ããå
çä¸csrss.exeè¿ç¨ç说æï¼
ããè¿ç¨æ件ï¼csrss or csrss.exe
ããè¿ç¨å称ï¼Client/Server Runtime Server Subsystem
ããè¿ç¨ç±»å«ï¼ç³»ç»è¿ç¨
ããè¿ç¨æè¿°ï¼å®¢æ·ç«¯æå¡åç³»ç»ï¼ç¨ä»¥æ§å¶Windowså¾å½¢ç¸å
³åç³»ç»ã
ããcsrss.exeç
æ¯æç
æ¯åç±»å±äºè è«ç
æ¯ï¼å®ä¼ä»¥csrss.exe为æ件åæ·è´èªå·±çå¯æ¬æ件å°Windowsç®å½ä¸ï¼å¹¶æ·»å ä¸é¢ç注å表é®å¼ï¼ä»¥ä¾¿æ¯æ¬¡Windowså¯å¨è è«ä¼èªå¨è¿è¡ï¼HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SystemSARS32, with value "C:\WINNT\csrss.EXE"ã
ãã好äºï¼äºè§£å®å®çèæ¯ï¼è¯¥æ¥å¯¹ä»è¿ä¸ªå°ä¸è¥¿äº
ããcsrss.exeçæ¸
é¤æ¹æ³ä¸ï¼
ãã第ä¸æ¥ï¼ç»æç
æ¯è¿ç¨csrss.exeï¼æ³¨ææ¯Windows\csrss.exeèä¸æ¯Windows\System32\csrss.exeã
ãã第äºæ¥ï¼æ¾å°ä»¥ä¸æ件并å é¤(è¿äºæ件并éé½æï¼å¯è½åªæå 个ï¼ä½åªè¦æï¼å°±å !)
ãã>> System\dxdiag.com
ãã>> System\finder.com
ãã>> System\msconfig.com
ãã>> C:\\autorun.inf
ãã>> Programfiles\Internet Explorer\iexplore.com
ãã>> Programfiles\Common Files\iexplore.pif
ãã>> Windows\1.com
ãã>> Windows\csrss.exe
ãã>> Windows\ExERoute.exe
ãã>> Windows\explorer1.com
ãã>> Windows\finder.com
ãã>> Windows\Debug\DebugProgram.exe
ãã>> system\command.pif
ãã>> System\regedit.com
ãã>> System\rundll32.com
ããåæ¶æ¥çâå¼å§â---âç¨åºâä¸æ¯å¦æ以ä¸è¿æ¥å®å
¨æµè¯.lnkã计ç®æºå®å
¨ä¸å¿.lnkãç³»ç»ä¿¡æ¯ç®¡çå¨.inkï¼å !
ãã第ä¸æ¥ï¼æå¼æ³¨å表ç¼è¾å¨ï¼
ãã(1)åå«æ¥æ¾âfinder.comâãârundll32.comâãâcommand.pifâçä¿¡æ¯ï¼ææ¾å°å¼ä¸çâfinder.comâãârundll32.comâãâcommand.pifâæ¹ä¸ºârundll32.exeâ
ãã(2)æ¥æ¾âiexplore.comâçä¿¡æ¯ï¼ææ¾å°å¼ä¸çâiexplore.comâæ¹ä¸ºâiexplore.exeâ;æ¥æ¾âiexplore.pifâçä¿¡æ¯ï¼ææ¾å°å¼ä¸ç±»ä¼¼â%ProgramFiles%\\Common Files\\iexplore.pifâçä¿¡æ¯æ¹ä¸ºç±»ä¼¼â%ProgramFiles%\\Internet Explorer\\iexplore.exeâ
ãã(3)æ¥æ¾âexplorer1.comâçä¿¡æ¯ï¼ææ¾å°å¼ä¸çâexplorer1.comâæ¹ä¸ºâexplorer.exeâ
ãã第åæ¥ï¼å é¤ç
æ¯å¯å¨é¡¹ï¼
ãã[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run]
ãã"Torjan Program"="%Windows%\\CSRSS.exe"
ãã[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\RunServices]
ãã"Torjan Program"="%Windows%\\CSRSS.exe"
ããå¨[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon]
ããæ"Shell"="Explorer.exe 1"æ¢å¤ä¸º"Shell"="Explorer.exe"
ããå é¤[HKEY_CLASSES_ROOT\\Applications\\iexplore.com]项å[HKEY_CLASSES_ROOT\\winfiles]项
ãã第äºæ¥ï¼éå¯è®¡ç®æºï¼å®æã
ããcsrss.exeçæ¸
é¤æ¹æ³äºï¼
ããçµèé½æWINRARï¼æ¾å°Windows\csrss.exeï¼å¨csrss.exeä¸å³å»é¼ æ ï¼éæ©âæ·»å å°å缩æ件âï¼è¿æ¶WINRARä¼åºç°æ示çªâå缩æ件åååæ°âï¼éæ©âå缩åå é¤æºæ件âï¼ç¡®å®ï¼çæå缩æ件ï¼è¿æ¶åç°csrss.exe没äºï¼ä¸è¦é«å
´å¤ªæ©ï¼ç°å¨åªæ¯æå²å¨æåé¢çç
æ¯ä½å æäºï¼èé£äºå¹åæ使è
们è¿å¨éé¥èªå¨ãè¿è¡æ³¨å表å»ç(è¦è±æåççï¼èååè¯é½å¾ç®å)ï¼éæ©æ«æä¿®å¤ææé误ï¼å¾
ä¿®å¤å®æåï¼éæ°å¯å¨è®¡ç®æºï¼csrss.exeç
æ¯å°±è¢«å½»åºèµ¶åºçµèäºã
ããæ»ç»ï¼ç¬¬ä¸ä¸ªæ¹æ³æ¯å¤§ä¼æ¹æ³ï¼ä¹æ¯æææ¯è¾ç¨³å®çæ¹æ³ï¼ç¬¬äºä¸ªæ¹æ³è½è§£å³æè¿ä¸ªç
æ¯ï¼ä½è¿ä¸è½ä¿è¯å¯¹ä»¥åçåç§ä¸å®ææãå½ç¶ï¼è¿é说çæ¯æå¨æ¸
æ¥æ¹æ³ï¼å¯¹äºè®¸å¤è®¡ç®æºåå¦è
æ¥è¯´è¿æ¯ç¨ææ¯è½¯ä»¶æ¥çæ¯è¾æ¹ä¾¿ï¼åæ¶ä¹å¼ºç建议å³ä½¿æå¨æ¸
é¤äºç
æ¯ï¼ä¹è¦ç¨ææ¯è½¯ä»¶å½»åºæ¥ä¸éï¼ä»¥é²ä¸ä¸ã
温馨提示:内容为网友见解,仅供参考