New
#61
From Anak
No I don't remember but my brain does not have a SXS folder.Layback Bear; Do you know who I am trying to think of?
From Anak
No I don't remember but my brain does not have a SXS folder.Layback Bear; Do you know who I am trying to think of?
The reason why you cannot see any information on 'csrss.exe' in the task manager, is because you have to tick 'Show processes from all users' @ the bottom of the Processes tab.
After doing this, right click 'csrss' and choose either 'properties' or 'open file location', then you can tell what the source dir of the file is.
If it is in the \Windows\System32 folder & it is signed by Microsoft, then you're fine. If you still do not feel safe, upload the file to a virus scan website or scan with your own software.
Hope that helps.
Hi iCod3r, welcome to 7F! :)
If it has not been touched on before your post is a timely reminder.
In win7 System 32 csrss.exe shows as 8K. in task manager it shows using 2,076KB memory. Can this be the same file? Yesterday, I had Baidu do a deep scan. How do I determine if the csrss.exe in the task manager is the same one in System 32?
The amount of RAM used is not going to agree with the file size.
Try the tool mentioned here:
Is csrss.exe a trojan?
Windows explorer shows the size of the csrss.exe file while Task Manager shows the memory that process is consuming. These are totally different things. If they ever showed the same numbers it would be pure coincidence. To see the location of the file in Task Manager you must add the "Image Path Name" column. You also need to be logged in with an admin account and select "Show processes from all users"
It is a legitimate files which was developed by Microsoft Corporation. Csrss.exe is used to manage the majority of graphical instructions set in the Client/server runtime subsystem under Microsoft windows Operating system. It is basically not a trojan file, Malware attackers create a malware file and name it as csrss.exe to spread malware over the internet. To know more about csrss.exe, have a look at file-intelligence website, which is a malware search engine, where i got to know about this file.
Hi kristen theron, welcome to 7F! :)
Nice explanation for the csrss file, do you have a link to this file-intelligence website? Would it possibly be? https://file-intelligence.comodo.com/exe/csrss This comodo site is one that I will save for quick reference.
One many that I use: http://www.systemlookup.com/search=csrss.exe Just as the comodo site, most larger anti-malware companies will have a searchable database.
Related:
Systemlookup with Status Key legend at top
https://Client/Server Runtime Subsystem | en.wikipedia.org