csrss Virus removal

iv contracted a virus csrss.exe it apears in my task manager but when i right
click it it says perform adminstrative tasks then dissapears to re apear
later along side a trojan popup iv run my virus protection 12 times now and
it hasent picked it up iv also used registry cleaning software and varius
others nothings working what shud i do i can use back up becouse i fergot to
make one

 

What leads you to believe it is a virus?

What is a "trojan popup"?

What antimalware or other security related programs do you use?

You might want to mention your OS and patch level (XP Pro sp3 - XP Home
sp2?) before someone asks for that too.

Are you trying to use Google as a troubleshooting tool?

Have you tried MalwareBytes Anti Malware (MBAM) or Super Anti Spyware
(SAS) as supplements to your "virus protection"?

"laugh at cheese" <laughatcheese@discussions.microsoft.com> wrote in
message news:60DD4919-A780-4E8C-9A12-71EEA6E5963B@microsoft.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> iv contracted a virus csrss.exe it apears in my task manager but when
> i right
> click it it says perform adminstrative tasks then dissapears to re
> apear
> later along side a trojan popup iv run my virus protection 12 times
> now and
> it hasent picked it up iv also used registry cleaning software and
> varius
> others nothings working what shud i do i can use back up becouse i
> fergot to
> make one
> <!--colorc--><!--/colorc-->

 

From: "laugh at cheese" <laughatcheese@discussions.microsoft.com>

| iv contracted a virus csrss.exe it apears in my task manager but when i right
| click it it says perform adminstrative tasks then dissapears to re apear
| later along side a trojan popup iv run my virus protection 12 times now and
| it hasent picked it up iv also used registry cleaning software and varius
| others nothings working what shud i do i can use back up becouse i fergot to
| make one


Many points here.

1. This post was VERY hard to read as it was all in lowercase, a long run-on sentence
with quirks such as "iv".

2. The fact if or not you contracted a "virus" is questionable. You may have been
infected with malware in the form of a trojan is possibility but your post doesn't
indicate that.

3. The file CSRSS.EXE is a legitimate OS file. That is if CSRSS.EXE is executed from
%windir%\system32
If CSRSS.EXE is executed from any OTHER location then it is surely malware.

4. You said "...run my virus protection 12 times now..." That's good EXCEPT you failed
to mention what the anti virus application is.

5. You said."...also used registry cleaning software...". Worthless/wasteful operation
as the vast majority of so-called registry cleaning software is nothing but snake oil and
even if it was helpful it will not help you if you are malware infected.

If I was to take your post (as best as I can understand it) at face value, you have not
indicated that you are infected.

To help delineate this, download Process Explorer and use it, not Task Manager, to see
what running processes there are and see if CSRSS.EXE is actually;
%windir%\system32\CSRSS.EXE or not..

Process Explorer:


--
Dave

Multi-AV -