2 Csrss.exe Files And Taken Over Web Browser

[NNNOOOOOO 0]

My PC has 2 csrss.exe files in different locations. They are in:C:\Windows\System32C:\Windows\winsxs\x86_microsoft-windows-csrss_31bf3856ad364e35_6.0.6001.18000_none_58e3e3d7e415ae4cShould I delete the second one, and is it the reason my web browser is messing up?

[web_designer 7]

well i didn't hear about those files before. and deleting anything from your windows 32 is not recommended since they are they system files unless you know exactly what you are doing. so, why don't you start from the begining and explain how is your browser messed up?? maybe we can find another solutions.

[NNNOOOOOO 0]

Google searches sends me to random web pages including fake warning screens. I've been reading that the csrss.exe should be only in the System32 folder, but anywhere else, it's a virus. However, I'm confused about the second one, as it has the same properties of the other one. File size, creation date, description. The one in the folder of 50+ characters also has a .mui(?) file in it.

[Iniyila 2]

no do not delete them if there is two of them and the cpu usage is normal. look at the cpu usage if it is normal they are not virus (my system have two of them too) and don't forget to look at the network usage too and see if they are using any bandwidth. anyway if cpu usage and network usage is normal they are not virus (probably). all those long named folders in C:\Windows\winsxs\ are system folders so don't delete any of them untill your antivirus detects them as an effected file. if you are using internet explorer it's messy by default so don't worry.

[NNNOOOOOO 0]

no do not delete them if there is two of them and the cpu usage is normal. look at the cpu usage if it is normal they are not virus (my system have two of them too) and don't forget to look at the network usage too and see if they are using any bandwidth. anyway if cpu usage and network usage is normal they are not virus (probably). all those long named folders in C:\Windows\winsxs\ are system folders so don't delete any of them untill your antivirus detects them as an effected file. if you are using internet explorer it's messy by default so don't worry.

But I'm using Chrome. And everything seems normal to me.

[NNNOOOOOO 0]

It seems that now, the internet is working correctly again.

[anwiii 17]

maybe the virus spread to your brain and you only THINK it's normal :)anyway, i am running vista and only have that file in the system32 folder.

[truefusion 3]

I think you should be doing research on the folder "winsxs" rather than the file itself. I do not know what the purpose of the folder is, but i am inclined to say that this may be used by Windows for backing up system files.

[NNNOOOOOO 0]

I think you should be doing research on the folder "winsxs" rather than the file itself. I do not know what the purpose of the folder is, but i am inclined to say that this may be used by Windows for backing up system files.

I read something about that that is what the folder is about. I still don't get any of it. I'm so confused.

[web_designer 7]

well, if everything in your system working fine then really no need to worry about it or delete anything from your system file. and if your browser not working properly, try to reinstall it or upgrade it to the newest version, or use another one like firefox or opera and see what will happen.if you decided to delete that file any way, i suggest you to create a restore point before it. so that you can return your system to its actual performance. if you don't know how to do that, here is the way and it is in windows xp pro.start> all programs> accessories> system tools> system restore> create a restore point and continue with the restorations procedure.

[NNNOOOOOO 0]

This may not have anything to do with the virus, but Windows won't load now. My dad tried to start the PC this morning, but it didn't load Vista. It will get past the blue screen with different options, but the black screen that immediately follows that only appears for a moment or two, it gets hung there. No welcome screen, no safe mode options, no nothing. Just a courser that flashes at a steady rate. I can't type anything, restore option won't work. I'm only able to do this because of live cd of Linux. The last known time that Windows worked was last night. HELP!!!The recover disc didn't work.

Edited December 19, 2010 by NNNOOOOOO (see edit history)

[Iniyila 2]

This may not have anything to do with the virus, but Windows won't load now. My dad tried to start the PC this morning, but it didn't load Vista. It will get past the blue screen with different options, but the black screen that immediately follows that only appears for a moment or two, it gets hung there. No welcome screen, no safe mode options, no nothing. Just a courser that flashes at a steady rate. I can't type anything, restore option won't work. I'm only able to do this because of live cd of Linux. The last known time that Windows worked was last night. HELP!!!
The recover disc didn't work.

the easiest options maybe is to repair windows using installation disc, this way you will not loose any data and you can recover your windows easily. this situation could be done by windows update in windows vista or by a virus or by installing a new software (the common one is real player which causes BOD in some versions of vista). put the vista disc in and boot, go to "Repair your computer" and click on startup repair if it detects any fault it will recover it automatically but if it gave you any error means it can not do anything for you. anyway before doing it just check this list :
1.Disconnect any USB devices from your computer.
2.Remove any recently connected hard disks.
3.Replug any power cord or data cable like sata and ide ones.

[NNNOOOOOO 0]

the easiest options maybe is to repair windows using installation disc, this way you will not loose any data and you can recover your windows easily. this situation could be done by windows update in windows vista or by a virus or by installing a new software (the common one is real player which causes BOD in some versions of vista). put the vista disc in and boot, go to "Repair your computer" and click on startup repair if it detects any fault it will recover it automatically but if it gave you any error means it can not do anything for you. anyway before doing it just check this list :1.Disconnect any USB devices from your computer.
2.Remove any recently connected hard disks.
3.Replug any power cord or data cable like sata and ide ones.

That's what we tried already. When my dad gets here, we'll format the HDD and reinstall Windows.

Thanks for the help thought, everyone.

[web_designer 7]

yeah reformatting is the best option now. and i suggest you not only to reformat but to choose the full format option not the quick format option. full format is recommended when you have a strong virus. it will check everything more precisely more than the quick format. i don't know about vista but i have this option in windows xp pro and i am sure there is a similar one in vista too.after you done installation, try to make a full computer scan for all other drivers in case the virus spread in other folder. and do the same for any external hard or flash you had used when your system was infected. good luck.

[NNNOOOOOO 0]

Windows is now reinstalled and needs more stuff installed to feel how it used to.