csrss.exe

Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.

I have a pop up window on my desktop: Windos - No Disk Exception Processing Messag c0000013 Parametes 75b6bf9c 4 75b6bf9c 75b6bf9c. Could this be a problem with the crss.exe file?

So, I have a huge problem with csrss.exe eating my CPU up to 99%, and I don't have the virus, I only have csrss.exe in the right place (SYSTEM). I started a new profile on my computer and intended to erase the previous one to check if that could help, but before I had the chance to do this, csrss.exe took over the new profile too, which is why I sincerely doubt it will do any good to erase the first profile. I also installed a "hotfix" that would fix a problem with csrss.exe that starts when right-clicking something, when I was unsure that it might be the problem (since the description of my problem was exactly the same: 100% CPU). HEEELP! :-/ Thanx!

Looking at another page I found the help I needed, and I post it here so that it might help someone else. I updated the graphics. As simple as that. All problems gone!

hi!

to remove RP09.exe

1. run command prompt
2. type cd\
3. type ATTRIB -H -S -R /S /D..it would few minutes if your drive have many files and folders..
4. manually delete autorun.inf, syste~1, niaw folder.. just type "del autorun.inf" etc...

5. run regedit.exe using command prompt or RUN command.
6. Press Ctrl + F.
7. Find syste~1\_resto~1\RP09.exe
8. delete it.
6.

thats it..

I've seen this virus/worm/malware... I've infected my gf's anti-virus-less internet-less computer by accidentally clicking a file that looks like a folder. I searched the registry but I couldn't find the source...

I went to this website for advice and I figured out how this virus works...

1. It creates a file csrss.exe in Documents and Settings folder
2. The main executable and registry file are located at Program Files\microsoft frontpage
3. Just like any other malware, it creates duplicates on USB flash drives with autorun.inf

I think it creates a registry entry in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer and creates a subdirectory "run". You can find the directory path of the virus through there so you can delete it manually. Delete the whole "Run" subdirectory
Correct me if i'm wrong.

Make sure before attempting to delete the malware, start your computer in safe mode (Press F8 after the BIOS but before Windows loads)

I'd think the creator of this malware is very crafty that he wants the virus not to be detected even by experienced computer users. He didn't put those in the commonly used HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run as this would be too obvious for experienced users

To post a comment on "csrss.exe", please return to that article's main page.