Endpoint Protection

 View Only
  • 1.  virus or not

    Posted Jun 13, 2014 08:11 AM

    Is cssrs.exe virus?

    How I can destroy it?



  • 2.  RE: virus or not

    Posted Jun 13, 2014 08:11 AM

    Depends. First off submit it for review:

    How to collect and submit to Symantec Security Response suspicious files found by the SymHelp utility

    http://www.symantec.com/docs/TECH203027

    You can submit the file to virustotal and threatexpert for review:

    https://www.virustotal.com

    http://www.threatexpert.com/

    Second, run a threat analysis scan on the machine:

    How to run the Threat Analysis Scan in Symantec Help (SymHelp)

    http://www.symantec.com/docs/TECH215519

    Try the Norton Power Eraser as well:

    https://security.symantec.com/nbrt/npe.aspx

    Also, run a full SEP scan with latest definitions. If you still suspect and issue, use a third party tool to run an additional scan.



  • 3.  RE: virus or not

    Posted Jun 13, 2014 08:51 AM

    Is it csrss.exe?

    Check it

    Client Server Runtime process is a window related file

    http://www.computerhope.com/issues/ch000916.htm



  • 4.  RE: virus or not

    Posted Jun 13, 2014 09:26 AM

    Is cssrs.exe virus?

    Yes,

    ThreatExpert's awareness of the file "cssrs.exe"

    http://www.threatexpert.com/files/cssrs.exe.html



  • 5.  RE: virus or not

    Posted Jun 16, 2014 08:34 AM

    Hi helpneeder,

    Is cssrs.exe virus?

    Any file can be named anything.  It's impossible to make a judgement just based on the file name.

    See if you can find the unique hash of that file (MD5 or SHA) and then it will be possible to answer your question.  Submitting the file to Virustotal or Threatexport will tell you that hash.

    Please do update this thread, when time allows!

    Mick