Repeating Error Notice Error in Winsock Module

Hi,
I have a new problem that started yesterday. I keep getting the following message which pops up constantly. I tried a few things but haven't been able to stop it. It never stops. It's nerve wracking.
"Error in Winsock Module-Connection Structure Is Unknown. Possible Reason: Your Firewall and/or anti virus application block the System File Services.exe
Make sure that CSRSS.exe can connect to the internet. "
It does it even after I deleted all anti virus and adware programs. I don't know if I have Firewall protection.
The error message showed 3 times while I've typed this post
Any help would be appreciated.
Thanks!
Larry Opheim

 

opheim1-- I am not sure csrss.exe is a legitimate file in Win98. So quite possibly a virus or a trojan.
Do a Find for csrss.exe. In what folder is it? C:\Windows\System32 is OK. If in other folders, then likely you do have a virus.
http://www.neuber.com/taskmanager/process/csrss.exe.html
Same for System File Services.exe
http://www.neuber.com/taskmanager/process/services.exe.html

Do you run an antivirus program? You should. You can run an online scan using Housecall
http://housecall.trendmicro.com/housecall/start_corp.asp
NortonAV suggests several possible virus infections
http://www.google.com/search?source...=GGLD,GGLD:2004-31,GGLD:en&q=CSRSS.exe++win98

A firewall is a program which helps you control traffic into and out of your PC. It is very desireable to have one. It is possible that message indicates you do have a firewall and it is blocking csrss.exe. But usually, the message would be identified as coming from the firewall program. The one you quote seems to come from a thirdparty.
ZoneAlarm is excellent.
http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp
How do you know if you have a firewall? I am not sure there is a real quick method. If you never see any messages asking you if you will allow program.xxx to access the Internet, or if you have no icon for a firewall program in your System Tray, or no indication of a Firewall program checked in the Start|Run|type msconfig|OK|Startup tab, then probably you do not.

 

Unrelenting error message-Error in Winsock

Hi Welshjim,
Thanks for responding.
In checking Find-csrrs seems to be a legitimate file. It is listed C: Windows Connection Wizard status. Within that file I found both services.exe and csrrs.exe. Nothing happened when I tried to open them. I tried to use zip, but that only established two more items in the list
I do run an anti virus program ( AVG).
Recently, because of another problem of freezing-delay-stall in opening some programs, I ran many anti virus , and anti ad programs. So from that standpoint it should be very clean. Maybe in cleaning, this current problem surfaced. I don't have a firewall at the present time, and thats another story.
Somehow, I have to stop the message from poping up along with it's agrevating sound or beep. I can't do anything on the internet or off the internet without it ocurring. Any further help would be appreciated.
Thanks!
Larry Opheim
PS- I even did a Operating Systems Recovery CD, but no help.

 

opheim1--See http://www.windowsbbs.com/showthread.php?t=44284
Of course you may have installed Services Control Manager although this is a WinNT program.

Did you omit a period there? Or is the reference to Connection Wizard status a typing error?
If you meant csrss.exe is listed C:\Windows , then that is where it should not be. And you have a virus or trojan.

 

Both of those filenames ring alarm bells with me since you are running 98.
98 does not come with it's own firewall, but something seems to be stopping it. That or it is a fake error message put out by the virus that you have.

 

Repeating Error Message It was a virus.

Hi,
When I found those two files and tried to open them, nothing would happen, so I caused them to become zipped. When I tried to unzip them, A message from AVG showed up saying they caught a virus. It happened in both cases, and they were eliminated. Didn't seem to cure the problem at the time, but when I booted up this morning, no more error messages appeared.
Thanks for the assistance, and a bit of luck. Should I go back and delete those two files plus the two zipped files?
Larry Opheim

 

Virus Decected

The virus was in service.exe and was 1-worm/Sober.P
thanks for your help.
Larry Opheim

 

opheim1--Just removing those files may not remove the worm. (See P.S. below.)
You should run an Antivirus program that will remove all of it. I assume you have an AV on your PC. Update it with latest virus definitions and scan.
Or, if you have no AV program, you can run an online scan such as HouseCall
http://housecall.trendmicro.com/housecall/start_corp.asp
AVG "claims" it definitely is capable of deleting this worm. So if you do not already have an antivirus program, you might consider AVG. They offer a 30 day free trial
http://www.grisoft.com/doc/38/lng/us/tpl/tpl01


P.S.--the virus adds the following to the system Registry, which means it may reinfect your PC every time you reboot:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ Run "_WinStart" = C:\WINDOWS\Connection Wizard\Status\services.exe


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ Run " WinStart" = C:\WINDOWS\Connection Wizard\Status\services.exe

 

Virus Decected

Thanks Jim-I have AVG as my anti virus program and it detected the service.exe and csrrs.exe virus's and has deleted them. Would there be anything more to do?
Thanks again.
Larry Opheim

 

opheim1--Sounds like you should be OK. Good luck.
I assume AVG has settings to have it start at Boot and also automatically monitor for virus infections. If not, look for those settings and activate them. You want to avoid such malware in the future.