| Bewertung | Urteil | Verfasser |
 | Windows Client/Server Runtime Server Subsystem
| Alex |
 | can also be put in C:\\Windows directory by the W32.Netsky.AB worm, an SMTP mass-mailer
Quelle: Link
| |
 | wenn die datei in c:\windows liegt, ist's wahrscheinlich der wurm netsky.AB
| Dark |
 | Windows component if file in folder Windows\System32
| Alex |
 | Legit system file
| Valas |
 | kann mit der gratis Trial- oder käuflichen Vollversion gecheckt werden , dann in Quarantäne abgelegt und von dort endgültig gelöscht werden. Der Anti-Spy.Info von Neuber stuft verdächtige Dateien nach einem Rating und Farbcode ein, listet sie auf und bietet Lösungen an. Auch Wiederherstellung sicherheitshalber isolierter und stillgelegter Dateien aus der Quarantäne ist jederzeit möglich.
Quelle: Link
| PELIAN |
 | My machine was hacked by someone who put a bogus hidden copy of a spyware program into my System32\dllcache directory. I thus had two processes named csrss.exe running at once--the legitimate one in System32, and the bogus one, that I discovered using Anti-Spy.Info. The bogus one was 5.5 MB whereas the legit one is less than 1 MB.
| Ben in Pennsylvania, USA |
 | be aware that althought the WXP csrss.exe is 4096kB on disk, it can take more than 4 Meg of RAM
| nursoda |
 | El archivo emite un ventana de mensaje regularmente (a veces un verdadero fastidio) sobre una aplicación espía. Al intentar desinstalarlo o eliminarlo resetea la máquina. En algunos sitios web lo describen como un gusano, pero la forma de eliminarlo no corresponde con las características como se haya este en mi sistema
| Romane |
 | I opened my windows task manager and saw that I had TWO ccsrss.exe files. one was in capitals... one wasn't. When windows starts, I get a message saying that systask32 isn't functioning. I get the choice to send an error report or not. I am pretty sure the viral one is the one in capitals, but I'm not sure.
| Rich04 |
 | This is a Windows system file, but a lot of viruses will also use this name because the WinXP task manager won't let you close it. (Great idea, Microsoft!) The real one is found in C:\Windows\System32.
Quelle: Link
| Inuyasha |
 | Can cause computer to freeze for a second or two or totally bogg down. Work notebook has this on it using zero % cpu - home notebook does too but after installing Panda Internet Security - home notebook's csrss.exe cpu usage went to 20% causing notebook mouse to "stick" for a second every few seconds. Something is definitely "up" with this exe.
| Herman |
 | It can be a virus, but it is also a Windows file. As a windows file, it can consume high % processor: enable hardware graphic aceleration.
Quelle: Link
| nafiton smith |
 | This is the Windows client server run-time subsystem that handles Windows and graphics functions for all subsystems. Another important component of the Windows® Operating System.
| Nathan |
 | Causes popup windows and cannot be deleted "access denied" and also a "critical system process"
| Daniel Price |
 | Officially a system file - If you have 2 of this file... one is very likely a virus.. be careful if deleting manually as the real one is an important file needed on your pc... It is suggested you use an up-to-date antivirus software to find and remove the infected file
| A Techy |
 | This file is actually a Client/Server Runtime Server Subsystem ... This is the user-mode portion of the Win32 subsystem (with Win32.sys being the kernel-mode portion). Csrss stands for client/server run-time subsystem and is an essential subsystem that must be running at all times. Csrss is responsible for console windows, creating and and/or deleting threads, and some parts of the 16-bit virtual MS-DOS environment. The csrss.exe which is from Microsoft is located in the c:\windows\System32 folder. It has been noted that one virus had been found that runs as csrss to hide from you.
| Tony (Pc Technician) |
 | Die csrss.exe gehört eindeutig zu Windows. Sie ist ein so genanntes Sub System. Aber Achtung: Der Wurm "W32.NIMDA.E@mm" kopiert sich als csrss.exe in Form einer Variablen in die entsprechende Datei! Wenn Sie den Verdacht haben Opfer dieses Virus zu sein, dann empfehle ich Ihnen diesen Link:
Quelle: Link
| DataFighter |
 | Even the legit MS-Version of this process can lockup your machine.
Quelle: Link
| Martin |
 | Winspy uses this process to keylog, never really got it out.
Quelle: Link
| RH |
 | Mot only system file. It is widely used by keyloggers and worms.
Quelle: Link
| zero |
 | AdAware from Lavasoft cured this problem for me. I think It is a spyware program using csrss.exe to access the internet. And since spyware writters suck they screw it up so it bogs down your system
| CyberZilla |
 | The csrss.exe process can be hijacked by several viruses, that pose as a messenger service. Don't believe any unsuspected pop up messages!
| Max |
 | Picked up by SpySweeper, this nasty was really screwing up my DSL link. Caused issues with my Alcatel modem (config file truncating on load). Pages loaded painfully slowly if at all. Removed and all is now fine. Another Windows feature, thank God I also use a Mac.
| Nick |
 | Nach csrss.exe suchen, man findet zwei Dateien. Die in Windows\System32 ist die richtige (6KB bei Win2000), die andere der Wurm (816KB bei Win2000). Von CD starten und letzeren löschen - bumm.
| Joe |
 | If it shows with a big green U and small red D, then it's a trojan.
| |
|
|