CSRSS Virus?


Earlier today, I started getting a lot of random pop ups, which scared me. The last time I got popups like that, I had a terrible virus and had ro reformat my hard drive. Things now are different though. I have a lot of data, and I'm in school now, so losing all of my data is not an option, and I need my computer.

So what happened in chronological order is:

1. Pop-ups started frequently appearing.

2. Web browsers wouldn't open

3. Fake security essentials windows showed up

4. Symantec picked up tons of auto protect results

5. I ran a full scan and enabled strict UAC

6. I restarted the computer

7. The screen remained black upon bootup and eventually showed the desktop, though windows explorer crashed promptly, and has been ever since.

I am at a loss. I've been deleting .exes, ending processes and clearing temp folders, all to no avail. I found a file on the task mamager called csrss.exe, which conveniently cannot be stopped, and says "access denied" when I try to delete it. I can't go into explorer because it crashed 5 seconds upon restart. I got Chrome open, but that is just about all I can do now.

Please help.
2 answers Last reply
More about csrss virus
  1. http://www.neuber.com/taskmanager/process/csrss.exe.html

    You have Malwarebytes? Try running that and try Spybot Search and Destroy. Run them in Safe Mode.

    And of course always always always back up data you can not afford to lose!
  2. csrss.exe is a program which may have been on your computer since the day you first purchased your computer, as it may have been preinstalled software. The actual hard drive location and folder is also shown below, always verify where its located on your hard drive, as this makes sure it is not spyware, adware, or virus related. Many spyware and virus writers often place files elsewhere on your computer, and use the same name in an attempt to fool you.
    To remove Csrss.exe, you must first stop any Csrss.exe processes that are running in your computer's memory. To stop all Csrss.exe processes, press CTRL+ALT+DELETE to open the Windows Task Manager. Click on the "Processes" tab, search for Csrss.exe, then right-click it and select "End Process" key.

    To delete Csrss.exe registry keys, open the Windows Registry Editor by clicking on the Windows "Start" button and selecting "Run." Type "regedit" into the box and click "OK." Once the Registry Editor is open, search for the registry key "HKEY_LOCAL_MACHINE\Software\Csrss.exe." Right-click this registry key and select "Delete."

    Finally, to completely get rid of Csrss.exe, you must manually remove other Csrss.exe files. These Csrss.exe files can be in the form of EXE, DLL, LSP, TOOLBAR, BROWSER HIJACK, and/or BROWSER PLUGIN. For example, Csrss.exe might create a file like
    %PROGRAM_FILES%\Csrss.exe\Csrss.exe.exe. Locate and remove these files.
Ask a new question

Read More

Security Virus Windows 7