A timely warning, Keygrip, for MSN users! I see from my info that it also disables 'regedit' and 'hijackthis' which makes it even harder to 'kill'.
The only query I have is that it has been on my a/v protection system since August 2005 - you may wish to ask Norton why it was not picked up?
For info it works by installing a "
%System%\<random folder name>
\csrss.exe" file and edits the file "
win.ini" to ensure this file is executed at each Windows start.
.......and it is assessed as 'low risk, medium pervasiveness'!!! You have to hope you don't see worse
