Is csrss.exe a trojan?

The reason why you cannot see any information on 'csrss.exe' in the task manager, is because you have to tick 'Show processes from all users' @ the bottom of the Processes tab.

After doing this, right click 'csrss' and choose either 'properties' or 'open file location', then you can tell what the source dir of the file is.

If it is in the \Windows\System32 folder & it is signed by Microsoft, then you're fine. If you still do not feel safe, upload the file to a virus scan website or scan with your own software.

Hope that helps.

In win7 System 32 csrss.exe shows as 8K. in task manager it shows using 2,076KB memory. Can this be the same file? Yesterday, I had Baidu do a deep scan. How do I determine if the csrss.exe in the task manager is the same one in System 32?

The amount of RAM used is not going to agree with the file size.

Try the tool mentioned here:
Is csrss.exe a trojan?

Windows explorer shows the size of the csrss.exe file while Task Manager shows the memory that process is consuming. These are totally different things. If they ever showed the same numbers it would be pure coincidence. To see the location of the file in Task Manager you must add the "Image Path Name" column. You also need to be logged in with an admin account and select "Show processes from all users"

I'm logged in with an admin account and have selected "Show processes from all users". This is what I see:

LMiller7 said:

Windows explorer shows the size of the csrss.exe file while Task Manager shows the memory that process is consuming. These are totally different things. If they ever showed the same numbers it would be pure coincidence. To see the location of the file in Task Manager you must add the "Image Path Name" column. You also need to be logged in with an admin account and select "Show processes from all users"

This showed csrss.exe is from the System32 directory. Thank you.

It is a legitimate files which was developed by Microsoft Corporation. Csrss.exe is used to manage the majority of graphical instructions set in the Client/server runtime subsystem under Microsoft windows Operating system. It is basically not a trojan file, Malware attackers create a malware file and name it as csrss.exe to spread malware over the internet. To know more about csrss.exe, have a look at file-intelligence website, which is a malware search engine, where i got to know about this file.