Windows 10: csrss.exe rummages my private files

Discus and support csrss.exe rummages my private files in AntiVirus, Firewalls and System Security to solve the problem; Why C:\Windows\System32\csrss.exe attempting event id 4663 to my private files located on external disk?... Discussion in 'AntiVirus, Firewalls and System Security' started by Microbx, Jun 28, 2024.

  1. MICROBX
    Microbx Win User

    csrss.exe rummages my private files


    Why C:\Windows\System32\csrss.exe attempting event id 4663 to my private files located on external disk?

    :)
     
    Microbx, Jun 28, 2024
    #1
  2. HIDDENSTUPID
    HiddenStupid Win User

    CSRSS @ c/i386

    (dell)

    CSRSS @ c/i386

    How to get rid of CSRSS virus?

    click start..search for csrss and comes out with 5 results:
    - CSRSS from C/i386
    - CSRSS from c/windows/system32
    - csrss and numbers end with hdmp from c/windows/PCHEALTH/ErrorRep/userdumps
    - csrss and numbers end with mdmp from c/windows/PCHEALTH/ErrorRep/userdumps
    - csrss and numbers end with mdmp from c/windows/PCHEALTH/ErrorRep/userdumps

    went to C/ and found a folder called i386 and size of 988mb... open up... full of files... notepads, exe's, picture icon ect...

    heres some of the names on the files in the i386 folder:
    - sendmail.dll
    - WINLOGON
    - WSSCRIPT
    - DellSys.dll
    - AGENTSVR (shows man in suit with black shades and hat as icon)
    - (jpeg file) name desktop_screen_shot. as preview on left side show desktop and desert wallpaper and browser open and paintshop open.



    Heres some refference for you to help me get rid of this nasty virus:
    - TechSpot | Tech Enthusiasts, Power Users, Gamers
    - Search



    and here is result when scanned with SDfix:

    Trojan Files Found:



    Could Not Remove C:\csrss.exe
    Could Not Remove C:\WINDOWS\lsasss.exe
    Could Not Remove C:\WINDOWS\system32\remote.exe
    Could Not Remove C:\WINDOWS\system32\windowz.exe
    Could Not Remove C:\WINDOWS\system32\winsys.exe
    Could Not Remove C:\WINDOWS\system32\winxp.exe
     
    HiddenStupid, Jun 28, 2024
    #2
  3. HIDDENSTUPID
    HiddenStupid Win User
    CSRSS @ c/i386

    alt tab delete... process list comes up.... found says CSRSS.EXE press end process.... popup says:

    "this is a critial system process. task manager cannot end this process"
     
    HiddenStupid, Jun 28, 2024
    #3
  4. SMARTALI89
    smartali89 Win User

    csrss.exe rummages my private files

    CSRSS @ c/i386

    CSRSS.EXE - Confusion

    Csrss.exe is the Microsoft client server runtime which generates worker threads for client requests. The confusion over csrss.exe comes from Trojans or viruses that use the same executable name (.exe) as that of csrss.

    Many spyware/malware programs use filenames of usual, non-malware programs.

    The legitimate csrss.exe is part of the Microsoft client server software and is a very important part of the system which should not be removed.

    One way to determine if csrss.exe is a legitimate file besides looking at the date modified is to right click on csrss.exe inside Task Manager and attempt to end process. Because csrss is a critical file, Microsoft should inform you with a message that csrss.exe is a critical system process and end it is not possible.

    If you do not receive this message when attempting to end the csrss.exe process, then it may indeed be a virus.
     
    smartali89, Jun 28, 2024
    #4
Thema:

csrss.exe rummages my private files

Loading...

  1. csrss.exe rummages my private files - Similar Threads - csrss exe rummages

  2. csrss.exe rummages my private files

    in Windows 10 Gaming
    csrss.exe rummages my private files: Why C:\Windows\System32\csrss.exe attempting event id 4663 to my private files located on external disk? https://answers.microsoft.com/en-us/windows/forum/all/csrssexe-rummages-my-private-files/e8fb64c8-1393-4224-b397-bbe9dc3f3898

  3. csrss.exe rummages my private files

    in Windows 10 Software and Apps
    csrss.exe rummages my private files: Why C:\Windows\System32\csrss.exe attempting event id 4663 to my private files located on external disk? https://answers.microsoft.com/en-us/windows/forum/all/csrssexe-rummages-my-private-files/e8fb64c8-1393-4224-b397-bbe9dc3f3898

  4. .exe files

    in AntiVirus, Firewalls and System Security
    .exe files: As of recently many .exe files have been flagged for changing protected files, and I am worried that I have a Trojan or virus of some sort. It has flagged a file called spotify.exe and SetAPM.exe. I had spotify but I deleted it after this had happened....

  5. Files and EXE

    in Windows 10 BSOD Crashes and Debugging
    Files and EXE: There is a software on my computer called ErrorHandler.exe and Kernel Broker.exe, my antivirus says that they are malware so I deleted them, however, they keep coming back, sometimes all at once, sometimes only one of them or 2. I emptied my recycle bin to get rid of them but...

  6. csrss, csrsrv.dll, csrr.rs files on 3/19/2020

    in Windows 10 Installation and Upgrade
    csrss, csrsrv.dll, csrr.rs files on 3/19/2020: On 3/19/2020, my computer updated some files and the above mentioned files in the subject was also uploaded on my computer. Those files are preventing me from being able to print from my computer when I was able to print prior. I have tired everything and still I am unable...

  7. .EXE files

    in Windows 10 Network and Sharing
    .EXE files: I was just wondering if anyone could help or explain to me what exactly this is and what it's used for BridgeCummunication.exe. I noticed it running in my task manager under services and was running as a application. Thankful for any help provided....

  8. Dwm and csrss using my gpu

    in Windows 10 BSOD Crashes and Debugging
    Dwm and csrss using my gpu: Hey so the dwm and csrss using my gpu while im moving window folder(dwm) and while im moving cursor (csrss) and each of them can use 10% or higher And when im in csgo there is 10% of use of it (dwm) and 20% for.csgo im wondering if its okey or not...

  9. exe file

    in Windows 10 Installation and Upgrade
    exe file: exe file is not working on windows 10 https://answers.microsoft.com/en-us/windows/forum/all/exe-file/7e708774-b56c-4846-8036-2e683879ecd7

  10. Private network and files

    in Windows 10 Network and Sharing
    Private network and files: hi. my network is private and i dont have any file or drive shared.however when i pu my ip to file manager on android and put my username and my password i have access to all drivers even local drive C .Why?...