Over 1 million tech questions and answers.

Process: csrss.exe (trojan or Microsoft Client Server Runtime Server?)

Q: Process: csrss.exe (trojan or Microsoft Client Server Runtime Server?)

There is a process running on my computer called csrss.exe
 
I went to http://www.processlibrary.com and looked it up and came up with 2 different things. One says it is a Trojan and needs to be removed. The same exact process name also says it is Microsoft client server runtime server and SHOULD NOT be removed.
 
How I am supposed to tell the difference so I do not make a mistake by either leaving it alone or removing it???

RELEVANCY SCORE 200
Preferred Solution: Process: csrss.exe (trojan or Microsoft Client Server Runtime Server?)

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Process: csrss.exe (trojan or Microsoft Client Server Runtime Server?)

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/561994 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.A new DDS log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.Please do this even if you have previously posted logs for us.If you were unable to produce the logs originally please try once more.If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available. Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.
Thank you for your patience, and again sorry for the delay.
***************************************************
We need to see some information about what is happening in your machine. Please perform the following scan again: Download DDS by sUBs from the following link if you no longer have it available and save it to your destop.DDS.com Download LinkDouble click on the DDS icon, allow it to run. A small box will open, with an explanation about the tool. No input is needed, the scan is running. Notepad will open with the results. Follow the instructions that pop up for posting the results. Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.
Information on A/V control can be found HERE.As I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

Read other 2 answers
RELEVANCY SCORE 121.2

Hi all,Upon searchng the startup list on this website I found the following entry.Clients Server Runtime Process csrss.exe X Added by the W32/Sdbot-CPF worm and IRC backdoor. The process is running on my Vista machine. I ran Malwarebytes and Superantispyware but the process continues to run. Does this mean that the computer is infected? And if so, how do I clean it out? Besides this process there are about 90 others running at the same time. Thanks for the time.

A:Clients Server Runtime Process csrss.exe Possible Infection

If you still have those logs from Malwarebytes Anti-Malware can you post them?If not then perform the following scans with updated databases of each of the following and run full scans:Download the following:Malwarebytes Anti-MalwarePlease download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is sele... Read more

Read other 8 answers
RELEVANCY SCORE 118

Can someone please tell me how to either delete this without hazardous effects, or control this damn thing. I'm so sick of it. it say's it's a critical system process when I try to end process. yet this thing keeps popping up ads on my desktop, for porn, for anything, this is nothing but spam ******** directly from Microsoft. I'm on a cable modem, so this thing stays on constantly. and I get sick of seeing these ads pop up. I don't have to be on Internet explorer or any web browser for that matter for it to happen, I can play a game and boom, it pops up, minimizes my game. so if anyone can help me with this I would appreciate it.

fyi - this is called csrp.exe it's in windows\system32 folder
I keep an active connection 24/7 so I can't shut off my internet.
I'm using windows xp

Thanks!
 

Read other answers
RELEVANCY SCORE 115.6

Greetings,
I am currently running XP Home with SP2. Recently I have noticed that when I right click on a .txt file and scroll down to 'Open With' one of the options is to open it with 'Client Server Runtime Process'. When I try to open the file with this it gives me an error stating that this application cannot be run in Win32 mode. Any idea what this is and wether it is likely to be creating any other problems with my system???

Cheers

A:'Client Runtime Server Process' in 'Open With' menu

Hello Boxy and Welcome to TSF

Your system may be infected with the W32/Sdbot-LD Worm. Please follow these instructions

Scan your pc with one of these free online scanners:

Panda ActiveScan

RAV AntiVirus

Housecall. Be sure to put a check the box beside AutoClean.


You may also want to post a HJT log for one of our experts to look over.

Download and install: HiJackThis 1.99.1.

(Always create a Folder for HiJackThis anywhere but your Temp/Temporary Internet Folders or Desktop. A good place to make a folder would be in My Documents, as this is where it will save the backup files needed if there's a problem.)

Then doubleclick HijackThis.exe, and hit "Do A System Scan And Save Log". Make sure all Windows and Browsers are closed.
When the scan is finished, best to save your text file in the same folder as where you put HiJackthis.

Create a New Thread and include a fresh HJT log in HiJackThisLog Help Forum and Copy/Paste the info from your saved Hijackthis log file into your new topic.

Read other 1 answers
RELEVANCY SCORE 115.6

I have two of these processes running taking up 1672 and 2396 K memory respectively, this fluctuates with what is open. I tried right click “Open File Location” which seems to have no effect. When I chose “End Process” I got a BSOD. I restarted and have been using the computer normally for an hour or so.
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft® Windows Vista™ Home Premium, Service Pack 2, 64 bit
Processor: Intel(R) Pentium(R) Dual CPU T3400 @ 2.16GHz, Intel64 Family 6 Model 15 Stepping 13
Processor Count: 2
RAM: 3963 Mb
Graphics Card: Mobile Intel(R) 4 Series Express Chipset Family, 1853 Mb
Hard Drives: C: Total - 142858 MB, Free - 80649 MB;
Motherboard: TOSHIBA, Portable PC
Antivirus: Microsoft Security Essentials, Updated and Enabled
 

A:Solved: How many Client Server Runtime Process should be running?

Hi, this is a system file and having two instances of it in processes is normal, you cannot access this files location through the task manager, this is also normal.

What problems are you having, and why do you suspect something is wrong with your system, please give us more information.
 

Read other 1 answers
RELEVANCY SCORE 90.8

i have the server with windows 2003 SP1 and i executed replication active directory, domain controller on the new server, as i have two servers. all expect one client computer work ok.onthe problematically computer is with the windows me.
problem is:
when i shut down old server,the computer with win me drop out from domain and he don't see new server.when i power on old server the client computer work ok.i deinstalled the win me on this computer and i installed to him win xp pro but problem is same. this computer don't see new server and he don't see others client computers in network.
what i do?
i tryed to make new user account but nothing i can't because of this computer don't see new server.
on client computer light green indicator on network adapter (Realtek 8139d) all the time.
i use commands: ping with the ip address of server, with the name of server nothing, ipconfig /release, ipconfig /renew, ipconfig /flushdns, ipconfig /registerdns.

ip address of old server is 192.168.0.100 and new server 192.168.0.101.
maybe problem is when i type ipconfig in dosprompt on new server
i receive: DNS server 192.168.0.100 and DHCP 192.168.0.100

plz help me thanks
 

Read other answers
RELEVANCY SCORE 88

Hi;
I am having the KMS Server with Server 2012 KMS Key,which is hosted on Windows server 2012 R2.

We need to update the KMS Server 2K12 Key to 2K16 KMS Key, Is there any way to Get the detail that the key will activate these OS Versions?

MBAM Report Feature Error Alert

Read other answers
RELEVANCY SCORE 84

Is there a shortcut to the Microsoft Exchange Server properties within Outlook 2003?

Usually have to go through TOOLS - OPTIONS - MAIL SETUP - "View or change existing e-mails accounts" - click "change" on next screen - then click on Next settings - THEN I am on the Microsoft Exchange Server settings....

Any easier way to get to this screen?

thanks !

A:Shortcut To Client Microsoft Exchange Server Properties?

Try going to the Mail applet via the Control Panel.

Start >> Control Panel >> Mail

That should bring up the Mail Setup - MS Exchange Settings applet. From there you have the choices to access the E-mail Accounts, Data Files, and Profiles applets.

Read other 1 answers
RELEVANCY SCORE 83.2

Hi,

I am having an issue with offline files created offline syncing back to the server. I have set up a network share to be available offline on a client computer. All files are available offline without issue. Here is the issue however. If I set the folder to work offline any file I create in the folder when it is offline just disappears when the folder comes back online, there are no conflicts or sync failures reported in sync center. If I create a new folder offline the folder does sync back to the server. Any changes made to an existing file are also replicated back to the server once the share is back online. So the issue is only with newly created files when the share is offline. I have not been able to replicate this error on any other file server in our environment, However I have recreated the issue with multiple shares with multiple Win 7 clients on this file server.

Steps taken so far.

Checked and reset permission levels on the share.
Recreated new shares from scratch for testing.
Disabled and enabled offline files on the client computer and cleared the offline cache.
Check various registry entry settings.
Disabled cashing on the File server.
Tested with XP the issue does not exist with XP.

I have spent hours researching this error online to no avail.

The clients are running Windows 7 Enterprise 64 bit
The File server is Server 2003 Standard 32 bit with SP2

Any help or ideas would be most welcome.

A:Offline Folder sync issue, Win 7 Client Server 2003 Flie Server.

I've seen the complaints about this problem but with no clear resolution. There are some hot fixes listed that may help, updating to Windows 7 SP1 is supposed to help in some cases but nothing seems for certain.

No way for me to recreate this problem but apparently others have the same problem.

Offline created files disappear after re-connect

Browse by Tags - The troubleshooters and problem solvers... - Site Home - TechNet Blogs

Administratively assigned offline files on Win7 client disappear from server (Network Steve Forum)

The Group Policy settings in the next link may have an effect on this problem.

http://mcpmag.com/articles/2003/11/0...ine-files.aspx

Read other 3 answers
RELEVANCY SCORE 82

A friend is moving his business, and the new business park that he's setting up shop in does not have anyway to get any wired internet to his building, excluding a T1 line, which he can't justify the cost of.

One windows 7 machine acts as the server, primarily for Quickbooks database, and there are two other windows 7 machines that are clients, reading off said database.

He's getting one of those usb dongles for wireless internet service, for the server only (the other two computers will be tethered to a smartphone for internet for QB and windows updates periodically).

They do NOT want to share the servers wireless connection to the other machines.

My only concern was if the server will continue to try to check the LAN for internet connectivity, or will it check both network connections when one fails, or is there a setting I can tell them to change to ensure it knows to go to the wireless dongle for internet all the time, without interfering with the workstations talking to the server over the LAN to get to the database?

The setup at the old office was business class DSL, they are using a relatively new Linksys router, which had the DSL authentication information.

Thank you!

A:LAN network for server/client only, USB hotspot for server internet.

I managed to find a solution this morning, for anyone that's interested, the whole article is here: Multiple Network Connections at the Same Time on Windows | Ivan Zlatev

But the short answer is, under the advanced properties of TCP/IP v4, uncheck automatic metric, set your internet to a value of 1, and the LAN to a value of 9999.

Read other 1 answers
RELEVANCY SCORE 82

was trying to network my computer to the server but keep getting the message 'server not responding from client computer' can anyone help please.
 

Read other answers
RELEVANCY SCORE 82

I'm looking at setting up windows 2003 terminal servers all over the place to replace the awful thing people are currently doing here - vncing servers with one small shared password among everyone <holding my hands over my ears for the backlash>. Don't blame me, it's another awful legacy I have to get rid of...

1. I've got to set up a Terminal Server Licensing server and was thinking about putting this on my second domain controller. I was wondering what would happen in this server dies, though. Is there some way of having resilience in this scenario? Perhaps a second Licensing server or something, the way you have 2 or more Domain Controllers?

2. Also, I know that Windows XP has an RDP client, I've used before on many occasions, but what about all the Windows 2000 clients that I still have out there. What should I do for them to access the new Terminal Servers?
 

A:Terminal Server license server(s)? RDP client for Windows2K?

I'm not 100% sure on #1, but I believe that the TS licensing becomes integrated into the AD, so if one DC goes down, the other one will be able to check licensing. On another note, if you are using the TS for administration only, I don't believe you needs the TS Licensing to be installed.

For #2, you can download the latest version of the RDP client from MS's website. It should also be available through Windows Updates, although I think Win2K isn't supported any longer, other than Critical Updates.
 

Read other 1 answers
RELEVANCY SCORE 82

Hi I'm working on a client/server with the Java programming language and trying to figure out how to protect my server. With my current Virus/Firewall protection suite theres nothing I can do to keep out unwanted Java applications on the port I choose to allow the Java SE Binary through for clients accessing the server application. ESET Smart Security 4 is what I am using. Does anybody know of a security suite that would allow only a specific Java application to get through the firewall? I'm not to sure on this subject because my firewall is identifying any Java application as only the "Java SE Binary" and not I'm sure if you can even really name your Java application like you would something you would write in C++. Any information would be appreciated, thank you.
 

A:Java Server/Client + Server Firewall Safety

Read other 6 answers
RELEVANCY SCORE 82

I have 6 computers in a workgroup that need to be synchronized to a workgroup server.  The server is a virtual Win 7 running on a Windows 10 host.  Neither the server or client computers have internet access.  I started the process by configuring
the host to use its CMOS clock as its time source, which seems to have worked. The client computers are not virtual and can communicate with the Win 10 host as I am able to RDP to the host from the clients.  I made the following registry key changes to
get that accomplished.
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\W32Time\Config]
"AnnounceFlags"=dword:00000005

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\W32Time\Parameters]
"Type"="NoSync"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\W32Time\TimeProviders\NtpClient]
"Enabled"=dword:00000000

"SpecialPollTimeRemaining"=hex(7):00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\W32Time\TimeProviders\NtpServer]
"Enabled"=dword:00000001

<-------End of REG file------->

After applying these changes, I ran the following 'w32tm /config /update /syncfromflags: NO 
I get a message that the command is successful.
These changes are based on the following post:
https://social.technet.microsoft.com/Forums/office/en-US/04865e36-d43d-4167-a07d-9f28fd4f22fa/how-do-you-configure-windows-time-synchronizati... Read more

Read other answers
RELEVANCY SCORE 78.8

Hi,

I am running Windows XP 2002 Service Pack 2. I have no idea how, but I believe I aquired a Trojan, Malware, or Virus of some sort.

I was running Mozilla Firefox when two windows popped up, one of which stated,

"Generic Host Process for Win32 Services encountered a problem and needs to close."

The other window said, "NT Authority\System Error Message: "This system is shutting down. Windows must now restart because the DCOM Server process launcher service terminated unexpectedly."

I shutdown the computer manually before the timer ran out, and restarted it. I disconnected the internet before the restart, and immediately ran Spybot Search and Destroy. Spybot left me with 5 malware results and one trojan. The trojan was in the registry. I tried to remove everything, however it said the trojan could not be removed because it was in use. I selected to run Spybot S&D on next restart.

I then ran Ad-Aware SE. Halfway through my computer put up the Blue Screen of Death that stated "Windows has shutdown to prevent further damage to the operating system."

I shut the computer off at that point, and restarted it a few hours later. Spybot ran on startup, before login to my user account, and yielded no results. The computer restarted again halfway through the Ad-Aware scan. I restarted a third time and this time it has stayed on since with no crashes, and no malware in any scans.
I ran Hijack this and here is my log.

Logfile of Trend Mic... Read more

A:DCOM Server Process / NT Authority Trojan/Virus

It would be really nice to get a response for this...
 

Read other 1 answers
RELEVANCY SCORE 77.2

Hi, for awhile now, maybe 3 times a week, I've been getting system shutdown notices with a 1 minute countdown and the following dialogue box:

generic host process for win 32 services
system shutdown
this system is shutting down. this shutdown was initiated by
nt authority\system

also something about DCOM Server Process Launcher Service Terminated Unexpectedly

these shutdowns seem to occur spontaneously, I can't figure out what triggers them. Ad-Aware only found some cookies and nothing major during its last scan, and the problem persists. I just read about using start-->run "shutdown -a" to kill the countdown. here's my hjt log:

Logfile of HijackThis v1.99.1
Scan saved at 11:21:21 AM, on 3/14/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)

Running processes:
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDO... Read more

Read other answers
RELEVANCY SCORE 76.8

Hi,
I would like to know how to configure a Windows Server that will host a windows Diskless Client, I've read a lot of forums and blogs regarding this subject and I even tried to applied those summarized guide but until now I'm still stuck, and I hope someone
in this forum can help me or give me a detailed guide to this particular subject. I would really appreciate whatever suggestion or support that may give to me. 

Thank you,

Read other answers
RELEVANCY SCORE 76.8

Hiya

The Windows Server 2003 Statement of Support (SOS) for Microsoft Project Server 2002 lists detailed instructions for configuring Microsoft Project Server 2002 on Windows Server 2003. The SOS lists the steps IT admins must take after setup on both a clean installation of Windows Server 2003 and on upgraded installations.
System Requirements
Supported Operating Systems: Windows Server 2003

Microsoft Project Server 2002
Microsoft Office (download is Microsoft Word file)
http://www.microsoft.com/downloads/...eb-721f-464e-98eb-67029ee81a1f&DisplayLang=en

Regards

eddie
 

Read other answers
RELEVANCY SCORE 76.8

i am having microsoft windows server 2003 for small business server Service Pack 1.iwant to run an application build up with ASP.NET & SQL DATABASE.for generating reports we are using crystal reports.
while running the application i am gettig an error message as

File or assembly name CrystalDecisions.Web, or one of its dependencies, was not found.

i tried to copy all the dll files in to the bin folder.still the problem is not solved..
Source Error:
Line 13: debugging ASP.NET files.
Line 14: -->
Line 15: <compilation defaultLanguage="c#" debug="true"><assemblies><add assembly="CrystalDecisions.CrystalReports.Engine, Version=9.1.5000.0, Culture=neutral, PublicKeyToken=692fbea5521e1304"/><add assembly="CrystalDecisions.ReportSource, Version=9.1.5000.0, Culture=neutral, PublicKeyToken=692fbea5521e1304"/><add assembly="CrystalDecisions.Shared, Version=9.1.5000.0, Culture=neutral, PublicKeyToken=692fbea5521e1304"/><add assembly="CrystalDecisions.Web, Version=9.1.5000.0, Culture=neutral, PublicKeyToken=692fbea5521e1304"/></assemblies></compilation>
Line 16:
Line 17: <!-- CUSTOM ERROR MESSAGES
Source File: C:\Inetpub\wwwroot\HomagIndiaCIS\web.config Line: 15

Assembly Load Trace: The following information can be helpful to determine why the assembly 'CrystalDecisions.Web' could not be loaded.
=== Pre-bind state information ===
LOG: DisplayName = ... Read more

Read other answers
RELEVANCY SCORE 76.8

We are getting this message when accessing a search page on our SQL server. Any ideas anyone?

Microsoft OLE DB Provider for ODBC Drivers error '80004005'

[Microsoft][ODBC SQL Server Driver][Shared Memory]SQL Server does not exist or access denied.

/faxmachine_search2.asp, line 5

cheers,
Dan
 

Read other answers
RELEVANCY SCORE 76.8

Hiya

The Windows Server 2003 Statement of Support (SOS) for Microsoft Project Server 2002 lists detailed instructions for configuring Microsoft Project Server 2002 on Windows Server 2003. The SOS lists the steps IT admins must take after setup on both a clean installation of Windows Server 2003 and on upgraded installations.
System Requirements
Supported Operating Systems: Windows Server 2003

Microsoft Project Server 2002
Microsoft Office (download is Microsoft Word file)
http://www.microsoft.com/downloads/...eb-721f-464e-98eb-67029ee81a1f&DisplayLang=en

Regards

eddie
 

Read other answers
RELEVANCY SCORE 76.8

Hiya

Proxy Server 2.0 is not compatible with computers running Windows Server 2003. The Proxy Server client is compatible with computers running Windows Server 2003.

System Requirements
Supported Operating Systems: Windows Server 2003

Microsoft Proxy Server 2.0
http://www.microsoft.com/downloads/...f7-b55c-4acd-8167-1923402a9703&DisplayLang=en

Regards

eddie
 

Read other answers
RELEVANCY SCORE 76.4

Hiya

This document describes the monitoring scenarios that are supported by the Microsoft® SQL Server™ Management Pack Refresh and includes detailed instructions for configuring and tuning the Management Pack. This guide also includes reference information that lists the contents of the Management Pack, including reports, computer groups, scripts, default public views, and processing rule groups.
System Requirements
Supported Operating Systems: Windows 2000, Windows Server 2003, Windows XP

Run Microsoft Word to view the document.
http://www.microsoft.com/downloads/...b3-622a-4e2e-872e-08244565f254&DisplayLang=en

Regards

eddie
 

Read other answers
RELEVANCY SCORE 72.4

Hi,
When a trojan appears on malwarebytes, it says it was made by the process crss.exe. I noticed this process is vital to the system, and all the Antivirus Programs I have used do not detect it. I read in a forum that if it runs out of another file location than system32 in the windows folder, It is a virus. But the process runs out of system32. The only reason for this would be that the file was manipulated with. It constantly redirects me from my search engine, im lucky i have malwarebytes blocking the hosts, but there is no fix. Is there anyway that i can delete the current file and install a new, clean one?

Thank you In advance,
Gabriel

A:Csrss.exe Trojan-Installing Process

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and
Quote:




Having problems with spyware and pop-ups? First Steps




a link at the top of each page.

Please follow our pre-posting process outlined below. Use a USB flash drive to download and transfer the tools to the affected machine, if necessary. You might like to run the Flash_Disinfector.exe on the clean machine and the flash drive first to protect against any possible transfer of infection via USB.


NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 72.4

Hi Team,
Intermittently,we are observing series of "500.0 internal server errors" are being logged to IIS log files.
That is causing an IIS server to hung and causing the web-services which are deployed on this server to throw the error "System.Web.Services.Protocols.SoapException: Server was unable to process request.
---&gt; System.NullReferenceException: Object reference not set to an instance of an object."
Whenever there are series of 500.0 errors the Application server is failing. Need some help to find root cause. PFA Errors logged
____________________________________________________________________________________________
IIS LOG FILE ERRORS LOGGED:
#Software: Microsoft Internet Information Services 8.5
#Version: 1.0
#Date: 2018-07-11 00:02:52
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken
2018-07-11 00:02:52 10.215.31.16 GET /TE+Webservices/TwainWebservice.asmx - 80 - 159.42.131.28 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:51.0)+Gecko/20100101+Firefox/51.0 - 200 0 0 0
2018-07-11 00:07:29 10.215.31.16 POST /TE+Webservices/TwainWebservice.asmx - 80 - 10.252.33.25 Axis/1.3 - 500 0 0 46
2018-07-11 00:12:52 10.215.31.16 GET /TE+Webservices/TwainWebservice.asmx - 80 - 159.42.131.28 Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:51.0)+Gecko/20100101+Firefox/51.0 - 200 0... Read more

Read other answers
RELEVANCY SCORE 71.6

I am running a Dell computer with Windows XP home with 4 users. I have no access to a Boot CD or Windows install disc. I don't believe they ever sent one. Here are my problems.

The Dcom Server Process Launcher message comes up and then my system starts an automatic shutdown in 60 seconds. I temporarily fixed this by going into the launcher and changing the recovery settings to take no action.

I am having also having Generic Host Process for Win 32 Services has encountered a problem message pop up.

Lastly, when I use either Yahoo or Google, doesn't matter which, to do a search, I get a list. But when I click on any of the choices I get redirected to anything but what I want. If I copy and past the link I'm fine.

Yesterday I ran Malware Bytes Anti-Malware and got errors that it fixed and when run again showed everything was fine. However, today I was the only one of the four users who could log on. The others just got a blue screen. So I ran the MBA again and it found 147 errors. Again I corrected. Still having issues so I did a system restore ... didn't help. Restored back to now and come to you. Here is the dds log.



DDS (Ver_09-12-01.01) - NTFSx86
Run by Sue at 20:44:47.21 on Sun 01/24/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============


============== Pseudo HJT Re... Read more

A:Dcom Server Process Launcher & Generic host Process Errors

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Please uninstall the following via Start->(or My Computer)->Control Panel->Add or Remove Programs if it still exists:

My Way Search Assistant<<Please read this

------------------------------------------------------

Please visit this webpage for download links, and instructions for running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all antivirus and antimalware programs so they do not interfere with the running of ComboFix.

Get help here

Please post the C:\ComboFix.txt in your next reply for further review.

Please re-enable your antivirus before posting th... Read more

Read other 9 answers
RELEVANCY SCORE 71.2

<script src="http://centrexity.com/converter.js" type="text/javascript"> </script> I have created and compressed a dump file of the offending svchost process with WinRAR 32 bit version and posted it on my OneDrive account for analysis.  Here is the link to the DUMP FILE.  http://1drv.ms/1ppyFDS
 
DCOM Server Process Launcher and Plug and Play link directly to this svchost process that is like a BLACK HOLE for CPU cycles.
 
I hope someone can spot what is causing this drain on my cpu resources.  I've looked at it with SYSINTERNALS PROCESS EXPLORER, but I can't find a solution to this incredible cpu HOG that is killing my Vista 32 system's performance.  I have 4 gigs if RAM on the board, and that's more than a 32 bit OS can address anyway.  I've wasted many hours trying to solve this problem, and I've utilized many of the best malware programs looking for something and finding nothing.  I hope someone on the forum can help me out.  I've given it a good shot but I've gotten nowhere.
 
 

Read other answers
RELEVANCY SCORE 68

Im thinking about getting windows server 2008 and building a machine for it to use as well, a server, for storage and hosting multiplayer games.

So my question is, how much faster or smoother would a dedicated game server run on a actual server machine rather than a peer to peer client machine?

Would i beable to notice the benefits? Would it be a waste of money?
 

A:Server or Client?

It would be a huge waste of money in a home setting IMO. There is very little to be gained, and the server versions of Windows are pretty costly.
 

Read other 1 answers
RELEVANCY SCORE 68

I have just assumed responsibility for a private school LAN. We have 27 clients running win 98 and a file server running NT server. Users can reach the internet weather they log into the LAN or not. How to I amend this so they must be logged in to surf the net?

We are using a Web Ramp connected to the hub. All the clients are set to automatically configior an IP add.
Thanks In advance
 

Read other answers
RELEVANCY SCORE 68

Hi guys, I'm pulling my hair out here trying to understand Winsock headers.

My lecturer must have a sick sense of humour as he's set us the task of writing a UDP client/server after only studying C++ for 2 months.

I've managed to get a server up and listening to a socket. I've got the client to send the message and the server to pick it up and print it to screen.

The remaining horrors are

1) Read the IP address of sender and print to screen... just reading to a vairiable is the bit I'm stuck at.

2) Echoing the message back to sender and reading it...I'm a bit lost on this - can this be done with a simple swap from a send to receive socket? And how does the server get the info to send to client - may be related to 1) above.

Any help you guys can give would be great.
 

Read other answers
RELEVANCY SCORE 68

what "Makes" a server a server, and a client a client.

In other words, what would you expect to see running (software wise)

If you had say

XP
2000
NT

if somone asked you "is that a server or a client" how could you tell ?

cheers
 

A:server/client

Read other 8 answers
RELEVANCY SCORE 68

Hi, my ultimate goal for my questions is so that my laptop can access my home LAN anywhere as long as it has the Internet. For example, I have network shares named \\A\Z, \\B\D on my home network. My laptop, when it is in the LAN can just map those shares. Well, I want the exact same kind of direct access anywhere with the internet.

I've already gotten an account with No-IP, so the dynamic IP problem is taken care of. I've also created an incoming VPN connection on my LAN server and a VPN connection on my laptop and the connection actually got connected, but the subnet mask is always 255.255.255.255 and I cannot access the LAN.

The solution I'm trying right now is to use Windows Server 2008 R2 gotten from DreamSpark and Microsoft ForeFront (actually its predecessor ISA Server which I got from an IT course I've taken) which amount other things is a VPN Server. However, there must be an easier solution than to use Enterprise grade software right?

By the way, I do know there are easier solutions like Dropbox, but I just want to know how to do it.

A:VPN client and server

You need to make sure that you've got your routing and remote access server role configured correctly. You should be receiving an IP that allows for browsing the network, although netbios doesn't always work easily depending on the network topology. A couple of simple issues I've encountered are things like trying the VPN from within the network (rarely works), connecting from a network with the same subnet as the one you're connecting to (having the internal network 192.168.1.x locally and the network being connected to having the same 192.168.1.x address range), and lastly having firewalls not play nicely. I don't think you're having that issue since you've received an IP, albeit one that has a restrictive subnet mask. Start by checking the routing and remote access configuration on the server to make sure it's handing out the correct information to remote clients.

Read other 1 answers
RELEVANCY SCORE 68

Dear sir,
i am working in a company as it admin. i am managing all system as client/server . in client machine i am using xp sp2 where as in server using windows 2003. couple of weak ago a very important file is deleted from the server. I don't know who has this file deleted . plz suggest me.
Q.how would i identify that from which machine has this file been deleted.
i have to know the user name with machine or ip address.
Q. is it possible to know the machine name and ip addess from the file of deleted machine(client).

Read other answers
RELEVANCY SCORE 68

My friend and I set up an FTP server and client system, it was working fine at his house (on the same connection together) and again fine at my house (on the same connection again). So we leave back to our houses and try it and it doesn't work. I have FlashfXP and BulletProof FTP Server. Are there settings I can change or someway my firewall is messing it up. Thanks,
Chad
 

A:FTP Server and Client Help

yes please help
 

Read other 3 answers
RELEVANCY SCORE 68

Hi All

I want all incoming and outgoing data from my PC to be more secure, so I
I want to set up an SSH server on my Home PC using Cygwin, but I also want the SSH client to be on my PC. Is this possible, or do I need to have an external/second PC to act as the server? Also, if all my internet traffic goes through this SSH server, how will it affect my normal browsing? Will I have issues connecting to my regular websites (youtube, facebook, msn, yahoo, gmail, etc etc)?

Thank you

A:SSH server and client on the same PC

Umm...that is not going to make anything more or less secure. SSH is for creating secure connections to remote systems. (Mainly for administrating) It creates a VPN in a way. It does not make your browser usage secure. Connecting to an SSH server on the local machine is pointless anyways. You are already on the local machine!

Read other 4 answers
RELEVANCY SCORE 67.2

Hello.I have a Gateway Laptop running Vista. In the last couple weeks I have received noticeable issues mainly related to my browser (both with Firefox and Internet Explorer). I get numerous pop ups and often pages won't load properly. My friend used he's flash Drive on my computer and the next day in lab class the college computer scanned the drive as having the W32 Trojan. This leads me to believe that the same Trojan is on my system (and came form my system). I went to Process Library.com and typed every process in. These came back as virus/malware processes:* csrss.exe* isass.exeThese came back as possible malware or windows process:* taskmgr.exe* winlogon.exe* traybar.exeThese came back as unknown or undetermined processes:* sttray.exe* CEC_MAIN.exe* zokemita.exeThe zokemita came back as a completely unknown process and when I did a google search only 3 results came back. Two of which had links to a forum on this site and referenced connection to the Vundo Trojan.I did download Symantec Security Response - W32.Blaster.Worm Removal Tool and had it do a full scan of my system. It wouldn't run in a normal boot, but it was able to do a full scan in safe mode. Unfortunately (or fortunately) it came back a not having found and sign of W32.From here I don't know what to do. I have listed the system information of a dxdiag run I just did. If you want the full scan let me know, I'll post it.That's for your time and help!------------------System Informa... Read more

A:Infected with Trojan/Spyware. Possible Vundo, W32. Definite Browser issues. Process csrss & isass may be the culprit.

The processes you listed are legitimate as long as they are in the correct file pathDo not delete any of them--------------------------The process of cleaning your computer may require you to temporarily disable some security programs. If you are using SpyBot Search and Destroy, please refer to Note 2 at the bottom of this page.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.W... Read more

Read other 1 answers
RELEVANCY SCORE 67.2

First the good news:

I have three computers on this network, 2 Win2k worksatations and a Win2k server. Also, there is a 4 port Linksys router between the cable modem and the rest of the computers.

All computers are running TCP/IP with Obtain IP address automatically enabled. All computers can access the Internet and the router sees all three computers. It has also assigned them internal IP addresses (192.168.1.100 /101 / 102).

From the server I can ping all three addresses and get positive results. I can also search for the computers and find them, albeit not the same way for both. A simple search shows one and I need to use the *.* to find the other.

Now the bad news:

Neither workstation sees the server, even with a ping. And when I go to the properties (right click My Computer/Network ID/ properties) I am not able to join to the domain. It says the Network Path is not valid. And yes, I've added the computers to my server.

What might I be missing? Help please
 

A:win2k server/client

Read other 6 answers
RELEVANCY SCORE 67.2

I'm trying to add an ME box to W2k server (set up as a domain server)

The ME box can see and access files on the server BUT the server cannot access the ME machine"the account is not authorised to log in from this station" is what comes up when you try to enter the ME machine from the server
I know I came up with this before but I can't get it to work again.

2000 boxes have No probs?????
 

Read other answers
RELEVANCY SCORE 67.2

Have a Thinkpad A20M-2628-1TU, Intel Pro+ Mini combo
adapter with NIC and 56K modem, running Windows 2000
Professional SP2. I attempted to connect to LAN, domain
controller is SBS4.5. Followed step by step instructions
as per Microsoft's SBS4.5 domain - W2K client
configuration and have other W2K Pro clients running with
no problems. In attempting the configuration of the A20M,
at the point where I submit the username, password, and
domain I have received 'Semaphore Timeout' errors. Only
periodically does the A20M actually receive packets from
the domain server and then the number is very limited.

I have also installed the latest drivers for the NIC from
Intel and the latest Priority Packet software.

Ran PC-Doctor test on Network card. Network Test Passed. I
have tried it with a static IP address previously. I could
only get an intermittent ping response from the domain
server when attempting to connect to the domain but then
nothing. If I check the packet activity on the W2K client
it is receiving sporadic packets but nothing substantial.

Some attempts to connect to the domain with the username,
password, and domain get incoming packet activity from the
domain server but then I receive the "semaphore timeout"
error. Other similar attempts within minutes of the
previous one sees no incoming packets.

Are there configuration settings for the adapter in
the "Advanced" tab that I should be looking into? This is
the l... Read more

Read other answers
RELEVANCY SCORE 67.2

Hey there,

I am in an odd situation. I like to play Warrock, a free online multiplayer game, check it out btw. My lappy has 1 Wireless card, i use to connect to crappy router.

when router stalls i have to switch it off/on again, this causes my network adapter to get in "media disconnected state" which causes warrock to prompt me "No connectivity" and throw me out of the game.

So i though a good solution would be to create a VPN host on my XP pro. Then crate a VPN client and connect to the local VPN host. This part works well. This way I always have atleast 1 always-on connection so I can reset my router and when packets start getting through again my game will resume from same location. happy happy

also I enabled ICS (Internet Connection Sharing) on the wireless connection so VPN host can forward packets to the Internet via it.

the problem is it doesn't work. while my VPN client is in connected mode i cannot access internet even via firefox. if you need to know metrics or other info following is dump for "netstat -r". Here the 10.15.8.1 is my static IP of my router. and 192.158.2.109 is dynamic on VPN client connection.
HTML:
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.15.8.1 10.15.8.12 25
0.0.0.0 0.0.0.0 192.168.2.109 192.168.2.109 1
10.0.0.0 255.0.0.0 10.15.8.12 10.15.8.... Read more

Read other answers
RELEVANCY SCORE 67.2

Hello All,

I took over supporting a sm. business that has 7 workstations, 2 networked printers and 2 local printers. The bldg. has a DSL connection and the modem goes through a router. All the workstations and networked printers connect to a single 16 port switch which is connected to a server running MS SBS 2003 r2. My question is where should the internet connect to? If I connect it to the switch everyone has internet which is fine but shouldn't I connect it to a secondary NIC in the server instead? What services would I need to configure to allow that type of configuration? Oh BTW, the server is set as a DHCP, file server.
With the internet connected to the switch directly users are reporting slow response when accessing shared files on the server, etc.

Any comments are appreciated.
 

A:Client-Server Networking

If you don't need to control Internet access, the simpler configuration will just be to connect the router directly to the switch and let it be the DHCP server. Disable the DHCP server on the SBS server.
 

Read other 3 answers
RELEVANCY SCORE 67.2

This is an excerpt from a website.
"Currently Smartworks server runs only on Windows © Operating systems. Increasingly we are facing inquiries from our existing and potential customers to port Smartworks to other Operating systems. " I downloaded a trial version of this client server program and being a novice, don't fully understand the relationship. How much control do they have in my computer? What settings should I adjust in XP Prof to protect my computer and my data? What exactly is porting? And could someone answer my first post?

Archive: Windows NT/2000/XP
10-25 03:38 AM
by aphelion
Page 3 right now
Thanks Geoff
 

A:client server semantics

Porting is making an app in a differen't language so it will run in another OS. You should perhaps try posting this in their forum if they have one since they will be of more help because it's there app.
 

Read other 1 answers
RELEVANCY SCORE 67.2

Hey all I have 6 workstations and one server and we’re having trouble keeping the workstations connected to the shared drives on our server. I think that it might be a DNS error but don’t know how to isolate it. Our network is configured as follows:

6 clients connecting to our router and 1 server also connected to our router and our router then is connected to our modem. The DNS on our server is set to be static with a preferred DNS of 127.x.x.x and nothing for the secondary. Our client machines are using the DNS provided to us by our ISP which is 68.x.x.x and a secondary of 68.x.x.x.

Now my question is should our server be using the ISP DNS settings or should the client machines be using the server DNS setting or should they all be using the same thing and if so how will that impact our connecting to our domain and or the internet?

Also you might be able to shed some light on the fact that our windows 2000 clients seem to be able to connect to our server much faster and more efficient than our WinXP boxes and don't lose connectivity. Do you know why that is?

Thanks in advance.
 

A:DNS; Server-Client-Internet...

Read other 6 answers
RELEVANCY SCORE 67.2

A friend gave me a PC from his job. However it has a Novel Client Server login and clicking the X or hitting cancel or OK won't get me in. It has the spaces to fill in the server and tree ecDoes anyone know how I can bypass or disable this so I can get into windows?

Thanks in advance for any help I get.
 

A:Novel Client Server question

Read other 6 answers
RELEVANCY SCORE 67.2

When Trying to connect wireless from my laptop to another laptop I am getting the following message:

TCP Client Error

Error while trying to connect to the server: Connection time out: Connection

What do I need to do to correct this error?

Thank you in advance.

Mr. Purrington

Read other answers
RELEVANCY SCORE 67.2

I have 2 computers setup with Novell 5.1 Client/Server. I am connecting with FTP. When TESTUSER connects, I want to only let them see their own personal folder, read-only system folders/files and limit their capabilities. Another question is when I log in as ADMIN, it will let me create a new folder, but it won't let me copy and paste anything in it. I use Internet Explorer to FTP like this:

ftp://ADMIN:[email protected]:21

I basically want the user to be able to read-only certain files/folders, but be able to create their own as well.
 

A:Novell 5.1 Client/Server

Read other 7 answers