MajorGeeks Support Forums

Go Back   MajorGeeks Support Forums > ----------= PC, Desktop and Laptop Support =---------- > Malware Removal
Register FAQ Members List Calendar Casino Mark Forums Read

Malware Removal Malware removal forum. Please see the READ ME FIRST thread before you post. Forum is staffed by a small number of volunteers, please be patient.


Reply
 
Thread Tools Display Modes
  #1  
Old 09-07-05, 01:09
spyware sucks spyware sucks is offline
Senior Member
 
Join Date: Oct 2004
Posts: 132
Thanks: 0
Thanked 0 Times in 0 Posts
Default Client Server Runtime Process

Hi. I have sygate personal firewall and a "Client Server Runtime Process" is running. is it malicious? or is it a normal computer process?
Reply With Quote
Sponsored links
  #2  
Old 09-07-05, 01:17
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,439
Thanks: 62
Thanked 7,684 Times in 4,144 Posts
Default Re: Client Server Runtime Process

Depends on where it is running from and what the file name of the process is?

Are you referring to c:\windows\system32\csrss.exe

It is a valid Windows Process. See http://www.liutilities.com/products/...library/csrss/
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #3  
Old 09-07-05, 01:21
spyware sucks spyware sucks is offline
Senior Member
 
Join Date: Oct 2004
Posts: 132
Thanks: 0
Thanked 0 Times in 0 Posts
Default Re: Client Server Runtime Process

csrss.exe is also process which is registered as the W32.Netsky.AB@mm worm, the W32.Webus Trojan, Win32.Ladex.a and more

I'm not really sure what that means. does it mean that it could be a virus?
Reply With Quote
  #4  
Old 09-07-05, 01:23
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,439
Thanks: 62
Thanked 7,684 Times in 4,144 Posts
Default Re: Client Server Runtime Process

Quote:
Originally Posted by spyware sucks
csrss.exe is also process which is registered as the W32.Netsky.AB@mm worm, the W32.Webus Trojan, Win32.Ladex.a and more

I'm not really sure what that means. does it mean that it could be a virus?
Read what I said again! Where is the process running from? That is the most important thing. All NT based systems have a valid csrss.exe process.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #5  
Old 09-07-05, 01:26
spyware sucks spyware sucks is offline
Senior Member
 
Join Date: Oct 2004
Posts: 132
Thanks: 0
Thanked 0 Times in 0 Posts
Default Re: Client Server Runtime Process

ok. yes it is running from c:\windows\system32\csrss.exe

i just wasn't really sure what that site meant.
Reply With Quote
Sponsored links
  #6  
Old 09-07-05, 01:33
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,439
Thanks: 62
Thanked 7,684 Times in 4,144 Posts
Default Re: Client Server Runtime Process

Many sites like that are just pointing out what the file may or may not represent. They do not always tell you the more specific info (like if it is running from and if it is such and such size blah blah blah). They want you to buy what they are selling. In fact there are many less reputable sites that will come right out and say it is malware which is not correct in the majority of the cases. You need to know where the process is located and running from and you need to know something about which processes are part of Windows and or other valid applications and where they should normally be located.
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
  #7  
Old 09-07-05, 01:35
spyware sucks spyware sucks is offline
Senior Member
 
Join Date: Oct 2004
Posts: 132
Thanks: 0
Thanked 0 Times in 0 Posts
Default Re: Client Server Runtime Process

oh thanks for clearing that up for me.
Reply With Quote
  #8  
Old 09-07-05, 16:11
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,439
Thanks: 62
Thanked 7,684 Times in 4,144 Posts
Default Re: Client Server Runtime Process

No problem!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 17:24.

MajorGeeks.Com Menu

MajorGeeks.Com \ All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ NEW! PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads

MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds


All content Copyright MajorGeeks.com source code Powered by vBulletin® Version 3.8.4
Copyright © 2009 vBulletin Solutions, Inc. All rights reserved.
Ad Management by RedTyger