Jump to content

winlogin.exe and crscc.exe processes. please help :(


Recommended Posts

hi

My laptop is so ill. I recently had really slow internet and high CPU all the time.. Did not know why. So, I did a factory restore thinking this would help.. Now my problems are worse. When watching a film my laptop turns off after 20 seconds and say's it overheated 90c ?? :(

I've checked my processes and realised there are a few that wont even let me go to containing folder let alone end them (winlogin.exe, crscc.exe(or something). Never seen this before in my life.. Please help, my laptop is dying. I've tried everything

Greg

Link to post
Share on other sites

Hello,
    
 
They call me TwinHeadedEagle around here, and I'll be working with you.
 
     
    
Before we start please read and note the following:

  • Limit your internet access to posting here, some infections just wait to steal typed-in passwords.
  • Please be patient. I know it is frustrating when your PC isn't working properly, but malware removal takes time.
  • Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.
  • Do not paste the logs in your posts, attachments make my work easier. There is a More reply options button, that gives you Upload Files option below which you can use to attach your reports. Always attach reports from all tools.
  • Always execute my instructions in given order. If for some reason you cannot completely follow one instruction, inform me about that.
  • Stay with me to the end, the absence of symptoms doesn't mean that your machine is fully operational.
  • Note that we may live in totally different time zones, what may cause some delays between answers.
  • Do not ask for help for your business PC. Companies are making revenue via computers, so it is good thing to pay someone to repair it.
  • If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.

:excl: I can't foresee everything, so if anything unexpected happens, please stop and inform me!
:excl: There are no silly questions. Never be afraid to ask if in doubt!
 
 
 
  warning.gif Rules and policies
 
We won't support any piracy.
That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!
The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!
 
Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.
 
 
 
 

Please download Farbar Recovery Scan Tool and save it to your desktop.
 
Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
Link to post
Share on other sites

I do not see active malware here, but we will perform one maintenance and one check. Since this is notebook PC you should take it to the repair shop and ask for dust cleaning. They are more prone to this problem then desktop PC.
 
 
 
FRST.gif Fix with Farbar Recovery Scan Tool
 

icon_exclaim.gif This fix was created for this user for use on that particular machine. icon_exclaim.gif
icon_exclaim.gif Running it on another one may cause damage and render the system unstable. icon_exclaim.gif

 
Download attached fixlist.txt file and save it to the Desktop:
 
Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please post it to your reply.
 
 
 
 

TDSSKiller_Kaspersky.png Scan with TDSSKiller
 
Please download TDSSKiller by Kaspersky and save it to your desktop.

  • Right-click on TDSSKiller_Kaspersky.png
  • icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
  • Click on Change parameters and put a checkmark beside Loaded modules. A reboot will be needed to apply the changes, allow it to do so.
  • Your machine may appear very slow and unusable after that - it's normal.
  • TDSSKiller will run automaticaly. Click on Change parameters and click OK.
  • Click the Start Scan button and wait patiently.
  • If anything will be found follow this guidelines:
    • If a suspicious object is detected, the default action will be Skip, click on Continue.
    • If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
      Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
      If Cure is not available, please choose Skip instead.
    • Do not choose Delete unless instructed!
    A report will be created in your root directory, (usually C:\ drive) in the form of TDSSKiller.[Version]_[Date]_[Time]_log.txt. Please include the contents of that file in your next post.

fixlist.txt

Link to post
Share on other sites

hi..

 

I added fitit and pushed fix in frst. Then, when it finished it asked to restart my laptop so I did.. When it started a had a message saying 'start up problem and recommended I do a start up repair which I did. This would not work and kept just giving in blue screen (stop error screen). which read..

 

'A problem has been detected and windows has shut down to prevent damage.

 

A process or thread crucial to system operation has unexpectedly exited or been terminated'.. then it just went on.

 

I tried a few times and it eventually successfully repaired and started up my Windows. The FRST icon turned into a piece of paper as well.  This message also appeared on desktop

 

Problem signature:

Problem Event Name: BlueScreen

OS Version: 6.1.7601.2.1.0.768.3

Locale ID: 2057

Additional information about the problem:

BCCode: f4

BCP1: 0000000000000003

BCP2: FFFFFA8007E42B30

BCP3: FFFFFA8007E42E10

BCP4: FFFFF80002FC9270

OS Version: 6_1_7601

Service Pack: 1_0

Product: 768_1

Files that help describe the problem:

C:\Windows\Minidump\121014-33930-01.dmp

C:\Users\Gregouk\AppData\Local\Temp\WER-58547-0.sysdata.xml

Read our privacy statement online:

http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

If the online privacy statement is not available, please read our privacy statement offline:

C:\Windows\system32\en-US\erofflps.txt

 

 

Here is the Fixlog. Please help?  The winlogin.exe and CSRSS.exe with no user name or description are still in my task manager, but disappear when I press the 'show processes from all users' tab. I'm lost, but more then willing to carry on with what you say to do. 

 

 

 

 

 

 

Fixlog.txt

Link to post
Share on other sites

sorry for going on.. but I just downloaded avg antivirus again and as I was scanning, my laptop just turned of again, like the virus/malware was purposely stopping me from finding it. When I started Window's back up there was a notepad message on screen which read..

 

 

[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21787

 

not sure what's going on, but laptop is completely messed up :( help

Link to post
Share on other sites

  • ok so I did the FRST part I'll now TD SS Killer part.

I do believe it's something to do with my windowa updates as they keep updating with things every time I log in, plus my cyberlink you cam is acting weird :(

 

I will forward the report from TDSS killer as soon as it has finished.

 

Thanks for being patient with me, I'm a complete novice

Link to post
Share on other sites

Yes I did that first as asked and after it completely it asked to restart my computer.. I said yes.. Then my laptop would not start up and recommended I did a repair.. which eventually got it working..

 

I've tried to do a factory restore after all of this, but the problem is still there.. I'm guessing its a rootkits, bootkits and BIOS problem which has got deep in to my hard drive or restore system.. I'm so lost.. I have a HP Pavilion g6. Is there anything else I can try to do? Not been able to work for days :(

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.