Sorry your browser is not supported!

You are using an outdated browser that does not support modern web technologies, in order to use this site please update to a new browser.

Browsers supported include Chrome, FireFox, Safari, Opera, Internet Explorer 10+ or Microsoft Edge.

Geek Culture / anyone ever get a virus like this?

Author
Message
Three Score
20
Years of Service
User Offline
Joined: 18th Jun 2004
Location: behind you
Posted: 3rd Sep 2006 10:38
Link
I recently found a virus.
how it worked was copied its binrary as csrss.exe to the windows\system which made it so that task manager would say "This is a critical proccess, you can not end it" making it look important
but how I found it was looked in it, and compared the creation date to creation dates of what the actual csrss is, and plus the fake one ran under my username rather than system

but I checked the exe with almost every online virus scanner and avg but none of them detect it as a virus. has anyone else had a virus like this? or am I the only one

also what it did was consume plenty of ram and cpu time as well as constant network traffic

JouleOS and friends
FREE HOSTING! FREE virtual serial ports!
Back to top
Profile PM Email Website
Rudolpho
18
Years of Service
User Offline
Joined: 28th Dec 2005
Location: Sweden
Posted: 8th Sep 2006 15:11
Link
I had that some year ago or so I think.
I also had a similiar thing around the same time which stole the lsass.exe critical process name; that one shut down the computer every 5 minutes after it was turned on though; very irritating.

I think that you could remove csrss.exe from HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Run or something similiar though; then go into fail-safe mode and delete the file at fault (use DOS if neccessary)

Det är väl så
Back to top
Profile PM Email Website
Roxas
19
Years of Service
User Offline
Joined: 11th Nov 2005
Location: http://forum.thegamecreators.com
Posted: 8th Sep 2006 22:04
Link
Or there is couple other ways (not sure if they work ) Start/run/"msconfig" put the flag of from that procress..

Or right clic my computer and then click Control(or whatever) then there take servicecs now you see lot of servicecs what are runnning be carefull here ou dont wanna shutdown important servicecs dont you ;D This place is that where you can find almost all viruses and etc and shutdown something..

FFXI <3
Back to top
Profile PM Email
Back to top

Login to post a reply

Server time is: 2024-11-17 13:48:23
Your offset time is: 2024-11-17 13:48:23