TrojanDownloader:Win32/Recslurp.B

The following can indicate that you have this threat on your PC:

• You see these files:
• %APPDATA%\csrss.exe
• %APPDATA%\svchost.exe
• %APPDATA%\rundll32.exe
  
• You see registry modifications such as:
   
• In subkey: HKCU\software\microsoft\windows\currentversion\run
  Sets value: "Client Server Runtime Process"
  With data: "%APPDATA%\csrss.exe"
   
• In subkey: HKCU\software\microsoft\windows\currentversion\run
  Sets value: "Service Host Process for Windows"
  With data: "%APPDATA%\svchost.exe"
   
• In subkey: HKCU\software\microsoft\windows\currentversion\run
  Sets value: "Host-process Windows (Rundll32.exe)"
  With data: "%APPDATA%\rundll32.exe"
   
• The presence of a mutex such as:
     
  • Global\{70D4DFB2-5794-165E-E23A-6CD80ED72355}
  • Local\{807B5984-D1A2-E6F1-E23A-6CD80ED72355}