Windows messaging

[TechHax0r420]

Hey Everbody,

Sometimes I will be in a game or doing nothing and a windows messaging program box pops up with a advertisement in it. I traced the program down and found out its called CSRSS.EXE. I tried to end the process but it says its a vital windows process, then I traced its tree down and found it was related to CSRSRV.DLL. If I stop the program from running will it damage my windows 2k? and if not do you think I can hex edit the exe and the dll to make it stop functioning?

ps. hopefully posted this in the right section, because its an internet orientated application.

Any help you can offer would be appreciated,
Tech

 

[Davey7549]

TechHax0r420
Welcome to TSG!
I am moving this to the security forum because there is a good chance of an infection and there you will get the attention of the virus doctors.

http://securityresponse.symantec.com/avcenter/venc/data/w32.dalbug.worm.html
http://vil.nai.com/vil/content/v_99590.htm

Dave

 

[jwbirdsong]

TechHax0r420
While csrss.exe IS a valid file for the NT Kernel systems it is also virus/worm read more here csrss link
More info here