csrss.exe in task manager. Can't tell if it's malware or a windows process.

CobaltImpurity

Estimable
Nov 16, 2014
1
0
4,510
csrss.exe shows up in task manager under processes. I've read that it is the name of a critical system process but also the name of a malware program and the advice given to users is to check where csrss.exe is located by right clicking and hitting "Properties". But it will not allow this. I click on properties, open file location, Go to Service(s), or end process.

Currently running system scans on malwarebytes and AVG.

Any advice?
 
Solution
Csrss stands forclient/server run-time subsystem and is an essential subsystem that must be running at all times. Csrss is responsible for console windows, creating and/or deleting threads, and some parts of the 16-bit virtual MS-DOS environment.
= It is system process.


If the process is slowing your computer I'd suggest to run some anti-virus programs.
Csrss.exe is commonly used in some on keyloggers
srsc.exe, csrs.exe, csrsses.exe, crssc.exe, csrse.exe
Edit* As above, If there are 2 Csrss.exe 's running you most likely have a virus.

dextermat

Distinguished
Sep 21, 2007
634
0
19,010
Hi,

If you only have on of them running,it's most likely legit.
If you think your infected goto bleepingcomputer.com and download run adwcleaner / JRT and Roguekiller.

If you are heavily infected, you might want to run combofix but read the instruction before doing so.
Unless you are on windows 8, combofix isn't compatible yet.
 

Yeehu

Estimable
Dec 24, 2014
2
0
4,520
Csrss stands forclient/server run-time subsystem and is an essential subsystem that must be running at all times. Csrss is responsible for console windows, creating and/or deleting threads, and some parts of the 16-bit virtual MS-DOS environment.
= It is system process.


If the process is slowing your computer I'd suggest to run some anti-virus programs.
Csrss.exe is commonly used in some on keyloggers
srsc.exe, csrs.exe, csrsses.exe, crssc.exe, csrse.exe
Edit* As above, If there are 2 Csrss.exe 's running you most likely have a virus.
 
Solution