csrss.exe

It says that csrss.exe is a trojan as well as smss.exe. Is
this legit or a false warning?

If it's a Microsoft file (check it's properties) it's not, if it's Nimda.E
then it's a virus. These files have had some viruses that appear to run as
the legitimate processes.

If you're not sure about a file, Google it. You should come up with
additional information on them.

csrss.exe and smss.exe should be in Windows\System32 folder and should show
Microsoft info on it.


"jeff" <anonymous@discussions.microsoft.com> wrote in message
news:0c9e01c4f46f$f5540d10$a401280a@phx.gbl...
> It says that csrss.exe is a trojan as well as smss.exe. Is
> this legit or a false warning?

jeff wrote:
> It says that csrss.exe is a trojan as well as smss.exe. Is
> this legit or a false warning?

Jeff,

That would depend on the location of the files that are being detected
as trojans. Both are *usually* legitimate if they are located in the
WINDOWS\system32 folder. smss.exe should NOT be loading via Msconfig at
Startup.

For further info on their legitimacy go here and input them in the
Search field :
http://castlecops.com/StartupList.html


Steve Wechsler (akaMowGreen)
MVP Windows Server
AumHa VSOP