10/9/11

How to remove the csrcs.exe or csrsc.exe virus from your machine

csrsc.exe is a process which is registered as W32.Spybot.CF Virus. 
DO NOT confuse it with csrss.exe which is an important file used by Windows.
The attackers of this virus can access our computer and gain access to some important data remotely.


Follow the Steps bellow to remove this virus:

  • Scan the system with a good and updated Anti Virus.
  • Open the Task Manager with the Ctrl + Shift + Esc keys, locate the following exe file csrcs.exe or csrsc.exe but not csrss.exe, and kill the process\es.
  • Click on Start > Run > 
  • Type msconfig in the open box



  • Go to the Startup tab.
  • Locate the exe file (csrcs.exe or csrsc.exe), if any, and unmark it. 
  • Search the file in the C:\ drive.
  • Permanently delete the file (csrcs.exe or csrsc.exe only) from the computer.
  • Navigate to the following registry location:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\

  • On the right side, Locate the key named “Shell”, it may be having a value “explorer.exe csrcs.exe”.
  • Modify it to delete the csrcs.exe from it (not explorer.exe).
  • Reboot the PC for changes to take place.

No comments:

Post a Comment