Computer ForumsComputers  

Go Back   Computer Forums > The World Wide Web > Virus - Spyware Protection / Detection

Reply
 
LinkBack Thread Tools Display Modes
Old 03-06-2005, 10:37 PM   #1 (permalink)
Super Techie
 
Join Date: Oct 2004
Posts: 376
Default Running Processes

I've been entering my processes found in Task manager into http://www.pcpitstop.com/spycheck/known.asp

Below are the ones they said to remove... is this correct?

csrss.exe (Ascentive BeAware)
smss.exe (Dalbug/Ladex worm)

These oens they found no record of. Sould I remove them?:

dcfssvc.exe
PTS.exe

What is the best way to remove them?
Mr. tech is online now   Reply With Quote
Old 03-06-2005, 11:24 PM   #2 (permalink)
Ultra Techie
 
Join Date: Apr 2004
Posts: 617
Default

Hi Mr. tech

this is what i found

CSRSS.EXE is a system file, but there's also a virus which uses the same name. depending on where it's located but usually no donot delete it


csrss - csrss.exe - Process Information

Process File: csrss or csrss.exe
Process Name: Microsoft Client/Server Runtime Server Subsystem

Description:
csrss.exe is the main executable for the Microsoft Client/Server Runtime Server Subsystem. This process manages most graphical commands in Windows. This program is important for the stable and secure running of your computer and should not be terminated. Note: csrss.exe is also process which is registered as the W32.Netsky.AB@mm worm, the W32.Webus Trojan, Win32.Ladex.a and more. This virus is distributed via the Internet through e-mail and comes in the form of an e-mail message, in the hopes that you open it’s hostile attachment. The worm has it’s own SMTP engine which means it gathers E-mails from your local computer and re-distributes itself. In worst cases this worm can allow attackers to access your computer, stealing passwords and personal data. It is a registered security risk and should be removed immediately. Please see additional details regarding this process


smss.exe

Process File: smss or smss.exe
Process Name: Session Manager Subsystem

Description:
smss.exe is a process which is a part of the Microsoft Windows Operating System. It is called the Session Manager SubSystem and is responsible for handling sessions on your system. This program is important for the stable and secure running of your computer and should not be terminated. Note: smss.exe is also a process which is registered as the Win32.Ladex.a Trojan. This Trojan allows attackers to access your computer, stealing passwords and personal data. It is a registered security risk and should be removed immediately. Please see additional details regarding this process

Are you having trouble with your computer or you were just curious

Lobos
__________________
AdAware | Spybot S&D 1.4 | spyware guard & spyware blaster |

How did I get infected in the first place By Tony Klein

If you use IE I suggest using thes two programs IE Hosts & IE-SPYAD


Lobos is offline   Reply With Quote
Old 03-06-2005, 11:37 PM   #3 (permalink)
Super Techie
 
Join Date: Oct 2004
Posts: 376
Default

Justt curious... Better safe then sorry

Where did you find that detailed information BTW?
Mr. tech is online now   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 12:03 AM.


Powered by vBulletin® Version 3.7.1
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.1.0