NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

Tex2000's avatar
Tex2000
Initiate
Jan 23, 2021

Csrss.exe malware

The firmware in my Orbi was updated this morning and now I can't connect to the Internet. I talked to Tech Support who told me I have the csrss.exe malware on my network and Orbi will block Internet access until this is resolved. Any experience with this and identifying where this malware resides and how to remove it?  All the computers are running antivirus. Any idea if non-PC's (phones, tablets) can host this malware?  All of our devices except one are IOS. 

1 Reply

  • > Model: RBR50|Orbi AC3000 Tri-band WiFi Router

     

    RBR50[v1] or RBR50v2?  Look for "Model" on the product label.
    Firmware version?  Connected to what?

    > [...] I talked to Tech Support [...]

     

       Whose?  How, exactly?  Did you do _anything_ other than start at
    http://support.netgear.com/ ?

     

    > [...] who told me I have the csrss.exe malware on my network and Orbi
    > will block Internet access until this is resolved. [...]

     

       Sounds very unlikely to me.

     

    > [...] Any idea if non-PC's (phones, tablets) can host this malware?
    > [...]

     

       A quick Web search (for "csrss.exe") suggests that the real thing is
    a Windows component.

     

          https://www.howtogeek.com/321581/what-is-client-server-runtime-process-csrss.exe-and-why-is-it-running-on-my-pc/

     

    Look for "Tech support scammers"?

     

       A better start might be to visit http://netgear.com/support , put in
    your (actual) model number, and look for Documentation.  Get the User
    Manual.  Read.  Look for the LED descriptions and "Troubleshoot".