I am fixing a friends computer and it keeps saying that it can't load
c:\WINDOWS\system32\sqrmgyxg\csrss.exe
It won't stop saying this. Also I can't Norton Internet Security to install
on it, and when I try to go to their site, it says can't find server, which
is suspicious because it goes everywhere else. It is a Dell Inspiron 600m,
with WinXP Home.

admiral wrote:

> I am fixing a friends computer and it keeps saying that it can't load
> c:\WINDOWS\system32\sqrmgyxg\csrss.exe
> It won't stop saying this. Also I can't Norton Internet Security to install
> on it, and when I try to go to their site, it says can't find server, which
> is suspicious because it goes everywhere else. It is a Dell Inspiron 600m,
> with WinXP Home.

The name of the folder, sqrmgyxg, under system32 is not a valid windows
folder. That and the fact that you can't install the Norton security
program - suggest it's a form of malware.

http://www.liutilities.com/products/...library/csrss/

Make sure you have an updated AV with current definitions and scan in
safe mode.

You can also try Trend Micro's sysclean in safe mode:
Trend Micro Sysclean
http://www.trendmicro.com/download/dcs.asp

Trend Micro Signature File
http://www.trendmicro.com/download/pattern.asp

--
Rock
MS MVP Windows - Shell/User

admiral wrote:
> I am fixing a friends computer and it keeps saying that it can't load
> c:\WINDOWS\system32\sqrmgyxg\csrss.exe
> It won't stop saying this. Also I can't Norton Internet Security to install
> on it, and when I try to go to their site, it says can't find server, which
> is suspicious because it goes everywhere else. It is a Dell Inspiron 600m,
> with WinXP Home.

This may sound weird and you friend may lose some features, but copy
your c:\WINDOWS\system32\sqrmgyxg\csrss.exe on a flash drive and paste
it in your friends computer.

--
I beg your pardon? Do you dare cost me in this manner? Am I the object
of this brave novacure? Then kindly reply to my post if you may feel
wanting, which you will commence after you, thought over, the message.
Thank you for your magnificent and dignifing answer in proper advance.

What? And infect his friend's machine as well? It's a virus, plain and
simple. The system should be booted to safe mode where both the folder
sqrmgyxg and the registry run string that loads csrss.exe in it should be
deleted.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

"Joe" <eddyyousef@gmail.com> wrote in message
news:etStf.15726$g_6.9436@tornado.texas.rr.com...
> admiral wrote:
>> I am fixing a friends computer and it keeps saying that it can't load
>> c:\WINDOWS\system32\sqrmgyxg\csrss.exe It won't stop saying this. Also I
>> can't Norton Internet Security to install on it, and when I try to go to
>> their site, it says can't find server, which is suspicious because it
>> goes everywhere else. It is a Dell Inspiron 600m, with WinXP Home.
>
> This may sound weird and you friend may lose some features, but copy your
> c:\WINDOWS\system32\sqrmgyxg\csrss.exe on a flash drive and paste it in
> your friends computer.
>
> --
> I beg your pardon? Do you dare cost me in this manner? Am I the object of
> this brave novacure? Then kindly reply to my post if you may feel wanting,
> which you will commence after you, thought over, the message. Thank you
> for your magnificent and dignifing answer in proper advance.