Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Is csrss.exe a trojan?

26 Mar 2015   #31
Anak

Microsoft Community Contributor Award Recipient

Win 7 Home Premium 64bit Ver 6.1.7600 Build 7601 - SP1
 
 

I concur.

You're good, I have the exact same file in mine;
Code:
C:\Windows\winsxs\amd64_microsoft-windows csrss_31bf3856ad364e35_6.1.7600.16385_none_b4d8d57efdc6b4f3



My System SpecsSystem Spec
.
15 Apr 2015   #32
Snostar

windows 7 ultimate 64bit
 
 

hi new to the forum, was wondering if having 2 of the csrss.exe was normal?? I've looked at the where they were and they both say c:\windows\system 32. they both say the user is the system so just wondering. anyone might know? thanks
My System SpecsSystem Spec
15 Apr 2015   #33
RoasterMen

Windows 10 Pro 64-bit
 
 

Having multiple instances of csrss.exe in the task manager is normal. There should be one instance of csrss.exe for system processes and another instance for interactive logons. If you have multiple users logged in, you can have even more instances of crss.exe in the Task Manager.

The "one csrss.exe only" rule applies to XP and earlier.

csrss.exe (Client/Server Runtime Subsystem) is legitimate windows file; and yes it is located in c:\windows\system32; however; if you try to run the original file csrss.exe (in win7 x64) file on a dos prompt it wont run telling you it can not run in win32 mode.

My csrss.exe is only taking 944 K of memory in Task Manager.
My System SpecsSystem Spec
.

15 Apr 2015   #34
LMiller7

Windows 7 Pro 64 bit
 
 

Starting with Vista there will be one instance of csrss.exe for the system session plus one for each logged on user. This was done to enhance security. It is also normal to have multiple instances of svchost.exe. I currently have 12 but it can be more or less. There may also be multiple instances of other processes.

The memory usage of processes can vary greatly. The 944 K quoted by RoasterMen is only an example. It can be much higher or lower and be completely normal.
My System SpecsSystem Spec
11 May 2015   #35
Rynnec

Windows 7 64-bit Service Pack 1
 
 

Hello. Bumping this topic because I noticed the crss.exe process while troubleshooting issues in Google Chrome. Is it normal for it to not list a user-name or description in the task manager? I tried opening the file location and clicking on properties, but nothing pops up (as in, it doesn't even open up explorer), yet when I try to do the same for other processes, it works just fine. I opened up the System32 file and found the crss there, but I just want to know if I have anything to worry about.


Attached Images
Is csrss.exe a trojan?-csrss.png 
My System SpecsSystem Spec
11 May 2015   #36
Anak

Microsoft Community Contributor Award Recipient

Win 7 Home Premium 64bit Ver 6.1.7600 Build 7601 - SP1
 
 

Hi Rynnec, welcome to 7F!

Unless you find crss.exe anywhere other than C:\Windows\System32; Then no, you have nothing to worry about.

crss.exe is a system core file, as such it has special privileges. See the button below the list of processes that says "show processes from all users" ? Click on that and you should see the blank user area fill in with SYSTEM and all the other blank areas should fill in to.
My System SpecsSystem Spec
22 May 2015   #37
DWN13

Windows 7
 
 

My listing in Task Manager also has blanks under User Name and Description.

If I do a search through Windows Exploxer it shows two copies of csrss.exe in System32 and amd64, but it also shows 4 versions of csrss.exe.mui two in the same locations as the csrss.exe file, but the other two in x86_microsoft-windows-csrss.resources and C:\Wndows/WOW64

If I do dir /s csrss.exe in CMD it finds just one file in windows\system32
My System SpecsSystem Spec
23 May 2015   #38
Anak

Microsoft Community Contributor Award Recipient

Win 7 Home Premium 64bit Ver 6.1.7600 Build 7601 - SP1
 
 

Hi DWN13, welcome to 7F!
Quote   Quote: Originally Posted by DWN13 View Post
My listing in Task Manager also has blanks under User Name and Description.
Did you
Quote:
"show processes from all users" ?
as in my last post to reveal those users?

Quote   Quote: Originally Posted by DWN13 View Post
If I do a search through Windows Exploxer it shows two copies of csrss.exe in System32 and amd64, but it also shows 4 versions of csrss.exe.mui two in the same locations as the csrss.exe file, but the other two in x86_microsoft-windows-csrss.resources and C:\Wndows/WOW64

If I do dir /s csrss.exe in CMD it finds just one file in windows\system32
All these locations sounds suspicious, when was the last time you ran any malware scans, and what are you using to do those scans? I ask because your system specs don't list any anti-virus/malware programs.

You can try any or all of these, use their free versions:
Hitmanpro: Unlimited thirty day free trial.
Malwarebytes; Watch for the check-mark during the install to try the pro version, it's up to you if you want to try it or not.
Superantispyware;
My System SpecsSystem Spec
10 Jun 2015   #39
Snostar

windows 7 ultimate 64bit
 
 

Quote   Quote: Originally Posted by RoasterMen View Post
Having multiple instances of csrss.exe in the task manager is normal. There should be one instance of csrss.exe for system processes and another instance for interactive logons. If you have multiple users logged in, you can have even more instances of crss.exe in the Task Manager.

The "one csrss.exe only" rule applies to XP and earlier.

csrss.exe (Client/Server Runtime Subsystem) is legitimate windows file; and yes it is located in c:\windows\system32; however; if you try to run the original file csrss.exe (in win7 x64) file on a dos prompt it wont run telling you it can not run in win32 mode.

My csrss.exe is only taking 944 K of memory in Task Manager.


thank u for the help, mine is higher but long as its normal im ok with it, thanks again
My System SpecsSystem Spec
20 Sep 2015   #40
kacperrools

windows 7 64bit
 
 

When i try to do properties it does not do any thing ... please help . is it a virus ?
My System SpecsSystem Spec
Reply

 Is csrss.exe a trojan?




Thread Tools




Similar help and support threads
Thread Forum
csrss.exe
I have been experiencing unusual lag which never happened to me before when I used a Unity application and while watching a Youtube video so I opened Task Manager to check what was causing this. I saw a process which was at at around 116000K usage when I was using a Unity application. Then I...
System Security
csrss.exe
I've had issues with random laggy-ness and pop-ups. thought it was nothing till today, when everytime I turn on my computer it goes to blue screen after a few seconds, the only way my computer still functions is in safe-mode. Did some research and it turns out it is csrss.eve, trojon virus. Is...
General Discussion
Trojan called 'Trojan.Generic.2582177' on my system
Hi, I have Window7 Ultimate 64 bit on my system. I use Bitfender as my antivirus software. This morning it informed me that it has found a file infected with a virus called 'Trojan.Generic.2582177' which it cannot clean. I've contacted Bitfender to see if they know what I should do but haven't...
System Security
[Help] csrss.exe
I have an old computer, it's a 2005 Dell Dimension 5100 w/ an i3 processor. So naturally I try to close out as many programs using any CPU that would cause my game (RuneScape) to lag. In this case, I noticed csrss.exe. I did a quick Google search (which actually led me to these forums) & it can...
System Security
CSRSS
I have installed a clean copy of Windows 7, after a full format of the drives. However CSRSS.exe has started doing nonstop I/O reads and I can find no way to stop it. (I know not to touch the exe itself) I shut down everything that may be hitting the hard drive including the virus scan and it...
Installation & Setup


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:42.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App