Thread: csrss.exe?
View Single Post
Old 06-10-2006, 07:29 PM   #2 (permalink)
greyknight17
Analyst, Security Team
 
greyknight17's Avatar
 
Join Date: Jul 2004
Location: New York
Posts: 14,331
OS: Windows 98 & Windows XP Home/Pro

My System

greyknight17.... Program was discontinued...

I don't see any signs of it...you are probably talking about the MSN virus. Be careful because there is a legitimate file called csrss.exe and you don't want to delete it. Let's use the tool to check:

Download MsnVirRem at http://www.greyknight17.com/spy/MsnVirRem.exe and save it to your desktop.

First close any other programs you have running as this will require a reboot. Double click MsnVirRem.exe to run it. Once open, click the button labeled 'Search and Destroy'. Your computer will now be scanned for Infected Files. When scanning is finished you will be prompted to reboot only if infected. Click OK. Now click the 'REBOOT' button.

After the reboot, you will receive file not found errors (usually 4). Please acknowledge them and continue. A message should popup from MsnVirRem. If not, double click the program again and it will finish. Post the contents of C:\msnvirrem.log along with a fresh HijackThis log.
__________________
Please do NOT PM me. Post whatever questions you may have in the forum and we will take a look at it when we get to it. If you have waited for more than 3 days, you may then and ONLY then PM me for assistance. I will take a look at it.

greyknight17 is offline