Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Found 2 instances of csrss.exe in Resource Monitor

29 Jun 2015   #1
xDavidx77

Windows 7 Ultimate 32 bit
 
 
Found 2 instances of csrss.exe in Resource Monitor

Just as the title states, I have found two instances of csrss.exe in Resource Monitor under "CPU". However, there is only one running under "Processes" in Task Manager, also when I click on "Go to File Location" or "Properties" nothing happens. The "Session ID", "Command Line" and "Description" columns are all blank (the same is also happening with winlogon.exe, although there is only one instance of it in both Task Manager and Resource Monitor). In Resource Monitor both csrss.exe instances say 0 under the "CPU" column. I know that csrss.exe is crucial for my OS, but I also know that multiple instances can mean a Trojan. I have identified the instance that is shown in both Task Manager and Resource Monitor using the "PID". What I want to know is if I should remove the instance that I cannot open it's file location, or if it is normal and I should just leave it as be.

Also, pertaining to winlogon.exe; should I also remove that?

Thanks in advance.


My System SpecsSystem Spec
.
29 Jun 2015   #2
UsernameIssues

W7 Pro SP1 64bit
 
 

Quote   Quote: Originally Posted by xDavidx77 View Post
Just as the title states, I have found two instances of csrss.exe in Resource Monitor under "CPU". However, there is only one running under "Processes" in Task Manager,...
Was Task Manager running with admin rights? (High Integrity level)


Quote   Quote: Originally Posted by xDavidx77 View Post
...in Task Manager, also when I click on "Go to File Location" or "Properties" nothing happens....
This is normal for Task Manager if is has not been running as admin. Task Manager cannot access the info needed for a process that is running at the System level while Task Manager is running at the Medium Integrity level.


Quote   Quote: Originally Posted by xDavidx77 View Post
...The "Session ID", "Command Line" and "Description" columns are all blank...
Some items will be blank for the same reason mentioned above: Integrity levels. Session ID should not be blank. Please post a screenshot. (Screenshots and Files - Upload and Post in Seven Forums)


Quote   Quote: Originally Posted by xDavidx77 View Post
(the same is also happening with winlogon.exe, although there is only one instance of it in both Task Manager and Resource Monitor).
Both tools (Task Manager and Resource Monitor) need to be running at the High Integrity level (admin rights) to be able to show you the same info.


Quote   Quote: Originally Posted by xDavidx77 View Post
...I know that csrss.exe is crucial for my OS, but I also know that multiple instances can mean a Trojan...
You probably would like Process Explorer with the Virus Total option turned on. See this tutorial: Process Explorer + VirusTotal (to check all processes with 50+ AV's)


Quote   Quote: Originally Posted by xDavidx77 View Post
...I have identified the instance that is shown in both Task Manager and Resource Monitor using the "PID". What I want to know is if I should remove the instance that I cannot open it's file location, or if it is normal and I should just leave it as be....
Leave it be until you know more by running Task Manager with admin rights.


Quote   Quote: Originally Posted by xDavidx77 View Post
...Also, pertaining to winlogon.exe; should I also remove that?...
No - until you know more by running Task Manager with admin rights.
My System SpecsSystem Spec
Reply

 Found 2 instances of csrss.exe in Resource Monitor




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Many instances of netcfg grabbing processor resource.
Newb here so bear with me, please. Maybe the wrong subforum but nothing seems appropriate. Came back from a couple of days away. Booted computer. Boy! is it ever slow. Did some digging assuming it is a browser problem since task manager shows: (photobucket doesn't seem to load) - please...
Performance & Maintenance
Windows Resource Protection found corrupt files...
...and was unable to fix some of them. I get this error when I ran a system file check. I looked in the CBS log file but it's pretty vast and I'm not sure what I should be looking for exactly. Any help would be greatly appreciated. Thanks
General Discussion
Windows Resource Protection found corrupt files
and was unable to fix some of them. I'm not really how to interpret the sfc details that I got. but from a quick reading dmocx.dll, dmscript.dll, dmloader.dll, dmrc.dll seems to be broken or something? is there a way to fix it?
General Discussion
windows resource protection found corrupt files but was unable to fix
Hi everyone, First, I am running Windows 7 Home Premium 64 bits. I am suffering from a message "windows explorer has stopped working" after opening any folder. The result of that, closing opened windows. I had run "Sfc/scannow" and I've got "windows resource protection found corrupt files but...
Performance & Maintenance
Windows resource protection found corruot files
This is what i get from command prompt: Microsoft Windows Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Windows\system32>sfc /scannow Beginning system scan. This process will take some time. Beginning verification phase of system scan.
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 22:54.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App