csrss.exe information

Information and startup locations can be examined on this page: verify all your files to make sure that they are legitimate, digitally signed and from the company Microsoft Corporation to which they should belong. csrss.exe security and file info Client Server Runtime Process - Microsoft® Windows® Operating System - Microsoft Corporation Filetype : executable An executable file is a program that can be executed in your windows environment. What is csrss.exe? Csrss.exe is, by Microsoft's definition, the part of the Microsoft Client/Server Runtime Server Subsystem that runs in user mode. It is a critical subsystem that is primarily responsible for managing threads and creating console windows. It also handles any other operations of the Win32 subsystem that are not in kernel mode. Due to the critical nature of this process, it cannot be stopped from the task manager. The screenshot below illustrates how csrss.exe should appear in the task manager: Notice that this process always runs as SYSTEM. A csrss.exe process running as a different user may be indicative of malware. Dangers of csrss Due to the critical nature of this process and the fact that it runs on all Windows NT-based systems (including Windows 2000, XP, and Vista), it is common for virus writers and spyware vendors to make their malware appear as though it is the real Client/Server Runtime Server Subsystem. Some of the fake files will have the same name as this process but will be stored somewhere other than in %SystemRoot%\System32. The following malware is known to disguise itself as this process: Ahlem.A Netsky.AB Nimda.E WinSpy If you are able to terminate the process from the task manager, the process is not the legitimate csrss.exe. Furthermore, there will never be more than one copy of this process running at a given time. Common problems Csrss.exe uses 100% of your CPU when right-clicking on an item According to Microsoft, this problem is caused by a corrupt user profile. To correct this, back up your documents and then log in as an administrator that is not the user whose profile is corrupt. Right click on My Computer, click Properties, go to the Advanced tab, and click the Settings button under User Profile. Select the offending profile and click Delete. No Disk Error While this appears to be caused by csrss, the actual cause may be IOLO System Mechanic. If you have System Mechanic installed, try uninstalling it. Possible error for this file: Application error, the application has generated errors and will be closed by windows Our recommendation:  Click here to run a FREE Scan for CSRSS.EXE related errors

MD5 File security rating

A MD5 hash is a unique fingerprint of a file. Different files/versions can have the same filenames. The MD5 hash verifies that the legitimate file is not altered. Runscanner (Freeware) can help you checking the file's MD5 hashes Csrss.exe files in Runscanner database   71 different item(s) in database   9 different item(s) in database   161 different item(s) in database Green items are verified safe to use Unrated items are not yet checked for safety. Red items are not safe (typically virusses, spyware or other malware) This file is digitally signed by it's publisher. This means that the file is from the company claiming to created it, this does not mean by default that the file is safe

General file info

Product name:  Microsoft® Windows® Operating System Description:  Client Server Runtime Process Company:  Microsoft Corporation Fix CSRSS.EXE errors:  Free registry scan

Pacman startup database

BeyondKeylog surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Program Files/Supremtec folder EmployeeWatch is a commercial surveillance software program designed to monitor user activity on a computer WinSpy surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the "ComRoot" subfolder info provided by sysinfo.org