View Full Version : redialling

17-11-2004, 03:41 PM
A friends computer running 98 vr 2 keeps dialling up the internet. The only unusual thing I have noticed is csrss.exe.
On investigation I find it is a key logger in the registry. I cannot right click to delete as it claims to be part of windows as it may well be but in endeavouring to discover if this true via the internet I find it could be part of Troj/Legmir-m virus. A viral scan with Norton has not picked this up though

Richard H Mandeno

17-11-2004, 03:51 PM
Hi Richard, and welcome to PressF1,

I would suggest trying to do an online virus scan and see if it gets picked up. Or since you know the name of the potential virus, find a manual removal tool and try that.

In addition to that, install and run both Adaware and Spybot (both avail. on most PC World Cds, or download from the net) to try and clean it out as well.

Beware when it dials that it isn't dialing a porn site somewhere across the world, as you could rack up huge toll-call bills very easily.

Good luck.

Graham L
17-11-2004, 03:54 PM
Have a read of FAQ16 (you can see a [FAQS] button at the right of the "PressF1" bar) for some hints.

17-11-2004, 04:03 PM
csrss.exe is also part of windows (well its part of XP). Cant remember if it is part of 98. So be careful if it's a windows 98 file. If u decide to remove/delete it.

BUT also keyloggers as shown here


Peter H
17-11-2004, 04:08 PM
csrss.exe is not part of W98se - not in my system anyway. Rename & see what happens.

17-11-2004, 04:35 PM
pretty sure i saw this mentioned here the other day. do a forum search for the file csrss.exe.