|
|||||||
![]() |
|
|
LinkBack | Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
|
#1 |
|
Techphile.
Join Date: Nov 2003
Location: San Francisco Bay
Posts: 5,962
|
Infected csrss.exe?/Safe Mode
I noticed that my CPU usage is way above normal and I can hear my hard drive running almost constantly. So I looked at Windows Task Manager/Processes and saw that csrss.exe was right up near the top. I looked it up and found out that it is an essential Windows process that can become infected.
So before I wipe and reinstall my Windows profile as another user with administrative privileges (which is the solution apparently), I thought I would do a full MSE scan in Safe Mode. One person says to try a malware scan before wiping my profile. I cannot seem to get into Safe Mode by tapping F8. All this does is bring up the option of choosing which drive to boot from. Is there another way of bringing up Safe Mode in Windows 7, 64? http://support.microsoft.com/kb/555021
__________________
Asus P8P67 WS Revolution | Intel 2600K @ 4.7 GHz | Win 7 Pro 64 |8 gigs Corsair 1600 | Two Diamond 6990's in Crossfire| Corsair AX1200 | Thermalright Silver Arrow | Western Digital Black 2TB 64 meg cache | Lian-Li PC-A71B | Logitec Z-5500 | Three Asus 26" VW266H monitors running under Eyefinity | Last edited by David M; 11-19-2010 at 10:16 AM. |
|
|
|
|
|
#2 |
|
Mondsreitersmann
Join Date: Jul 1999
Location: Skingrad
Posts: 8,781
|
You must have an ASsUS motherboard.
Just select your main HDD, press Enter and then immediately start tapping F8.
__________________
Darum still, füg' ich mich, wie Gott es will. Nun, so will ich wacker streiten, und sollt' ich den Tod erleiden, stirbt ein braver Reitersmann. |
|
|
|
|
|
#3 |
|
Forum Administrator
Staff
Premium Member
Join Date: May 2000
Location: Joplin MO
Posts: 37,791
|
Correct. You are pressing F8 too soon. Nuc's solution works.
|
|
|
|
|
|
#4 |
|
Moderator
Staff
Premium Member
Join Date: Nov 2008
Location: Detroit, MI
Posts: 3,804
|
I think csrss.exe is a trojan key logger, MSE didn't catch it before hand? You can set mid and high level things to automatically quarantine or remove. I have mine set to quarantine so I can see what they are but I never get any. I noticed that one (among others) on this Toshiba satellite (norton installed) I am working on.
http://www.liutilities.com/products/...library/csrss/ Last edited by jdeb; 11-19-2010 at 12:03 PM. |
|
|
|
![]() |
| Bookmarks |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|