Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I have services.exe, smss, and csrss all running in my tasks... and i never had those running before
I was playing a online game and somebody got pissed at me and i think he tried to give me a virus because the game froze and some ftp.exe wanted access to the internet and a couple others (which all were denied, of course :-D )
then after that a windows XP thing popped up and said that "certain system drivers have been overwritten and need to be reinstalled from the XP cd, but when i clicked to find the XP cd and reinstall them it just said it didn't find the cd.....)
so now services.exe is running, smss and csrss are running (all in the folder c:\windows\system32)
I've run virus scans (panda activescan said it disinfected my "system" that was infected, and didn't find any infected files on the HD, and anti-spybot programs but i can't get rid of them
any ideas?

These are all system processes. I don't think you have a problem. Here is an explanation of the processes you were asking about.
http://www.plasma-online.de/index.html?content=http%3A//www.plasma-online.de/english/help/solutions/nt4_processes.html
Pumfa

aeroripper:Sounds like you've been infected with Worm.Win32.Ladex (scroll to bottom of webpage at link).
Solarian

not discounting the fact that you could be infected with a virus, the processes you mentioned are indeed system processes that typically run w/ XP.
Now the FTP.exe thing sounds a bit crazy, and I would be interested in the directory that one was running from.
If you are worried that you have had valid windows system drivers/files overwritten/modified/lost you can have XP check these by pulling up the CMD window and typing:
C:\>sfc /scannow
This will scan and repair/replace any corrupt/missing system driver/file. It may prompt to reboot and instert XP CD, just follow the prompts.
If you could do give us a list of all your currently running processes that would be a big help too in someone getting back to you with the real culprit :)
Thanks.
- Michael

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |