Strange Files path
Results 1 to 7 of 7

Thread: Strange Files path

  1. #1
    Member
    Join Date
    May 2003
    Posts
    83

    Strange Files path

    hi all

    are these files path normal?

    1-\System Root\system32\smss.exe
    2-\??\c:\Windows\system32\csrss.exe
    3-\??\c:\windows\system logone\winlogon.exe

    thanx
    coolcamel

  2. #2
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897
    Depends, where are you seeing them? What is the context?

  3. #3
    Member
    Join Date
    May 2003
    Posts
    83
    hi Irongeek
    i saw them when i used Advanced Administrative Tools the Process Monitor part.
    i tried to ad the path in ٍStart>Run, but i got wrong path message.

  4. #4
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897
    I downloaded the app you are using to do a scan on my XP box. The part that reads "\System Root\" is not referring directly to the path, but to the location windows is installed in (most likely “Windows” or “WINNT”). Some of the process names seem legit (smss.exe and csrss.exe, do a google search to find their function but they seem to be a part of Windows) but I don’t have the running on my system. What OS are you using? “system logone” seems weird to me and may not be normal, I have no idea what it is.

    Edit:
    Change that, smss.exe and csrss.exe are running on my system, they are most likely fine.

  5. #5
    Member
    Join Date
    May 2003
    Posts
    83
    hi

    its winxp pro
    most of the sites refer to them as "This program is important for the stable and secure running of
    your computer and shoul d not be terminated." here an example
    smss.exe csrss.exe
    when i used the AAtools (Advanced Administrative Tools) to terminate the first one smss.exe
    nothing happen.But with the others (csrss.exe,winlogon.exe) the system restart.

    thnx.
    coolcamel.

  6. #6
    Member
    Join Date
    May 2003
    Posts
    83

    updating

    sorry pipl that i don't took the basic steps 1st.
    i run AD-AwareSEpersonal and its up to date and shows that paths too
    here apart copied from from ad-awarelog
    ======
    Listing running processes
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    #:1 [smss.exe]
    FilePath : \SystemRoot\System32\
    ProcessID : 360
    ThreadCreationTime : 9-23-2004 10:53:19 PM
    BasePriority : Normal


    #:2 [csrss.exe]
    FilePath : \??\C:\WINDOWS\system32\
    ProcessID : 420
    ThreadCreationTime : 9-23-2004 10:53:22 PM
    BasePriority : Normal


    #:3 [winlogon.exe]
    FilePath : \??\C:\WINDOWS\system32\
    ProcessID : 444
    ThreadCreationTime : 9-23-2004 10:53:24 PM
    BasePriority : High
    ===============
    and i run HJT. and am going to post it in Spyware/Adware
    thanks for time

  7. #7
    Member
    Join Date
    Jul 2004
    Posts
    70
    all normal.. as is your hjt log.. (unless you've disabled things via msconfig prior to running hjt)

    are you having problems or just learning what it's all about ?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides