n00bfest.com
Home Forum phpBB3 Shoutbox Servers Teamspeak Admins Donate FAQ
Sign Up
Stats Contact Us!

 

View unanswered posts | View active topics It is currently Sat Jul 18, 2026 12:09 am



Reply to topic  [ 8 posts ] 
 csrss.exe 
Author Message
[n00b] Member
User avatar

Joined: Mon Jun 16, 2008 11:00 pm
Posts: 924
Post csrss.exe
help, can't close it with task manger, and process manager!!!! I know it's the virus one, what do i do


Wed Nov 12, 2008 1:31 am
Profile
[n00b] Member
User avatar

Joined: Sat Jan 06, 2007 12:00 am
Posts: 2713
Post 
csrss.exe is the main executable for the Microsoft Client/Server Runtime Server Subsystem. This process manages most graphical commands in Windows. This program is important for the stable and secure running of your computer and should not be terminated. Under normal circumstances, CSRSS cannot be terminated with the tskill command or with Windows Task Manager, though it is possible in Vista if the Task Manager is run in Administrator mode.

Now im reading that there is a trojan that is writen on visual basic 6, and that it copies to the windows folder in this path:

c:\windows\csrss.exe

Does it ask you to download some kind of spyware?

Before you try to do something, check your performance, check if you need an update on ram or whatnot, if you then, are sure you have a virus, update your antivirus then, use your windows firewall to bock some connections, try the ones you dont know, then boot your machine, go safe mode with no nwtwork connections(the rojan will be isolated) and then run scans and terminate the shit.

If you dont find anything with your antivirus software, try downloading this 'process manager of System Mechanic', maybe its a camouflaged trojan, and you wont be abble to detect it using a virus or malware scanner.


Wed Nov 12, 2008 12:57 pm
Profile
[n00b] Member
User avatar

Joined: Wed Sep 07, 2005 11:00 pm
Posts: 1798
Location: NJ
Post 
Virus scan?

_________________
Image[URL=http://www.habamon.com/monster/extra]Image
Help me raise my Habamon![/URL]


Wed Nov 12, 2008 3:43 pm
Profile
[n00b] Member
User avatar

Joined: Mon Jun 16, 2008 11:00 pm
Posts: 924
Post 
There's two crss.exe running, one in the system32 folder and another in the amd64_windows or something, There should be only one right?

_________________
I won't even open a magazine unless I'm 95% sure there's going to be nudity


Wed Nov 12, 2008 4:35 pm
Profile
[n00b] Member
User avatar

Joined: Sat Jan 06, 2007 12:00 am
Posts: 2713
Post 
Indeed, if you have 2 and performance issues, you have to consider tha fact that you sir, have a backdoor trojan. And perform virus and or trojan removal inmediatly, if not successfull, c:format.


Wed Nov 12, 2008 6:09 pm
Profile
[n00b] Member
User avatar

Joined: Mon Jun 16, 2008 11:00 pm
Posts: 924
Post 
I don't want to format!!!

_________________
I won't even open a magazine unless I'm 95% sure there's going to be nudity


Wed Nov 12, 2008 9:31 pm
Profile
[n00b] Member
User avatar

Joined: Sat Jan 06, 2007 12:00 am
Posts: 2713
Post 
Now dont be scared, i whas saying if not successfull.


Wed Nov 12, 2008 10:12 pm
Profile
Game Server Admin
User avatar

Joined: Sun May 11, 2008 11:00 pm
Posts: 840
Post 
Try using a clamav live CD if necessary. It'll scan your computer without running windows and allow you to remove the files outside of windows.


Thu Nov 13, 2008 12:23 am
Profile
Display posts from previous:  Sort by  
Reply to topic   [ 8 posts ] 

Who is online

Users browsing this forum: No registered users and 4 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.
Designed by STSoftware for PTF.