Conor55 Posted January 6, 2011 ID:370570 Share Posted January 6, 2011 Someone had theirs removed apparent trojan.agent in a HiJackThis thread.I have it on my task manager, is it bad? If you can provide information, not a link, that would be good. Link to post Share on other sites More sharing options...
Firefox Posted January 12, 2011 ID:373284 Share Posted January 12, 2011 Multiple instances of CSRSS may be running on your pc at one time. Some of these may or may not be the legitimate versions1) csrss.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system. Click here to run a free registry scan now.2) The Microsoft Client Server Runtime Server subsystem utilizes the process csrss.exe for managing the majority of the graphical instruction sets under the Microsoft Windows operating system. As such Csrss.exe provides the critical functions of the operating system, and its termination can result in the Blue Screen of Death being displayedCsrss.exe controls threading and Win32 console window features. Threading is where the application splits itself into multiple simultaneous running tasks. Threads supported by csrss.exe are different from processes in that threads are commonly contained within the process, with various threads sharing resources within the same process. The Win32 console is the plain text window in the Windows API system (programs can use the console without the need for image display).In mobile devices such as notebooks and laptops, the process csrss.exe is closely dependent on power management schemes implemented by the system as defined under the Control Panel option.This process should be treated as suspicious if there are two instances running. Always take note of the process location when trying to determine whether or not the process is genuine or malicious.This Windows component should be located in your Windows System directory ie: something similar to C:\Windows\System32\csrss.exe If you feel that your computer is infected you could always have the experts look at it for you, I can give you the instructions of where to go if you like.FYI: I have this process running on my computer.... Link to post Share on other sites More sharing options...
Conor55 Posted January 12, 2011 Author ID:373295 Share Posted January 12, 2011 Hmm, well when I try to view like right click on it, it says Preform Administrative Tasks, not like when you right click on something else on processes... Link to post Share on other sites More sharing options...
CWB Posted January 13, 2011 ID:373365 Share Posted January 13, 2011 as firefox stated (basically) , further analysis would be needed to determine if indeed any of the csrss occurrences are bogus .the best bet is to have one of the experts take a look at what is going on if you feel that you may have an infection . Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 13, 2011 Root Admin ID:373374 Share Posted January 13, 2011 Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here. One of the expert helpers there will give you one-on-one assistance when one becomes available.After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someon has replied to your post.Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org Link to post Share on other sites More sharing options...
Recommended Posts