The Cellar  

Go Back   The Cellar > Main > Technology
FAQ Community Calendar Today's Posts Search

Technology Computing, programming, science, electronics, telecommunications, etc.

Reply
 
Thread Tools Display Modes
Old 10-24-2009, 12:17 PM   #1
richlevy
King Of Wishful Thinking
 
Join Date: Jan 2001
Location: Philadelphia Suburbs
Posts: 6,669
csrss.exe is both an important Windows process and a trojan running under the same name. I believe csrss has something to do with card readers or client/server.

If you have Process Explorer (link to Microsoft Download) or another improved task manager, it will give you a full name and the Company name, although this can be faked.

crss.exe is definitely a trojan/virus.

From here

Quote:
.svchostX CSRSS.EXE Added by the WEBUS.F TROJAN! Note - this worm replaces the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!
So if you do START-RUN and start MSCONFIG, you should not see CSRSS.EXE in the list. If you do, you definitely have the trojan. If that's the case, search your hard drive and remove the one that is not in your system folder.

Here are basic instructions.

Good Hunting.
__________________
Exercise your rights and remember your obligations - VOTE!
I have always believed that hope is that stubborn thing inside us that insists, despite all the evidence to the contrary, that something better awaits us so long as we have the courage to keep reaching, to keep working, to keep fighting. -- Barack Hussein Obama

Last edited by richlevy; 10-24-2009 at 12:23 PM.
richlevy is offline   Reply With Quote
Old 10-24-2009, 01:01 PM   #2
xoxoxoBruce
The future is unwritten
 
Join Date: Oct 2002
Posts: 71,105
Quote:
Originally Posted by richlevy View Post
crss.exe is definitely a trojan/virus.
I think csrss.exe is ok, CSRSS.EXE is the trojan.
__________________
The descent of man ~ Nixon, Friedman, Reagan, Trump.
xoxoxoBruce is offline   Reply With Quote
Old 10-24-2009, 02:51 PM   #3
richlevy
King Of Wishful Thinking
 
Join Date: Jan 2001
Location: Philadelphia Suburbs
Posts: 6,669
Quote:
Originally Posted by xoxoxoBruce View Post
I think csrss.exe is ok, CSRSS.EXE is the trojan.
Not sure about caps/non-caps, but crss.exe (without an s after the c) is a trojan. In that case they used a name similar to, but not exactly the same as csrss.
__________________
Exercise your rights and remember your obligations - VOTE!
I have always believed that hope is that stubborn thing inside us that insists, despite all the evidence to the contrary, that something better awaits us so long as we have the courage to keep reaching, to keep working, to keep fighting. -- Barack Hussein Obama
richlevy is offline   Reply With Quote
Old 10-25-2009, 01:50 AM   #4
xoxoxoBruce
The future is unwritten
 
Join Date: Oct 2002
Posts: 71,105
Quote:
Originally Posted by richlevy View Post
Not sure about caps/non-caps, but crss.exe (without an s after the c) is a trojan. In that case they used a name similar to, but not exactly the same as csrss.
Ah, my bad. Thought you had just misspelled it.
__________________
The descent of man ~ Nixon, Friedman, Reagan, Trump.
xoxoxoBruce is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

All times are GMT -5. The time now is 06:51 PM.


Powered by: vBulletin Version 3.8.1
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.