Shoutbox

quote:

---

Originally posted by CookieRevised
[size=1]

quote:

---

Originally posted by Fergy


[*]Open Process Explorer and kill "csrss.exe" first.
To avoid killing the wrong csrss.exe process, look at the "User Name" column which lists who has started the process.
If it is "SYSTEM" or "NT AUTHORITY" or the likes, then it means it is the legit windows process started by Windows itself and shouldn't be killed. If it is your username/computername then it means the csrss.exe process has started up as a normal user program and thus is not legit and the fake one. This is the one you need to kill...
In Process Explorer, you can also look at the path of csrss.exe (right click on it and choose "Properties"). If it is "C:\Program Files\Block Checker" then it is the fake one.
[*]While still in Process Explorer, kill "block-checker.exe" if it is still there.[/list]

---

I'm trying to do this part of the process to get rid of this virus anyway the only csrss.exe i can find running its discription is Client Server Runningtime Process and the company name is Microsoft Corporation, I'm guessing thats ilgit but not knowing much about computers i though it best to ask, sorry to be a pain.