PDA

View Full Version : redialling



lakeside
17-11-2004, 03:41 PM
A friends computer running 98 vr 2 keeps dialling up the internet. The only unusual thing I have noticed is csrss.exe.
On investigation I find it is a key logger in the registry. I cannot right click to delete as it claims to be part of windows as it may well be but in endeavouring to discover if this true via the internet I find it could be part of Troj/Legmir-m virus. A viral scan with Norton has not picked this up though

Richard H Mandeno

somebody
17-11-2004, 03:51 PM
Hi Richard, and welcome to PressF1,

I would suggest trying to do an online virus scan and see if it gets picked up. Or since you know the name of the potential virus, find a manual removal tool and try that.

In addition to that, install and run both Adaware and Spybot (both avail. on most PC World Cds, or download from the net) to try and clean it out as well.

Beware when it dials that it isn't dialing a porn site somewhere across the world, as you could rack up huge toll-call bills very easily.

Good luck.

Graham L
17-11-2004, 03:54 PM
Have a read of FAQ16 (you can see a [FAQS] button at the right of the "PressF1" bar) for some hints.

Spacemannz
17-11-2004, 04:03 PM
csrss.exe is also part of windows (well its part of XP). Cant remember if it is part of 98. So be careful if it's a windows 98 file. If u decide to remove/delete it.

BUT also keyloggers as shown here

http://www.2-spyware.com/file-csrss-exe.html

Peter H
17-11-2004, 04:08 PM
csrss.exe is not part of W98se - not in my system anyway. Rename & see what happens.
Bye

viper
17-11-2004, 04:35 PM
pretty sure i saw this mentioned here the other day. do a forum search for the file csrss.exe.