Re: csrss.exe taching out cpu

*** I have solved the problem, and decided to use your tread as a
documention trail ***

I had the same problem, and you message hinted me.

the trojan / virus / bad guy software changes the following:
dhcp server name
browser start page
dns IP

in your case, by resetting your TCPIP data, you changed all the bad
data to the correct one

What I did is to search "85.255" in the registry (I recommand you do
the same just to be sure)

and removed all occurences of such IP adresses starting with 85.255

a UK consultant have all the IP the bad guy uses, just seach for
"85.255.113.67" in google groups to have all the list

Thank you for the hint, and good luck to all the people that might
stumble of this article


Spou

On May 12, 10:36 am, nass <n...@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Glad you got it sorted Bill and thanks for the feedback.
Good luck.
nass
-----www.nasstec.co.uk



"Bill" wrote:
Before I got a chance to download Autoruns, I had to resolve another issue
with the NIC card. I reset tcpip and winsock. After a reboot not only did it
fix the NIC card issue it also fixed the csrss process issue. Go figure.
Thanks for the help.

"nass" <n...@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:87FA0FB5-A783-44A7-825C-BF7EBE85310C@xxxxxxxxxxxxxxxx

"Bill" wrote:

even in safe mode. the process constantly keeps the cpu at 70-100%. this
is
on a winxp HE sp2 dell computer. It did have viruses, but I have scanned
at
least 3 times with diff antivirus, the last scan came back clean. I have
removed spyware as well. I have also defragged, ran chkdsk, put the power
mode to "always on", I also found a hotfix for "100% cpu utilization
after
upgrading to sp2." Oh i almost forgot i did a repair install also. can
anyone help?

Download the AutoRun and see what Running process in the background
causing
this, is it the MS Updates?:
http://www.microsoft.com/technet/technetmag/issues/2007/04/UtilitySpo...
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Pro...
See what process is causing the 100% CPU usage and troubleshoot from
there.
Turn OFF the MS update for now and see what lurking in the background, you
could be having Memory leakage, which terrible to resolve sometimes.
HTH.
nass
-----
www.nasstec.co.uk- Hide quoted text -

- Show quoted text -


.

Relevant Pages

  • Re: Newest updates causing me a lot of problems
    ... The slowness is attributed to the WUPDATE.EXE causing 100% CPU utilization. ... When there are new updates, ... More things are happening I guess roll back the install, ... to a restore point that I created prior to installing the updates and ...
    (microsoft.public.windowsupdate)
  • Re: Where did the icon for my sound go?
    ... Spybot S&D and Ad-Aware are good but they require you to update the latest file ... utility to be just as effective and it's proactive, obtaining its own updates ... | to know what's causing these problems or know what to do to fix them. ... |>> click on the icon to control the sound and the icon is gone. ...
    (microsoft.public.windowsxp.general)
  • Re: Damn you, FEDEX! or Nikon D40 lost in Springfield, MO blackhole.
    ... the 2 mp Mavica he had been using with a Nikon D40. ... After shopping around, he got me to order one for him. ... The shipper had it insured, but from what I have read it could take weeks to sort this crap out. ... You may get your insurance from FedEx and a couple weeks later they find it and deliver it. ...
    (alt.photography)
  • Re: error for cron job slocate?
    ... > I get this message from the cron job run to do daily database updates. ... > What could be causing this. ...
    (Fedora)
  • Re: IE6 - MSHTML.DLL browser keeps crashing!
    ... I have tried Pestpatrol and Adaware with no traces of spyware. ... Symantec antivirus and all is up to date. ... > automatic updates updated the system, ... > causing the problem. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)