Windows security service not working!!!

[Aravintharajan]

suddenly my Windows security service stopped working its not turning on........


it says turned off...........but its not switchin on..........

 

[Bill2]

Run a scan with MBAM.

 

[Hopalong X]

Download Malwarebytes here. Malwarebytes

Click the Free version at the top left of page.

Install then open. Click Update tab and update.

Click Scanner tab and select "Full" scan.

Remove/delete what ever it finds.

It will make a report. Save it to the desktop or where you can find it and please upload to this thread.
This will show you how to upload on the forum.
http://www.sevenforums.com/852738-post3.html

Mike

 

[Aravintharajan]

ok folks somehow i ve found that it is due to csrss.exe now help me to clear it.......plpz thanks in advance.......

 

[Bill2]

Hmm.....did you run the scan with MBAM? Does it ask you to reboot to clean the infection? Then reboot and let us know whether the infection comes back. Its not a pretty situation.

 

[Aravintharajan]

this time i ve scanned usin MBAM.....but no infection was found but still i cant switch on......

 

[Bill2]

So where exactly is csrss.exe indicated?

 

[Aravintharajan]

its given in task manager wer i couldnt end its task..........and wen i googled it some said its like virus do u ve any idea abt it............and i can see csrss.exe twice in the task manager

 

[Bill2]

Csrss is a legit windows component, located in C:\windows\system32. Right click on the process in the task manager, then click on "Open file location", if its system32 theres nothing to worry about. I just checked, I also have 2 csrss processes in my task manager.

Is your computer behaving wierdly E.g. are you getting virus notifications from the AV or mbam, or are webpages being redirected or are their random popup windows? If not, chill.

 

[EzioAuditore]

its given in task manager wer i couldnt end its task..........and wen i googled it some said its like virus do u ve any idea abt it............and i can see csrss.exe twice in the task manager

What user is it running under and it's path?

 

[Aravintharajan]

no its not acting weird but the security center and windows defender is not workin...........


i cant get the path thing...........

 

[Aravintharajan]

ya its redirected to random pop windows plus i cant open windows security center and windows defender..........plz tell........

 

[Bill2]

Well for one, run a full scan with MBAM again.

Also, click on Start orb, type services.msc. In the services console, locate Security center and make sure it is started and set to Automatic startup type. Also, make sure the dependencies- RPC and WMI are running and set to automatic startup.

And why cant you get the path? You just need to right click on the process and choose "Open file location".

 

[Aravintharajan]

i ve opened the service and made security center RPC and WMI to automatic and gave start.............but the security center get back to disabled automatically......


finally wen give the open location nothing is opening..........

 

[Aravintharajan]

sorry got the location "C:\Windows\System32" for both.........

 

[Bill2]

Have you run MBAM again?

Also run a sfc scan.

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

 

[Aravintharajan]

MBAM is still runing....and i ve did sfc long b4..............k can i get rid off by backuping reinstalling windows in C drive alone............and restoring it back........

 

[Bill2]

Run sfc 3-4 times again.

And can you elaborate what webpages are being redirected to malicious sites?

 

[Aravintharajan]

no no it was once redirecting but i scaned via escan........now its not redirecting.......i think i am goin to reinstall my os.........

 

[Jacee]

Various types of malware can pretend to be csrss.exe. The malware can allow hackers to access your computer remotely and steal private information such as credit card numbers, bank data, birth dates and passwords. Some viruses, spyware and worms can also disguise themselves as csrss.exe. The original csrss.exe file is an essential part of the windows operating system and deleting it can cause stop errors. Use a updated malware remover to decipher whether your PC has been infected with a virus.

I would advise you to change all your passwords. Do a 'clean' install!