Why does CSRSS.EXE overload server and force reboot?

We are experiencing problems with CSRSS.EXE process in Terminal Services. Occasionally it gets hung up (until CPU is 100% used), and there's no way to kill it. We then have to reboot the affected server. Why is it behaving like this? We've got Win2k Advanced Server with Terminal Services SP2.
It's possible that you have the Melare virus. See this McAfee Web page for more information. The virus runs as CSRSS.EXE and can take up 100% of processor cycles. The true CSRSS.EXE is the Win32 subsystem.
This was first published in August 2003

Dig deeper on Network intrusion detection and prevention and malware removal



Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.



Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: