Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

CSRSS.EXE


  • Please log in to reply

#1
leathersmt

leathersmt

    New Member

  • Member
  • Pip
  • 3 posts
:tazz: Hi,
I was having my new netscape 8.0 doing wierd things, like the windows opening on thier own. So I checked my Task manager and found that while I was watching the csrss.exe and the explorer.exe where doing things while I was not doing anything. That has me checking into google where I found that CSRSS.EXE is used by hackers, or trojans. note that I found two csrss.exe files in my computer, one in system 32 files, and a size of 6mb, and one if the i386 file with a size of 6mbs.
So I went to my regedit, and searched for same , csrss.exe and I found one in the search assistant, under ACMru in a file listed as 5603. This doesnt sound like where this file is suppoosed to be. Is this a possible hacked computer??
Please advise, I have just reinstalled everything after haveing a hacker, in our computer. I seriously dont understand why he keeps bothering us, but he is a sick person. Please help.
  • 0

Advertisements


#2
leathersmt

leathersmt

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts
I also just found another program I didnt know I had, called Kill.exe that was added yesterday. Maybe it came with something else I installed??
I am going to go get hijacker and will post a listing.
  • 0

#3
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
Well, first, CSRSS.EXE is a critical system file used by micosoft. It is also a part of a worm, but I would not worry about that....run a AV program and it will be detected, as it is quite an old worm.

You have two of those files because your i386 directory is your installation files...it is smaller because it is compressed.

The search assistant, under ACMru, mean you searched for it....acmru means sonething like (cannot recall the first two) AC MOST RECENTLY USED (MRU)
  • 0

#4
leathersmt

leathersmt

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts
:tazz: Ah, I appreciate your helping this newbie. May all your days be happy ones.
Greg
  • 0

#5
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
i can use all the happy days I can get
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP