i have two process csrss.exe
csrss.exe private byte 1904k working set 4236k pid 660
csrss.exe private byte 2520k working set 8096k pid 804
then i need help
thanks
i have two process csrss.exe
csrss.exe private byte 1904k working set 4236k pid 660
csrss.exe private byte 2520k working set 8096k pid 804
then i need help
thanks
And why do you suspect a infection ?
What OS/SP ?
https://en.wikipedia.org/wiki/Client/Server_Runtime_Subsystem
then when i run eset online it hangs after 3hours
and when i run gmer it displays :
thread c:\windows\system32\csrss.exe and it hangs too
i suspect malware…
i have now gmer already open with one line
thus the tread line with csrss.exe and when i rhight clic
i have the light option :
remove signed
remove duplicate
find3m
option
about
Do you even know what gmer does ?
And at what point (folder/file) does eset hangs ? (check the log file)
And again… What OS/SP ?
you can upload and check suspicious file(s) here > virustotal.com / metadefender.com / jotti.org
If you see files as scanned before always click rescan for a fresh result
Use the additional tabs to find additonal file info
i suspect malware...Have you run a scan with Malwarebytes?