Hello Yuiyao, welcome to the Microsoft Community!
According to your feedback, you are experiencing a blue screen issue
Analyzing your blue screen logs, we know that
Your blue screen is caused by a win32kbase.sys error via csrss.exe.
You can try to repair your system:
- Search for CMD, find the command prompt and select Run as administrator.
- Enter the following commands one by one, making sure to execute the next command only after the previous one completes:
DISM /Online /Cleanup-Image /ScanHealth
DISM /Online /Cleanup-Image /CheckHealth
DISM /Online /Cleanup-Image /RestoreHealth
SFC /Scannow
- After the scan is complete, you can check the scan information to see if any problems were detected and fixed.
Also csrss.exe is a virus, you can try the following methods to remove it
Step 1, end the virus process csrss.exe, note that it is Windowscsrss.exe not WindowsSystem32csrss.exe.
Step 2, find the following files and delete them. (Not all of these files are there, there may only be a few, but as long as they are there, delete them!)
Code:
>> Systemdxdiag.com
>> Systemfinder.com
>> Systemmsconfig.com
>> C:autorun.inf
>> ProgramfilesInternet Exploreriexplore.com
>> ProgramfilesCommon Filesiexplore.pif
>> Windows.com
>> Windowscsrss.exe
>> WindowsExERoute.exe
>> Windowsexplorer1.com
>> Windowsfinder.com
>> WindowsDebugDebugProgram.exe
>> systemcommand.pif
>> Systemregedit.
>> Systemrundll32.com
At the same time, check "Start" --- "Programs" for the following connection security test.lnk, computer security center.lnk, system information manager.ink, delete them if there are any!
Step 3, open the registry editor:
(1) Find the information of "finder.com", "rundll32.com", "command.pif" respectively, and put the found value of "finder.com", "rundll32.com", "command.pif" to " rundll32.exe";
(2) Find the information of "iexplore.com", change "iexplore.com" to "iexplore.exe" in the found value. "; look for the information of "iexplore.pif", change the information of "%ProgramFiles%Common Filesiexplore.pif" to "%ProgramFiles%Common Filesiexplore.pif" in the found value. information to something like "%ProgramFiles%Internet Exploreriexplore.exe";
(3) Look for the information of "explorer1.com", and change "explorer1.com" to "explorer.exe" in the found value. ";
Step 4: Remove the virus startup items:
Code:
[HKEL_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Torjan Program"="%Windows%CSRSS.exe"
In [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon].
Restore "Shell"="Explorer.exe 1" to "Shell"="Explorer.exe".
Delete the entries [HKEY_CLASSES_ROOT\Applicationsiexplore.com] and [HKEY_CLASSES_ROOT\winfiles].
Step 5: Restart your computer and you're done.
Although the above operation is a bit complicated and cumbersome, but it is the most effective way to kill csrss.exe virus!
I hope the above information is helpful to you!
Kirito|Microsoft Community Support Specialist