|
Page 1 of 1
|
[ 8 posts ] |
|
| Author |
Message |
|
State_Radio
[n00b] Member
Joined: Mon Jun 16, 2008 11:00 pm Posts: 924
|
 csrss.exe
help, can't close it with task manger, and process manager!!!! I know it's the virus one, what do i do
|
| Wed Nov 12, 2008 1:31 am |
|
 |
|
Ginzu
[n00b] Member
Joined: Sat Jan 06, 2007 12:00 am Posts: 2713
|
csrss.exe is the main executable for the Microsoft Client/Server Runtime Server Subsystem. This process manages most graphical commands in Windows. This program is important for the stable and secure running of your computer and should not be terminated. Under normal circumstances, CSRSS cannot be terminated with the tskill command or with Windows Task Manager, though it is possible in Vista if the Task Manager is run in Administrator mode.
Now im reading that there is a trojan that is writen on visual basic 6, and that it copies to the windows folder in this path:
c:\windows\csrss.exe
Does it ask you to download some kind of spyware?
Before you try to do something, check your performance, check if you need an update on ram or whatnot, if you then, are sure you have a virus, update your antivirus then, use your windows firewall to bock some connections, try the ones you dont know, then boot your machine, go safe mode with no nwtwork connections(the rojan will be isolated) and then run scans and terminate the shit.
If you dont find anything with your antivirus software, try downloading this 'process manager of System Mechanic', maybe its a camouflaged trojan, and you wont be abble to detect it using a virus or malware scanner.
|
| Wed Nov 12, 2008 12:57 pm |
|
 |
|
G_I_Joe
[n00b] Member
Joined: Wed Sep 07, 2005 11:00 pm Posts: 1798 Location: NJ
|
Virus scan?
_________________ [URL=http://www.habamon.com/monster/extra]
Help me raise my Habamon![/URL]
|
| Wed Nov 12, 2008 3:43 pm |
|
 |
|
State_Radio
[n00b] Member
Joined: Mon Jun 16, 2008 11:00 pm Posts: 924
|
There's two crss.exe running, one in the system32 folder and another in the amd64_windows or something, There should be only one right?
_________________ I won't even open a magazine unless I'm 95% sure there's going to be nudity
|
| Wed Nov 12, 2008 4:35 pm |
|
 |
|
Ginzu
[n00b] Member
Joined: Sat Jan 06, 2007 12:00 am Posts: 2713
|
Indeed, if you have 2 and performance issues, you have to consider tha fact that you sir, have a backdoor trojan. And perform virus and or trojan removal inmediatly, if not successfull, c:format.
|
| Wed Nov 12, 2008 6:09 pm |
|
 |
|
State_Radio
[n00b] Member
Joined: Mon Jun 16, 2008 11:00 pm Posts: 924
|
I don't want to format!!!
_________________ I won't even open a magazine unless I'm 95% sure there's going to be nudity
|
| Wed Nov 12, 2008 9:31 pm |
|
 |
|
Ginzu
[n00b] Member
Joined: Sat Jan 06, 2007 12:00 am Posts: 2713
|
Now dont be scared, i whas saying if not successfull.
|
| Wed Nov 12, 2008 10:12 pm |
|
 |
|
Jet
Game Server Admin
Joined: Sun May 11, 2008 11:00 pm Posts: 840
|
Try using a clamav live CD if necessary. It'll scan your computer without running windows and allow you to remove the files outside of windows.
|
| Thu Nov 13, 2008 12:23 am |
|
 |
|
|
Page 1 of 1
|
[ 8 posts ] |
|
Who is online |
Users browsing this forum: No registered users and 10 guests |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot post attachments in this forum
|
|