Windows can't find C:\Windows\

R

rc

I am attempting to clean my neighors computer and I am getting the
following message as desktop loads: " Windows cannot find
'C:\Windows\csrss.exe'. Make sure you typed the name correctly, and then
try again. To search for a file, click the Start button, and then click
Search.

I have tried to uncheck it in msconfig/statup in the hope that it would not
look to start it (whatever "it" is), but upon reboot it reappears.

Machine in running Avira Antivirus. I have also run MBAM ,
SuperAntispyware, Hijackthis and to date nothing
seems to prevent it from returning. Any guidence/suggestions would be most
appreciated. Thanks
 
P

Pegasus [MVP]

rc said:
I am attempting to clean my neighors computer and I am getting the
following message as desktop loads: " Windows cannot find
'C:\Windows\csrss.exe'. Make sure you typed the name correctly, and then
try again. To search for a file, click the Start button, and then click
Search.

I have tried to uncheck it in msconfig/statup in the hope that it would
not
look to start it (whatever "it" is), but upon reboot it reappears.

Machine in running Avira Antivirus. I have also run MBAM ,
SuperAntispyware, Hijackthis and to date nothing
seems to prevent it from returning. Any guidence/suggestions would be
most
appreciated. Thanks
Click to expand...

A few questions:
- What prompted you to "clean" your neighbours PC?
- What exactly do you do when you "clean" it?
- Does csrss.exe exist in the System32 folder?
- Does the message appear in Safe Mode?
- How long has it been bothering your neighbour?
 
R

rc

He was getting a virus alert message in the bottom right corner of taskbar
along with the windows message I'm posting about... so I updated some of his
spyware and virus protection software. Re-ran them and the virus alert
message went away.
I do see a csrss folder in system 32.
It does appear when booting in safemode and I'm not really sure how long its
been happening. He just mentioned it to me Fri. My guess is he's had it
but it wasn't hampering any other function so he's the type to ignore it as
long as he's still getting on internet.
 
D

Daave

rc said:
I am attempting to clean my neighors computer and I am getting the
following message as desktop loads: " Windows cannot find
'C:\Windows\csrss.exe'.
Click to expand...

The file csrss.exe, if it is in its correct location:

C:\Windows\System32

( *not* C:\Windows )

.... is legit. What makes you think there is a malicious file with the
same name in another location? I'm aware that certain malware infections
do indeed cause this to happen, but what makes you think this is the
case?
Make sure you typed the name correctly, and
then try again. To search for a file, click the Start button, and
then click Search.

I have tried to uncheck it in msconfig/statup in the hope that it
would not look to start it (whatever "it" is), but upon reboot it
reappears.
Click to expand...

If the *it* you are referring to is csrss.exe , you should not uncheck
it -- as long as it it is the legit file. You need to provide more
information!
Machine in running Avira Antivirus. I have also run MBAM ,
SuperAntispyware, Hijackthis and to date nothing
seems to prevent it from returning. Any guidence/suggestions would
be most appreciated. Thanks
Click to expand...

HijackThis will only be helpful if you post to one of the forums
specifically tasked with analyzing those reports.

So far, you have not provided a case that your neighbor's PC is
infected. If you have more information, please shrare it.

If there really is malware, this page should help:

http://www.elephantboycomputers.com/page2.html#Removing_Malware
 
D

Daave

rc said:
I am attempting to clean my neighors computer and I am getting the
following message as desktop loads: " Windows cannot find
'C:\Windows\csrss.exe'. Make sure you typed the name correctly, and
then try again. To search for a file, click the Start button, and
then click Search.

I have tried to uncheck it in msconfig/statup in the hope that it
would not look to start it (whatever "it" is), but upon reboot it
reappears.
Click to expand...

I did some further digging. The legit file shouldn't appear in msconfig
startup, so there might still be something going on. Definitely have a
look here, then:

http://www.elephantboycomputers.com/page2.html#Removing_Malware
 
M

Malke

Daave said:
I did some further digging. The legit file shouldn't appear in msconfig
startup, so there might still be something going on. Definitely have a
look here, then:

http://www.elephantboycomputers.com/page2.html#Removing_Malware
Click to expand...

Thanks, Daave. The OP has already (multi)posted this identical question in
another newsgroup. I replied in that thread that if csrss.exe (which can be
a trojan) was showing up again in Startup after having been removed with
HijackThis (which is what he implied) that the computer is not clean and
something is respawning.

I told him then and I'm telling him again now - he should get guided help at
one of the specialty HJT forums listed at the link above OR his neighbor
(now that I know it is a neighbor's machine which he didn't mention in the
other thread) should take the computer to a *real* computer tech instead.
The neighbor should not use a BigComputerStore/GeekSquad type of place.

To the OP: Please don't multipost like this again. It makes more work for
everyone and you will wind up getting *less* help.

Malke
 
R

rc

thanks all
philo said:
That type of message is typical of what can happen when a virus checker
removes an infected file...but the entry remains in the registry.

The registry entries will need to be removed manually.


Note: It's dangerous to fool with the registry unless you know
specifically what you are doing.
Click to expand...
 
B

Bob

Try "C:\WINDOWS\System32\csrss.exe" or "C:\winnt\system32".

Also make sure you have "hide system files" unchecked.

***DO NOT*&** remove csrss.exe from the Task Manager processes!

The csrss.exe is a critical system process that cannot be removed from the
Task Manager without causing issues with Windows. When attempting to End
Process the csrss.exe you will receive the Unable to Terminate Process
window with the error "This is a critical system process. Task Manager
cannot end this process." It is normal to receive this error.
 
E

Elmo

rc said:
I am attempting to clean my neighbor's computer and I am getting the
following message as desktop loads: "Windows cannot find
'C:\Windows\csrss.exe'. Make sure you typed the name correctly, and then
try again. To search for a file, click the Start button, and then click
Search."

I have tried to uncheck it in MSconfig, Startup in the hope that it would not
look to start it (whatever "it" is), but upon reboot it reappears.

Machine in running Avira Antivirus. I have also run MBAM,
SuperAntispyware, Hijackthis and to date nothing
seems to prevent it from returning. Any guidance/suggestions would be most
appreciated. Thanks
Click to expand...

In my registry entries for csrss.exe, none contain the path to the file,
so I suspect there's an entry in the registry that can be deleted.

Since you can enter Safe Mode, run Regedit, press the Home key, press
Ctrl/F and search for any reference to C:\Windows\csrss.exe If found,
delete the entry. Try a reboot.

To be a little more safe, export any highlighted entry before you delete
it to the Desktop, then delete. Or create a Restore Point before trying
the above.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

"windows cannot find" 1
unwanted window appears when i turn on computer 2
None or many programs starting up. 3
Windows cannot find http:// 1
"Windows cannot find 'msconfig'" 11
windows can't find C:\Windows\Config\csrss.exe 7
Cannot acess Local 'C' Drive 4
windows can't find C:\WINDOWS\is-CDIM.exe 2

Top