

The process is loaded during the Windows boot process (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Runonce). The file is located in the Windows folder, but it is not a Windows core file. The file size on Windows XP is 4**52 bytes. The process belongs to the software CSRCS.EXE by unknown.ĭescription: File csrcs.exe is located in the folder C:\Windows\System32. The free file information forum can help you find out if csrcs.exe is a virus, trojan, spyware, adware which you can remove, or a file belonging to a Windows system or an application you can trust. If you think that any of the posts that have been made by all TR Members, have solved or contributed to solving the problem, please Mark them as Helpful so that others may benefit from the outcome. Keep us informed as to your progress if you require further assistance. Remember to turn on System Restore when you have finished cleaning. Just to be on the safe side when you finish do an online scan with Bitdefender. Reboot your PC in Safe Mode and run it.ĭownload RootkitRevealer v1.71 and run it When you have finished running the above download and install Malwarebytes and update it. The Sophos SAV32CLI folder can be safely deleted after it is copied to USB.

When the Scan has finished check the log file to see what it hasn't removed. Install it and extract the IDE files to the C:\SAV32CLI folder.Ĭopy and paste the below two lines into Notepad and save the file to the USB Stick as sophos.bat, it will scan and remove.

ĭownload Sophos and the latest IDE Files. Restart the PC in Safe Mode and turn off System Restore, then run Sophos and then run Spybot.ĭownload Spybot - Search & Destroy 1.5.2 and install it. From another PC download and install these two programs and copy the the installed folders to a USB Stick.
