no internet access and crashing applications (malware or csrss.exe)

Page 1 of 2 12 LastLast

  1. Posts : 8
    Windows 7 Home Premium x64
       #1

    no internet access and crashing applications (malware or csrss.exe)


    Yesterday my antivirus found two trojans (trojan.downloader.win32.genome.itdk) while installing a software. I panicked and in a hurry killed csrss.exe. The system froze for a few seconds and then got shut down instantly (as if someone removed the battery). On restarting i found that my internet stopped working. It could connect to a wireless network but always shows 'no internet access' status. Moreover some of the applications were crashing on startup. One of them gave an error that "this program does not supports multiple user sessions. Close the program in other session and then try again." Then i checked the reports of my anti virus software which said that one virus was deleted but the other one was not found. So i downloaded malware bytes and ran a threat scan in safe mode. But it didnt find anything except for some pup.optional.outbrowse registry keys.
    But something is wrong with my system. Sometimes a black screen appears with just a mouse pointer after windows login for 10-20 seconds. I dont know if its the malware or the fact that i terminated csrss.exe improperly.
      My Computer


  2. Posts : 21,004
    Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
       #2

    Hello and welcome prakhar mate run this

    USING THE KASPERSKY RESCUE DISK

    Download the softwarefrom here http://support.kaspersky.com/4162 and make abootable disk or USB stick. Set the BIOS to boot from either the optical driveor the USB stick whichever you prefer I like the disk myself but the choice isyours.

    Insert the disk andthen reboot and let the program run it will scan from the very start of poweron for malware that may be otherwise too well hidden. It also does not involve Windows as it runsalone - bootable.
    If this gets things going run these

    https://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

    https://www.sevenforums.com/tutorials/433-disk-check.html < use the /f and /r options in Option2 if necessary
      My Computer


  3. Posts : 8
    Windows 7 Home Premium x64
    Thread Starter
       #3

    But it says that the kaspersky rescue disk should be used when it is impossible to boot windows. But in my case windows is booting, its just the applications which are crashing. Should i still go for it?
    And i have already tried chkdsk and system scan. They didnt find any error in the system files.
    Thanks
      My Computer


  4. Posts : 21,004
    Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
       #4

    Nothing to lose prakhar but if you want to try these first

    http://www.superantispyware.com/

    http://www.malwarebytes.org/products/malwarebytes_free/

    http://www.bleepingcomputer.com/download/adwcleaner/

    download from bleeping computer – delete any rubbishthese find.

    There is this Emsisoft Free Emergency Kit: Portable malware scanner | Free removal of Viruses, Bots, Spyware, Keyloggers and Trojans
    and I usually only use the Emergency and Command line scans

    if things are looking grim then the TDSS Killer at the top of the list
    http://www.techsupportalert.com/best-free-rootkit-scanner-remover.htm

    In any case I hope you have all data backed up just in case
      My Computer


  5. Posts : 8
    Windows 7 Home Premium x64
    Thread Starter
       #5

    Malware bytes anti malware didnt find anything except for some pup.optional registry keys. Super anti spyware and TDSS also didnt find anything.
    I am thinking of doing a factory reset of windows because otherwise il never be 100% sure if the malware is still there or not. I'l reset the windows to factory settings and then perform a repair install with the latest available windows 7 dvd to add the sp1 along with updates.
    So is there any chance of malware surviving this process (if there is any)?
      My Computer


  6. Posts : 21,004
    Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
       #6

    Ok mate now an option for you would be this Clean Reinstall - Factory OEM Windows 7 it will be the very latest version "freshest" some call it of Windows 7 including the SP1 and it will not load all the factory bloatware therefore giving you more space and less annoying factory rubbish they put on store made machine shese days.
    Just make sure you pick only the version of Windows that was originally installed and not a higher version - some do and end up with buckets of grief. All you need for this is the activation code on the sticker on your machine. Your data you can add later if you have backed it up and it is a good idea to do this Imaging with free Macrium I do it on a weekly basis and one last thing I always do a backup of the registry after a clean install or before I go changing the registry as one can do if you use the Optimise tutorial - it is very safe anyway but just in case you hit a wrong key you can always get back the original registry listing.
    To do that see this Registry - Backup and Restore takes very little time to do and to optimize see this I do nearly everything on this tutorial and you will be amazed at the difference in performance
    Optimize Windows 7

    Post back on how you get on as I am interested as we have doe a bit together now and sorry I couldn't give you the answers:)
    Attached Thumbnails Attached Thumbnails no internet access and crashing applications (malware or csrss.exe)-iso.png  
      My Computer


  7. Posts : 8
    Windows 7 Home Premium x64
    Thread Starter
       #7

    Actually i want to keep some of those bloatwares. So will it be same if i reset windows and then upgrade to sp1 using the windows disc? Or should i go for a clean reinstall if i want to be 100% sure that the malware is gone.
      My Computer


  8. Posts : 21,004
    Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
       #8

    That's ok Prakhar if you like to keep the stuff - I don't personally as if it does not do anything really vital to the operation of the machine I like to get rid of it.
    As a matter of fact my Toshibas have both been clean installed onto SSD's with an OEM and there is still some Toshiba rubbish that downloads with updates - how don't ask I haven't got a clue.

    I am just wondering what the Lenovo features are that you like in case there may be an alternative that will not pester like some of the factory stuff does. By the way do you know the factory default key?? If not just Google the machine you have by typing
    "factory restore button for a Lenovo *******" you should end up with replies as that that is and it is usually one of the "F" keys or a combo of one of those and DEL or others. For example my Toshiba factory restore key is the 0 (zero) number key on the top of the keyboard and not the NUM pad zero. Anyway the Google will tell you what it is.
    Actually I did just that and you should get this How do I recover my factory installed programs and files? - Desktops and Workstations - Lenovo Support (US)
    Now this process if you don't know invokes a complete clearance of everything on that drive except the partition that holds the install stuff and I would guess if the machine is not very old the SP 1 should be on that partition because it is a pain in the neck having to download and install that SP1.
    Good luck and sorry I could be more helpful - let us know how you go because if the problem persists then you may have to do the tutorial method if that restore partition has been infected - anything is possible
      My Computer


  9. Posts : 8
    Windows 7 Home Premium x64
    Thread Starter
       #9

    Hehe... Lenovo has this veriface feature for locking your files or windows with face recognition and i use it a lot. Lets say ive got used to it. There are few more.
    But anyways, thanks a lot for your help. Even though we couldnt find the malware but im glad that im reinstalling windows. I will be out of town for a couple of days so wont be able to reinstall it very soon. But will let you know the outcome once i do it.
    Thanks!

    And one last question. Does reseting windows to factory defaults formats the MBR?! Because that is one of the few reasons why i want to reset windows. (Just in case if the virus has manifested itself in the boot sector)
      My Computer


  10. Posts : 21,004
    Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
       #10

    I cannot say praktar I only know for certain that factory restores typically tell one that the machine will essentially be the same as when it came out of the box. having said that you are right the MBR may have become infected and I am wondering if that will have been sorted by doing this.

    There is this but like so many others I am assuming you were not supplied with any rescue media unless you made one yourself. http://support.microsoft.com/kb/927392


    The other option is I am really doing some wishful thinking here is that if you do a clean install as per that link you may be able to download the Lenovo stuff you like - it would be a first I guess but worth asking Lenovo first or Googling for it.

    My own personal thoughts on it mate is that is it worth it to have that face recognition stuff because lets face it (no pun) anything can be hacked if they want to badly enough. and I think if you used all the user account security stuff it would be suffice.

    PS I messaged you look for it at the top of the page.
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 00:04.
Find Us