| Pages: 1 2 [3] 4 :: one page |
| Author |
Thread Statistics | Show CCP posts - 11 post(s) |

DubanFP
Caldari
|
Posted - 2006.10.09 20:59:00 -
[61]
Originally by: Complacency's Bane Edited by: Complacency''s Bane on 09/10/2006 20:44:58 csrss.exe
There are a number of spyware/trojan packages which drop csrss.exe into Windows - you may have one of those, and not this particular varient.
Yeah taht's what i was afraid of. Especially considering it refused to let me delete the file, and it seemed off. Oh well whatever virus it was, i removed from registry and got around the inability to delete it by re-naming the file. Only one Csrss file operating now, though i can only imagine what it's done up to thsi point :-(.
|

Stephar
The High Priest
|
Posted - 2006.10.09 21:06:00 -
[62]
I actually had the csrss.exe thing last night at work. I downloaded Security Task Manager, which seemed to fix it.
|

Hakera
Anari Higard
|
Posted - 2006.10.09 21:06:00 -
[63]
Originally by: DubanFP
Yeah taht's what i was afraid of. Especially considering it refused to let me delete the file, and it seemed off.
sorry, i should of added, you may of needed to open taskmanager (ctrl-alt-delete) and end its process first.
looking into stuff further, may well be wise just running one of the trojan removal tools for existing trojans that drop csrss.exe
try this one from sophos, the trojan looks fairly similar.
|

Firebyrd
Gallente Crooked River Productions
|
Posted - 2006.10.09 21:15:00 -
[64]
Edited by: Firebyrd on 09/10/2006 21:20:35 Edited by: Firebyrd on 09/10/2006 21:16:47 I wonder if this was causeing my startup issues that have been going on for past week or so, over the weekend i reinstalled my Win XP software, and have no more problems, the problem i was having it took about 5 trys for windows to startup, kept restarting, and sometimes the windows option of normal or safemode would come up... but no such problems last 3-4 days
the Csrss.exe in my Task manager is 4,664K size, and coure Task manager wont let me stop its running either...lol
And under the User name column says System... so its probably the correct one running..
But i also think i seen an autoexec.exe file in task manager when i have eve running, but i dont now, since i reinstalled win XP ----------------------------------------------- In the End , there can be only 1
Learn from yesterday, that u may be stronger tomorrow
|

Sevarus James
Minmatar Meridian Dynamics
|
Posted - 2006.10.09 21:24:00 -
[65]
It is crap like this that makes me appreciate even further the operating system choice I made awhile back.
Much sympathy to the mods on this one though. ----- ------------
Updated Linux Desktop+EVE+EVE-TV |

Hakera
Anari Higard
|
Posted - 2006.10.09 21:31:00 -
[66]
Originally by: Stephar I actually had the csrss.exe thing last night at work. I downloaded Security Task Manager, which seemed to fix it.
thanks, i updated my post at the top of the page as thats the easiest way to make sure people end the right process and can then delete the file.
Nifty little tool that though it says my logitec controlers are a 91% probable threat heh.
|

DeODokktor
Caldari Dark Templars The Fonz Presidium
|
Posted - 2006.10.09 23:08:00 -
[67]
CSRSS.EXE is a required windows process for most users. Deleting it can be a bad thing to do (they might not be complaining cause their systems arent restarting).
If it's %winpath%\ then delete it if it's %winpath%\system32\ then I'd suggest not touching it.
|
|

Kaemonn
Forum Moderator Interstellar Services Department

|
Posted - 2006.10.10 00:59:00 -
[68]
Sometimes in order to delete a file or piece of malware off your computer you have to be in safe mode. To do this press F8 as your computer is booting. This will start windows with just the absolute minimum to stay running. From there you can delete what you will.
forum rules | [email protected] You mean to tell me, theres a game that goes with the forums?
|
|
|

Suvetar
Forum Moderator Interstellar Services Department

|
Posted - 2006.10.10 06:06:00 -
[69]
Yes, just to clarify folks:
CSRSS.Exe is an important file for Windows and if you delete the wrong one, it may break your installation but good 
If you search your drive for CSRSS, you should only find it in the following locations:
Windows\$NtServicePackUninstall$ Windows\Prefetch (it will have a name called CSRSS(numbers).PF Windows\System32 Windows\ServicePackFiles\i386
If you right click each of the EXE's (not the PF one) and go to the Version tab, the number should be at between 5.1.2600 .0 and 5.1.2600.2180.
Also check the file details; it should be something like this, depending on your language and service pack:
Company: Microsoft Corporation File Version: 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) Internal Name: CSRSS.Exe Language: English (United States) Original File Name: CSRSS.Exe Product Name: Microsoft« Windows« Operating System Product Version: 5.1.2600.2180
Hope this helps 
And a big thanks to the other people who've taken their time to help solve this problem for anyone unlucky enough to have clicked this link.
|
|

Kuolematon
Space Perverts and Forum Warriors United
|
Posted - 2006.10.10 06:37:00 -
[70]
Originally by: Baleorg why are *YOU* still using IE ?! :-P you like risks?
why are *YOU* still telling me what to use !? :-D you like tardfoxes?
Unnerf Amarr!Ö "I read somewhere that Kali will be featuring turn-based combat to increase immersion." ¬ Waagaa Ktlehr
|

Sevarus James
Minmatar Meridian Dynamics
|
Posted - 2006.10.10 08:02:00 -
[71]
Originally by: Kuolematon
Originally by: Baleorg why are *YOU* still using IE ?! :-P you like risks?
why are *YOU* still telling me what to use !? :-D you like tardfoxes?
Not helpful Kuo, and once again living up to your sig, I see.
The question is valid when it comes to this sort of crap. IE is notoriously full of holes, to this day, including a few that are current and wide open. No browser is 100% safe under XP, but the poster is correct in pointing out that IE is the worst of the lot.
----- ------------
Updated Linux Desktop+EVE+EVE-TV |

cRaNbErRy MuFfInMaN
mUfFiN fAcToRy Pirate Coalition
|
Posted - 2006.10.10 09:23:00 -
[72]
i have firefox and had clicked on the link thinking it was a joke and it popped up a download which i rejected do i have to worry about this?
im so paranoid i think ill wipe this hardrive clean this weekend =/ long and hard process
Check out http://dl1.eve-files.com/media/0608/new.jpg |
|

Xorus
Forum Moderator Interstellar Services Department

|
Posted - 2006.10.10 10:42:00 -
[73]
Originally by: cRaNbErRy MuFfInMaN i have firefox and had clicked on the link thinking it was a joke and it popped up a download which i rejected do i have to worry about this?
im so paranoid i think ill wipe this hardrive clean this weekend =/ long and hard process
As for what i've read its using an exploit in IE which is obviously not present in FF, i visit a few sites that like to throw trojans and virii at me but i either get prompts to download a strangely named .exe file or my AV (avast) kicks up a message saying the connection contains [Virus name here] with an abart connection message but yes as i mentioned if you don't have any AV i suggest you get some :)Process Explorer also a freeware tool but provides better information than task manager does and also allows you to kill off a few more processes than task manager :) ---
Wanna Buy a Goat??- Tirg
Member of the 'Kaemonn is My Hero' club Member of the "Immy's Bald Head Appreciation Society" Xorus is currenly off duty counting trees in Siberia. -Ivan K How much is that goaty in the window, baaa baaaa - Cortes (Secretary, Bald Head Appreciation Society)
All your sig are belong to me - Tanis
|
|

Jali Prince
Minmatar
|
Posted - 2006.10.10 11:42:00 -
[74]
oh no, im at work reading this cannot check my puter!
 Oh well, the work ones ok....
Life is chocolate |

Trojanman190
Caldari Entropy Tech.
|
Posted - 2006.10.10 14:14:00 -
[75]
Originally by: Hakera
Originally by: Hakera i hope you have a dev on the case with backend access, it is far easier to ban by ip range then do a sql query on the backend to remove all posts at once.
You can then run a sql query in the content box looking for the url to find any posted with other characters.
that method is at least far more quicker than using frontend forum mod functions.
You can also implement a flood control specifically designed to stop bots which should only affect dark shikiri aside from the bots in his normal posting but the effect is minimal.
to add to this - might i also suggest an autolock feature, where any post is locked if there has been no reply within last 30 days?
So simple.... so sweet... this is a great thought.
|

DukDodgerz
Amarr Imperial Academy
|
Posted - 2006.10.10 17:42:00 -
[76]
anyone notice that the url geographical location is/was also a geopraphical location of persons that suddenly came up 'missing' in the game?
could this be a retaliation towards CCP for 'handling' 'something' that we can't discuss on the forums?
Just a thought.
Pattern noticed, comment made, tinfoil hats are on sale at a local Walmart in case you need one.  
|

Kuolematon
Space Perverts and Forum Warriors United
|
Posted - 2006.10.10 17:47:00 -
[77]
Originally by: Sevarus James Not helpful Kuo, and once again living up to your sig, I see.
Ah your right! I see the light now! I will instanly go to firefox page and install it! Thank you sir for showing wrongs on my way of life! 
I don't understand why you people dis IE? It shows pages right (Well IE7 has some flaws but I'm sure that admins will correct their pages to be shown right on my browser!) and beside, it's intergrated to my OS so it works flaweless with it.
Unnerf Amarr!Ö "I read somewhere that Kali will be featuring turn-based combat to increase immersion." ¬ Waagaa Ktlehr
|

Jim McGregor
Caldari
|
Posted - 2006.10.10 19:02:00 -
[78]
Originally by: Kuolematon
I don't understand why you people dis IE? It shows pages right (Well IE7 has some flaws but I'm sure that admins will correct their pages to be shown right on my browser!) and beside, it's intergrated to my OS so it works flaweless with it.
Its the integration that is the problem. A web browser doesnt need to be integrated into a operating system. All you get is security problems. You are exposing the operating system functions right to the internet via the browser, instead of having a extra layer of security by using a separate browser.
Microsoft did a good marketing job when they told people that integrating the web browser is something good, thats for sure. 
--- Eve Wiki | Eve Tribune | Eve Pirate |

DukDodgerz
Amarr Imperial Academy
|
Posted - 2006.10.10 19:27:00 -
[79]
Originally by: Jim McGregor
Originally by: Kuolematon
I don't understand why you people dis IE? It shows pages right (Well IE7 has some flaws but I'm sure that admins will correct their pages to be shown right on my browser!) and beside, it's intergrated to my OS so it works flaweless with it.
Its the integration that is the problem. A web browser doesnt need to be integrated into a operating system. All you get is security problems. You are exposing the operating system functions right to the internet via the browser, instead of having a extra layer of security by using a separate browser.
Microsoft did a good marketing job when they told people that integrating the web browser is something good, thats for sure. 
sooooo true. good write up!
IE has that big gaping hole that allows a webpage to install things using system level authority, something FireFox cannot do, and the user is not even notified if the installer is setup to run 'silent'.
This IE flaw is exploited by big companies such as Adobe and Yahoo to install 'things' when the admin has not provided the ability to the user (the flaw bypasses the security settings). So why wouldn't a 'bad guy' do the same????????
If some people want to remain ignorent and be a life long victim then let them, it just means they have to hire a pro at high cost to 'clean up' their mess....assuming they still have any money in the bank after the badguy has stolen their identity.
|

Adoro
Reunited
|
Posted - 2006.10.10 19:28:00 -
[80]
So I got that script block thing for firefox (cant be to sure).
Get the following domain when on eve-online.com:
teljari.is
Whats with that? --------
Bailian Moxtain:
Quote:
Who needs pride when there's isk to be made
|

Hakera
Anari Higard
|
Posted - 2006.10.10 19:47:00 -
[81]
Originally by: Adoro So I got that script block thing for firefox (cant be to sure).
Get the following domain when on eve-online.com:
teljari.is
Whats with that?
a hit counter - its fine to allow.
|

Maverick McDougel
Shiva Morsus Mihi
|
Posted - 2006.10.10 21:36:00 -
[82]
Originally by: Xorus
Originally by: cRaNbErRy MuFfInMaN i have firefox and had clicked on the link thinking it was a joke and it popped up a download which i rejected do i have to worry about this?
im so paranoid i think ill wipe this hardrive clean this weekend =/ long and hard process
As for what i've read its using an exploit in IE which is obviously not present in FF, i visit a few sites that like to throw trojans and virii at me but i either get prompts to download a strangely named .exe file or my AV (avast) kicks up a message saying the connection contains [Virus name here] with an abart connection message but yes as i mentioned if you don't have any AV i suggest you get some :)Process Explorer also a freeware tool but provides better information than task manager does and also allows you to kill off a few more processes than task manager :)
what types of sites are you going to..... P***.... W***Z? 
got any good ones you want to share?  support BattleClinic buy gtc's from BattleClinic |

DukDodgerz
Amarr Imperial Academy
|
Posted - 2006.10.10 21:42:00 -
[83]
Originally by: Maverick McDougel
Originally by: Xorus
Originally by: cRaNbErRy MuFfInMaN i have firefox and had clicked on the link thinking it was a joke and it popped up a download which i rejected do i have to worry about this?
im so paranoid i think ill wipe this hardrive clean this weekend =/ long and hard process
As for what i've read its using an exploit in IE which is obviously not present in FF, i visit a few sites that like to throw trojans and virii at me but i either get prompts to download a strangely named .exe file or my AV (avast) kicks up a message saying the connection contains [Virus name here] with an abart connection message but yes as i mentioned if you don't have any AV i suggest you get some :)Process Explorer also a freeware tool but provides better information than task manager does and also allows you to kill off a few more processes than task manager :)
what types of sites are you going to..... P***.... W***Z? 
got any good ones you want to share? 
a person can goto msn.com and if an advertising server, hosted by a third party, is comprimised, the advertising banners can be activeX and install applications without you knowing it is happening.
MSN wouldn't be at fault, but it would seem that it came from thier site.
|

Maverick McDougel
Shiva Morsus Mihi
|
Posted - 2006.10.10 21:44:00 -
[84]
Originally by: Kuolematon
Originally by: Sevarus James Not helpful Kuo, and once again living up to your sig, I see.
Ah your right! I see the light now! I will instanly go to firefox page and install it! Thank you sir for showing wrongs on my way of life! 
I don't understand why you people dis IE? It shows pages right (Well IE7 has some flaws but I'm sure that admins will correct their pages to be shown right on my browser!) and beside, it's intergrated to my OS so it works flaweless with it.
actually firefox does show pages right. it is incompetent web masters who don't know how to follow standards that cause pages to not show up as intended when using firefox, opera, or any other browser. IE7 actually has less flaws than other IE versions since microsoft has attempted to fix these flaws with it. anytime i see a site that can only be viewed in IE i think of it as an advertisement for a web master job opening. support BattleClinic buy gtc's from BattleClinic |

Maverick McDougel
Shiva Morsus Mihi
|
Posted - 2006.10.10 21:46:00 -
[85]
Originally by: DukDodgerz
Originally by: Maverick McDougel
Originally by: Xorus
Originally by: cRaNbErRy MuFfInMaN i have firefox and had clicked on the link thinking it was a joke and it popped up a download which i rejected do i have to worry about this?
im so paranoid i think ill wipe this hardrive clean this weekend =/ long and hard process
As for what i've read its using an exploit in IE which is obviously not present in FF, i visit a few sites that like to throw trojans and virii at me but i either get prompts to download a strangely named .exe file or my AV (avast) kicks up a message saying the connection contains [Virus name here] with an abart connection message but yes as i mentioned if you don't have any AV i suggest you get some :)Process Explorer also a freeware tool but provides better information than task manager does and also allows you to kill off a few more processes than task manager :)
what types of sites are you going to..... P***.... W***Z? 
got any good ones you want to share? 
a person can goto msn.com and if an advertising server, hosted by a third party, is comprimised, the advertising banners can be activeX and install applications without you knowing it is happening.
MSN wouldn't be at fault, but it would seem that it came from thier site.
it was meant to be humorous.............. some people have no fun in life.  support BattleClinic buy gtc's from BattleClinic |

DukDodgerz
Amarr Imperial Academy
|
Posted - 2006.10.10 22:01:00 -
[86]
Originally by: Maverick McDougel
Originally by: DukDodgerz
Originally by: Maverick McDougel
Originally by: Xorus
Originally by: cRaNbErRy MuFfInMaN i have firefox and had clicked on the link thinking it was a joke and it popped up a download which i rejected do i have to worry about this?
im so paranoid i think ill wipe this hardrive clean this weekend =/ long and hard process
As for what i've read its using an exploit in IE which is obviously not present in FF, i visit a few sites that like to throw trojans and virii at me but i either get prompts to download a strangely named .exe file or my AV (avast) kicks up a message saying the connection contains [Virus name here] with an abart connection message but yes as i mentioned if you don't have any AV i suggest you get some :)Process Explorer also a freeware tool but provides better information than task manager does and also allows you to kill off a few more processes than task manager :)
what types of sites are you going to..... P***.... W***Z? 
got any good ones you want to share? 
a person can goto msn.com and if an advertising server, hosted by a third party, is comprimised, the advertising banners can be activeX and install applications without you knowing it is happening.
MSN wouldn't be at fault, but it would seem that it came from thier site.
it was meant to be humorous.............. some people have no fun in life. 
sorry, wan't trying to sound mean, just informitive....(besides, ccp would be looking at eskeemoes and such... )
|

Sevarus James
Minmatar Meridian Dynamics
|
Posted - 2006.10.10 22:06:00 -
[87]
Originally by: Kuolematon
Originally by: Sevarus James Not helpful Kuo, and once again living up to your sig, I see.
Ah your right! I see the light now! I will instanly go to firefox page and install it! Thank you sir for showing wrongs on my way of life! 
I don't understand why you people dis IE? It shows pages right (Well IE7 has some flaws but I'm sure that admins will correct their pages to be shown right on my browser!) and beside, it's intergrated to my OS so it works flaweless with it.
Ahh, my pleasure Kuo! Its always good to see when people instantly take my advice! -lmao.
Seriously man, in my post, the 'dis' as you so eloquently put it, isn't a religious thing. Its a fact. IE6 (which is what most people are using) is a security manager's nightmare, and a malware writer's godsend. Its not a matter of "I wuv da FOX", or "I hate Bill Gates", its a matter of safe browsing and letting in what you WANT and not some silent stealth viral or malware bomb just because you're not 45 seconds up to date on your "blockers".
If you want to use it, heck, more power to you. I'm a firm believer in choice. Just don't assume that because you use it, its the best option out there. It may be FOR you, but for most people, IE can lead to a host of problems such as the topic of this thread. ----- ------------
Updated Linux Desktop+EVE+EVE-TV |

Firebyrd
Gallente Crooked River Productions
|
Posted - 2006.10.11 01:37:00 -
[88]
i use netscape 9.0, it has a Firefox or IE option displays ----------------------------------------------- In the End , there can be only 1
Learn from yesterday, that u may be stronger tomorrow
|

Kuolematon
Space Perverts and Forum Warriors United
|
Posted - 2006.10.11 05:27:00 -
[89]
Originally by: Sevarus James Ahh, my pleasure Kuo! Its always good to see when people instantly take my advice! -lmao.
Seriously man, in my post, the 'dis' as you so eloquently put it, isn't a religious thing. Its a fact. IE6 (which is what most people are using) is a security manager's nightmare, and a malware writer's godsend. Its not a matter of "I wuv da FOX", or "I hate Bill Gates", its a matter of safe browsing and letting in what you WANT and not some silent stealth viral or malware bomb just because you're not 45 seconds up to date on your "blockers".
If you want to use it, heck, more power to you. I'm a firm believer in choice. Just don't assume that because you use it, its the best option out there. It may be FOR you, but for most people, IE can lead to a host of problems such as the topic of this thread.
Well tbh, you got me to think if I should install Firefox or not. When IE7 is out and FireFox 2.0, I will re-evalute my needs and their features.
But on a midsized school where I work as an admin, we use IE. Reason? Because most of 3rd party web programs we are using here in Finland, needs IE and IIS and ASP and whatnot!! 
Unnerf Amarr!Ö "I read somewhere that Kali will be featuring turn-based combat to increase immersion." ¬ Waagaa Ktlehr
|

Complacency's Bane
Caldari
|
Posted - 2006.10.11 07:09:00 -
[90]
Originally by: Kuolematon But on a midsized school where I work as an admin, we use IE. Reason? Because most of 3rd party web programs we are using here in Finland, needs IE and IIS and ASP and whatnot!! 
IETab for Firefox is helpful.
When you do run into a webpage requiring IE, right click -> open in IETab, and now theres a firefox tab containing IE.
Not that I have the ability to use a web browser without mouse gestures though.
|
| |
|
| Pages: 1 2 [3] 4 :: one page |
| First page | Previous page | Next page | Last page |