fix this register
key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
value: explorer.exe
I don’t know why csrcs.exe appeared here, but I know how to fix it. 
October 30, 2008
csrcs.exe not found pop up when boot
2 Comments »
RSS feed for comments on this post. TrackBack URI
I found out that ‘csrcs.exe’ is a Trojan W32.Spybot-EI. I saw it was a process in Task Manager but couldn’t find it in any search. However, I got rid of it like this:
Go to Task Manager and see if there’s a ‘csrcs.exe’ process. If so, end that process. (Don’t end any other processes like the csrss.exe (it’s an essential system file!).
Go to C:/WINDOWS/system32
In the [Tools>Folder Options>View] menu in Windows Explorer (not Internet Explorer), make sure the ‘view hidden files’ is enabled and the ‘Hide Protected Operating System Files’ is unchecked. This is because the CSRCS.EXE (or csrcs.exe) is able to hide itself from searches. If it’s there, delete it.
Also see if theres a ‘explorer.exe csrcs.exe’ delete that also. Don’t delete ‘explorer.exe’ though!
—————-
The file “csrcs.exe” is also known to be created under the following filenames:
%System%\autolfb.exe
%System%\csrcs.exe
%System%\wscrt.exe
%Windir%\systemchk.exe
—————-
Now go to C://Windown/Prefetch and delete:
CSRCS.EXE-17976F63.pf
may look like:
csrcs.exe-17976f63.pf
Comment by Isaac Isaiah — December 4, 2008 @ 11:15 am
Please make sure that you set show hidden and system files in folder option.
to quick check that csrcs.exe exist in your system use this
1. open command line windows. (start menu > run > cmd)
2. cd c:\windows\system32
3. dir/a:h csrcs.exe
this may help you find it.
Another problem i not sure the cause of that. May reprocess to make bluetooth pairing between Notebook and phone again.
Hope that help
Comment by supereka — March 2, 2009 @ 2:06 am