Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.
Sounds like messemger *service* spam. Check out this article: http://ask-leo.com/whats_the_difference_between_msn_messenger_windows_messenger_and_windows_messenger.html - in includes instructions about 2/3rds the way down to turn off the Windows Messenger *Service* that may be allowing these popups.
Posted by: Leo at December 7, 2005 10:56 PMi have almost 7 instances of SVCHOST running in my task manager at the same time.. and also SERVICES.EXE and SERVICE~1.EXE.
Also at times my mouse poinetr starts moveing by itself. I have scanned for spyware/ adware / viruses.. and my system is perfectly clean..
Please tell me if my system is alrite or not..
Would appreciate you people's co-operation.
Ketan.
Posted by: KETAN at December 18, 2005 11:23 PM"i keep getting this box that pops up saying that i need to download stuff to fix things with my windows when i pull up task manager and check this annoying little box out it says that it is a csrss.exe file i don't want to download theese things and this has never happened before what is it a virus or is it for real please help as i am considering taking a hammer to my computer"
i get that also, its says that there is 36 or 39 critical objects on my computer, and automatically I knew it was fake because i dont think Microsoft would refer to another company. and I also get another one saying something else. i went to task manager and followed the alert to the source and it was csrss.exe ... would it be ok if i deleted it if the annoying program WAS from csrss?
Posted by: James at December 21, 2005 4:38 PMNo. You probably just need to turn off the messenger service. This article includes the instructions how: http://ask-leo.com/whats_the_difference_between_msn_messenger_windows_messenger_and_windows_messenger.html
Posted by: Leo at December 21, 2005 10:03 PMIf csrss.exe is running from \Windows\System32 it is probably fine. Run a virus scan, such as the free AVG Anti Virus (www.grisoft.com).
If it's running from another directory, e.g. \Program Files\Block Checker reboot into safe mode, then delete the file. csrss.exe is a Microsoft required process but is also used as a mask for Block Checker etc.
James, the thing you're describing sounds similar to Microsoft (Windows) Update. Go to windowsupdate.microsoft.com and run the scan - see if it identifies the same/similar number of 'Critical Updates' and install them from there just to be sure.
You can right click on My Computer and check Properties, then the Automatic Updates tab to see if it's switched on or off. You may prefer to switch it off and check the MS Update site manually.
Posted by: coffeelover at December 27, 2005 1:47 PMWhen I start up my computer, I get an error message that says the attempt to load the file C:\WINDOWS\system32\pvxprkh\csrss.exe failed, and to attempt to find the file or fix the registry. I've found the file references in the registry, but should I delete them? There's only two, with the titles load and run.
Posted by: Megan at January 16, 2006 11:59 PMBecause it's in that oddly named subdirectory (pvxprkh) it's more likely that this is a virus, and you should run both up-to-date anti-virus and anti-spyware scans.
Posted by: Leo A. Notenboom at January 17, 2006 11:43 AMI get a window that says "csrss.new.exe file is missing" 4 times when i start windows. Is there anyway I can get rid of this?
Posted by: Sophie at January 20, 2006 10:00 AMI would first run an up-to-date anti=virus and anti-spyware scan, as this symptom is often caused by one or the other.
If that doesn't fix it, then I'd start looking at my startup-programs and remove references to csrss.new.exe. This article may help that process: http://ask-leo.com/whats_all_this_stuff_running_after_i_boot_windows.html
Posted by: Leo at January 21, 2006 9:34 AMI have been going crazy trying to find if this is real or a flase postive,I have downloaded every virus software program on the internet shareware and freeware(all)spyware removers(all) and nobody can find it except,Remove it!Pro,but usually is back in 20 minutes or on reboot after I clean it,I have ran this scan called a-squared HiJackFree Analysis and this is what is said:
VStatus Filename Path Description (green happy face)
csrss.exe %systempath%\ csrss.exe is the main executable for the Microsoft Client/Server Runtime Server Subsystem. This process manages most graphical commands in Windows.
BAD Red Devil Face!
csrss.exe %winpath%\ This worm is transmitted via e-mail and attempts to install itself on your computer:
PLease can anybody help me? I have shut down every service that is not needed but this is alway's showing up over and over and it does have an effect on my task manager,shut's it off! When it feels like it.
So is this a-squared HiJackFree Analysis true? Or something that could get in?,but it seems to be in my computer just can't find it! tried everything safemode also I can not remove it.
And so far nobody can help, I hope this is the place because I am out of ideas,thank you in advance for any info.I have tried evething on the internet and nothing can get rid of csrss.exe %winpath%.Thanks
Posted by: Jimmy at January 24, 2006 1:56 PMTo post a comment on "csrss.exe", please return to that article's main page.