还是不行啊,什么Csrss程序啊

happyeveryday

新手上路
注册
2003-03-30
消息
459
荣誉分数
0
声望点数
0
我的机器老是出现:
Csrss
该程序执行了非法操作,即将关闭.
其他程序还能用,就是不能正常关机,得硬关.
详细资料是:
CSRSS 在 017f:bff88698 的模块
KERNEL32.DLL 中导致无效页错误。
Registers:
EAX=c0030974 CS=017f EIP=bff88698 E***S=00010212
EBX=0064ffec SS=0187 ESP=0054fe98 EBP=00550010
ECX=00000000 DS=0187 ESI=00000000 FS=46cf
EDX=bff768d5 ES=0187 EDI=bff79060 GS=0000
Bytes at CS:EIP:
53 56 57 8b 75 10 8b 38 33 db 85 f6 75 2d 8d b5
Stack dump:

杀毒也查了,没问题啊.:confused:
到底怎么回事啊?我的笔记本是98系统.
那位大虾帮忙找找问题.多谢多谢
 
怀疑是病毒,NIMDA的一个变种生成的文件就是CSRSS.EXE,不过98下好像不会叫这个名字。 另外感染了某些病毒就会出现“KERNEL32.DLL 中导致无效页错误” 你多换几个杀毒软件试试,如果还是找不到,劝你重装系统吧
 
去download一个叫

Process Explorer

的程序去查一下是哪一个程序在捣乱。
 
There is also another way to see if it is the "authentic" CSRSS.EXE. [Note: I am using SP4 with a whole load of other patches and updates].

If you get the Task Manager up [CTRL+SHIFT+ESC etc.], and choose Processes, then find CSRSS.EXE. If you then select the process (CSRSS.EXE) and choose End Process (Right Click menu or button at bottom of frame), you _should_ be presented with a dialog box that states that "This [CSRSS.EXE] is a critical system process. Task Manager cannot end this process." If you are presented with a box that asks whether you _want_ to end the process, it is up to you what you do (I would recommend choosing No, due to the above comments on the role of CSRSS.EXE). If there is more than one CSRSS.EXE, then virus activity could be a possibility, and if one presents the dialog box as above when you attempt to close it, then the other one could be the virus.

solution is here:

http://securityresponse.symantec.com/avcenter/venc/data/w32.nimda.e@mm.html

If it is not virus, the problem is related to the storage such as hardrive and memory.
 
后退
顶部