Windows 10: Is anyone familiar with passing messages via csrss/DTC?

Discus and support Is anyone familiar with passing messages via csrss/DTC? in Windows 10 Network and Sharing to solve the problem; Yep, not even sure if thats the proper terminology. First time exposed to it. I have 3 pc's ive begun setting up with an application which affords... Discussion in 'Windows 10 Network and Sharing' started by klepp0906, Mar 25, 2020.

  1. klepp0906 Win User

    Is anyone familiar with passing messages via csrss/DTC?


    Yep, not even sure if thats the proper terminology. First time exposed to it.

    I have 3 pc's ive begun setting up with an application which affords this as one of its features. Ive allowed Distributed Tracking Coordinator through the firewall on my private network for all 3 pc's, however only 1 can actually send messages to the other 2.

    On the 2 problem-pc's I can see the csrss.exe window flicker in the taskbar and quickly disappear, but nothing is ever sent.

    No idea where to begin figuring this out. Hoping a bored systems administrator can see the potential issue ez-pz and point me in the right direction ;p

    :)
     
    klepp0906, Mar 25, 2020
    #1

  2. CSRSS @ c/i386

    alt tab delete... process list comes up.... found says CSRSS.EXE press end process.... popup says:

    "this is a critial system process. task manager cannot end this process"
     
    HiddenStupid, Mar 25, 2020
    #2
  3. CSRSS @ c/i386

    CSRSS.EXE - Confusion

    Csrss.exe is the Microsoft client server runtime which generates worker threads for client requests. The confusion over csrss.exe comes from Trojans or viruses that use the same executable name (.exe) as that of csrss.

    Many spyware/malware programs use filenames of usual, non-malware programs.

    The legitimate csrss.exe is part of the Microsoft client server software and is a very important part of the system which should not be removed.

    One way to determine if csrss.exe is a legitimate file besides looking at the date modified is to right click on csrss.exe inside Task Manager and attempt to end process. Because csrss is a critical file, Microsoft should inform you with a message that csrss.exe is a critical system process and end it is not possible.

    If you do not receive this message when attempting to end the csrss.exe process, then it may indeed be a virus.
     
    smartali89, Mar 25, 2020
    #3
  4. Is anyone familiar with passing messages via csrss/DTC?

    CSRSS @ c/i386

    (dell)

    CSRSS @ c/i386

    How to get rid of CSRSS virus?

    click start..search for csrss and comes out with 5 results:
    - CSRSS from C/i386
    - CSRSS from c/windows/system32
    - csrss and numbers end with hdmp from c/windows/PCHEALTH/ErrorRep/userdumps
    - csrss and numbers end with mdmp from c/windows/PCHEALTH/ErrorRep/userdumps
    - csrss and numbers end with mdmp from c/windows/PCHEALTH/ErrorRep/userdumps

    went to C/ and found a folder called i386 and size of 988mb... open up... full of files... notepads, exe's, picture icon ect...

    heres some of the names on the files in the i386 folder:
    - sendmail.dll
    - WINLOGON
    - WSSCRIPT
    - DellSys.dll
    - AGENTSVR (shows man in suit with black shades and hat as icon)
    - (jpeg file) name desktop_screen_shot. as preview on left side show desktop and desert wallpaper and browser open and paintshop open.



    Heres some refference for you to help me get rid of this nasty virus:
    - TechSpot : Tech Enthusiasts, Power Users, Gamers
    - Search



    and here is result when scanned with SDfix:

    Trojan Files Found:



    Could Not Remove C:\csrss.exe
    Could Not Remove C:\WINDOWS\lsasss.exe
    Could Not Remove C:\WINDOWS\system32\remote.exe
    Could Not Remove C:\WINDOWS\system32\windowz.exe
    Could Not Remove C:\WINDOWS\system32\winsys.exe
    Could Not Remove C:\WINDOWS\system32\winxp.exe
     
    HiddenStupid, Mar 25, 2020
    #4
Thema:

Is anyone familiar with passing messages via csrss/DTC?

Loading...
  1. Is anyone familiar with passing messages via csrss/DTC? - Similar Threads - anyone familiar passing

  2. Anyone familiar with minitool partition wizard from usb?

    in Windows 10 Software and Apps
    Anyone familiar with minitool partition wizard from usb?: So i forget why as it was weeks back, but i was attempting an action with minitool that basically resulted in the realization it had to be done from a bootable environment. i noticed the application has a bootable media button right in it, so i figured NBD. well i got...
  3. ANTI-VIRUS - Is anyone familiar with TOTALAV?

    in AntiVirus, Firewalls and System Security
    ANTI-VIRUS - Is anyone familiar with TOTALAV?: Is anyone familiar with TOTALAV? While using CHROME, this came up on screen to download for free for all windows users. Wondering if it"s legit? https://answers.microsoft.com/en-us/windows/forum/all/anti-virus/9c6a86fe-f7b9-46b6-a61f-f183d60cf3f7"
  4. Anybody familiar with WSL?

    in Windows 10 Support
    Anybody familiar with WSL?: Having a problem (i believe?) thats always been a thing. Would like to understand the cause and remedy it. I had a developer buddy throw together a few scripts for me in order to do something I needed that would have been impossible manually. For better or worse, he hasnt...
  5. Anyone VERY familiar with NVFBC capture relative to desktop resolution

    in Windows 10 Gaming
    Anyone VERY familiar with NVFBC capture relative to desktop resolution: So ive been all around the world on this one. Problem has plagued me for a LONG time. Ive gone so far as emailing nvidia over it, and was told they arent going to waste their time as nvfbc is now considered deprecated. Whelp, until steam replaces it with a successor, its...
  6. Dwm and csrss using my gpu

    in Windows 10 BSOD Crashes and Debugging
    Dwm and csrss using my gpu: Hey so the dwm and csrss using my gpu while im moving window folder(dwm) and while im moving cursor (csrss) and each of them can use 10% or higher And when im in csgo there is 10% of use of it (dwm) and 20% for.csgo im wondering if its okey or not...
  7. Out of curiosity anyone familiar with this type of error mentioned in the image

    in Windows 10 Customization
    Out of curiosity anyone familiar with this type of error mentioned in the image: Troubleshooting done already- 1 reinstallation of windows OS 2 Secure boot disabled Its Windows 10 pro and the activation status is linked digitally to MS account the system was never in windows S mode image reference for error https://imgur.com/a/SOu34RA...
  8. Anyone familiar with Microsoft's Virtual Bread Board App?

    in Windows 10 Software and Apps
    Anyone familiar with Microsoft's Virtual Bread Board App?: I am unable to follow the getting started tutorial with VBB. (Missing power-off button and no power to simulation) https://answers.microsoft.com/en-us/windows/forum/all/anyone-familiar-with-microsofts-virtual-bread/e04510e2-f89e-451f-bcc5-a5566eaf642d
  9. Anyone familiar with wifi direct before i lose my mind?

    in Windows 10 Network and Sharing
    Anyone familiar with wifi direct before i lose my mind?: So i have an affinity for learning things the hard way. I kept trying to enable projecting to this pc anywhere on secure networks and every time i did in the past, it seems to pick up my neighbors pc. In the past I had a restore ready to rollback and get rid of it. (it...
  10. Anybody Familiar with u32Jpg.fio???

    in Windows 10 Support
    Anybody Familiar with u32Jpg.fio???: I use a relatively obscure commercial product "Photoimpact Pro" for many of my photo editing needs. For the last couple of months, I've been unable to use the program on my main desktop; as it goes through the several seconds of initialization it consistently hangs...