CSRSS.EXE : is this supposed to happen?

[Mr. NoOne]

I've been receiving messenger pop-ups lately, not a lot, maybe one or two every day.

Weird thing is: I uninstalled Microsoft Messenger, and even erase the Messenger folder located in Program Files.

Last time I got the Messenger message I run task manager and identified the task as csrss.exe
I read that csrss is part of windows, but there's no mention as to it being responsible of handling Messenger popups.

Any thoughts?

Oh...I have XP Pro

Thanx...

http://www.liutilities.com/products/...library/csrss/


http://www.symantec.com/avcenter/ven...lbug.worm.html

might want to check it out

[Beemer]

Search page hijacker, redirecting to http://www.search-aide.com/. Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling

[Mr. NoOne]

I read in Norton board that when it's a trojan the copy resides in the windows folder, not in system32...but the one I have is in system32....so it might be the real one. I also run Spybot and McAfee antivirus and they didn't find anything.....

[Mr. NoOne]

It's still happening......I've noticed it is always the same message though! It also seems to happen whenever I'm online for over an hour. But only one time per session....

Next time I'll make note of the message....

[someone16]

Have you tried disabling the service?

www.stopmessengerspam.com

[Mr. NoOne]

Hey, thanks to someone16 !!

This is not the MSN Messenger, I did some digging-up and found a way to stop it....very easy!!!

just go here: http://home.wangjianshuo.com/archive..._send_spam.htm

Thanks again!!!