If you have this file, check for the WTools (aka WinTools) files on your computer. If it is in c:\windows\ directory, it could be viral. It will also install and place a shortcut to HijackThis on your desktop if you do not already have it installed. Added by the SOKACAPS TROJAN! weblink
Apparently not all the malicious versions of it are in caps? Anywhere else... The second should be located in Windows\winsxs\~. This is the worst virus for slow dial-up, since it can catch you before you can protect yourself. original site
The programmer entitled it the same as a system process to confuse windows and is thus known as a mirror process. Matt H My a-squared anti-virus program detected it as a backdoor/trojan even though it was located in the windows/system32 folder. toti hari It is yet another Microsoft gifts. The other bad news is eventually this thing will invite another virus to your machine.
Staffan Could be Worm Related See also: Link Tom i keep having popups that when i bring to process using task manager it brings to csrss.exe See also: Link kkk I It is critical to system operation; therefore, terminating this process will result in system failure. If csrss.exe is located in a subfolder of C:\, the security rating is 59% dangerous. it is not using any of my CPU though.
Now my pc bluescreens after 10sec after i logged in. The software has no file description. No, it is not. https://answers.microsoft.com/en-us/protect/forum/mse-protect_scanning/is-csrssexe-a-safe-process/26bba20c-2691-4d42-bec4-637436c53c4f This is very possibly related to your graphics/display drivers.
Whenver I delete it, it gets created again by 'winlogon.exe' so now I have to investigate how to clean my winlogon.exe Ian It is a critical system file. David Parleur CSRSS.EXE was the process found running for a notification. Government lets it run in their computers then how harmful can it be. This can be caused by opening the file twice, in which case - creates a ghost file unused in the task bar.
Added by the AHLEM.A WORM! CSsuxx Sounds like a windows subsystem that helps keep your screen cleen between window changes Jeff Painter I only know about this file from what I saw here. See also: Link sd nasty bugger. what the heck does it mean, because the process is there in taskmanager Trystan Webroot's SpySweeper occasionally wants to access this file.
Is still undected by most malicious trojan removers. My computer just keept restarting every time i log on to Windows! Can I copy csrss.exe from another computer to mine? Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup! "KernellApps" definitely not required. "Key Logger" definitely not required.
My internet is way slower than it was two days ago. Site Changelog Community Forum Software by IP.Board Sign In Use Facebook Use Twitter Need an account? This is the first time it ever tried to do so and my Sygate firewall caught it. It can be a virus also!!!
Now I don't know... mike382 Once again, like all system files, even the legitimate system file of Windows called csrss.exe can be used by spyware and keyloggers to attack your computer. Another Windows feature, thank God I also use a Mac.
No problems besides that. i want to throw my computer in the garbage! The program is loaded during the Windows boot process (see Registry key: Winlogon\Shell, win.ini, Run, MACHINE\Run, Userinit, User Shell Folders, RunOnce). BassPig part of the windows pocholo there SHOULD be one of these processess running and it musnt be named in capitals otherwise you have a VIRUS!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!PS: other viruses may manitpulate this
Adam When i tried to shut down my computer my cpu usage went to a 100%. So I guess it will be ok, I will try Security Task Manager to get a third opinion. Once run. InkBall Hold 'Em Mahjong Titans Minesweeper Purble Place Reversi Solitaire Spider Solitaire Tinker Apps ActiveMovie Anytime Upgrade Address Book Backup and Restore Cardfile CardSpace Contacts Desktop Gadgets Diagnostics DriveSpace DVD Maker
Booted normally and then deleted the renamed file and the other instances except for the 2 that should be there. MS Windows NT Kernel-mode User and GDI White Paper. And since spyware writters suck they screw it up so it bogs down your system CyberZilla The csrss.exe process can be hijacked by several viruses, that pose as a messenger service. It can infacted with a virus!
Leave a comment Helpful +0 Report Cole Sep 26, 2008 11:04PM First of all this is probably a virus hold the windows key on your keyboard then press r then in PQ In my computer, it is located in this folder : c:\windows\softwaredistribution\download Luchito_Gallito I discovered csrss.exe & csrss.bin in root directory, after reading this thread I promptly deleted it. It made my computer nearly freeze so i dont know wath went wrong. It can only be in C:\WINDOWS\System32 to be safe; otherwise it is apart of a piece of malware. -- Note for all trainees, you will find this in a lot of
But how could the only csrss.exe that I have be a virus?