memory scan of CSRSS.EXE

[dattesh]

Dear all,

When i select memory scan from MWAV, it try to scan CSRSS.EXE, & system goes rebooting.

Beside when i try to skip scanning Memory & rest all selected, the system won't reboot.

any solution?

Furtherinfo, i have checked with procxp, gmer, rootkitrealver, pinfect.zip (no malicious found by virus total)


CSRSS.EXE found in C:\\windows\system32\

[Shrinivas]

can you see this process in memory ?.
If yes. Then try booting via some bootable and replace this file by copying from C:\WINDOWS\system32\dllcache\csrss.exe to C:\WINDOWS\system32\csrss.exe .
You can also copy via dos command prompt.
Replace the file and then reboot system and check by scanning memory.