Charlie19
    Registered Users, Registered Users 2 Posts: 12,036 ✭✭✭✭Charlie19


    jimmy5694 wrote: »
    they say spybot is good aswell

    From what I can remember spybot is a costly utility and there is equally better tools out there for free.


  • #24
    Paulie Gualtieri
    Closed Accounts Posts: 420 ✭✭Paulie Gualtieri


    Charlie19 wrote: »
    From what I can remember spybot is a costly utility and there is equally better tools out there for free.

    Spybot is free AFAIK.


  • #25
    Charlie19
    Registered Users, Registered Users 2 Posts: 12,036 ✭✭✭✭Charlie19


    The version I used, scanned the machine and found some items but to get rid of the items, the pro/paid version was required.


  • #26
    Paulie Gualtieri
    Closed Accounts Posts: 420 ✭✭Paulie Gualtieri


    Charlie19 wrote: »
    The version I used, scanned the machine and found some items but to get rid of the items, the pro/paid version was required.

    Always thought it was just donations if you wanted. I'll take your word on it. Saying that its been a couple of years since I downloaded .

    Must DL it and give it a go , good to do a scan with different anti-viruses now and again.


  • #27
    rolliepoley
    Closed Accounts Posts: 2,871 ✭✭✭rolliepoley


    Trojan Killer is a good one.


  • #28
    Paulie Gualtieri
    Closed Accounts Posts: 420 ✭✭Paulie Gualtieri


    rolliepoley wrote: »
    Trojan Killer is a good one.

    Good program . DL'd it hoping for a trial but none available . It did pick up a few problems. Which I was surprised at.


Advertisement
Advertisement