CSRSS.EX_ possible virus

MoRT489 · 25 Sep 2009 at 12:05

Hi Guys

Last couple of days i've been getting an error message at startup on my work PC saying that CSRSS.EX_ failed to run. Just as well cos a little internet searching tells me it is a Trojan!!!

csrss.exe in the sytem32 folder is a legit service and runs in task manager fine, however the CSRSS.EX_ instance is found in the C:\I386 folder and fortunately fails to initialise.

What should i do to get rid of it or should i just tell IT to sort it out? Running a McAfee scan now.

Hoping it's just spyware

MoRT489 · 25 Sep 2009 at 12:35

No hits on virus scanner - right o, better hide msn, skype, chrome and opera then :rolleyes:

Or i could install Ad-aware and run that first?

MoRT489 · 25 Sep 2009 at 14:46

Not sure why it's so open, but i've seen them using the above so...i even asked about msn on the last laptop.

MoRT489 · 30 Sep 2009 at 14:55

Is this def a virus cos it doesnt give me the error message anymore and Adaware, SuperAntiSpyware and McAfee dont pick it up?

MoRT489 · 1 Oct 2009 at 15:36

Thanks will give it a whirl. What's WinSpy got to do with it?

MoRT489 · 7 Oct 2009 at 15:29

Just to update, MBAM found one suspicious file in the registry which it claims is a trojan but is actually the logon scripts using wkix32 (kixtart.org).