Data Send is more than received in network connection

Problems:
Data Send is  more than received  in network conncetion
services.exe is making more SMTP connections

Fix:
check netstat  -bv to see the binaries which has established connections on network along with their ports. If you find anything suspicious kill the process(delete the exe if it is virus)
Use online virus scanners
I recommed running Combofix.exe.
Check this link to download and use Combofix
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Virus Problems - csrsc.exe could not find the file

Problem:
Keep getting message "csrsc.exe could not find the file" when  windows boots


Solution:
C:\WINNT\system32\csrcs.exe

The error occurs because your  Antivirus has cleared your Virus program but did not remove the entries from the registries.(Use removing virus, use Combofix)

Follow these steps to stop the above message :
1) Backup the registry
2) Check out the following path for the entries of csrcs.exe and delete the entries containing csrcs.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\RunOnce
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Runonce

3) Check out this entry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\

Here you will find a Key with the name "Shell" Check whether the value of this key is something like "explorer.exe csrcs.exe" If it is so then u need to modify the value by removing "csrcs.exe" alone. Note donot delete the "explorer.exe" or delete the entire key

4) Restart your system

This will solve ur problem.

Same time do at your own risk.

Remove Generic Rootkit.g!rootkit virus from system

Symtoms:
This Rootkit is a very dangerous virus known for keylogger. so it can send your details and passwords without your knowledge.
Rootkit will be downloaded without you knowledge when you visit some less sucure sites. Antivirus like McAfee or IObit security are able to identify and clean but its not permanent.
Antivirus reports Rootkit files as
C:\WINNT\system32\drivers\synsenddrv.sys
and
C:\WINNT\system32\drivers\str.sys

Solution
Download and Install "Rootkit_Detective.exe" from http://download.cnet.com/
Run Rootkit_Detective.exe and after scanning it will ask you to reboot the system. Once you reboot it renames the virus files and solves the problem.


If you find this information helpful, please click the ads below