Welcome to Process-info.org library

Process-info.org is an online library of Computer Operating System's Processes, which helps you to identify processes running at background of computer operating system or at remote computers on your network.

Process-info.org contains a growing database of executable processes (mostly with .EXE extension) and DLL libraries. You can search for processes through search box or navigate alphabeticaly by starting letter of process name.

It is assumed that users are familiar with computer operating system they're using and agree with suggested changes. Process-info.org will not be held responsible, if changes you make cause a system failure.

csrss.exe

winsystem.sys

Warning! Potential Security Hazard!

System process “csrss.exe” is reported as a Virus and Trojan!

There are 6 processes with name “csrss.exe”

csrss.exe – Microsoft Client/Server Runtime Server Subsystem

csrss.exe – Trojan.W32.Beagle

csrss.exe – Trojan.W32.Dropper

csrss.exe – Trojan.W32.Rontokbro

csrss.exe – Trojan.W32.VIRKEL

csrss.exe – winsystem.sys

process status • safe • malicious • unknown

Brief description of process

Like process csrss.exe is masked virus called Trojan.W32.Sober. Sober is a network worm that spreads via email in message file attachments. It is written in Visual Basic and is 63KB in size. The file is compressed by UPX. Infected email messages have arbitrary subjects and body texts in English and German. The name of the file attachment can vary with different file extensions - .bat, .com, .exe, .pif, .scr. Be careful and do not open any unknown e-mail and use antivirus software to protect computer against viruses.

What to do with this process?

System process “csrss.exe” is reported as a Virus and Trojan! Your personal data stored in computer are in danger! Kill or disable process “csrss.exe” and try to remove it from your computer. After successfull removal try to scan your computer with antivirus and antispyware application.

csrss.exe

Reported as Virus

Yes!

Reported as Trojan Horse

Yes!

Reported as Spyware, Adware

No

Developer

Unknown

Part of

Trojan.W32.Sober

Share |
 

Previous process
csrss.exe

Next process
csrss.exe

 
 
 

Related news

Showing news related to process “csrss.exe”

September 28, 2009 1:21:14 PM CEST

Trojan Downloader.Agent.UZM – A new Trojan Downloader was spammed today. Trojan is attached in zip archive to emails in HTML format with subject "Hot game" and body text that claims some Angelina Jolie or Lara Croft undressing game. xgame.zip attachment contains xgame.exe (20992B) which drops executes and deletes kernel driver C:\WINDOWS\System32\drivers\runtime.sys and downloads another downloader smartdrv.exe. runtime.sys runs injects and hides Iexplore.exe process and downloads another components. xgame.exe is detected as Trojan Downloader.Agent.UZM, smartdrv.exe is detected as Trojan Downloader.Agent.UZN, runtime.sys is detected as Trojan Downloader.Agent.THW and other downloaded components are detected as several variants of Trojan Backdoor.Ntrootkit.

 

April 10, 2007 2:00:00 AM CEST

Microsoft Windows CSRSS CSRFinalizeContext Local Privilege Escalation Vulnerability – Type: Vulnerability. Microsoft Windows CSRSS is prone to a local privilege-escalation vulnerability; fixes are available.

 

April 10, 2007 2:00:00 AM CEST

Microsoft Windows CSRSS MSGBox Remote Code Execution Vulnerability – Type: Vulnerability. Microsoft Windows CSRSS MsgBox is prone to a remote code-execution vulnerability; fixes are available.

 

February 2, 2010 9:38:40 AM CET

Be careful on help files – The other day, I came across a malware that attempts to hide its infection not in that technical but in the very unique way. “Muster” is a family of backdoor which has been using help files for hiding themselves. The help files or “.hlp” files are data files designed to be viewed with Microsoft WinHelp browser [...]

 

December 7, 2009 3:12:09 PM CET

chkdsk issue with Windows 7 – fixed – For those who experienced an issue with Avira AntiVir in Windows 7, we now ship the new version of the driver avgntflt.sys via automatic update. The situation where running Avira AntiVir in Windows 7 in some cases lead to a hard disk check with chkdsk upon a reboot shouldn’t appear anymore. As user of Avira AntiVir [...]

 
 
 

Navigate through library of processes alphabeticaly by first letter: