Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

csrrs.exe gaobot [Closed]

Started by caturday3883 , Jun 03 2007 11:44 AM

  • This topic is locked This topic is locked

#1
caturday3883
Posted 03 June 2007 - 11:44 AM

caturday3883

    New Member

  • Member
  • Pip
  • 4 posts
I discovered that I was infected by csrrs.exe sometime yesterday and I've spent Sunday morning trying to fix the infection.

I've already run Hijack This which is how I discovered the infection, I've scanned with AVG Free and Spybot and they didn't find anything at all. I went to Symantec's site and tried searching for the various file names associated with gaobot with no success. Plus the gaobot removal tool doesn't work! I tried to kill the process in task manager and it doesn't want to do it. Plus I can not find the registry keys.

Starting my computer in safe mode does not work. I'll log in and then get a blank screen with SAFE MODE in each corner but no taskbar, icons or desktop whatsoever.

When I started up my computer with a LiveCD it found the file under WINNT/system and I couldn't delete it under linux nor could I change the permissions.
  • 0

Advertisements

#2
caturday3883
Posted 03 June 2007 - 12:10 PM

caturday3883

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
Well it's hiding under Windows Time Services when I check the services running on my computer. Let's see if msconfig and other stuff will stop this nonsense.
  • 0

#3
caturday3883
Posted 03 June 2007 - 12:22 PM

caturday3883

    New Member

  • Topic Starter
  • Member
  • Pip
  • 4 posts
I disabled the process, I scanned my computer again and nothing was found.
This is really, really weird!
I hope someone can provide some advice.
  • 0

#4
kahdah
Posted 07 June 2007 - 07:17 PM

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
Hello caturday3883


Welcome to G2Go. :whistling:
My name is Kahdah and I will be helping you with your Malware problem.

Can you please post a new Hijackthis log.

And also an unistall list:
Open HijackThis, click Config, click Misc Tools
Click "Open Uninstall Manager"
Click "Save List" (generates uninstall_list.txt)
Click Save, copy and paste the results in your next post.

Post back with those logs and we can continue from there.
  • 0

#5
kahdah
Posted 21 June 2007 - 08:43 PM

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member with address of this thread. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP