Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: CSRSS.EXE & WINLOGON.EXE - is it a virus?

13 Feb 2010   #1
Gil

Windows 7 x64
 
 
CSRSS.EXE & WINLOGON.EXE - is it a virus?

Hi all.
I'm running Windows 7 Ultimate 64bit and I see that I have 2 running processes csrss.exe and winlogon.exe.

I've tried to search info in google but I didn't get a conclusive decision. It seems that the info I found was related to WinXP.

I have NOD32 and except for shark007 codecs that are by mistake considered as tojan, my computer checks out fine.

So how can I verify the authenticity of these files?




My System SpecsSystem Spec
13 Feb 2010   #2
Dinesh

Windows® 8 Pro (64-bit)
 
 

These are windows processes. No need to worry.
My System SpecsSystem Spec
13 Feb 2010   #3
Gil

Windows 7 x64
 
 

Quote   Quote: Originally Posted by Dinesh View Post
These are windows processes. No need to worry.
Thanks.
But how do you know that?
My System SpecsSystem Spec
13 Feb 2010   #4
theog

Microsoft Community Contributor Award Recipient

ME/XP/Vista/Win7
 
 

My System SpecsSystem Spec
13 Feb 2010   #5
Gil

Windows 7 x64
 
 

The reason I'm asking this, is because I have 2 strange bugs in my OS:
1. Folder names are being cut short.
2. Error message stating that I don't have admin permission to save files (JPG).

Here are screenshots of error No.1. See the highlighted folder name:


Now here's another:




And this is the real name:



It happens with several folders.

Here's the screenshot of my second error message:




That's why I think there's a virus but NOD32 and other scans I've made point to nothing.
My System SpecsSystem Spec
13 Feb 2010   #6
logicearth

Windows 8.1 Pro (x64)
 
 

[QUOTE=Gil;566457]
Quote   Quote: Originally Posted by theog View Post
1. Folder names are being cut short.
10.02.03_Avatar, the O3_Avatar part is seen as an extension because it comes after the last dot (period).

Quote:
2. Error message stating that I don't have admin permission to save files (JPG).
You need to reset the permissions of the extra partition. I assume you are coming from another system if so it still has its permissions set.

Your problems nothing to do with any virus or malware.
My System SpecsSystem Spec
14 Feb 2010   #7
Gil

Windows 7 x64
 
 

[QUOTE=logicearth;567521]
Quote   Quote: Originally Posted by Gil View Post
Quote   Quote: Originally Posted by theog View Post
1. Folder names are being cut short.
10.02.03_Avatar, the O3_Avatar part is seen as an extension because it comes after the last dot (period).

Quote:
2. Error message stating that I don't have admin permission to save files (JPG).
You need to reset the permissions of the extra partition. I assume you are coming from another system if so it still has its permissions set.

Your problems nothing to do with any virus or malware.
Thanks for the reply.

Actually I installed Win7 from scratch. There was no upgrade.

About the folder names, as of now when I look at the folder, I see the entire name. That's what I'm talking about, it's not consistent. Sometimes the name is shorter sometimes I see the full name:

My System SpecsSystem Spec
14 Feb 2010   #8
logicearth

Windows 8.1 Pro (x64)
 
 

Quote   Quote: Originally Posted by Gil View Post
About the folder names, as of now when I look at the folder, I see the entire name. That's what I'm talking about, it's not consistent. Sometimes the name is shorter sometimes I see the full name:
One is though the Library which hides the extension, the other is though normal file and folder interactions that is traditional in Explorer.
My System SpecsSystem Spec
14 Feb 2010   #9
James78

Windows 7 Ultimate 6.1.7600 Build 7600 X86-based PC
 
 

Hi guys. I have 9 instances of "svchost.exe" running in Task Manager. Is this normal as well?
Just out of interest, if the "csrss" or "winlogon" or "svchost.exe" were or were not dodgy "how can I verify the authenticity of these files?" (I would also like to know ) :-)
My System SpecsSystem Spec
14 Feb 2010   #10
swarfega

Windows 7 Professional 64-bit
 
 

I have 12 currently so yes it would be. You can do this which will help you see whats running in svhost:

1. open task manager
2. click on processes tab
3. click view menu and then select columns
4. tick command line

now go back to task manager and on the right youl see a new column showing you what svhost is running.
My System SpecsSystem Spec
Reply

 CSRSS.EXE & WINLOGON.EXE - is it a virus?




Thread Tools





Similar help and support threads
Thread Forum
csrss.exe, winlogon.exe and nvvsvc.exe How do I locate them?
So I recently have been noticing a weird, little box on my desktop. And when I drag it to a bigger version, its just a black box. Kinda like a blank cmd. After that I went to my Processes, and found these 3 .exe's without any paths. Now I think, that the nvvsvc.exe is Nvidia drivers or something...
System Security
csrss and winlogon
I've heard that these two processes are legit but can sometimes be corrupted by malware. The problem is that on my laptop, the User Name and Description are both blank for csrss and winlogon but on my desktop, they both have an User Name (SYSTEM) and a Description. Now I'm just wondering if...
System Security
explorer.exe winlogon.exe virus
malwarebytes,eset find explore.exe,winlogon.exe w.dll as a virus and want to remove them, if that happens then i'll have to reinstall the windows, anyone knows how to deal with this kind of problem?
System Security
winlogon.exe error
Hi guys, I have recently updated to windows 7 from vista... and I am getting this error related to winlogon.exe file... Issues 1. After LogIn, my screen stays black for 10sec. but after that everything loads perfectly fine... (In vista there was no wait) 2. When I shutdown, logoff, or...
Performance & Maintenance
Virus/winlogon/csrss
I recently did a full scan in safe mode with the latest version of avira (free) and it popped up with a myriad of trojans etc. After that i ran CCleaner and followed the reccomendations after finding reg conflicts. My question now is that I have winlogon.exe, csrss.exe and nvvsvc.exe running...
System Security
winlogon.exe ?
It's in the right folder-, Just tha I thought it only ran at startup? Does it run all the time as a process? Thanks
General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 11:52.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App