inthefade Posted April 17, 2005 Share Posted April 17, 2005 i just reinstalled windows couple of days ago and i am getting a pop up (which is called csrss.exe when i checked it in task manager) every few mins while i am connected to the net it basically tells me there is something wrong with my pc and says go to a site such as www.reg-patch.com i am pretty sure that this is something that sneaked onto the pc before i had the firewall up and running although i have looked up on csrss.exe and it is a core windows process blah blah and can't be killed in task manager anyone knowhow i can fix this or even know what this is please let me know Link to comment Share on other sites More sharing options...
trance Posted April 17, 2005 Share Posted April 17, 2005 disable the messenger service. csrss will NEVER pop a dialog. Link to comment Share on other sites More sharing options...
EZRecovery Posted April 17, 2005 Share Posted April 17, 2005 Process File: csrss or csrss.exe Process Name: Microsoft Client/Server Runtime Server Subsystem Description: csrss.exe is the main executable for the Microsoft Client/Server Runtime Server Subsystem. This process manages most graphical commands in Windows. This program is important for the stable and secure running of your computer and should not be terminated. Note: csrss.exe is also process which is registered as the W32.Netsky.AB@mm worm, the W32.Webus Trojan, Win32.Ladex.a and more. This virus is distributed via the Internet through e-mail and comes in the form of an e-mail message, in the hopes that you open it?s hostile attachment. The worm has it?s own SMTP engine which means it gathers E-mails from your local computer and re-distributes itself. In worst cases this worm can allow attackers to access your computer, stealing passwords and personal data. It is a registered security risk and should be removed immediately. Please see additional details regarding this process Source: WinTasks This is the user-mode portion of the Win32 subsystem (with Win32.sys being the kernel-mode portion). Csrss stands for client/server run-time subsystem and is an essential subsystem that must be running at all times. Csrss is responsible for console windows, creating and/or deleting threads, and some parts of the 16-bit virtual MS-DOS environment. Note: The csrss.exe file is located in the c:\windows\System32 folder. Security Task Manager Link to comment Share on other sites More sharing options...
inthefade Posted April 17, 2005 Author Share Posted April 17, 2005 just grabbed a screen shot of it what do ye think,, have ye seen this before Link to comment Share on other sites More sharing options...
turbomonkeycock Posted April 17, 2005 Share Posted April 17, 2005 The Windows Messenger Service (Not to be confused with the IM client) is enabled. Turn it off by typing msconfig in the run prompt, going to services and disabling "Messenger Service" Link to comment Share on other sites More sharing options...
Recommended Posts