Is it a virus?

Computing.Net > Forums > Security and Virus > Is it a virus?

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Is it a virus?

Name: markos
Date: October 9, 2002 at 21:23:17 Pacific
OS: win xp
CPU/Ram: PIII 866 - 512MB

Comment:

I am getting some strange messages, while I am surfing on the internet, from a "Messenger service" that I do not have.
It is associated with a "csrss.exe" process.
I make aGoogle search and it is listed as some kind of worm. But when I run a complete virus scan i am virus-free. (winxp and AVG software)
Thanks

Sponsored Link

Ads by Google

Response Number 1

Name: w
Date: October 9, 2002 at 21:43:26 Pacific

Reply:

sarc.com write-up on w32.dalbug.worm
google search for csrss.exe+fix

Response Number 2

Name: w
Date: October 9, 2002 at 21:47:04 Pacific

Reply:

you could run an online scan at ,housecall.antivirus.com
or at
http://www.pandasoftware.com/activescan/com/
these scans are both free and might help.

Response Number 3

Name: w
Date: October 9, 2002 at 22:05:21 Pacific

Reply:

this is also listed as being dropped by the nimda virus,w32.nimda.e@mm.removal.tool symantec.com

Response Number 4

Name: markos
Date: October 9, 2002 at 22:11:36 Pacific

Reply:

thanks for the reply.
The files csrss.exe and the smss.exe are system files and cannot be deleted. Online scan showed virus-free.

Response Number 5

Name: mzorro
Date: October 9, 2002 at 22:17:33 Pacific

Reply:

some of these new "dialer" bugs don't show up as a virus , check if you have an extra
dialer in your windows programs that does'nt belong.
look for unusual icons there
just a hunch !

virus broadcasting i get kicked off wireless, is it a virus strange windows installer window is it a virus or spy	what causes black lines on your monitor is it a virus? one of my photos has been scrambled up is it a virus? unwise is it a virus
See More

Response Number 6

Name:
Date: October 9, 2002 at 22:24:40 Pacific

Reply:

if you have more then one csrss.exe, the one in windows\system32 is the valid one, so could just be windows messenger trying to run. xp and messenger are hooked together,
unless you disable windows messenger.
so run a search for csrss.exe and see if you have another one-besides the one in windows\system32.

Response Number 7

Name: Anders
Date: October 14, 2002 at 15:22:17 Pacific

Reply:

Hello.. I got a similar message right now!!..
Also associated with the csrss.exe process. The message was some "comercial" for fake university diplomas.. Message from some "WEBPOPUP07". I had no browser running, in fact I had no program running at all.
I had just been running ut2003. A legal copy by the way.
What is this csrss.exe doing anyway?.
I made a screenshot of the message if anyones interested, I'll mail it or whatever.

Response Number 8

Name: Troy
Date: October 14, 2002 at 18:28:40 Pacific

Reply:

I have the exact same problem. I am trying to find an answer as well. The message that pops up on my machine is an ad for buying some diplomas online. When I have the message up, the properties indicate that csrss.exe is the file running it. I know that it is a critical windows file, so something must be using it to open the message. I have even had the message come up while running Zone Alarm. Let me know if you find a solution... I'll do the same...

Response Number 9

Name: jon
Date: October 14, 2002 at 21:36:32 Pacific

Reply:

it's not a virus or a worm.
it's spam.
csrss.exe has a bug in it that can be exploited to utilize NT/XP's built-in Messenger service. it's being used to broadcast ads and such. you'll all be fine.
(i get them too.)

Response Number 10

Name: twcbr
Date: October 14, 2002 at 23:08:12 Pacific

Reply:

it's not a virus or a worm.
it's spam.
csrss.exe has a bug in it that can be exploited to utilize NT/XP's built-in Messenger service. it's being used to broadcast ads and such. you'll all be fine.
(i get them too.)
OK OK OK OK OK
BUT WE DON'T WANT IT!!!!!!!!!!!! WE'RE LOOKING FOR A SOLUTION OF THIS. I DON'T WANT TO SEE THE STUPID DIPLOMAS WINDOWS IN MY PC ANYMORE!!!!!!!!!!!!!!!!!
SOMEONE HELP PLZ!!!!!!!!!!!! lol

Response Number 11

Name: RASPUTJN
Date: October 14, 2002 at 23:23:15 Pacific

Reply:

Got the same problem!
i stopped the Messenger Service in the
Control panel-> Services

Response Number 12

Name: Mike
Date: October 15, 2002 at 09:53:22 Pacific

Reply:

To turn off the messenger service:
-Click on the Start button and open the control panel.
-Open the Performance and Maintenance control panel and go to Administrative Tools.
-Now double-click on Services, then scroll to Messenger.
-Double-click Messenger and click Stop to stop the service.
-Change the startup type to Disable.

Response Number 13

Name: Anders
Date: October 15, 2002 at 14:17:14 Pacific

Reply:

Lol..
Am I going to scare some friends now! Just kidding.
This service should be off by default.

Response Number 14

Name: twcbr
Date: October 15, 2002 at 16:53:07 Pacific

Reply:

Thanks!!!!!! I do it!
No more DIPLOMAS!!!!!!!! FOR ME

lol
Microsoft BUGS!!!!!!!!!
But a question, How it works??? I've dynamic IP, how they got my IP, or they not need it???

Response Number 15

Name: twcbr
Date: October 15, 2002 at 16:58:19 Pacific

Reply:

Ok OK OK, I've read the link of MIKE, now I Know.
http://www.techtv.com/screensavers/answerstips/story/0,24330,3374542,00.html

Sponsored Link

Ads by Google

Trojan ?

Lock ups

Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.