csrss.exe

Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.

My Anti Virus show me:Windows\media\csrss can be vb Torjan.
well, I in mistake delete it. Now I receve "can ot find..."
Where can I add csrss.exe?
Thanks

Hi Sir,
I'm also having a problem with csrss.exe, I've read an article on how to resolve the error. So I installed HiJackthis and follow the instruction, and restarted my PC. The error was resolved but I cannot access my msdos. Everytime I run cmd, my computer shuts down. Pls help... thanks...

I am getting error message csrss.exe- can not find. How do I sto it?

Problem: My computer is performing slow. Long periods of time to respond to a mouse selection. The PC does behave similarly when I am getting a "Live Update" from Symantec.

In this case (today) I note that whilst in task manager the csrss.exe is getting frequent cpu hits. Firefox and Outlook Express were running but I had not invoked anything for at least an hour.

Analysis ??

I'm afraid I have deleted csrss system file, and everytime that I try to put on the pc the screen turns black and I just can't do nothing. I've also tried to boot in safe mode but the same thing hapened.

HELP PLEASE
(soz for the english)

Hello Leo/
do you know how to delete the RP09.exe? is this a virus? I think it is connected to csrss.exe. I have two (2) csrss.exe processing in my TaskManager is this normal? Do you know how to remove "ñiäw", i believe this is some kind of a virus. Tnx...hope U can HELP.

For CODE_RYAN

Just an Info, I have encountered this RP09.EXE, if they said its not a virus then what's inside "ñiäw", there you could also find a copy of RP09.EXE as well as indside the "system volume information" folder.

I you think you're in doubt then try opening your registry "type REGEDIT inside START->RUN" then press F3-find then type "RP09", I know it will find one, under MOUNTPOINTS2 where WORMS usually imprint their AUTORUN.INF instructions.

Be carefull in choosing a drive then using the RIGHT CLICK bcoz EXPLORE, OPEN, AUTOPLAY are already their trigger in spreading.

As of Now, Im doing it manually since I've got nothing, no available anti virus online for now. WE ARE ON OUR OWN, unless any of you guys got some AV for this, please....

there are 2 other csrss.exe that can be found on your computer once you are infected by this virus. One is on C:\Documents and Settings\user\csrss.exe and the other is on C:\Program files\Microsoft Fronpage\csrss.exe and together with is is a .reg file (18something) and a time.dat. These too are also products of the virus

csrss.exe is a windows program. But when you see two csrss.exe in your task manager, it could be a virus. Avast anti-virus can remove this virus.

Or

Manually delete:
1. Boot in Safe Mode, this limits the program that are running in the background.
2. Goto Start - run, then type MSCONFIG.
3. Goto Startup, then find and uncheck any RP09.exe or csrss.exe that you will see. Don't be afraid of csrss.exe. The original csrss.exe of windows is loaded in different location.
4. Right click "My Computer", then select explore.
5. Click "C:" from the left pane. Then delete "autorun.inf", "ñiäw" folder and an exe file with a filename of your computer name and an icon of folder. ex. if your computer name is andrew, delete the file "andrew.exe".
6. Delete also "RP09.exe" from the following directory:
C:\program files\Microsoft Frontpage\ (as well as the reg file).
C:\Documents and Settings.
C:\System Volume Information.
7. restart you computer...

:)

csrss.exe is not always a virus... it can be normal to have it running multiple times. if your not sure open up do this

1. hit windows key+r
2. type in cmd
3. hit enter
4. type in tasklist
5. find and write down the PID of both processes
6. now type in tasklist /v
7. find both csrss.exe and see who authorised it. If it is a virus one of the two is not authorised by "NT AUTHORITY\SYSTEM"
8. remember the PID of the virus and type in tasklist /fi "pid eq (your virus pid)"
9. Now you should see just one process. remember the mem usage (at me 4.652 K) and hit ctrl+shift+esc
10. find your virus and kill the processnow find it and delete it :D

To post a comment on "csrss.exe", please return to that article's main page.