Re: csrss.exe and Disabled Security Center



MissTrish wrote:

Two questions:

1. Is csrss.exe actually a virus? I've recently had problems with the
W32.Chod.D virus which was replicating this particular file, and
whilst I think I've removed the virus, csrss.exe still appears is the
system32 folder. I read somewhere that this is actually a proper
system file, but I just need some confirmation.

2. The above mentioned virus has disabled Security Center, and I've
been unable to restart it. I am also unable to change the way Security
Center alerts me. How can I fix this?

Any help would be appreciated!

While csrss.exe is a MS file, it certainly sounds as though your
computer is not clean yet. You can go through the virus/malware removal
steps here:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Since I don't know what av you used, it would be smart to first run
either Sysclean or Multi-AV as described at the link above.

Malke
--
MS-MVP Windows User/Shell
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic"
.



Relevant Pages

  • Re: Msconfig problem
    ... Delete the one in the system32 folder, it's probably a virus. ... Often times detection and clean up ... but that is because the bug or bugs are active and masking themselves from ...
    (microsoft.public.windowsxp.basics)
  • Re: svchost.exe infected?
    ... SVCHOST is in the system32 folder, often a virus will put a file of the same ... >> existence of the file Scvhost.exe is an indication of a possible infection. ...
    (microsoft.public.windowsxp.basics)
  • Re: Can not run Regedit
    ... > You have a virus. ... > Task Manager, they flash for a second and quit. ... > Task Manager, MSCONFIG, or REGEDIT disappear while opening ... >>> Search the system32 folder for regedit.com and delete it. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: 16 Bit MS Dos Problems
    ... right up to date not showing any virus at all! ... Your best bet is to clean the virus first, ... you may copy that to System32 folder. ... > Found a fix on the newsgroup which works beautifully. ...
    (microsoft.public.windowsxp.accessibility)
  • Re: system32/dload.exe
    ... There is no dload.exe in my system32 folder. ... I get a virus warning several times a day from my virus ... firewall but still get the virus message. ... get a warning from the virus program that deleting windows ...
    (microsoft.public.windowsxp.help_and_support)