Forum Home
Press F1
 
Thread ID: 77445 2007-03-10 03:19:00 csrss.exe help sethros (11978) Press F1
Post ID Timestamp Content User
531621 2007-03-10 03:19:00 Some how i got csrss.exe. Its in my processes and i have 2 versions of it in there. They werent there before and now its affected msn and comp speed. It wont allow me to delete it because its a critical system process. It wont allow me to go into msconfig for more then 2 seconds.AVG doesnt pick it up when scanning it and ive tried adaware aswell. Can some 1 plz help me remove this. sethros (11978)
531622 2007-03-10 04:10:00 Get hijackthjis in my sig below. Unzip it put it in its own folder, then run it, click on scan and save a log.

Then copy and paste the log here.

Does regedit and the taskmanager open?

And get Trojan remover in my sig below. See if that picks up anything. Click on scan, then select the 3rd to 7th option under the utilities menu.
Speedy Gonzales (78)
531623 2007-03-10 16:08:00 When ever i try and run hijackthis my screen flashes and i closes just like when i try and access msconfig and regedit. Every time i try and go to sites that have anti-virus programs it shut down in like 3 seconds. I managed to download the trojan remover after a few minutes cuz my explorer kept coming down. The trojan remover found the csrss file and some other thing and said reset your comp for it to take affect but when i start it up the csrss.exe is still there and i tried the trojan remover again but same thing happend. sethros (11978)
531624 2007-03-10 19:14:00 Hullo

Did you try turning off system restore before running the tool ?
Sp00n (9907)
531625 2007-03-10 22:09:00 When ever i try and run hijackthis my screen flashes and i closes just like when i try and access msconfig and regedit. Every time i try and go to sites that have anti-virus programs it shut down in like 3 seconds. I managed to download the trojan remover after a few minutes cuz my explorer kept coming down. The trojan remover found the csrss file and some other thing and said reset your comp for it to take affect but when i start it up the csrss.exe is still there and i tried the trojan remover again but same thing happend.

Run trojan remover in safe mode, see if that fixes it.

Make sure u update it to the latest database.

Did u select the 3rd to 7th option under the utilities menu too?

Yup turn system restore off too for the time being.
Speedy Gonzales (78)
531626 2007-03-10 22:36:00 I turnd off system restore and i still have the same problems. How do i run my comp in safe mode i have windows xp. I did run the 3rd to 7th options in the utility menu. sethros (11978)
531627 2007-03-10 22:46:00 Leave system restore off, to get into safe mode, hold down F8 (after u reboot), to bring the menu up and select safe mode.

Then run trojan remover again, then do another scan and the options under utilities.

If that doesnt work we may have to delete (if theres any files) in the system restore folders.
Speedy Gonzales (78)
531628 2007-03-10 23:19:00 Well now i only have 1 csrss process running and under the system username. Comp isnt flashing anymore im able to enter regedit and msconfig once again. Ran the trojan remover in safemode and went into msconfig while in safe mode and removed csrss from startup. I also ran the utlilities 3-7. Things are looking good so far is the csrss process under system username a potenial threat? thnx for you help. sethros (11978)
531629 2007-03-10 23:20:00 hijackthis works should i post the logfile? sethros (11978)
531630 2007-03-10 23:23:00 Good to hear msconfig and regedit can open !

Thats a good sign.

Mines running under system so should be alright.
Speedy Gonzales (78)
1 2