[leathersmt]

Hi,
I was having my new netscape 8.0 doing wierd things, like the windows opening on thier own. So I checked my Task manager and found that while I was watching the csrss.exe and the explorer.exe where doing things while I was not doing anything. That has me checking into google where I found that CSRSS.EXE is used by hackers, or trojans. note that I found two csrss.exe files in my computer, one in system 32 files, and a size of 6mb, and one if the i386 file with a size of 6mbs.
So I went to my regedit, and searched for same , csrss.exe and I found one in the search assistant, under ACMru in a file listed as 5603. This doesnt sound like where this file is suppoosed to be. Is this a possible hacked computer??
Please advise, I have just reinstalled everything after haveing a hacker, in our computer. I seriously dont understand why he keeps bothering us, but he is a sick person. Please help.

[Advertisements]

I also just found another program I didnt know I had, called Kill.exe that was added yesterday. Maybe it came with something else I installed??
I am going to go get hijacker and will post a listing.

[leathersmt]

I also just found another program I didnt know I had, called Kill.exe that was added yesterday. Maybe it came with something else I installed??
I am going to go get hijacker and will post a listing.

[gerryf]

Well, first, CSRSS.EXE is a critical system file used by micosoft. It is also a part of a worm, but I would not worry about that....run a AV program and it will be detected, as it is quite an old worm.

You have two of those files because your i386 directory is your installation files...it is smaller because it is compressed.

The search assistant, under ACMru, mean you searched for it....acmru means sonething like (cannot recall the first two) AC MOST RECENTLY USED (MRU)

[leathersmt]

Ah, I appreciate your helping this newbie. May all your days be happy ones.
Greg

[gerryf]

i can use all the happy days I can get