List Information

Started by: Matt from SpywareAid

Maintained by: random/random, nasdaq
O23 List

The O23 list catalogues Windows NT Services.

Status Key:
X = Malware, spyware, adware, or other potentially unwanted items
L = Legitimate items
O = Open to debate
? = Currently unknown status
Search Results
(displaying 13 results)

Name Filename Description Status
Client Server Runtime Procescsrss.exeAdded by the WORM_SDBOT.BTI WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. Note: Malicious activitiesread the topic. Note: This is not the legitimate Windows Process. (Which is found in the System32 folder.) This worm\trojan file is found in the Windows or Winnt folder.X
Client Server Runtime Processcsrss.exeMicrosoft Client Server Runtime ProcessL
Client/Server Runtime Server Subsystem (CSRSS)csrss.exeW32/IRCBot-UN Note: Located in %windir%, not to be confused with the legitimate file in %windir%\system32 (%windir%\system on windows 98/ME) Note: Read the link, allows remote access and steals informationX
Clients Server Runtime Processcsrss.exeAdded by the W32/Sdbot-CPF WORM! Note: This worm\trojan is located in C:\%WINDIR% This is not the legitimate Windows Process. (Which is found in the System32 folder.)X
Clients Server Runtime Process (Windows Internet)csrss.exeAdded by the W32/Sdbot-CPF WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder.X
Microsoft Windows Update (msupdate)csrss.exeAdded by an unknown TROJAN!, Note: This has nothing to do with Microsoft Windows Update and this is not the legitimate Windows Process csrss.exe. (Which is found in the System32 folder.) This trojan file (csrss.exe) is found in the Windows or Winnt folder.X
Syscheck (Syscheck)csrss.exeAdded by the Troj/LdPinch-AL TROJAN! Note: This is not the legitimate Windows process csrss.exe (Which is always found in the System32 folder.) This trojan file (csrss.exe) is found in the Windows or Winnt folder.X
Windows Client/Server Runtime Service (csrss)csrss.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\i386\ (Win9x/Me), C:\%WINDIR%\i386\ (XP/WinNT/2K) Note: This is not the legitimate Windows Process. (Which is found in the System32 folder.)X
Windows Object Managercsrss.exeW32.Banish.A@mm - Symantec Description: Randomly copied characteristics of an already existing service. Located in C:\WINDOWS\csrss.exe (9X\XP) or C:\Winnt\csrss.exe (NT\2000) Note: Note C:\WINDOWS\System32\csrss.exe is a Windows system file.X
Windows Security Drivers (csrs)csrss.exeAdded by an unknown TROJAN!, Note: This has nothing to do with Microsoft Windows Update and this is not the legitimate Windows Process csrss.exe. (Which is found in the System32 folder.) This trojan file (csrss.exe) is found in the Windows or Winnt folderX
Windows TCP/IP Socket Driver (winsck)csrss.exeAdded by TROJ_RANKY.HW TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\winsock\ This is not the legitimate Windows Process. (Which is found in the System32 folder.)X
Windows Time Sync (wservtime)csrss.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\ folder. Note: This is not the legitimate Windows Process. (Which is found in the System32 folder.)X
Quicktime update (QTUpdate)csrss.exeAdded by the Wireshark Antivirus Rogue program. Note: Located in \%Program Files%\ Note: Do not remove the legitimate svchost.exe file which is always found in \%WINDIR%\%System%\X


Powered by SystemLookup Engine. © 2008-2018 BrightFort. All Rights Reserved. | Privacy Policy | Terms of Use