Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: CSRSS.EXE & WINLOGON.EXE - is it a virus?


13 Feb 2010   #1
Gil

Windows 7 x64
 
 
CSRSS.EXE & WINLOGON.EXE - is it a virus?

Hi all.
I'm running Windows 7 Ultimate 64bit and I see that I have 2 running processes csrss.exe and winlogon.exe.

I've tried to search info in google but I didn't get a conclusive decision. It seems that the info I found was related to WinXP.

I have NOD32 and except for shark007 codecs that are by mistake considered as tojan, my computer checks out fine.

So how can I verify the authenticity of these files?




My System SpecsSystem Spec
.

13 Feb 2010   #2

Windows® 8 Pro (64-bit)
 
 

These are windows processes. No need to worry.
My System SpecsSystem Spec
13 Feb 2010   #3
Gil

Windows 7 x64
 
 

Quote   Quote: Originally Posted by Dinesh View Post
These are windows processes. No need to worry.
Thanks.
But how do you know that?
My System SpecsSystem Spec
.


13 Feb 2010   #5
Gil

Windows 7 x64
 
 

The reason I'm asking this, is because I have 2 strange bugs in my OS:
1. Folder names are being cut short.
2. Error message stating that I don't have admin permission to save files (JPG).

Here are screenshots of error No.1. See the highlighted folder name:


Now here's another:




And this is the real name:



It happens with several folders.

Here's the screenshot of my second error message:




That's why I think there's a virus but NOD32 and other scans I've made point to nothing.
My System SpecsSystem Spec
13 Feb 2010   #6

Windows 8.1 Pro (x64)
 
 

[QUOTE=Gil;566457]
Quote   Quote: Originally Posted by theog View Post
1. Folder names are being cut short.
10.02.03_Avatar, the O3_Avatar part is seen as an extension because it comes after the last dot (period).

Quote:
2. Error message stating that I don't have admin permission to save files (JPG).
You need to reset the permissions of the extra partition. I assume you are coming from another system if so it still has its permissions set.

Your problems nothing to do with any virus or malware.
My System SpecsSystem Spec
14 Feb 2010   #7
Gil

Windows 7 x64
 
 

[QUOTE=logicearth;567521]
Quote   Quote: Originally Posted by Gil View Post
Quote   Quote: Originally Posted by theog View Post
1. Folder names are being cut short.
10.02.03_Avatar, the O3_Avatar part is seen as an extension because it comes after the last dot (period).

Quote:
2. Error message stating that I don't have admin permission to save files (JPG).
You need to reset the permissions of the extra partition. I assume you are coming from another system if so it still has its permissions set.

Your problems nothing to do with any virus or malware.
Thanks for the reply.

Actually I installed Windows 7 from scratch. There was no upgrade.

About the folder names, as of now when I look at the folder, I see the entire name. That's what I'm talking about, it's not consistent. Sometimes the name is shorter sometimes I see the full name:

My System SpecsSystem Spec
14 Feb 2010   #8

Windows 8.1 Pro (x64)
 
 

Quote   Quote: Originally Posted by Gil View Post
About the folder names, as of now when I look at the folder, I see the entire name. That's what I'm talking about, it's not consistent. Sometimes the name is shorter sometimes I see the full name:
One is though the Library which hides the extension, the other is though normal file and folder interactions that is traditional in Explorer.
My System SpecsSystem Spec
14 Feb 2010   #9

Windows 7 Ultimate 6.1.7600 Build 7600 X86-based PC
 
 

Hi guys. I have 9 instances of "svchost.exe" running in Task Manager. Is this normal as well?
Just out of interest, if the "csrss" or "winlogon" or "svchost.exe" were or were not dodgy "how can I verify the authenticity of these files?" (I would also like to know ) :-)
My System SpecsSystem Spec
14 Feb 2010   #10

Windows 7 Professional 64-bit
 
 

I have 12 currently so yes it would be. You can do this which will help you see whats running in svhost:

1. open task manager
2. click on processes tab
3. click view menu and then select columns
4. tick command line

now go back to task manager and on the right youl see a new column showing you what svhost is running.
My System SpecsSystem Spec
Reply

 CSRSS.EXE & WINLOGON.EXE - is it a virus?




Thread Tools



Similar help and support threads for2: CSRSS.EXE & WINLOGON.EXE - is it a virus?
Thread Forum
csrss.exe, winlogon.exe and nvvsvc.exe How do I locate them? System Security
Solved Winlogon.exe modify is possible? Customization
csrss and winlogon System Security
explorer.exe winlogon.exe virus System Security
Virus/winlogon/csrss System Security
i4jdel0.exe and winlogon.exe virus BSOD Help and Support
winlogon.exe ? General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 02:38 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33