Results 1 to 7 of 7

Thread: Strange Files path

  1. #1

    Strange Files path

    hi all

    are these files path normal?

    1-\System Root\system32\smss.exe
    2-\??\c:\Windows\system32\csrss.exe
    3-\??\c:\windows\system logone\winlogon.exe

    thanx
    coolcamel

  2. #2
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897
    Depends, where are you seeing them? What is the context?

  3. #3
    hi Irongeek
    i saw them when i used Advanced Administrative Tools the Process Monitor part.
    i tried to ad the path in ٍStart>Run, but i got wrong path message.

  4. #4
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897
    I downloaded the app you are using to do a scan on my XP box. The part that reads "\System Root\" is not referring directly to the path, but to the location windows is installed in (most likely “Windows” or “WINNT”). Some of the process names seem legit (smss.exe and csrss.exe, do a google search to find their function but they seem to be a part of Windows) but I don’t have the running on my system. What OS are you using? “system logone” seems weird to me and may not be normal, I have no idea what it is.

    Edit:
    Change that, smss.exe and csrss.exe are running on my system, they are most likely fine.

  5. #5
    hi

    its winxp pro
    most of the sites refer to them as "This program is important for the stable and secure running of
    your computer and shoul d not be terminated." here an example
    smss.exe csrss.exe
    when i used the AAtools (Advanced Administrative Tools) to terminate the first one smss.exe
    nothing happen.But with the others (csrss.exe,winlogon.exe) the system restart.

    thnx.
    coolcamel.

  6. #6

    updating

    sorry pipl that i don't took the basic steps 1st.
    i run AD-AwareSEpersonal and its up to date and shows that paths too
    here apart copied from from ad-awarelog
    ======
    Listing running processes
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    #:1 [smss.exe]
    FilePath : \SystemRoot\System32\
    ProcessID : 360
    ThreadCreationTime : 9-23-2004 10:53:19 PM
    BasePriority : Normal


    #:2 [csrss.exe]
    FilePath : \??\C:\WINDOWS\system32\
    ProcessID : 420
    ThreadCreationTime : 9-23-2004 10:53:22 PM
    BasePriority : Normal


    #:3 [winlogon.exe]
    FilePath : \??\C:\WINDOWS\system32\
    ProcessID : 444
    ThreadCreationTime : 9-23-2004 10:53:24 PM
    BasePriority : High
    ===============
    and i run HJT. and am going to post it in Spyware/Adware
    thanks for time

  7. #7
    all normal.. as is your hjt log.. (unless you've disabled things via msconfig prior to running hjt)

    are you having problems or just learning what it's all about ?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •