Process Name: RegDone Ex
Filename: csrss.exe
Fix RegDone Ex errors: Run a free scan RegDone Ex Information: Added by the WEBUS TROJAN! Note - this worm replaces the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!