Csrss.exe problem

[Suresh Lohar]

Hi evry one

whenever I start my computer I always get this message window

very first that CSRSS.exe has encountered a problem and needs to close,

we are sorry for inconvinience. Sometimes using internet, same message

repeated again. many of times I have send error report, as asked in that

message window but nothing happend. Is this is serious problem.

Please help,what's going on..



Suresh Lohar

 

[Wesley Vogel]

CSRSS.exe is a legitimate XP file. CSRSS.exe can also be malware.

Update your antivirus software and run a full system scan.

Update whatever anti-spyware applications that you have and run a full
system scan with each one.

You might need to start in Safe Mode to run your antivirus and anti-spyware
software.

Running a full system antivirus scan or anti-spyware scan in Safe Mode can
be a good idea. Some viruses and other malware like to conceal themselves
in areas Windows protects while using them. Safe mode will prevent those
applications access and therefore unprotect the viruses or other malware
allowing for easier removal.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[David H. Lipman]

From: "Suresh Lohar" <[email protected]>

|
| Hi evry one
|
| whenever I start my computer I always get this message window
|
| very first that CSRSS.exe has encountered a problem and needs to close,
|
| we are sorry for inconvinience. Sometimes using internet, same message
|
| repeated again. many of times I have send error report, as asked in that
|
| message window but nothing happend. Is this is serious problem.
|
| Please help,what's going on..
|
| Suresh Lohar
|


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *

 

[Suresh Lohar]

I run antivirus windows live onecare and found that csrss.exe file is
infected but this
software is unable to clean. so its quartine.
what should I do next

thanx

 

[David H. Lipman]

From: "Suresh Lohar" <[email protected]>

| I run antivirus windows live onecare and found that csrss.exe file is
| infected but this
| software is unable to clean. so its quartine.
| what should I do next
|
| thanx
|

OneCare is Beta and junk. You are *lucky* it found anything at all !

Us ethe Multi AV Scanning Tool I suggested. It contains the command line AV scanners from
the well known, quality, AV vendors; McAfee, Sophos, Trend Micro and Kaspersky.

Becuase they are command line scanners, they have a much better chance of the, un-named,
infector's removal.

 

[Suresh Lohar]

with Mcfee things seems to be correct.

Thanks

 

[David H. Lipman]

From: "Suresh Lohar" <[email protected]>

| with Mcfee things seems to be correct.
|
| Thanks
|

Are you saying that you used the McAfee module in the Multi AV Scanning Tool and it
corrected your problem ?

 

[Suresh Lohar]

No I used Mcfee antivirus software, which is already installed on my
computer did that.

 

[David H. Lipman]

From: "Suresh Lohar" <[email protected]>

| No I used Mcfee antivirus software, which is already installed on my
| computer did that.
|

Thanx for that information.

You should have used the Multi AV Scanning Tool because it uses the McAfee command line
scanner. You undoubtedly are using a Retail version of McAfee VirusScan which does not
include the command line scanner. It has been programmed to be aggressive and find
non-viral malware as well as use Heuristic scanning. It also adds Sophos, Trend Micro and
Kaspersky scanners. The reason I include four scanners in my tool is that one may catch
what another may miss.