I'm running a clean installation of Windows Vista Business, I installed NOD32 latest version as soon as possible and updated, then went on installing my other software which include spybot search and destroy and a2 squared free, and PERVX CSI Scanner.
But upon taking a look at the running apps, I notice a program called crss.exe, there are 2 instances of it runnin. So I searched google and it appears to be :
"crss.exe is a process which is registered as W32.AGOBOT.GH Worm."
I tried ending the task from the task managerbut got a blue screen of death right away, and I ran NOD32, ran an online scan of Kaspersky online, ran spybot and A2, but they don't report anything.
How come nothing is detecting it? and how to remove it?
-
Ok, sorry guys, after reading a bit more, it seems that crss.exe is a windows file, only if i find it in somewhere other than the windows folders like C:\windows\system32 for example is where it could be the virus disguised.
-
Any chance you've misread the name of the process and it's actually csrss.exe?
Edit: I'm a slow typist. Glad all is well. -
rep point added to j00 -
Damn, I really like happy endings!
-
lolll
-
Any Windows system file could potentially be infected with a virus, even if it is in the usual location. (Although if it's in the wrong place, that would be a clue that it may be a virus.) But unless you have good reason to think there's a problem, there probably isn't one.
I searched Google about this process too (csrss.exe)... I think because it doesn't have a description in Task Manager. I don't know why... most of the Windows processes have the description field filled out. Oh well. Anyway it's part of Windows, don't worry about it.
Crss.exe
Discussion in 'Security and Anti-Virus Software' started by MaXimus, Jan 29, 2008.