How to Remove csrsc.exe, csrcs.exe Virus

csrsc.exe is a W32.Spybot.CF Virus. The process is not visible and loads during the Windows boot process. When started, it connects to a remote IRC server waiting for instructions to be executed. Csrcs.exe is known to be associated with a number of other threats. People often mistake it for csrss.exe. csrss.exe refers to Client/Server Run-Time Subsystem, and is an essential subsystem that must be running at all times. So, make sure that you don’t get confused and try to get rid of the wrong file.

How to Remove csrsc.exe Virus

Scan with a good antivirus program and get rid of the virus. Once done, you need to make sure that there are no entries left in the registry. To do so, follow the below steps:

Go to Start> Run> type regedit and hit enter.

Now, navigate to the following paths, check for the entries relating to csrcs.exe and delete them.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Runonce

Once done, navigate to the following path:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\

There is a key with the name “Shell”. Click on it and check the value of the key. If it contains the words “csrcs.exe” then change the value to “explorer.exe”.

Once you’re done with the above steps, close the registry editor and restart your computer for changes to take effect.

STAY IN TOUCH WITH UPDATES | SUBSCRIBE VIA RSS or Email |

Discussion

No comments for “How to Remove csrsc.exe, csrcs.exe Virus”

web analytics