- Troj_servu.q trojan
- Posted by Sharkman@comcast.net on October 21st, 2005
Probably not the right place to ask, but maybe you folks can help.
I ran Trendmicro virus scan and it detected a "Troj_servu.q" trojan. The
operative file to delete (it says) is csrss.exe.. I'm concerned about
deleting this file. I find the file in:
Windows]\$ntservicepackuninstall\csrss.exe
Windows\prefetch\csrss.exe
Windows\system32\csrss.exe
Windows\ServicePackFiles\i386\csrss.exe
I googled csrss and found much back and forth but cant make heads or tails
of it.. Any suggestions?
thanks
sharkman
--
- Posted by Peter Foldes on October 21st, 2005
Hello Sharkman
Read the below link from Malke
http://www.elephantboycomputers.com/...moving_Malware
or alternatively you can repost it to the group below
news://msnews.microsoft.com/microsof...security.virus
--
Peter
Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.
"Sharkman@comcast.net" <sharkman@comcast.net> wrote in message news:NeidnVfDF9AXW8XeRVn-ug@comcast.com...
> Probably not the right place to ask, but maybe you folks can help.
> I ran Trendmicro virus scan and it detected a "Troj_servu.q" trojan. The
> operative file to delete (it says) is csrss.exe.. I'm concerned about
> deleting this file. I find the file in:
>
> Windows]\$ntservicepackuninstall\csrss.exe
> Windows\prefetch\csrss.exe
> Windows\system32\csrss.exe
> Windows\ServicePackFiles\i386\csrss.exe
>
> I googled csrss and found much back and forth but cant make heads or tails
> of it.. Any suggestions?
>
> thanks
> sharkman
> --
>
>
- Posted by Gerry Cornell on October 21st, 2005
Instructions on Trend site:
http://snipurl.com/ishk
--
Hope this helps.
Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA
Using invalid email address
Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.
http://dts-l.org/goodpost.htm
~~~~~~~~~~~~~~~~~~~~~~~~
"Sharkman@comcast.net" <sharkman@comcast.net> wrote in message
news:NeidnVfDF9AXW8XeRVn-ug@comcast.com...
> Probably not the right place to ask, but maybe you folks can help.
> I ran Trendmicro virus scan and it detected a "Troj_servu.q" trojan.
> The operative file to delete (it says) is csrss.exe.. I'm concerned
> about deleting this file. I find the file in:
>
> Windows]\$ntservicepackuninstall\csrss.exe
> Windows\prefetch\csrss.exe
> Windows\system32\csrss.exe
> Windows\ServicePackFiles\i386\csrss.exe
>
> I googled csrss and found much back and forth but cant make heads or
> tails of it.. Any suggestions?
>
> thanks
> sharkman
> --
>
>
- Posted by Sharkman@comcast.net on October 22nd, 2005
thanks... I'll try the other group,.
--
Peter Foldes wrote:
> Hello Sharkman
>
> Read the below link from Malke
>
> http://www.elephantboycomputers.com/...moving_Malware
>
> or alternatively you can repost it to the group below
>
> news://msnews.microsoft.com/microsof...security.virus
>
>
> --
> Peter
>
> Please Reply to Newsgroup for the benefit of others
> Requests for assistance by email can not and will not be acknowledged.
>
> "Sharkman@comcast.net" <sharkman@comcast.net> wrote in message
> news:NeidnVfDF9AXW8XeRVn-ug@comcast.com...
>> Probably not the right place to ask, but maybe you folks can help.
>> I ran Trendmicro virus scan and it detected a "Troj_servu.q" trojan.
>> The operative file to delete (it says) is csrss.exe.. I'm concerned
>> about deleting this file. I find the file in:
>>
>> Windows]\$ntservicepackuninstall\csrss.exe
>> Windows\prefetch\csrss.exe
>> Windows\system32\csrss.exe
>> Windows\ServicePackFiles\i386\csrss.exe
>>
>> I googled csrss and found much back and forth but cant make heads or
>> tails of it.. Any suggestions?
>>
>> thanks
>> sharkman
>> --