Windows 7: CSRSS.EXE & WINLOGON.EXE - is it a virus?

Hi all.
I'm running Windows 7 Ultimate 64bit and I see that I have 2 running processes csrss.exe and winlogon.exe.

I've tried to search info in google but I didn't get a conclusive decision. It seems that the info I found was related to WinXP.

I have NOD32 and except for shark007 codecs that are by mistake considered as tojan, my computer checks out fine.

So how can I verify the authenticity of these files?

These are windows processes. No need to worry.

Thanks.
But how do you know that?

Have a read here:

Winlogon - Wikipedia, the free encyclopedia

Client/Server Runtime Subsystem - Wikipedia, the free encyclopedia

The reason I'm asking this, is because I have 2 strange bugs in my OS:
1. Folder names are being cut short.
2. Error message stating that I don't have admin permission to save files (JPG).

Here are screenshots of error No.1. See the highlighted folder name:


Now here's another:




And this is the real name:



It happens with several folders.

Here's the screenshot of my second error message:



That's why I think there's a virus but NOD32 and other scans I've made point to nothing.

[QUOTE=Gil;566457]10.02.03_Avatar, the O3_Avatar part is seen as an extension because it comes after the last dot (period).

You need to reset the permissions of the extra partition. I assume you are coming from another system if so it still has its permissions set.

Your problems nothing to do with any virus or malware.

[QUOTE=logicearth;567521]Thanks for the reply.

Actually I installed Windows 7 from scratch. There was no upgrade.

About the folder names, as of now when I look at the folder, I see the entire name. That's what I'm talking about, it's not consistent. Sometimes the name is shorter sometimes I see the full name:

One is though the Library which hides the extension, the other is though normal file and folder interactions that is traditional in Explorer.

Hi guys. I have 9 instances of "svchost.exe" running in Task Manager. Is this normal as well?
Just out of interest, if the "csrss" or "winlogon" or "svchost.exe" were or were not dodgy "how can I verify the authenticity of these files?" (I would also like to know ) :-)

I have 12 currently so yes it would be. You can do this which will help you see whats running in svhost:

1. open task manager
2. click on processes tab
3. click view menu and then select columns
4. tick command line

now go back to task manager and on the right youl see a new column showing you what svhost is running.