CSRSS.EXE & WINLOGON.EXE - is it a virus?

Thanks.

Would I need to look for something specific/out of the ordinary ?

If you have TWO csrss when you pull up Task Manager it's a VIRUS!! I know because my mom's Dell computer had it. I called them and they told me it was a VIRUS, but they wanted 149.99 to clean it up. I used malwarebytes and norton's

Welcome to the forum.

Trinaty said:

If you have TWO csrss when you pull up Task Manager it's a VIRUS!!

No.

In Vista and later there will be one instance of csrss.exe for the system session plus one for each logged in user. Thus there will be at least 2 instances shown in Task Manager, 3 or more if users are using Fast User Switching.

It is more meaningful to look at the "Image Path Name" column. If the file is in the system 32 folder it is probably legitimate. But when dealing with viruses very little can be relied on entirely. Sufficiently sophisticated malware can manipulate the display of Task Manager and other utilities.