csrss.exe informazioni

Commenti

1. clo Sep 11, 2008

   ciao

2. morello Jul 19, 2009

   e una bufala,

3. Ivan Sep 28, 2009

   csrss.exe non è un virus ne un processo altamente pericoloso, anzi è fondamentale per il corretto funzionamento di sistemi basati su NT.
   
   Tuttavia esiste un virus che si autoinstalla nella stesa directory di questo csrss.exe e in genere prende il nome di csrcs.exe, il nome è simile e quindi confondibile al file essenziale per windows.

4. Marco Dec 2, 2009

   Hai ragione non è un virus.

5. Cristofero Jan 25, 2010

   non è un virus. è fondamentale per windows. forse avete confuso csrss.exe con csrcs.exe. csrcs.exe si che è un virus.

6. DARIO Feb 8, 2010

   salve a tutti, sono nuovo di questo forum, ma mi sembra uno dei migliori.
   arrivo al dunque del problema: ho due processi csrss.exe che girano occupando parecchie risorse (ho un acer 7730G, Windows vista 32-bit spk2) ed ultimamente ho notato parecchi rallentamenti. Ho scansionato il pc con tutto e di più (avira, avast, registrybooster, spywarefighter) senza risultati rilevanti. Ho disabilitato tutti i servizi inutili di vista (da 79 processi iniziali sono arrivato a farne girare solo 65!), ma il risultato è sempr quello. Con alcune aplicazioni, in particolare giochi che fino a ieri giravano benissimo, esiste un rallentamento anomalo. Il pc è performanete non dovrebbe proprio essre così.
   ecco il log:
   Logfile of Trend Micro HijackThis v2.0.2
   Scan saved at 9.19.57, on 08/02/2010
   Platform: Windows Vista SP2 (WinNT 6.00.1906)
   MSIE: Internet Explorer v8.00 (8.00.6001.18882)
   Boot mode: Normal
   
   Running processes:
   C:\Windows\system32\taskeng.exe
   C:\Windows\Explorer.EXE
   C:\Program Files\Windows Defender\MSASCui.exe
   C:\Windows\RtHDVCpl.exe
   C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
   C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
   C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
   C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
   C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
   C:\Program Files\Launch Manager\QtZgAcer.EXE
   C:\Program Files\Alwil Software\Avast5\AvastUI.exe
   C:\Windows\ehome\ehtray.exe
   C:\Windows\ehome\ehmsas.exe
   C:\Program Files\Windows Media Player\wmpnscfg.exe
   C:\Users\Dario\AppData\Local\Temp\RtkBtMnt.exe
   C:\Windows\system32\wbem\unsecapp.exe
   C: \Windows\System32\mobsync.exe
   C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
   C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe
   C:\Windows\system32\Taskmgr.exe
   C:\Program Files\Mozilla Firefox\firefox.exe
   C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
   
   R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
   R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://it.intl.acer.yahoo.com
   R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
   R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
   R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://it.intl.acer.yahoo.com
   R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
   R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
   R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
   R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
   O1 - Hosts: ::1 localhost
   O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
   O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
   O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
   O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
   O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
   O2 - BHO: Lexmark - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll
   O2 - BHO: Ask.com Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (file missing)
   O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
   O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
   O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
   O3 - Toolbar: Ask.com Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (file missing)
   O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
   O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
   O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
   O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
   O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
   O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
   O4 - HKLM\..\Run: [eAudio] "C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe"
   O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
   O4 - HKLM\..\Run: [WarReg_PopUp] C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe
   O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
   O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
   O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
   O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
   O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVIZIO LOCALE')
   O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVIZIO LOCALE')
   O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVIZIO DI RETE')
   O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
   O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
   O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
   O8 - Extra context menu item: Invia immagine alla periferica &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
   O8 - Extra context menu item: Invia pagina alla periferica &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
   O9 - Extra button: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
   O9 - Extra 'Tools' menuitem: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
   O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
   O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
   O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
   O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
   O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
   O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
   O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
   O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
   O13 - Gopher Prefix:
   O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
   O20 - Winlogon Notify: AWinNotifyVitaKey MC3000 - C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll
   O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
   O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
   O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
   O23 - Service: Common Toolkit Service - SPAMfighter - C:\Program Files\Common Files\Common Toolkit Suite\FighterSuiteService.exe
   O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
   O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
   O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
   O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
   O23 - Service: iGroupTec Service (IGBASVC) - Unknown owner - C:\Program Files\Acer\Acer Bio Protection\BASVC.exe
   O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
   O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
   O23 - Service: lxduCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxduserv.exe
   O23 - Service: lxdu_device - - C:\Windows\system32\lxducoms.exe
   O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
   O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
   O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
   O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
   O23 - Service: Samsung UPD Service - Samsung Electronics CO., LTD. - C:\Windows\System32\SUPDSvc.exe
   
   --
   End of file - 9326 bytes
   
   QUALCUNO MI POTREBBE AIUTARE??
   ora invio un log di Hackjackthis, spero possa essere utile

7. domenico Mar 14, 2010

   dario c'hai ragione c'è un rallentamento del pc...quindi è un virus ke va eliminato al + presto......

Inserisci commento — CI SERVE LA TUA OPINIONE!

Commento:

Nome:

Inserisci per favore il codice di sicurezza: