System 32

[Guest]

I am fixing a friends computer and it keeps saying that it can't load
c:\WINDOWS\system32\sqrmgyxg\csrss.exe
It won't stop saying this. Also I can't Norton Internet Security to install
on it, and when I try to go to their site, it says can't find server, which
is suspicious because it goes everywhere else. It is a Dell Inspiron 600m,
with WinXP Home.

 

[Rock]

I am fixing a friends computer and it keeps saying that it can't load
c:\WINDOWS\system32\sqrmgyxg\csrss.exe
It won't stop saying this. Also I can't Norton Internet Security to install
on it, and when I try to go to their site, it says can't find server, which
is suspicious because it goes everywhere else. It is a Dell Inspiron 600m,
with WinXP Home.

The name of the folder, sqrmgyxg, under system32 is not a valid windows
folder. That and the fact that you can't install the Norton security
program - suggest it's a form of malware.

http://www.liutilities.com/products/wintaskspro/processlibrary/csrss/

Make sure you have an updated AV with current definitions and scan in
safe mode.

You can also try Trend Micro's sysclean in safe mode:
Trend Micro Sysclean
http://www.trendmicro.com/download/dcs.asp

Trend Micro Signature File
http://www.trendmicro.com/download/pattern.asp

 

[Joe]

I am fixing a friends computer and it keeps saying that it can't load
c:\WINDOWS\system32\sqrmgyxg\csrss.exe
It won't stop saying this. Also I can't Norton Internet Security to install
on it, and when I try to go to their site, it says can't find server, which
is suspicious because it goes everywhere else. It is a Dell Inspiron 600m,
with WinXP Home.

This may sound weird and you friend may lose some features, but copy
your c:\WINDOWS\system32\sqrmgyxg\csrss.exe on a flash drive and paste
it in your friends computer.

 

[Rick \Nutcase\ Rogers]

What? And infect his friend's machine as well? It's a virus, plain and
simple. The system should be booted to safe mode where both the folder
sqrmgyxg and the registry run string that loads csrss.exe in it should be
deleted.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org