Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


PWSteal.Trojan & csrsss.exe

  • Please log in to reply
1 reply to this topic

#1 mcferr


  • Members
  • 2 posts
  • Local time:08:27 PM

Posted 16 May 2005 - 01:07 AM

Can u help?
Norton Antivirus has found PWSteal.Trojan and am getting a message that Norton has deleted it. But apparently, it keeps coming back because Norton messages number in the hundreds..!
Now have another msg from Norton saying unable to repair file. Filename is csrsss.exe (also connected to PWSteal.Trojan). I can see the file in System32 folder, but cannot delete it. I've run regedit and it does not appear there.
I am so confused! I'm also concerned that my system is infected with some password steal problem...
I've run several system scans, have also run in Safe Mode, have disabled the System Restore function in XP, all to no avail.
Please, please help! Thanks so much!

BC AdBot (Login to Remove)


#2 stidyup


  • Members
  • 641 posts
  • Gender:Male
  • Local time:08:27 PM

Posted 16 May 2005 - 05:56 AM

Symantec Removal instructions


Try downloading a couple of virus scanners via rescueme and see it that helps to clean up the infection, if possible run the scanners in safe mode

If you still can't fix the problem run HijackThis and post the log in this section of the forum a expert will look at your log and help you clean up your PC.

Edited by stidyup, 16 May 2005 - 05:57 AM.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users