Computing.Net > Forums > Security and Virus > csrss.exe infected by trojan

csrss.exe infected by trojan

Reply to Message Icon

Original Message
Name: viperman83
Date: April 20, 2005 at 00:46:52 Pacific
Subject: csrss.exe infected by trojan
OS: win xp sp2
CPU/Ram: athlon xp 1700 256 RAM
Comment:

how can i remove trojan from csrss.exe ? my antivir notices that csrss.exe has been infected by trojan TROJ_LDPINCH.BM.


Report Offensive Message For Removal


Response Number 1
Name: TylerJames
Date: April 27, 2005 at 16:12:37 Pacific
Reply: (edit)

I downloaded hitman pro 2012 and it didn't catch what I have. My homepage for IE is changed to http://ie-searchengine.com/index.htm and I can't change. Also, my desktop is changed to something and I can't figure out how to get rid of it. The desktop has a link to a website, http://www.topantispyware.com/overview.php?92 and I can't figure out how to get rid of it. Mcafee and hitman can't find this thing. what do you recomend!


Report Offensive Follow Up For Removal

Response Number 2
Name: TylerJames
Date: April 27, 2005 at 16:51:56 Pacific
Reply: (edit)

Also, in the bottome right hand corner where the clock is their is a yellow triangle with a black ! in it, and it keeps poping up saying you have spyware etc. etc. but you can't close it and when you click on it it goes to that same web site!


Report Offensive Follow Up For Removal

Response Number 3
Name: Tasha2030
Date: May 23, 2005 at 16:16:55 Pacific
Reply: (edit)

My computer was infected with CSRSS.EXE (note: capslock, and this is how u recognise it in the Process list of task manager). Hard to get rid of, at least until it decided to uncover its trojan face. The virus will try to mass email sm info from ur PC but my Zone Alarm should notify you before, so you still have a chance to block the program.

Removal: It must be a new form of the virus since Norton's fixes (Netsky, Nimda.A, Nimda.E) or XP's malicious software removal didn't recognise it. I had to manually delete the CSRSS.EXE from windows root dir \system and clean the registry. U'll easily recognise the file, one of the CSRSS will have a later date stamp.


Report Offensive Follow Up For Removal







Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: csrss.exe infected by trojan

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software




Have you ever used OpenOffice?

Yes, as my main suite.
Yes, occationally.
Yes, but only once.
No, never.


View Results

Poll Finishes In 3 Days.
Discuss in The Lounge