Guest JamesJ Posted May 7, 2009 Posted May 7, 2009 I'm trying to reply to "pacinitaly" in my post: What is csrss.exe? I've replied twice and after 5 minutes I can't see my replies. Can anyone else see my replies or is just me?? James Quote
Guest Ǝøçεl Posted May 7, 2009 Posted May 7, 2009 I see a total of 3 replays. http://www.microsoft.com/communities/newsg...35-0e07d2e52657 Maybe servers were down. -=- "JamesJ" wrote: <span style="color:blue"> > I'm trying to reply to "pacinitaly" in my post: > What is csrss.exe? > I've replied twice and after 5 minutes I can't see my replies. > Can anyone else see my replies or is just me?? > > James > </span> Quote
Guest Ben M. Schorr - MVP (OneNote) Posted May 7, 2009 Posted May 7, 2009 See if this helps: http://www.lmgtfy.com/?q=csrss.exe -- -Ben- Ben M. Schorr, MVP Roland Schorr & Tower http://www.rolandschorr.com http://www.officeforlawyers.com Author - The Lawyer's Guide to Microsoft Outlook 2007: http://tinyurl.com/5m3f5q "JamesJ" <jjy@darwin_roadrunner.com> wrote in message news:OLa$huyzJHA.5528@TK2MSFTNGP03.phx.gbl: <span style="color:blue"> > I'm trying to reply to "pacinitaly" in my post: > What is csrss.exe? > I've replied twice and after 5 minutes I can't see my replies. > Can anyone else see my replies or is just me?? > > James</span> Quote
Guest JamesJ Posted May 7, 2009 Posted May 7, 2009 I don't see any replies I made to "pacinitaly" I do see my replies to "Peter Foldes" The replies are in my sent items in windows mail. Can't figure this out. Thanks, James "Ǝøçεl" <l@discussions.microsoft.com> wrote in message news:202AB46E-041A-487E-8EC6-8BC156BD7314@microsoft.com...<span style="color:blue"> >I see a total of 3 replays. > > http://www.microsoft.com/communities/newsg...35-0e07d2e52657 > > Maybe servers were down. > -=- > > > "JamesJ" wrote: ><span style="color:green"> >> I'm trying to reply to "pacinitaly" in my post: >> What is csrss.exe? >> I've replied twice and after 5 minutes I can't see my replies. >> Can anyone else see my replies or is just me?? >> >> James >> </span></span> Quote
Guest JamesJ Posted May 7, 2009 Posted May 7, 2009 I've already done that. I'm a bit concerned that it's a worm 'cause I was told the file is used only in Windows XP. James "Ben M. Schorr - MVP (OneNote)" <bens@bogusaddress.mvp> wrote in message news:ucbW51zzJHA.1432@TK2MSFTNGP02.phx.gbl...<span style="color:blue"> > See if this helps: http://www.lmgtfy.com/?q=csrss.exe > > -- > -Ben- > Ben M. Schorr, MVP > Roland Schorr & Tower > http://www.rolandschorr.com > http://www.officeforlawyers.com > Author - The Lawyer's Guide to Microsoft Outlook 2007: > http://tinyurl.com/5m3f5q > > > > "JamesJ" <jjy@darwin_roadrunner.com> wrote in message > news:OLa$huyzJHA.5528@TK2MSFTNGP03.phx.gbl: ><span style="color:green"> >> I'm trying to reply to "pacinitaly" in my post: >> What is csrss.exe? >> I've replied twice and after 5 minutes I can't see my replies. >> Can anyone else see my replies or is just me?? >> >> James</span> > </span> Quote
Guest Ben M. Schorr - MVP (OneNote) Posted May 7, 2009 Posted May 7, 2009 No, it's in Vista too. That doesn't mean the one you have ISN'T a worm, but it's mere existence doesn't tell us that one way or the other. Do you have CSRSS.EXE in a folder other than %systemroot%\system32\ ? Have you scanned your system with more than one anti-malware product? -- -Ben- Ben M. Schorr, MVP Roland Schorr & Tower http://www.rolandschorr.com http://www.officeforlawyers.com Author - The Lawyer's Guide to Microsoft Outlook 2007: http://tinyurl.com/5m3f5q "JamesJ" <jjy@darwin_roadrunner.com> wrote in message news:Ofn3b#zzJHA.4272@TK2MSFTNGP06.phx.gbl: <span style="color:blue"> > I've already done that. I'm a bit concerned that it's a worm 'cause I was > told > the file is used only in Windows XP. > > James > > "Ben M. Schorr - MVP (OneNote)" <bens@bogusaddress.mvp> wrote in message > news:ucbW51zzJHA.1432@TK2MSFTNGP02.phx.gbl... ><span style="color:green"> > > See if this helps: http://www.lmgtfy.com/?q=csrss.exe > > > > -- > > -Ben- > > Ben M. Schorr, MVP > > Roland Schorr & Tower > > http://www.rolandschorr.com > > http://www.officeforlawyers.com > > Author - The Lawyer's Guide to Microsoft Outlook 2007: > > http://tinyurl.com/5m3f5q > > > > > > > > "JamesJ" <jjy@darwin_roadrunner.com> wrote in message > > news:OLa$huyzJHA.5528@TK2MSFTNGP03.phx.gbl: > ></span> ><span style="color:green"><span style="color:darkred"> > >> I'm trying to reply to "pacinitaly" in my post: > >> What is csrss.exe? > >> I've replied twice and after 5 minutes I can't see my replies. > >> Can anyone else see my replies or is just me?? > >> > >> James</span></span> ><span style="color:green"> > ></span></span> Quote
Guest JamesJ Posted May 7, 2009 Posted May 7, 2009 The only instance I can find using Search is in %systemroot%\system32\. I'm currently running AVG Free scan (paused) and I also ran a scan with Windows Defender. Although I do recall seeing it 2 times in processes. One thing I might bring up here. When I right clicked on it and selected 'End Process' my computer restarted top a blue screen with much info but before I can gather any of it I was presented with Vista's bad shutdown screen (or what ever it's called with the startup options, Safe Mode, Safe Mode with network...). Is this normally what happens when one shuts down the process if it's a Vista process? James "Ben M. Schorr - MVP (OneNote)" <bens@bogusaddress.mvp> wrote in message news:u9kuEX0zJHA.1092@TK2MSFTNGP06.phx.gbl...<span style="color:blue"> > No, it's in Vista too. That doesn't mean the one you have ISN'T a worm, > but it's mere existence doesn't tell us that one way or the other. Do you > have CSRSS.EXE in a folder other than %systemroot%system32 ? > > Have you scanned your system with more than one anti-malware product? > > -- > -Ben- > Ben M. Schorr, MVP > Roland Schorr & Tower > http://www.rolandschorr.com > http://www.officeforlawyers.com > Author - The Lawyer's Guide to Microsoft Outlook 2007: > http://tinyurl.com/5m3f5q > > > > "JamesJ" <jjy@darwin_roadrunner.com> wrote in message > news:Ofn3b#zzJHA.4272@TK2MSFTNGP06.phx.gbl: ><span style="color:green"> >> I've already done that. I'm a bit concerned that it's a worm 'cause I was >> told >> the file is used only in Windows XP. >> >> James >> >> "Ben M. Schorr - MVP (OneNote)" <bens@bogusaddress.mvp> wrote in message >> news:ucbW51zzJHA.1432@TK2MSFTNGP02.phx.gbl... >><span style="color:darkred"> >> > See if this helps: http://www.lmgtfy.com/?q=csrss.exe >> > >> > -- >> > -Ben- >> > Ben M. Schorr, MVP >> > Roland Schorr & Tower >> > http://www.rolandschorr.com >> > http://www.officeforlawyers.com >> > Author - The Lawyer's Guide to Microsoft Outlook 2007: >> > http://tinyurl.com/5m3f5q >> > >> > >> > >> > "JamesJ" <jjy@darwin_roadrunner.com> wrote in message >> > news:OLa$huyzJHA.5528@TK2MSFTNGP03.phx.gbl: >> ></span> >><span style="color:darkred"> >> >> I'm trying to reply to "pacinitaly" in my post: >> >> What is csrss.exe? >> >> I've replied twice and after 5 minutes I can't see my replies. >> >> Can anyone else see my replies or is just me?? >> >> >> >> James</span> >><span style="color:darkred"> >> ></span></span> > </span> Quote
Guest Jonathan Harker Posted May 7, 2009 Posted May 7, 2009 On Thu, 7 May 2009 14:15:02 -0400, "JamesJ" <jjy@darwin_roadrunner.com> wrote: <span style="color:blue"> >I've already done that. I'm a bit concerned that it's a worm 'cause I was >told the file is used only in Windows XP.</span> Have you run any anti-malware programs yet or are you spending all your time here posting and then looking for your older posts? Quote
Guest Ben M. Schorr - MVP (OneNote) Posted May 7, 2009 Posted May 7, 2009 That all sounds pretty normal to me. I'd be tempted to give it one more scan with something else - maybe Trend's free online scanner HouseCall. (http://housecall.antivirus.com if I recall correctly) just for a little extra peace of mind. -- -Ben- Ben M. Schorr, MVP Roland Schorr & Tower http://www.rolandschorr.com http://www.officeforlawyers.com Author - The Lawyer's Guide to Microsoft Outlook 2007: http://tinyurl.com/5m3f5q "JamesJ" <jjy@darwin_roadrunner.com> wrote in message news:emhCme0zJHA.5964@TK2MSFTNGP04.phx.gbl: <span style="color:blue"> > The only instance I can find using Search is in %systemroot%system32. > I'm currently running AVG Free scan (paused) and I also ran > a scan with Windows Defender. > Although I do recall seeing it 2 times in processes. > One thing I might bring up here. When I right clicked on it and selected > 'End Process' > my computer restarted top a blue screen with much info but before I can > gather > any of it I was presented with Vista's bad shutdown screen (or what ever > it's called > with the startup options, Safe Mode, Safe Mode with network...). Is this > normally what > happens when one shuts down the process if it's a Vista process? > > James > > "Ben M. Schorr - MVP (OneNote)" <bens@bogusaddress.mvp> wrote in message > news:u9kuEX0zJHA.1092@TK2MSFTNGP06.phx.gbl... ><span style="color:green"> > > No, it's in Vista too. That doesn't mean the one you have ISN'T a worm, > > but it's mere existence doesn't tell us that one way or the other. Do you > > have CSRSS.EXE in a folder other than %systemroot%system32 ? > > > > Have you scanned your system with more than one anti-malware product? > > > > -- > > -Ben- > > Ben M. Schorr, MVP > > Roland Schorr & Tower > > http://www.rolandschorr.com > > http://www.officeforlawyers.com > > Author - The Lawyer's Guide to Microsoft Outlook 2007: > > http://tinyurl.com/5m3f5q > > > > > > > > "JamesJ" <jjy@darwin_roadrunner.com> wrote in message > > news:Ofn3b#zzJHA.4272@TK2MSFTNGP06.phx.gbl: > ></span> ><span style="color:green"><span style="color:darkred"> > >> I've already done that. I'm a bit concerned that it's a worm 'cause I was > >> told > >> the file is used only in Windows XP. > >> > >> James > >> > >> "Ben M. Schorr - MVP (OneNote)" <bens@bogusaddress.mvp> wrote in message > >> news:ucbW51zzJHA.1432@TK2MSFTNGP02.phx.gbl... > >></span></span> ><span style="color:green"><span style="color:darkred"> > >> > See if this helps: http://www.lmgtfy.com/?q=csrss.exe > >> > > >> > -- > >> > -Ben- > >> > Ben M. Schorr, MVP > >> > Roland Schorr & Tower > >> > http://www.rolandschorr.com > >> > http://www.officeforlawyers.com > >> > Author - The Lawyer's Guide to Microsoft Outlook 2007: > >> > http://tinyurl.com/5m3f5q > >> > > >> > > >> > > >> > "JamesJ" <jjy@darwin_roadrunner.com> wrote in message > >> > news:OLa$huyzJHA.5528@TK2MSFTNGP03.phx.gbl: > >> > > >></span></span> ><span style="color:green"><span style="color:darkred"> > >> >> I'm trying to reply to "pacinitaly" in my post: > >> >> What is csrss.exe? > >> >> I've replied twice and after 5 minutes I can't see my replies. > >> >> Can anyone else see my replies or is just me?? > >> >> > >> >> James > >> > >> ></span></span> ><span style="color:green"> > ></span></span> Quote
Guest JamesJ Posted May 7, 2009 Posted May 7, 2009 Thanks much, James "Ben M. Schorr - MVP (OneNote)" <bens@bogusaddress.mvp> wrote in message news:uFW5Uj0zJHA.6004@TK2MSFTNGP02.phx.gbl...<span style="color:blue"> > That all sounds pretty normal to me. I'd be tempted to give it one more > scan with something else - maybe Trend's free online scanner HouseCall. > (http://housecall.antivirus.com if I recall correctly) just for a little > extra peace of mind. > > -- > -Ben- > Ben M. Schorr, MVP > Roland Schorr & Tower > http://www.rolandschorr.com > http://www.officeforlawyers.com > Author - The Lawyer's Guide to Microsoft Outlook 2007: > http://tinyurl.com/5m3f5q > > > > "JamesJ" <jjy@darwin_roadrunner.com> wrote in message > news:emhCme0zJHA.5964@TK2MSFTNGP04.phx.gbl: ><span style="color:green"> >> The only instance I can find using Search is in %systemroot%system32. >> I'm currently running AVG Free scan (paused) and I also ran >> a scan with Windows Defender. >> Although I do recall seeing it 2 times in processes. >> One thing I might bring up here. When I right clicked on it and selected >> 'End Process' >> my computer restarted top a blue screen with much info but before I can >> gather >> any of it I was presented with Vista's bad shutdown screen (or what ever >> it's called >> with the startup options, Safe Mode, Safe Mode with network...). Is this >> normally what >> happens when one shuts down the process if it's a Vista process? >> >> James >> >> "Ben M. Schorr - MVP (OneNote)" <bens@bogusaddress.mvp> wrote in message >> news:u9kuEX0zJHA.1092@TK2MSFTNGP06.phx.gbl... >><span style="color:darkred"> >> > No, it's in Vista too. That doesn't mean the one you have ISN'T a >> > worm, >> > but it's mere existence doesn't tell us that one way or the other. Do >> > you >> > have CSRSS.EXE in a folder other than %systemroot%system32 ? >> > >> > Have you scanned your system with more than one anti-malware product? >> > >> > -- >> > -Ben- >> > Ben M. Schorr, MVP >> > Roland Schorr & Tower >> > http://www.rolandschorr.com >> > http://www.officeforlawyers.com >> > Author - The Lawyer's Guide to Microsoft Outlook 2007: >> > http://tinyurl.com/5m3f5q >> > >> > >> > >> > "JamesJ" <jjy@darwin_roadrunner.com> wrote in message >> > news:Ofn3b#zzJHA.4272@TK2MSFTNGP06.phx.gbl: >> ></span> >><span style="color:darkred"> >> >> I've already done that. I'm a bit concerned that it's a worm 'cause I >> >> was >> >> told >> >> the file is used only in Windows XP. >> >> >> >> James >> >> >> >> "Ben M. Schorr - MVP (OneNote)" <bens@bogusaddress.mvp> wrote in >> >> message >> >> news:ucbW51zzJHA.1432@TK2MSFTNGP02.phx.gbl... >> >></span> >><span style="color:darkred"> >> >> > See if this helps: http://www.lmgtfy.com/?q=csrss.exe >> >> > >> >> > -- >> >> > -Ben- >> >> > Ben M. Schorr, MVP >> >> > Roland Schorr & Tower >> >> > http://www.rolandschorr.com >> >> > http://www.officeforlawyers.com >> >> > Author - The Lawyer's Guide to Microsoft Outlook 2007: >> >> > http://tinyurl.com/5m3f5q >> >> > >> >> > >> >> > >> >> > "JamesJ" <jjy@darwin_roadrunner.com> wrote in message >> >> > news:OLa$huyzJHA.5528@TK2MSFTNGP03.phx.gbl: >> >> > >> >></span> >><span style="color:darkred"> >> >> >> I'm trying to reply to "pacinitaly" in my post: >> >> >> What is csrss.exe? >> >> >> I've replied twice and after 5 minutes I can't see my replies. >> >> >> Can anyone else see my replies or is just me?? >> >> >> >> >> >> James >> >> >> >> ></span> >><span style="color:darkred"> >> ></span></span> > </span> Quote
Guest JamesJ Posted May 7, 2009 Posted May 7, 2009 No, I'm playing with my pee-pee. Wanna help? "Jonathan Harker" <jonharker@invalid.invalid> wrote in message news:4nc605h62vdmlob9mlcepiasro9b1j86ra@4ax.com...<span style="color:blue"> > On Thu, 7 May 2009 14:15:02 -0400, "JamesJ" > <jjy@darwin_roadrunner.com> wrote: ><span style="color:green"> >>I've already done that. I'm a bit concerned that it's a worm 'cause I was >>told the file is used only in Windows XP.</span> > > Have you run any anti-malware programs yet or are you spending all > your time here posting and then looking for your older posts? </span> Quote
Guest Ǝøçεl Posted May 7, 2009 Posted May 7, 2009 Hello James, Go to Jotti's site <http://virusscan.jotti.org/> In the file to upload area press Browse then follow the path to the exe file : Then press Submit and copy and paste the results to notepad and save them so you can post back the results if needed. This could well be a false positive. One way to get further information is to find CSRSS.EXE on your system, and submit the file at one or more of the following sites: <http://www.virustotal.com> <http://virusscan.jotti.org> Each has a browse window in the upper right to do the submission, and will check out your file with 10 or so antivirus vendors with one submission. In the file to upload area press Browse then follow the path to the exe file: CSRSS.EXE Then press Submit and copy and paste the results to notepad and save them so you can post back the results if needed. A clean reading at these sites is not proof that a file is safe, but I'd say in this case that it is likely to be a good indicator that, in fact, the file is safe, and you are seeing a false positive. -- Also, You can submit a sample from here: <http://www.microsoft.com/security/portal/> -- If you submit the suspicious file(s) to http://virscan.org/index.php and "if the file you upload is detected as suspicious, VirSCAN will send the file and report off to the antivirus vendors participating in the VirSCAN service to be analyzed. Antivirus companies will update the signature virus database if a real malware is found." Microsoft, McAfee, Symantec, and many other security software vendors participate. -- Report problems and check for solutions automatically <http://windowshelp.microsoft.com/Windows/en-US/Help/fba7e7c3-2aec-46e4-9a32-968aa620f35b1033.mspx> It would be a good idea to scan. I recommend downloading and installing MalwareBytes' Antimalware (MBAM) and SUPERAntiSpywaÑÂe (SAS). Do a full scan with MalwaÑÂeBytes' and SUPERAntiSpywaÑÂe. <http://www.superantispyware.com/> Reboot -=- <http://www.malwarebytes.org/mbam.php> Reboot -=- The programs are free. (There is a paid version but you don't need to buy it to remove malware.) -=- Good luck Ǝøçεl -- "JamesJ" wrote: <span style="color:blue"> > I'm trying to reply to "pacinitaly" in my post: > What is csrss.exe? > I've replied twice and after 5 minutes I can't see my replies. > Can anyone else see my replies or is just me?? > > James > </span> Quote
Guest JamesJ Posted May 7, 2009 Posted May 7, 2009 They all found nothing. Thanks for the link. James "Ǝøçεl" <l@discussions.microsoft.com> wrote in message news:D41BCAE1-167C-4AE2-8884-F06D0B6A137D@microsoft.com...<span style="color:blue"> > Hello James, > > Go to Jotti's site > > <http://virusscan.jotti.org/> > > In the file to upload area press Browse then follow the path to the exe > file : > > Then press Submit and copy and paste the results to notepad and save them > so > you can post back the results if needed. > > > This could well be a false positive. > > One way to get further information is to find > > CSRSS.EXE > > on your system, and submit the file at one or more of the following sites: > > <http://www.virustotal.com> > > <http://virusscan.jotti.org> > > Each has a browse window in the upper right to do the submission, and will > check out your file with 10 or so antivirus vendors with one submission. > > In the file to upload area press Browse then follow the path to the exe > file: CSRSS.EXE > > Then press Submit and copy and paste the results to notepad and save them > so > you can post back the results if needed. > > A clean reading at these sites is not proof that a file is safe, but I'd > say > in this case that it is likely to be a good indicator that, in fact, the > file > is safe, and you are seeing a false positive. > -- > Also, You can submit a sample from here: > > <http://www.microsoft.com/security/portal/> > -- > > If you submit the suspicious file(s) to http://virscan.org/index.php > and "if the file you upload is detected as suspicious, VirSCAN > will send the file and report off to the antivirus vendors participating > in > the > VirSCAN service to be analyzed. Antivirus companies will update the > signature virus database if a real malware is found." Microsoft, McAfee, > Symantec, and many other security software vendors participate. > -- > > Report problems and check for solutions automatically > > <http://windowshelp.microsoft.com/Windows/en-US/Help/fba7e7c3-2aec-46e4-9a32-968aa620f35b1033.mspx> > > It would be a good idea to scan. > > I recommend downloading and installing MalwareBytes' Antimalware (MBAM) > and > SUPERAntiSpywaÑÂe (SAS). > > Do a full scan with MalwaÑÂeBytes' and SUPERAntiSpywaÑÂe. > > <http://www.superantispyware.com/> > > Reboot > -=- > > <http://www.malwarebytes.org/mbam.php> > Reboot > -=- > The programs are free. (There is a paid version but you don't need to buy > it > to remove malware.) > -=- > > > Good luck > > > > Ǝøçεl > -- > > "JamesJ" wrote: ><span style="color:green"> >> I'm trying to reply to "pacinitaly" in my post: >> What is csrss.exe? >> I've replied twice and after 5 minutes I can't see my replies. >> Can anyone else see my replies or is just me?? >> >> James >> </span></span> Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.