Forum Home
Press F1
 
Thread ID: 50852 2004-11-03 20:05:00 csrss NZHawk (4093) Press F1
Post ID Timestamp Content User
287600 2004-11-03 20:05:00 Norton indicated that csrss.exe was infected with the downloader.trojan.
Sooo, I deleted the file and references to it in the registry. Not a good move. I have Windows XP Home and now the computer gets partially through boot up then shuts down & reboots - and again....
I did back up the registery before making the changes, but I can't even get into safe mode to restore the registry.
Any suggestions would be greatly appreciated.
Thankyou in advance.
NZHawk (4093)
287601 2004-11-03 20:15:00 Pop you windows XP CD in the drive (or rescue disc if you have one) and boot into it (you may have to change your BIOS setting to boot to CD before HDD if it wont boot to the CD).

Once booted into the CD, follow the instructions to choose a system Repair (not install). System file checker will search you XP installation for missing or corrupted files and replace them as necessary. You could try the manual search, where you confirm the action on each file found, and just restore the one deleted file but, be prepared for a long session.

Auto system restore will undo some of your settings but patches and service packs will remain unchanged.

Cheers Murray P
Murray P (44)
287602 2004-11-03 20:30:00 www.liutilities.com

Google first, ask questions later.

Looks like you're up for a reinstall.
whtafo (156)
287603 2004-11-03 21:43:00 Try Murray P's solution then have a look at this thread (pressf1.pcworld.co.nz) for help on how to remove the trojan. tommy (2826)
287604 2004-11-08 01:10:00 SFC is not an available option when I boot from the XP cd. How do I activate SFC? NZHawk (4093)
287605 2004-11-08 01:39:00 Tried typing in at the prompt ...

SFC /scannow
Pheonix (280)
287606 2004-11-08 01:49:00 Did you delete it from the recycle bin as well?
Or is there a chance it's still in there?
45South (4769)
287607 2006-03-30 16:45:00 hello

im using win xp pro and thinking csrss . exe is a virus in my system folder, i renamed it into something else and when i restart my computer i get a fatal error blue screen . .

(currently using another computer)but only after what i did, i got to know recently that its a necessary file, that normally resides in Windows/Systems 32 folder and could also petentially be a malicious file .

i tried getting in to the win xp cd recovery console thinking if i could rename it back to csrss . . some how its not detecting my sata hdrive which contains the system folders . . . :( and made my other ide hdrive into the primary one instead which does not contain any system files . . .

please do tell me what i can do like how i can access the c drive or any bios setting i should be looking into . thanks in advance
encryptme (6357)
287608 2006-03-30 20:31:00 and here is a image link of the error msg:
metalspace.host.sk
encryptme (6357)
287609 2006-03-30 20:36:00 That link says you havent got permission to access that jpg .

Upload it here ( . imagef1 . net . nz/upload/" target="_blank">www . imagef1 . net . nz) and put the link for it back here .
Speedy Gonzales (78)
1 2