The CSRSS virus uses the filename of a Windows system process to avoid detection. Remove the CSRSS.exe executable file if you find it in a folder other than the Windows system 32 folder.
If you notice that your Windows PC seems sluggish or you see numerous runaway processes, you could be infected with the CSRSS virus, officially called W32/Nettsky.ab@MMt. What makes this virus ...
It maintains the predicted directory structure of the OS/2 system, but the files themselves comprise the basic NT system: ...