Login | Register

Previous in Forum: Am I a Zombie? Spam and Anti-Virus Software   Next in Forum: Automating My Use of the Internet
Close

Comments Format:






Close

Subscribe to Discussion:

CR4 allows you to "subscribe" to a discussion
so that you can be notified of new comments to
the discussion via email.

Close

Rating Vote:







7 comments
Member

Join Date: Mar 2009
Posts: 7

About csrss.exe Trojan File

05/15/2009 2:11 AM

in my task manager i found two file named csrss.exe one with 836k memory and other with 6492k memory. i heard that csrss.exe is a trojan. i attempted to delete it but i can't. please help me in this issue.

Send to a friend Digg this Add to del.icio.us
Interested in this topic? By joining CR4 you can "subscribe" to
this discussion and receive notification when new comments are added.

Comments rated to be "almost" Good Answers:

Check out these comments that don't yet have enough votes to be "official" good answers and, if you agree with them, rate them!
Guest
#1

Re: about csrss.exe trojan file

05/15/2009 2:13 AM

How did you try to delete it?

Did you try Malwarebytes:?

http://malwarebytes.org/

Because it is one of the best free virus removers.

Member

Join Date: Mar 2009
Posts: 7
#2

Re: About csrss.exe Trojan File

05/15/2009 1:34 PM

i'm using kaspersky virus it didn't detect and i used spy sweeper to remove it but it also didn't detect the virus. then i found the file in system32 and used shift+del but it didn't worked. it gives a warning the file is open in another process.

Guru
Panama - Member - New Member Hobbies - CNC - New Member Engineering Fields - Marine Engineering - New Member Engineering Fields - Retired Engineers / Mentors - New Member

Join Date: Dec 2006
Location: Panama
Posts: 1228
Good Answers: 50
#3

Re: About csrss.exe Trojan File

05/15/2009 11:13 PM

Check running processes, and find kill the process. Then try deleting it. If you can not delete it after killing the process, then boot in safe mode and try deleting it. Safe mode should not allow the virus to load into memory. If this doesn't work, malwarebytes as recommended above should be able to handle this. What other damage has the virus done to your system? Can you restore to a previous state? Also note that some viruses can hijack your virus software, preventing you from updating the virus software (typically redirecting you to an incorrect site, and blocking access to the correct site).

Active Contributor

Join Date: Dec 2008
Location: Harrisburg, PA, USA
Posts: 11
Good Answers: 2
#4

Re: About csrss.exe Trojan File

05/15/2009 11:31 PM

Csrss.exe is a core Windows process. Although there IS at least one malware program which masquerades as this program, in Windows, it is the Client/Server runtime System (the client side version of Win32.sys). This process cannot be ended from the Task Manager.

See here:

http://support.microsoft.com/search/default.aspx?catalog=LCID%3D1033&query=csrss.exe&mode=r

for additional details.

Score 1 for Good Answer
Guest
#5

Re: About csrss.exe Trojan File

05/15/2009 11:59 PM

There are several versions of this TROJAN listed on the startup programs database here http://www.sysinfo.org/startuplist.php There is also a legitimite csrss.exe process which is a part of windows. Proceed with caution! There is a super duper program called process explorer available as a free down load which will allow you to kill it. Just google process explorer and get it from a legimite site. I recomend MajorGeeks.com. You can kill it with process explorer then delete it but as I said proceed with caution. MajorGeeks.com has a host of experts which will help you with this problem. They are working free in their spare time just for the fun of it so be nice!

Score 1 for Good Answer
Guest
#6

Re: About csrss.exe Trojan File

05/16/2009 1:25 AM

Client Server Runtime Process = CSRSS.EXE y have 3.

© Microsoft Corporation. All rights reserved.

Microsoft® Windows® Operating System

It`s a trojan?... A Trojan of Microsoft

Guest
#7

Re: About csrss.exe Trojan File

08/06/2009 2:41 PM

yesterday i noticed my internet connection had slowed considerably, checked processes and noticed i had 2 items called csrss.exe in my processes list. when i tried to end the process my comp crashed. Looked around a bit, tried Malwarebytes Anti-Malware and it seems to have fixed it=)

http://www.malwarebytes.org/mbam.php

7 comments
Interested in this topic? By joining CR4 you can "subscribe" to
this discussion and receive notification when new comments are added.

Comments rated to be "almost" Good Answers:

Check out these comments that don't yet have enough votes to be "official" good answers and, if you agree with them, rate them!
Copy to Clipboard

Users who posted comments:

cwarner7_11 (1), Guest (4), poppaman2 (1), sants44 (1)

Previous in Forum: Am I a Zombie? Spam and Anti-Virus Software   Next in Forum: Automating My Use of the Internet
You might be interested in: Web Application Software, Network Security Platforms, Process Monitors