Page 1 of 1

memory scan of CSRSS.EXE

PostPosted: Tue Jun 03, 2008 1:43 pm
by dattesh
Dear all,

When i select memory scan from MWAV, it try to scan CSRSS.EXE, & system goes rebooting.

Beside when i try to skip scanning Memory & rest all selected, the system won't reboot.

any solution?

Furtherinfo, i have checked with procxp, gmer, rootkitrealver, pinfect.zip (no malicious found by virus total)


CSRSS.EXE found in C:\\windows\system32\

Can you try this ?

PostPosted: Tue Jun 03, 2008 4:24 pm
by Shrinivas
can you see this process in memory ?.
If yes. Then try booting via some bootable and replace this file by copying from C:\WINDOWS\system32\dllcache\csrss.exe to C:\WINDOWS\system32\csrss.exe .
You can also copy via dos command prompt.
Replace the file and then reboot system and check by scanning memory.