| n00bfest http://www.n00bfest.com/phpBB3/ |
|
| csrss.exe http://www.n00bfest.com/phpBB3/viewtopic.php?f=11&t=25525 |
Page 1 of 1 |
| Author: | State_Radio [ Wed Nov 12, 2008 1:31 am ] |
| Post subject: | csrss.exe |
help, can't close it with task manger, and process manager!!!! I know it's the virus one, what do i do |
|
| Author: | Ginzu [ Wed Nov 12, 2008 12:57 pm ] |
| Post subject: | |
csrss.exe is the main executable for the Microsoft Client/Server Runtime Server Subsystem. This process manages most graphical commands in Windows. This program is important for the stable and secure running of your computer and should not be terminated. Under normal circumstances, CSRSS cannot be terminated with the tskill command or with Windows Task Manager, though it is possible in Vista if the Task Manager is run in Administrator mode. Now im reading that there is a trojan that is writen on visual basic 6, and that it copies to the windows folder in this path: c:\windows\csrss.exe Does it ask you to download some kind of spyware? Before you try to do something, check your performance, check if you need an update on ram or whatnot, if you then, are sure you have a virus, update your antivirus then, use your windows firewall to bock some connections, try the ones you dont know, then boot your machine, go safe mode with no nwtwork connections(the rojan will be isolated) and then run scans and terminate the shit. If you dont find anything with your antivirus software, try downloading this 'process manager of System Mechanic', maybe its a camouflaged trojan, and you wont be abble to detect it using a virus or malware scanner. |
|
| Author: | G_I_Joe [ Wed Nov 12, 2008 3:43 pm ] |
| Post subject: | |
Virus scan? |
|
| Author: | State_Radio [ Wed Nov 12, 2008 4:35 pm ] |
| Post subject: | |
There's two crss.exe running, one in the system32 folder and another in the amd64_windows or something, There should be only one right? |
|
| Author: | Ginzu [ Wed Nov 12, 2008 6:09 pm ] |
| Post subject: | |
Indeed, if you have 2 and performance issues, you have to consider tha fact that you sir, have a backdoor trojan. And perform virus and or trojan removal inmediatly, if not successfull, c:format. |
|
| Author: | State_Radio [ Wed Nov 12, 2008 9:31 pm ] |
| Post subject: | |
I don't want to format!!! |
|
| Author: | Ginzu [ Wed Nov 12, 2008 10:12 pm ] |
| Post subject: | |
Now dont be scared, i whas saying if not successfull. |
|
| Author: | Jet [ Thu Nov 13, 2008 12:23 am ] |
| Post subject: | |
Try using a clamav live CD if necessary. It'll scan your computer without running windows and allow you to remove the files outside of windows. |
|
| Page 1 of 1 | All times are UTC - 6 hours [ DST ] |
| Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group http://www.phpbb.com/ |
|