Something csrss.exe related

Hey. I'm currently in safe mode because my computer is acting up in normal mode. My internet connection (cable) was getting sluggish for no apparent reason, and I noticed that I had two csrss.exe processes running, one constatly using some 12% cpu. Also, internet usage % was pretty high although I was doing nothing. In safe mode, only one csrss.exe is running, and my connection works fine.

I have Norton Antivirus. After these problems had began, NAV started crashing. It told me to uninstall it, which I did, and now it crashes during reinstall. It can't be installed in safe mode, apparently.

I tried adaware but it found nothing.

Does anyone have any idea of what this might be? How can I get rid of it? I've been having problems with the mssys trojan thing, but I doubt it's related to this.

Also, I have a question regarding XP security. What service packs/patches do I need? XP was freshly installed on this machine and the virus issues began before I had time to do any updating. Windows update tells me I need around 50 different security patches. Do I really need them all?

I'd appreciate help of any kind.

Thanks.
Thomas Andersson

 

You should be up-to-date with all critical windows updates offered. There are many security vulnerabilities that need to be patched. With that many updates needed, you could be infected (with a variety of viruses) within minutes of connecting to the internet.

 

I'm looking at my registry... there is only one value in HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Run which starts csrss.exe and it looks like this: "FriendlyType = C:\WINDOWS\system\csrss.exe "

Is that the key which executes the normal windows process or is it related to the trojan? I can't find any help on symantec's website, and even if I did I can't use their software to remove the virus since it won't install.

 

I removed the registry value and now things are working fine - I only have one csrss.exe process running. Still, I'd like to know what this is. I downloaded AVG by grissoft and it didn't find anything. I can't find any virus definition on symantec's website that fits.