I used Malwarebytes several days ago and found lots of viruses - but noticed they kept coming back after every startup!! Then I located C:\Users\Peter\AppData\Roaming\Microsoft\conhost.exe in the startup processes.... so I disabled it. Now how can I remove it?? I also found several crss.exe on my system, how can I check which ones are real? I'm sorry if I've posted this in the wrong forum. I just really want help. Thanks! I meant csrss.exe Also, are there any other files I should look out for? I've done a scan with Malwarebytes and I currently have no malware on my system.