Removing csrcs.exe virus

Steps to remove this virus:

1. Scan the system with a good and updated Anti Virus.

2. Open Task Manager, locate this exe (csrcs.exe or csrsc.exe but not csrss.exe), and kill the process.

3. Now type msconfig in the Run box, and then go to startup tab.

4. Locate this exe file, if any, and then remove it from there as well.

5. Now search the file in the C: drive.

6. Permanently delete the file (csrcs.exe or csrsc.exe only) from the computer.

7. Reboot the PC for changes to take place.

After doing the above steps, you need to clean the registry as well.

1. Navigate toHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\
2. On the right side, there is a key named "Shell", it may be having a value "explorer.exe csrcs.exe". Just modify it to delete the csrcs.exe from it (not explorer.exe). Restart the computer

Hi

Thank you for your query

You have a virus on your PC

Please carry out the following steps to remove it, please do not confuse csrcs for csrss which is a valid windows file

:
1. Scan the system with a good and updated Anti Virus.
2. Open Task Manager, locate this exe (csrcs.exe or csrsc.exe but not csrss.exe), and kill the process.
3. Now type msconfig in the Run box, and then go to startup tab.
4. Locate this exe file, if any, and then remove it from there as well.
5. Now search the file in the C: drive.
6. Permanently delete the file (csrcs.exe or csrsc.exe only) from the computer.
7. Reboot the PC for changes to take place.
UPDATE
After doing the above steps, you need to clean the registry as well.

1. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\
2. On the right side, there is a key named “Shell”, it may be having a value “explorer.exe csrcs.exe”. Just modify it to delete the csrcs.exe from it (not explorer.exe). Restart the computer

Please finally re do a virus scan to ensure it has gone


If this has been useful please leave postive feedback/vote/testimonial - Thank You Again

Its not a system file.
Try following

• START-RUN,type there regedit(this will open system registry)
• ctrl+F
• Write csrcs(search now)

It'll show you some results, you'll find there "csrcs.exe",just delete it immediately.

If Its not over yet, again do the same search you may see "explorer.exe csrcs.exe" , left click then modify and remove the csrcs.exe part(leave the explorer.exe as it is)

Hi,

The free file information forum can help you find out if csrcs.exe is a virus, trojan, spyware, adware which you can remove, or a file belonging to a Windows system or an application you can trust.
csrcs.exe file information
The process belongs to the software CSRCS.EXE by unknown.
Description: File csrcs.exe is located in the folder C:WindowsSystem32.
Program has no file description. The program is not visible. The file is located in the Windows folder, but it is not a Windows core file. HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRunOnce, HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionRunonce).
It is not a Windows system file. Program listens for or sends data on open ports to LAN or Internet. csrcs.exe is able to hide itself, monitor applications. Therefore the technical security rating is 100% dangerous.
Important: Some malware camouflage themselves as csrcs.exe, particularly if they are located in c:windows or c:windowssystem32 folder. Thus check the csrcs.exe process on your pc whether it is pest. We recommend Security Task Manager:
http://www.neuber.com/taskmanager/index.html?ref=file.net
for verifying your computer's security.
If this information is useful, please mark as helpful. Thanks

There are many ways to protect your computer for hacking tools such as root kits. Download Windows Defender here. Also, you can scan your computer using this effective tool http://eset.com/onlinescan

Goodluck!

File csrcs.exe is located in the folder C:\Windows\System32.
Program has no file description. The file is not a Windows system file. The application is loaded during the Windows boot process.
The program is not visible. It is an unknown file in the Windows folder. Program listens for or sends data on open ports to LAN or Internet. csrcs.exe is able to monitor applications, hide itself, record inputs, manipulate other programs. Therefore the technical security rating is 86% dangerous.
It simply means, "It is very dangerous"

Try these steps to remove it.

Click on START-RUN,
type regedit (it will open the registry editor)
Press Ctrl+F
type "csrcs" (without quotes) and click on Search It'll show you some results, where you'll find "csrcs.exe" delete it immediately.

Again do the same search you may see "explorer.exe csrcs.exe" , right click then modify and remove the csrcs.exe part (leave the explorer.exe as it is)

Hurray !!! you have removed csrcs.exe
Restart your system and see it for yourself


Don't forget to give feedback

Find and Detect csrcs.exe on your PC. to find the file click search and put the file name and thn find its location from there and delete it. Remove, Uninstall and Get Rid of csrcs.exe

its simple guys..!!!
if it asks for permission to access outlook..don't permit it because it is a smart virus and is going to spread it to all the people on your contact list...!!!
simply open task manager and end process tree of KHATRA.exe , gHost.exe , xplorer.exe and OUTLOOK.exe seperately...!!
then run your anti virus or download one if you don't have one..!!!
run a complete computer scan in detail..!!
then delete all files which are infected by the virus because the results contain only duplicate files which are created by the virus

" After receiving many complaints from people’s about this virus, I finally decided to guide the users about the removal of this virus. Some of the problems caused by this virus are :
1. Show Hidden Files and Folders not working.
2. My Computer Drives open another explorer window.
3. When you run a program, just in 2 or 3 minutes the program dissappears (Actually runs in background but you can not see its window in foreground).
Removal of this Virus
Unfortunately, I have no removal tool to remove this virus at the time of writing, but you will soon see one. You can try the manual removal of it.
Manual Removal
Caution : While the manual process is going on, do not open any My Computer drive.
1. Open up cmd by typing cmd in Start –> Run.
2. Type in cmd
taskkill /f /im smss.exe
taskkill /f /im killer.exe
3. The virus placed some files at the root of every drive so you need to clean them.
Repeat the following commands on cmd for all your drives (Here it is applied for C drive)
del /a:h /f c:\autorun.inf
del /a:h /f c:\smss.exe
del /a:h /f c:\funny ust scandal.avi.exe
4. Now you need to delete files in windows folder so type :
del /a:h /f c:\windows\killer.exe
del /a:h /f c:\windows\autorun.inf
del /a:h /f c:\windows\smss.exe
del /a:h /f c:\windows\funny ust scandal.exe
5. Now you need to delete one more file :
del /a:h /f “%userprofile%\Start Menu\Programs\Startup\lsass.exe”
6. Use PowerExes to delete startup entries like.
smss.exe
lsass.exe(if it does not remove then only uncheck it)
killer.exe
7. To restore Folder Option Settings Follow this page
Show Hidden Files And Folders Not Working
8. To Remove the virus from Flash Drive, Insert a flash drive cancel any Autoplay box.
Open cmd and type (Replace x by your usb drive letter)
del /a:h /f x:\autorun.inf
del /a:h /f x:\smss.exe
del /a:h /f x:\funny ust scandal.avi.exe"



(source of info can be found here)

I done research on this but not tested to my computer ..just try this remover created in philippines . this the link: http://www.geocities.com/six519/Remover.zip may this help.