[filename.info logo]
[cn csrss.exe][de csrss.exe][es csrss.exe][fr csrss.exe][gb csrss.exe][it csrss.exe][jp csrss.exe][kr csrss.exe][nl csrss.exe][pt csrss.exe][ru csrss.exe][us csrss.exe]
 

csrss.exe (5.1.2600.0)

소프트웨어안에 포함하는

이름:Windows XP Home Edition, Deutsch
면허:상업
정보 연결:http://www.microsoft.com/windowsxp/

파일 세부사항

파일 경로:C:\WINDOWS\system32\dllcache \ csrss.exe
파일 날짜:2002-08-29 14:00:00
버전:5.1.2600.0
파일 사이즈:4.096 바이트

검사함과 파일은 잘게 썬다

CRC32:7567F540
MD5:C113 8540 3DCE 2C9F C292 54DC A980 5ECD
SHA1:0B1B 4B29 8153 60C9 E280 AC1C E03F 9E07 C290 892C

버전 자원 정보

회사명:Microsoft Corporation
파일 설명:Client Server Runtime Process
파일 운영 체계:Windows NT, Windows 2000, Windows XP, Windows 2003
파일 유형:Application
파일 버전:5.1.2600.0
내부 이름:CSRSS.Exe
법적인 저작권:© Microsoft Corporation. All rights reserved.
원래 파일 이름:CSRSS.Exe
제품 이름:Microsoft® Windows® Operating System
제품 버전:5.1.2600.0

csrss.exe은 뒤에 오는 보고안에 발견되었다:

W32.Dalbug.Worm

기술적 세부사항
...%windir%Smss.exe %windir%Csrss.exe NOTE: %windir% is a variable....
...This is a non-malicious joke program that is executed by Smss.exe and Csrss.exe once they are running....
...NOTE: The files Smss.exe and Csrss.exe have the same file names as two system files that reside in the %windir%System32...
...During execution, the Smss.exe and Csrss.exe files keep the service running, and checking every three seconds to make sure...
...    %windir%smss.exe Csrss.exe      %windir%csrss.exe...
...process if it is activated. Smss.exe and Csrss.exe also try to create the these registry values, however if they detect that Regedit.exe...
...(instead of creating them). Finally, Smss.exe and Csrss.exe will also copy the worm to the following files:...
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.dalbug.worm.html

Trojan.Webus

기술적 세부사항
...Copies itself as %System%csrss.exe. Note: %System% is a variable...
..."ccpApps" = "%System%csrss.exe" ".WMAudio" = "%System%csrss.exe"...
..."Prog" = "%System%csrss.exe" "FiendlyType" =...
...".TEXTCONV" = "%System%csrss.exe" "Microsoft SourceSafe"...
..."RegDone Ex" = "%System%csrss.exe" "BuildLabs" = "%System%csrss.exe"...
제거 지시
..."ccpApps" = "%System%csrss.exe" ".WMAudio" = "%System%csrss.exe"...
..."Prog" = "%System%csrss.exe" "FiendlyType" =...
...".TEXTCONV" = "%System%csrss.exe" "Microsoft SourceSafe"...
..."RegDone Ex" = "%System%csrss.exe" "BuildLabs" = "%System%csrss.exe"...
근원: http://securityresponse.symantec.com/avcenter/venc/data/trojan.webus.html

Backdoor.Hale

기술적 세부사항
...A harmless text file. Csrss.exe: a Backdoor Trojan Horse detected...
..."NTDLM" = "c:winntsystem32qossrvcsrss.exe" to the registry key:...
...NTS (Secure.exe) NTP (Csrss.exe) NOTE:...
...C:WinntSystem32dhcp: Csrsslsrms.dll: A text file, not a dll....
...C:WinntSystem32 estore: Csrss.exe: Detected as Backdoor.Padmin....
제거 지시
..."NTDLM"="c:winntsystem32qossrvcsrss.exe" Navigate to the key:...
근원: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.hale.html

Spyware.LoverSpy

기술적 세부사항
...%Windir%Rec_pwd.html %System%ShellExtCsrss.exe Notes:...
제거 지시
...%Windir%Rec_pwd.html %System%ShellExtCsrss.exe Write-up by:...
근원: http://securityresponse.symantec.com/avcenter/venc/data/spyware.loverspy.html

W32.Ahlem.A@mm

기술적 세부사항
...Create a copy of the worm as %Windir%Csrss.exe. NOTE: %Windir% is a variable....
..."SYSTEMSars32"="%Windir%csrss.exe" to the registry key:...
제거 지시
..."SYSTEMSars32"="%windir%csrss.exe" Exit the Registry Editor....
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.ahlem.a@mm.html

Backdoor.Stanex

기술적 세부사항
...%Windir%systemSysTray.exe. %Windir%TEMPCSRSS.exe %Windir%systemCSRSS.exe...
...Windows 95/98/Me: %Windir%system32CSRSS.exe. On Windows 95/98/Me, the Trojan...
근원: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.stanex.html

Trojan.Gutta

기술적 세부사항
...Copies itself as C:WindowsCSRSS.exe. This path is hard-coded and...
..."rundll32" = "windowscsrss.exe" in the registry key:...
제거 지시
..."rundll32"="C:WindowsCSRSS.exe" Exit the Registry Editor....
근원: http://securityresponse.symantec.com/avcenter/venc/data/trojan.gutta.html

W32.Sndog@mm

기술적 세부사항
...Copies itself to %windir%csrss.exe as a hidden file. Note: %Windir% is a variable...
..."Shockwave" = "%windir%csrss.exe" to the registry key:...
제거 지시
..."Shockwave" = "%windir%csrss.exe" Exit the Registry Editor....
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.sndog@mm.html

W32.Nimda.E@mm

기술적 세부사항
...The worm now copies itself to the \%Windows% folder as Csrss.exe instead of Mmc.exe NOTE: %Windows% is a variable....
근원: http://securityresponse.symantec.com/avcenter/venc/data/w32.nimda.e@mm.html

Backdoor.Sokacaps

기술적 세부사항
...Creates the files: C:windowsmediacsrss.exe C:windowsmediacsrss.uzy...
..."RegWrite"="c:windowsmediacsrss.exe" to the registry key:...
제거 지시
...Scroll through the list and look for Csrss.uzy. If you find the file, click...
..."RegWrite"="c:windowsmediacsrss.exe" Exit the Registry Editor....
......
근원: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sokacaps.html

항법

파일을 찾아보십시요

• 이름으로




Valid HTML 4.01!
Tegtmeier인터넷 해결책에의한 저작권2004 접대: NetGate