I just booted up my Samsung N120 netbook (with Windows XP Home SP3) and a dialog box came up with a command prompt window behind it. The dialog box is titled
16 bit MS-DOS Subsystem and the message is as follows:
C:\DOCUME~1\SAMSUNG\csrss.exe The NTVDM CPU has encountered an illegal instruction. CS:0544 IP:0117 OP:63 00 64 00 34 Choose 'Close' to terminate the application.
This only started on my most recent boot-up. One thing to note is that when I downloaded the Dropbox installer and opened it up, Panda Cloud Antivirus detected a suspicious file, which was
csrss.exe and "neutralized it." However, an actual virus or trojan was not detected immediately before the file was detected and neutralized.
Just under two weeks ago, a trojan and two viruses were detected for some odd reason. (I only went to website I knew and I do not torrent or browse adult sites.) Anyhow, the two viruses came up in temporary files and the trojan was "neutralized."
Anyways, the main question is: How can I repair the csrss.exe file such that Windows XP starts up properly?
A screenshot could be posted upon request. Thanks in advance!
EDIT 1: Well... it appears that Panda Cloud actually took the beating. AVG detected it and Panda has got to go.
EDIT2: After doing a search for "csrss" the only entry that came up was the one in C:\WINDOWS\system32. I've run
sfc /scannow but my XP disc doesn't work with it -- UPDATE: I just realized that I'm using an XP Pro SP3 disc when my netbook was preinstalled with XP Home SP3... and I don't have the original installation disc, clearly -- so I can't get the extra DLLs for the scan...
EDIT3: I just used Google to search up anything I could about this issue and this link suggests that I do some registry modifications... does this actually fix
csrss.exe or does it just prevent it from starting in the first place?
EDIT4: I read the page which is linked above and have seemed to find an entry in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon. There is a String in there called
Taskman whose value is
C:\Documents and Settings\SAMSUNG\csrss.exe. I am going to see what the actual value is supposed to be. UPDATE: I referenced a clean machine to see what the proper value of Taskman is supposed to be. It turns out
Taskman has the same value on another machine. I'm somewhat stumped.
SOLUTION POSTED IN MY ANSWER!