|
csrss.exe (5.1.2600.0)
ソフトウェアに含まれている |
名前: | Windows XP Home Edition, Deutsch |
免許証: | 商業 |
情報リンク: | http://www.microsoft.com/windowsxp/ |
ファイル細部 |
ファイル道: | C:\WINDOWS\system32\dllcache \ csrss.exe |
ファイル日付: | 2002-08-29 14:00:00 |
版: | 5.1.2600.0 |
ファイルサイズ: | 4.096 バイト |
検査合計及びファイルは切り刻む |
CRC32: | 7567F540 |
MD5: | C113 8540 3DCE 2C9F C292 54DC A980 5ECD |
SHA1: | 0B1B 4B29 8153 60C9 E280 AC1C E03F 9E07 C290 892C |
版資源情報 |
会社名前: | Microsoft Corporation |
ファイル記述: | Client Server Runtime Process |
ファイルオペレーティングシステム: | Windows NT, Windows 2000, Windows XP, Windows 2003 |
ファイル・タイプ: | Application |
ファイル版: | 5.1.2600.0 |
内部名: | CSRSS.Exe |
法的版権: | © Microsoft Corporation. All rights reserved. |
元のファイル名: | CSRSS.Exe |
製品名: | Microsoft® Windows® Operating System |
プロダクト版: | 5.1.2600.0 |
csrss.exe は次のレポートで見つけられた:
|
W32.Dalbug.Worm |
技術的詳細 ...%windir%Smss.exe %windir%Csrss.exe NOTE: %windir% is a variable.... ...This is a non-malicious joke program that is executed by Smss.exe and Csrss.exe once they are running.... ...NOTE: The files Smss.exe and Csrss.exe have the same file names as two system files that reside in the %windir%System32... ...During execution, the Smss.exe and Csrss.exe files keep the service running, and checking every three seconds to make sure... ... %windir%smss.exe Csrss.exe %windir%csrss.exe... ...process if it is activated. Smss.exe and Csrss.exe also try to create the these registry values, however if they detect that Regedit.exe... ...(instead of creating them). Finally, Smss.exe and Csrss.exe will also copy the worm to the following files:... 源: http://securityresponse.symantec.com/avcenter/venc/data/w32.dalbug.worm.html |
Trojan.Webus |
技術的詳細 ...Copies itself as %System%csrss.exe. Note: %System% is a variable... ..."ccpApps" = "%System%csrss.exe" ".WMAudio" = "%System%csrss.exe"... ..."Prog" = "%System%csrss.exe" "FiendlyType" =... ...".TEXTCONV" = "%System%csrss.exe" "Microsoft SourceSafe"... ..."RegDone Ex" = "%System%csrss.exe" "BuildLabs" = "%System%csrss.exe"... 取り外しの指示 ..."ccpApps" = "%System%csrss.exe" ".WMAudio" = "%System%csrss.exe"... ..."Prog" = "%System%csrss.exe" "FiendlyType" =... ...".TEXTCONV" = "%System%csrss.exe" "Microsoft SourceSafe"... ..."RegDone Ex" = "%System%csrss.exe" "BuildLabs" = "%System%csrss.exe"... 源: http://securityresponse.symantec.com/avcenter/venc/data/trojan.webus.html |
Backdoor.Hale |
技術的詳細 ...A harmless text file. Csrss.exe: a Backdoor Trojan Horse detected... ..."NTDLM" = "c:winntsystem32qossrvcsrss.exe" to the registry key:... ...NTS (Secure.exe) NTP (Csrss.exe) NOTE:... ...C:WinntSystem32dhcp: Csrsslsrms.dll: A text file, not a dll.... ...C:WinntSystem32
estore: Csrss.exe: Detected as Backdoor.Padmin.... 取り外しの指示 ..."NTDLM"="c:winntsystem32qossrvcsrss.exe" Navigate to the key:... 源: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.hale.html |
Spyware.LoverSpy |
技術的詳細 ...%Windir%Rec_pwd.html %System%ShellExtCsrss.exe Notes:... 取り外しの指示 ...%Windir%Rec_pwd.html %System%ShellExtCsrss.exe Write-up by:... 源: http://securityresponse.symantec.com/avcenter/venc/data/spyware.loverspy.html |
W32.Ahlem.A@mm |
技術的詳細 ...Create a copy of the worm as %Windir%Csrss.exe. NOTE: %Windir% is a variable.... ..."SYSTEMSars32"="%Windir%csrss.exe" to the registry key:... 取り外しの指示 ..."SYSTEMSars32"="%windir%csrss.exe" Exit the Registry Editor.... 源: http://securityresponse.symantec.com/avcenter/venc/data/w32.ahlem.a@mm.html |
Backdoor.Stanex |
技術的詳細 ...%Windir%systemSysTray.exe. %Windir%TEMPCSRSS.exe %Windir%systemCSRSS.exe... ...Windows 95/98/Me: %Windir%system32CSRSS.exe. On Windows 95/98/Me, the Trojan... 源: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.stanex.html |
Trojan.Gutta |
技術的詳細 ...Copies itself as C:WindowsCSRSS.exe. This path is hard-coded and... ..."rundll32" = "windowscsrss.exe" in the registry key:... 取り外しの指示 ..."rundll32"="C:WindowsCSRSS.exe" Exit the Registry Editor.... 源: http://securityresponse.symantec.com/avcenter/venc/data/trojan.gutta.html |
W32.Sndog@mm |
技術的詳細 ...Copies itself to %windir%csrss.exe as a hidden file. Note: %Windir% is a variable... ..."Shockwave" = "%windir%csrss.exe" to the registry key:... 取り外しの指示 ..."Shockwave" = "%windir%csrss.exe" Exit the Registry Editor.... 源: http://securityresponse.symantec.com/avcenter/venc/data/w32.sndog@mm.html |
W32.Nimda.E@mm |
技術的詳細 ...The worm now copies itself to the \%Windows% folder as Csrss.exe instead of Mmc.exe NOTE: %Windows% is a variable.... 源: http://securityresponse.symantec.com/avcenter/venc/data/w32.nimda.e@mm.html |
Backdoor.Sokacaps |
技術的詳細 ...Creates the files: C:windowsmediacsrss.exe C:windowsmediacsrss.uzy... ..."RegWrite"="c:windowsmediacsrss.exe" to the registry key:... 取り外しの指示 ...Scroll through the list and look for Csrss.uzy. If you find the file, click... ..."RegWrite"="c:windowsmediacsrss.exe" Exit the Registry Editor.... ...... 源: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sokacaps.html |
|
|