virus/malware cssrrx.exe HELP!

Discussion in 'Malware Help (A Specialist Will Reply)' started by phiwalker, Feb 29, 2008.

  1. phiwalker

    phiwalker Private E-2

    i was wondering if anyone had gotten this on their pc?

    i have to make this quick before my pc crashes again.

    i have a virus, it shows up in my windows task manager as cssrrx.exe and it duplicates itself over and over until my pc crashes.

    now if i let it set long enough it also starts duplicating net.exe and Lu Proxy and Lu Callback Proxy and in about 5 min. if it's not monitored my pc crashes.

    so i have to set with the task manager open so i can "end process" when it comes up.

    this is very similar to the resfix32 virus i had and got rid of with Avenger. for some reason Avenger isn't letting me isolate it, so does anyone know of a program i can get that will let me isolate the virus and delete on next boot like Avenger would?

    the locations of the virus are:


    C:\Program Files \Internet Explorer\PLugins\cssrrx.exe

    but i can't delete it even when i sort if out of my task manager so it has to be attached to a bootfile or some other program i don't know.

    i'm typically quite good at this, i've not had to post in a long time due to not needing help, but when i type in cssrrx in google i get nothing.

    any help would be most appreciated!!!
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    The file you mentioned may be only one part of the problem which could be why Avenger did not appear to help you. You need to find the source of the infection.

    Please follow the instructions in the below link and attach the requested logs when you finish these instructions. If you cannot download the tools on the problem PC, download them using another PC and transfer them to this PC using a CD, a flashdrive,....etc. Also you could try running your PC in safe boot mode to see if that helps you stabilize things. Also keep the PC physically disconnected (unplug the cable) to the internet as this sometimes helps.

    READ & RUN ME FIRST. Malware Removal Guide
     
  3. phiwalker

    phiwalker Private E-2

    thanks for the fast reply.

    i'll do what you advised in a sec, but i wanted to let you know that trust me i've already tried the safe mode and internet disconnect ideas. i did that last time with the reg. virus that acted the exact same way.

    it duplicates itself no matter what.

    but i'll try those suggestions and post the logs.

    thanks again!
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome! Please try all instructions and complete what you can. Explain to us what you could not do and why when you come back. Anything you could not do in normal boot mode, please try safe boot mode. The more you can do and the more logs you give us, the greater the chance we can help you resolve your problems.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds