Infected computer - unable to end csrss.exe and winlogon.exe in the Task Manager

original title: Trojan horses and worms: _

in my pc win 7 when I run the task mngr I see to the process without all the properties and descriptions and I cannot put an end to these processes, how do I know that they are infected, the processes are 1: csrss.exe 2:winlogon.exe
                                                

Hello

Those who are part of Windows and should be in the process. Normally they are not a problem unless you
have an infection that affects them.

=======================

If you need search malware here's my recommendations - they will allow you to
scrutiny and the withdrawal without ending up with a load of spyware programs running
resident who can cause as many questions as the malware and may be more difficult to detect as the
cause.

No one program cannot be used to detect and remove any malware. Added that often easy
to detect malicious software often comes with a much harder to detect and remove the payload. Then
its best to be thorough than paying the high price later now too. Check with them to one
extreme overkill point and then run the cleaning only when you are sure that the system is clean.

It can be made repeatedly in Mode safe - F8 tap that you start, however, you must also run
the regular windows when you can.

Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone.
(If Rootkits run UnHackMe)

Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

Malwarebytes - free
http://www.Malwarebytes.org/

Run the malware removal tool from Microsoft

Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

You should get this tool and its updates via Windows updates - if necessary, you can
Download it here.

Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
(Then run MRT as shown above.)

Microsoft Malicious - 32-bit removal tool
http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

Microsoft Malicious removal tool - 64 bit
http://www.Microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495e-94E7-6349F4EFFC74&displaylang=en

also install Prevx to be sure that it is all gone.

Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

Prevx - Home - free - small, fast, exceptional CLOUD protection, working with others
security programs. It is a single scanner, VERY EFFICIENT, if it finds something to come back
here or use Google to see how to remove.
http://www.prevx.com/   <-->
http://info.prevx.com/downloadcsi.asp  <-->

Choice of PCmag editor - Prevx-
http://www.PCMag.com/Article2/0, 2817,2346862,00.asp

Try the demo version of Hitman Pro:

Hitman Pro is a second scanner reviews, designed to save your computer from malicious software
(viruses, Trojans, rootkits, etc.). who infected your computer despite safe
what you have done (such as antivirus, firewall, etc.).
http://www.SurfRight.nl/en/hitmanpro

--------------------------------------------------------

If necessary here are some free online scanners to help the

http://www.eset.com/onlinescan/

New Vista and Windows 7 version
http://OneCare.live.com/site/en-us/Center/whatsnew.htm

Original version
http://OneCare.live.com/site/en-us/default.htm

http://www.Kaspersky.com/virusscanner

Other tests free online
http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1

--------------------------------------------------------

After the removal of malicious programs:

Also follow these steps for the General corruption of cleaning and repair/replace damaged/missing
system files.

Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN

Enter this at the command prompt - sfc/scannow

How to fix the system files of Windows 7 with the System File Checker
http://www.SevenForums.com/tutorials/1538-SFC-SCANNOW-Command-System-File-Checker.html

How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
generates in Windows Vista cbs.log
http://support.Microsoft.com/kb/928228

Also run CheckDisk, so we cannot exclude as much as possible of the corruption.

How to run check disk in Windows 7
http://www.SevenForums.com/tutorials/433-disk-check.html

-----------------------------------------------------------------------

If we find Rootkits use this thread and other suggestions. (Run UnHackMe)

http://social.answers.Microsoft.com/forums/en-us/InternetExplorer/thread/a8f665f0-C793-441A-a5b9-54b7e1e7a5a4/

======================================

If necessary AFTER THAT you are sure that the machine is clean of any malware.

How to do a repair installation to repair Windows 7
http://www.SevenForums.com/tutorials/3413-repair-install.html

I hope this helps.

Rob Brown - MS MVP - Windows Desktop Experience: Bike - Mark Twain said it right.

Tags: Windows

Similar Questions

  • Firewall Windows has been disabled by a virus or Malware. System is now cleaned and Salvation took up the Task Manager, but the Windows Firewall service does not start. How to run again.

    Firewall Windows has been disabled by a virus or Malware. System is now cleaned and Salvation took up the Task Manager, but the Windows Firewall service does not start. How to run again.

    Suggest you read the following: http://answers.microsoft.com/en-us/windows/forum/windows_7-security/virus-recovery-error-codes-0x80070424-and/28ed2ede-076c-4955-bb49-44d0c2ee1ed3

    I hope this helps...

  • Windows 7 upgrade from vista boots without icons or bar spots and can't access the Task Manager.

    New computer was installed with Vista and came with the Windows 7 upgrade when it was released. The dealer did the upgrade. Now, when I boot, I have no icons or taskbar and doesn't get to the Task Manager to start explorer.exe.
    After killing the power I can restart which can sometimes. Once the computer is in place, it works OK.
    I don't know if I can do a repair of win7 or not?

    Thanks in advance for your suggestions. CIE

    Did you take the computer back to the retailer under your warranty?

    Windows Update has nothing to do with the upgrade of Windows. Please post future questions about the upgrade in this forum: http://social.answers.microsoft.com/Forums/en-US/w7install/threads ~ Robear Dyer (PA Bear) ~ MS MVP (that is to say, mail, security, Windows & Update Services) since 2002 ~ WARNING: MS MVPs represent or work for Microsoft

  • XP operating system with several iterations of mshta.exe in the Task Manager

    Last week, I saw several iterations of mshta.exe in my task manager. I don't know what it generates, or why the request is not closed properly

    Hi GFar74,

    MSHTA (Microsoft HTML Hypertext Markup Language > Host Application is a process that is running.) The HTA (HTML application) file, usually MSHTA charge once. HTA application must be running and then ends when the application ends.

    This problem may occur if a Windows system file is missing or damaged.

    Method 1: Run the SFC (System File checker) Scan. To do this, follow the steps below

    With the installation of Windows XP in the drive disc

    un) Click Start, click principally made programs, click Accessories, and click command prompt of

    (b) type the following command and press ENTER:

    sfc/scannow

    The sfc/scannow command analyzes all protected system files and replaces incorrect versions with appropriate Microsoft versions.

    If the problem persists, this could be an activity of the virus

    Method 2: A scanner online for any threat and try to correct

    http://OneCare.live.com/site/en-us/Center/cleanup.htm

    Thank you, and in what concerns:

    Ajay K

    Microsoft Answers Support Engineer
    ---------------------------------------------------------------------------------------------------------
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Windows Vista is running extremely slow and will not open the Task Manager or connect to the internet

    I have an older Dell running Windows Vista, and it started fine when I got it, but about a month ago it started very slow and refusing to open any program. I can't get the Task Manager to open to all and internet Explorer refuses to connect. I did a complete analysis of the system through Viper and it came out saying: there is nothing more than a few trogans. He also started a taskbar at the top of the screen. No idea how it happened either.

    Hello
    Your computer is probably infected by malicious software. Try following the steps in this virus/malware removal guide: http://www.selectrealsecurity.com/malware-removal-guide/
    It provides simple instructions on how to remove malware from a computer. If you have any questions, just ask. I hope this helps you.
    Brian
  • In older firefox if I stop firefox.exe to the Task Manager and start firefox it will restore all my open tabs, now it doesn't

    usually in the earlier version as 28, so I end the process "firefox.exe" task manager and run back the firefox, it will restore the tabs normally I opened (websites that I had until I stop the firefox.exe)
    But now that more recent versions, not give me this feature, restore session screen becomes white and I drop my open sessions.
    I have to use the history to restore the sessions that I lost,

    Please can someone take a look at this problem, it would be an interesting option to stop the firefox.exe in the Manager of tasks and able to restore all the sessions again

    I have attached a picture for your information

    Thank you
    regarding

    Unfortunately the image have no download, but there are built in the back of the inverter session. If these do not work correctly, we are happy to investigate.

    However, there is an addon that helps with backups called session manager Session.

  • What is w8edc4.exe and winyxci.exe in the Task Manager processes

    I see these two exe files in my XP Task Manager process, but Google and Bing cannot find any info on them. I guess they are some kind of virus, but am not sure.

    Sometimes, when a malware gets on your system, it will take on a name composed of a few letters and random numbers.

    If you can't find them in a search on the Internet and the suspicious look (like those that do) file names, your system probably now has or has had a malware infection.

    Perform scans for malware, and then fix any problems:
    Download, install, update and do a full scan with these free malware detection programs:
    Malwarebytes (MMFA): http://malwarebytes.org/
    SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
    They can be uninstalled later if you wish.
  • Svchost.exe in the Task Manager

    Why svchost.exe in the Manager of tasks to the percentage high then low then high again?

    Hi dano92,

    Refer to the Microsoft article below to learn more about the svchost.exe in Windows XP.

    A description of Svchost.exe in Windows XP Professional

    http://support.Microsoft.com/kb/314056

  • Windows Vista works in safe mode but not in normal mode. Desktop freezes and cannot go to the Task Manager

    My laptop (Dell Inspiron; Windows Vista Home premium 32 bit) works on safe mode and safe mode with n/w mode. When I try to boot into normal mode, it comes to the screen asking my password. You can enter the password. Then, it loads the screen saver and freezes. I see a green circle turning. He never stops. I tried ctrl + alt + delete. It does not work. I did repair the system. No use. I tried the system restore. It shows a file as OS (C :) and another as recovery (x :). I chose the recovery (x :) as file control. He has worked and showed a message like system restore successfully in safe mode. But the normal mode of sill is freezing after the password screen.

    Hello

    • All changes made on your computer prior to this question?
    • You have an antivirus installed on your computer?

    To perform a clean boot on a computer that is running Windows Vista, follow these steps.

    1. click on start, type msconfig in the search box and press ENTER.

    If you are prompted for an administrator password or a confirmation, type the password, or click on continue.

    2. in the general tab, click Selective startup.

    3. under Selective startup, clear the check box load startup items.

    4. click on the Services tab, select the hide all Microsoft Services check box, and then click Disable all.

    5. click on OK.

    6. When you are prompted, click on restart.

    7. after starting the computer, reinstall and run the program and see if the problem is resolved.

    Check if you have the same problem... If your issue is resolved, follow the how to determine what is causing the problem section in KB article to narrow down the exact source.

    http://support.Microsoft.com/kb/331796

    To restore your computer to a Normal startup mode, follow these steps.

    1. click on start in the box start the search.

    2. type msconfig and press ENTER.

    If you are prompted for an administrator password or a confirmation, type the password, or click on continue.

    3. click on the general tab.

    4. click on Normal Startup - load all device drivers and services and then click OK.

    5. When you are prompted, click on restart to restart the computer.

    Also try running a Virus scan using a live care online utility.

    http://OneCare.live.com/site/en-us/default.htm

    http://www.Microsoft.com/Security_Essentials/

    Follow the steps mentioned in the link below

    How to get rid of malware.

    http://social.answers.Microsoft.com/forums/en-us/vistasecurity/thread/ba80504b-61f1-4D71-960f-b561798b7b42

    Let us know if this helps

    Concerning
    Anthony.

  • I constantly have to close wlmail.exe on the Task Manager, before I can send or receive e-mails.

    Necessary to close the program on taskmanager sometimes 3 - 4 times a day.

    Windows Live Mail questions should be posted in one of the forums here: http://windowslivehelp.com/product.aspx?productid=15

  • two sometimes three iexplorer.exe. Open the process in the Task Manager

    original title: iexplorer.exe.

    everytime I open a sometimes three iexplorer.exe two Web site. Open in the Task Manager process is this normal or is one of them not supposed to run?

    Hi danielgirard,

    1. did you of recent changes on the computer?

    2. do you have a security software on the computer?

    3. it happens with any site that you open it?

    Method 1

    Every new Internet Explorer window that you open will create a new entry iexplorer.exe in the Task Manager.

    I suggest that you scan the computer for malware or virus infections and check if it helps.

    http://www.Microsoft.com/security/scanner/en-us/default.aspx

    You can also use Microsoft Security databases to scan your computer

    http://www.Microsoft.com/security/PC-security/MSE.aspx

    Method 2

    If the above does not help, then perform the clean boot procedure to verify if a third-party program installed on the computer is the origin of the problem.

    To help resolve the error and other messages, you can start Windows XP by using a minimal set of drivers and startup programs. This type of boot is known as a "clean boot". A clean boot helps eliminate software conflicts.

    See the link below to learn more about how to clean boot.

    How to configure Windows XP to start in a "clean boot" State

    http://support.Microsoft.com/kb/310353

    Reset the computer to start as usual

    When you are finished troubleshooting, follow these steps to reset the computer to start as usual:

    (a) click Start, type msconfig in the search box and press ENTER.

    (b) If you are prompted for an administrator password or for confirmation, type your password or click on continue.

    (c) under the general tab, click the Normal startup option, and then click OK.

    (d) when you are prompted to restart the computer, click on restart.

  • several iexplorer.exe in my task manager

    When I check the Task Manager, I have several iexplorer.exe files that come up. Sometimes it takes up to 500 to 600 MB of my ram. I sometimes up to twenty of these iexplorer.exe in my process. Microsoft has a solution and saw thousands of others with the same problem in forums etc. When will this be fixed?

    Hi plonky12,

    Every new Internet Explorer window that you open will create a new entry iexplorer.exe in the Task Manager.
    You see several iexplorer.exe in the Task Manager when you are not using Internet Explorer?
    Hope this helps to understand the issue. Can't wait to hear back on your part.
  • When I open the Task Manager and select "Show processes from all users" there are 2 files virus csrss.exe?

    original title: virus csrss.exe?

    I use Vista Home Premium.  When I open the Task Manager and select "Show processes from all users" there are 2 files csrss.exe.  I learned that this indicates that I was infected by a virus.  Is this the case?

    Hi Julie,.

    Did you the latest changes on the system?

    Csrss.exe is Client/Server Runtime Subsystem.  All the Microsoft system has file csrss.exe running in the Task Manager, but it is likely to be infected by others. If it uses a lot of time processor and extremely abnormal in activities in the Task Manager, you can run a scan of the system security.

    You can read the following article to download the Microsoft Safety Scanner and perform a full scan on your computer.

    Microsoft safety scanner

    Note: When you perform the analysis, there are chances of losing the data that you can take a backup of important data before performing analysis.

    Hope this information is useful.

  • Csrss.exe file in the Task Manager without a user name or to the description

    I was told by a Yahoo tech, which was supposed to come back to me in my locked e-mail account, that it is a virus. I did some checking and found a response (from the forum) who said: if I'm trying to complete the process and get a warning window pop up, it's a legitimate file (I get the window). If I right click on it, nothing comes. Has verified the Virus, malware check, used the scanner Microsoft and even a (Speed up PC) supposed to get rid of this (if it is a virus), all come out clean. Yet, the guy from Yahoo (I called once again, argues that it is a virus. I'm confused, ideas?

    Hello

    Csrss.exe is a Windows file that is stored in the directory c:\windows\system32 which corresponds to the description of the file: "Client Server Runtime process.

    The csrss.exe file included with Microsoft Windows is not spyware, a Trojan or a virus. However, as any file on your computer, it can be damaged by a virus, worm or Trojan. Antivirus programs can detect and clean this file if it has been infected.

    It is not safe to remove csrss.exe processes from the Task Manager. Csrss.exe is a critical system process may not be withdrawn without causing problems with Windows in Task Manager.

    Hope this information is useful.

  • Display multiple instances of NTDVM. EXE running in Task Manager and get error ntvdm.exe has stopped working and was closed

    There is also another problem of ntdvm that I meet where the file ntdvm.exe continues to the multiple (i.e. numeorus ntdvm.exe files are running in the Task Manager) to the point where my computer slows down and ends by crashes.

    Very grateful for any solution for every problem!

    I am running vista.

    * original title - ntvdm.exe has stopped working and was closed...?  Recurring problem! *

    Hello

    1. don't you make changes to the computer before that happened?

    2. Once you get this error message?

    I suggest you to try the steps below and check if it helps.

    Method 1: Try scanner SFC [SFC system] on the computer that would be a system file corrupt on the computer search and replace.

    http://support.Microsoft.com/kb/929833

    Method 2:

     Also try to set up your computer in a clean boot state, and check if the same issue occurs.

    By setting your boot system minimum state helps determine if third-party applications or startup items are causing the problem.

    How to troubleshoot a problem by performing a clean boot in Windows Vista or Windows 7:
    http://support.Microsoft.com/kb/929135

    Note: After the boot minimum troubleshooting step, follow step 7 in the link provided to return the computer to a Normal startup mode.

    Method 3:

    Try to scan your hard disk from the Microsoft Security Scanner, which would help us to get rid of viruses, spyware and other malicious software.

    The Microsoft Security Scanner is a downloadable security tool for free which allows analysis at the application and helps remove viruses, spyware and other malware. It works with your current antivirus software.

    http://www.Microsoft.com/security/scanner/en-us/default.aspx

    Note: The Microsoft Safety Scanner ends 10 days after being downloaded. To restart a scan with the latest definitions of anti-malware, download and run the Microsoft Safety Scanner again.

    Hope this information is useful.

Maybe you are looking for