I never noticed anything before I thought of defragmenting my computer it popped me a message saying that defrag.mcs dosen't exist cannot be opened or was created by later versions of mmc or you don't have the right and permissions to open it....." After some time I logged normally into my computer but surprisingly my desktop never appeared, hence I launched the task manager by pressing Ctrl + Alt + Del and started explorer.exe manually.
I started invistigating the problem when suddenly a message titled csrss.exe popped up telling me that an error has occured and it's sorry for the inconvinience and had only a close button.....
I searched C:\ drive for csrss.exe and found the following:
csrss.exe 124kb in C:\WINDOWS\system
csrss.exe 124kb in C:\WINDOWs\oobe
csrss.exe 6kb in C:\WINDOWS\system32
csrss.exe 6kb in C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e
CSRSS.EXE-254821BE.pf in C:\WINDOWS\Prefetch
Out of which the first 2 were hidden and modified on 29/11/2008
I later installed SP3 thinking that this will solve my problem but it didn't so I uninstalled it.
However this made the explorer start normally after restart.
Moreover I later found that I cannot launch Computer Management from the Administrative Tools in Control Panel
it told me invalid {.....} so I went to properties and clicked find target in took me to C:\Documents and Settings\All Users\Start Menu instead of system32 and showed me a file named lnkinit32.exe also 124kb and hidden also modified on 29\11\2008.
Some files that I found strange and has matching parameters (124kb, hidden, and modified on 29/11/2008) are:
taskman.exe 124kb in C:\WINDOWS\system
camon.exe 124kb in C:\WINDOWS\system32
winhlp.exe 124kb in C:\WINDOWS\system32
winlog.exe 124kb in C:\WINDOWS\system32
&
autoexec.sol 1kb in C:\ which wasn't hidden
I have no idea as to what kind of virus is this as I tried to delete all the files listed above but they come again every time I restart. Hence Please Help!
Thanks in advance.....
Yours Sincerely,
Momen