up to 1000 csrss.exe process', under different session ID's, spanwing

Page 1 of 3 123 LastLast

  1. Posts : 12
    Windows 7 Professional 64-bit
       #1

    up to 1000 csrss.exe process', under different session ID's, spanwing


    This started happening recently, although I cannot pinpoint an action that could have caused it.

    I was messing around with

    GPRESULT and GPUPDATE, and added a custom event with EVENTCREATE in cmd around the time it started doing a project for class.

    I have scanned with Avira and Malwarebytes and its all clean. The separate csrss.exe process's each start up under their own Session ID (and are the only process' belonging to that session ID) They have gotten as high as 1000.

    Does anyone know what is going on and how I can fix this?? I don't have any restore points available to use, and my one and only recent complete backup was a few days after this started...

    If I had to try and narrow it down to something, it would be maybe running GPUPDATE from the CLI...that's the closest thing timeframe-wise to when it started
      My Computer


  2. Posts : 83
    windows Home Premium 64 bit
       #2
      My Computer


  3. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #3

    download SystemLook from one of the links below and save it to your Desktop.
    Download Mirror #1

    Download Mirror #2

    •Copy the content of the following box into the main textfield:

    Code:
    ::filefind
    csrss.exe
    Right click on SystemLook.exe, click Run As Administrator
    • Click the Look button to start the scan.
    • When finished, a notepad window will open with the results of the scan
    The log can also be found on your Desktop entitled SystemLook.txt
      My Computer


  4. Posts : 12
    Windows 7 Professional 64-bit
    Thread Starter
       #4

    Jacee said:
    download SystemLook from one of the links below and save it to your Desktop.
    Download Mirror #1

    Download Mirror #2

    •Copy the content of the following box into the main textfield:

    Code:
    ::filefind
    csrss.exe
    Right click on SystemLook.exe, click Run As Administrator
    • Click the Look button to start the scan.
    • When finished, a notepad window will open with the results of the scan
    The log can also be found on your Desktop entitled SystemLook.txt

    Ran it, nothing, "No Context"
    All instances of csrss.exe are always legit in System32, its the spanwing of separate Session ID's that is puzzling me...


    System File Checker came back fine as well...

    I already stated before I had no usable Restore Points available from before this started.
    Thanks for the help so far guys, keep it coming
      My Computer


  5. Posts : 10,200
    MS Windows 7 Ultimate SP1 64-bit
       #5

    Only if you disabled system restore do you not have system restore points.
    Win 7 creates system restore points without you even asking.

    RESTORE TO A PREVIOUS SYSTEM RESTORE POINT
    1) WIN | type SYSTEM RESTORE | ENTER | NEXT
    |Choose a different restore point radio button
    | NEXT


    2) Show more restore pointscheckbox (lower left)


    3) Highlight the desired restore point


    4) Scan for affected programs(lower right)make a note of affected programs
    5) CLOSE | NEXT | FINISH


    WIN = key with the wavy Microsoft flag on top.
      My Computer


  6. Posts : 12
    Windows 7 Professional 64-bit
    Thread Starter
       #6

    karlsnooks said:
    Only if you disabled system restore do you not have system restore points.
    Win 7 creates system restore points without you even asking.

    RESTORE TO A PREVIOUS SYSTEM RESTORE POINT
    1) WIN | type SYSTEM RESTORE | ENTER | NEXT
    |Choose a different restore point radio button
    | NEXT


    2) Show more restore pointscheckbox (lower left)


    3) Highlight the desired restore point


    4) Scan for affected programs(lower right)make a note of affected programs
    5) CLOSE | NEXT | FINISH


    WIN = key with the wavy Microsoft flag on top.
    Maybe I should have listed my technical skill level in my original post. I am A+, N+, CCNA certified

    I only have 5 points, 1 point from a full system image from October of last year, and 4 restore points, oldest being April 6 which is after this started.

    I have protection on for C (Raid Volume) but not E: (Data Volume). I may have cleaned out older restore points at some point...I did run CCleaner not to long ago...

    I want to repair install as a last resort. Thank you for your reply though...if you have any idea's you can be more technical with me :)
      My Computer


  7. Posts : 10,200
    MS Windows 7 Ultimate SP1 64-bit
       #7

    did you follow the procedure given?
      My Computer


  8. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #8

    I was messing around with

    GPRESULT and GPUPDATE, and added a custom event with EVENTCREATE in cmd around the time it started doing a project for class.
    If you didn't write down what you did so as to reverse your actions (or backup the registry), then you may need to do a repair install.

    Edit: Registry - Backup and Restore
      My Computer


  9. Posts : 12
    Windows 7 Professional 64-bit
    Thread Starter
       #9

    karlsnooks said:
    did you follow the procedure given?
    Yes
      My Computer


  10. Posts : 10,200
    MS Windows 7 Ultimate SP1 64-bit
       #10

    and how many choices were given?
      My Computer


 
Page 1 of 3 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 22:57.
Find Us