View Single Post
Old 10-24-2009, 12:17 PM   #5
richlevy
King Of Wishful Thinking
 
Join Date: Jan 2001
Location: Philadelphia Suburbs
Posts: 6,669
csrss.exe is both an important Windows process and a trojan running under the same name. I believe csrss has something to do with card readers or client/server.

If you have Process Explorer (link to Microsoft Download) or another improved task manager, it will give you a full name and the Company name, although this can be faked.

crss.exe is definitely a trojan/virus.

From here

Quote:
.svchostX CSRSS.EXE Added by the WEBUS.F TROJAN! Note - this worm replaces the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!
So if you do START-RUN and start MSCONFIG, you should not see CSRSS.EXE in the list. If you do, you definitely have the trojan. If that's the case, search your hard drive and remove the one that is not in your system folder.

Here are basic instructions.

Good Hunting.
__________________
Exercise your rights and remember your obligations - VOTE!
I have always believed that hope is that stubborn thing inside us that insists, despite all the evidence to the contrary, that something better awaits us so long as we have the courage to keep reaching, to keep working, to keep fighting. -- Barack Hussein Obama

Last edited by richlevy; 10-24-2009 at 12:23 PM.
richlevy is offline   Reply With Quote