Can't see My Reply(s)

[JamesJ]

I'm trying to reply to "pacinitaly" in my post:
What is csrss.exe?
I've replied twice and after 5 minutes I can't see my replies.
Can anyone else see my replies or is just me??

James

 

[Ǝиçεl]

I see a total of 3 replays.

http://www.microsoft.com/communitie...2657&mid=5dae327f-f09b-4f2b-bd35-0e07d2e52657

Maybe servers were down.
-=-

 

[Ben M. Schorr - MVP (OneNote)]

See if this helps: http://www.lmgtfy.com/?q=csrss.exe

--
-Ben-
Ben M. Schorr, MVP
Roland Schorr & Tower
http://www.rolandschorr.com
http://www.officeforlawyers.com
Author - The Lawyer's Guide to Microsoft Outlook 2007:
http://tinyurl.com/5m3f5q

 

[JamesJ]

I don't see any replies I made to "pacinitaly"
I do see my replies to "Peter Foldes"
The replies are in my sent items in windows mail. Can't figure this out.

Thanks,
James

 

[JamesJ]

I've already done that. I'm a bit concerned that it's a worm 'cause I was
told
the file is used only in Windows XP.

James

 

[Ben M. Schorr - MVP (OneNote)]

No, it's in Vista too. That doesn't mean the one you have ISN'T a worm,
but it's mere existence doesn't tell us that one way or the other. Do
you have CSRSS.EXE in a folder other than %systemroot%\system32\ ?

Have you scanned your system with more than one anti-malware product?

--
-Ben-
Ben M. Schorr, MVP
Roland Schorr & Tower
http://www.rolandschorr.com
http://www.officeforlawyers.com
Author - The Lawyer's Guide to Microsoft Outlook 2007:
http://tinyurl.com/5m3f5q

 

[JamesJ]

The only instance I can find using Search is in %systemroot%\system32\.
I'm currently running AVG Free scan (paused) and I also ran
a scan with Windows Defender.
Although I do recall seeing it 2 times in processes.
One thing I might bring up here. When I right clicked on it and selected
'End Process'
my computer restarted top a blue screen with much info but before I can
gather
any of it I was presented with Vista's bad shutdown screen (or what ever
it's called
with the startup options, Safe Mode, Safe Mode with network...). Is this
normally what
happens when one shuts down the process if it's a Vista process?

James

 

[Jonathan Harker]

I've already done that. I'm a bit concerned that it's a worm 'cause I was
told the file is used only in Windows XP.

Have you run any anti-malware programs yet or are you spending all
your time here posting and then looking for your older posts?

 

[Ben M. Schorr - MVP (OneNote)]

That all sounds pretty normal to me. I'd be tempted to give it one more
scan with something else - maybe Trend's free online scanner HouseCall.
(http://housecall.antivirus.com if I recall correctly) just for a little
extra peace of mind.

--
-Ben-
Ben M. Schorr, MVP
Roland Schorr & Tower
http://www.rolandschorr.com
http://www.officeforlawyers.com
Author - The Lawyer's Guide to Microsoft Outlook 2007:
http://tinyurl.com/5m3f5q

 

[JamesJ]

Thanks much,
James

That all sounds pretty normal to me. I'd be tempted to give it one more
scan with something else - maybe Trend's free online scanner HouseCall.
(http://housecall.antivirus.com if I recall correctly) just for a little
extra peace of mind.

--
-Ben-
Ben M. Schorr, MVP
Roland Schorr & Tower
http://www.rolandschorr.com
http://www.officeforlawyers.com
Author - The Lawyer's Guide to Microsoft Outlook 2007:
http://tinyurl.com/5m3f5q

 

[JamesJ]

No, I'm playing with my pee-pee. Wanna help?

Have you run any anti-malware programs yet or are you spending all
your time here posting and then looking for your older posts?

 

[Ǝиçεl]

Hello James,

Go to Jotti's site

<http://virusscan.jotti.org/>

In the file to upload area press Browse then follow the path to the exe file :

Then press Submit and copy and paste the results to notepad and save them so
you can post back the results if needed.


This could well be a false positive.

One way to get further information is to find

CSRSS.EXE

on your system, and submit the file at one or more of the following sites:

<http://www.virustotal.com>

<http://virusscan.jotti.org>

Each has a browse window in the upper right to do the submission, and will
check out your file with 10 or so antivirus vendors with one submission.

In the file to upload area press Browse then follow the path to the exe
file: CSRSS.EXE

Then press Submit and copy and paste the results to notepad and save them so
you can post back the results if needed.

A clean reading at these sites is not proof that a file is safe, but I'd say
in this case that it is likely to be a good indicator that, in fact, the file
is safe, and you are seeing a false positive.
--
Also, You can submit a sample from here:

<http://www.microsoft.com/security/portal/>
--

If you submit the suspicious file(s) to http://virscan.org/index.php
and "if the file you upload is detected as suspicious, VirSCAN
will send the file and report off to the antivirus vendors participating in
the
VirSCAN service to be analyzed. Antivirus companies will update the
signature virus database if a real malware is found." Microsoft, McAfee,
Symantec, and many other security software vendors participate.
--

Report problems and check for solutions automatically

<http://windowshelp.microsoft.com/Windows/en-US/Help/fba7e7c3-2aec-46e4-9a32-968aa620f35b1033.mspx>

It would be a good idea to scan.

I recommend downloading and installing MalwareBytes' Antimalware (MBAM) and
SUPERAntiSpywaÑe (SAS).

Do a full scan with MalwaÑeBytes' and SUPERAntiSpywaÑe.

<http://www.superantispyware.com/>

Reboot
-=-

<http://www.malwarebytes.org/mbam.php>
Reboot
-=-
The programs are free. (There is a paid version but you don't need to buy it
to remove malware.)
-=-


Good luck



Ǝиçεl

 

[JamesJ]

They all found nothing.

Thanks for the link.
James