Virus Alert – CSSRS.EXE

Cssrs.exe will be found in your Windows\System or System32 folder. You may see it described as "Display Drivers". This file installs as part of the W32/Agobot-GB worm. This worm spreads across weakly protected networks and P2P file sharing services. It can open a TCP port to listen for commands from a remote user. It can also steal CD Keys for popular game programs and can terminate antivirus and firewall programs.

We'd recommend removing these file using WinPatrol. First, kill them under Active Tasks then remove it from your Startup Programs. If running WinPatrol 8.x or later, right click each file then select "Delete file on Reboot". We'd also recommend a full system scan with an up to date antivirus program. Please do not delete or remove a file called "csrss.exe" as this is a valid Windows file.

Additional background information can be found at http://www.sophos.com/virusinfo/analyses/w32agobotgb.html.

Virus

Remove