Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: CSRSS.EXE & WINLOGON.EXE - is it a virus?

14 Feb 2010   #11

Windows 7 Ultimate 6.1.7600 Build 7600 X86-based PC


Would I need to look for something specific/out of the ordinary ?

My System SpecsSystem Spec
11 Nov 2015   #12

Windows 7 Home Premium 32bit.

If you have TWO csrss when you pull up Task Manager it's a VIRUS!! I know because my mom's Dell computer had it. I called them and they told me it was a VIRUS, but they wanted 149.99 to clean it up. I used malwarebytes and norton's
My System SpecsSystem Spec
11 Nov 2015   #13

Windows 7 Pro 64 bit

Welcome to the forum.

Quote   Quote: Originally Posted by Trinaty View Post
If you have TWO csrss when you pull up Task Manager it's a VIRUS!!

In Vista and later there will be one instance of csrss.exe for the system session plus one for each logged in user. Thus there will be at least 2 instances shown in Task Manager, 3 or more if users are using Fast User Switching.

It is more meaningful to look at the "Image Path Name" column. If the file is in the system 32 folder it is probably legitimate. But when dealing with viruses very little can be relied on entirely. Sufficiently sophisticated malware can manipulate the display of Task Manager and other utilities.
My System SpecsSystem Spec


 CSRSS.EXE & WINLOGON.EXE - is it a virus?

Thread Tools

Similar help and support threads
Thread Forum
CSRSS.EXE virus according to tech support?
Hello, I was recently on the phone with HP tech support regarding a printer problem, when the person told me they located CSRSS.EXE on my computer and it was effecting my printer drivers. They said that even though I had Avast Antivirus and windows firewall active, it was malicious software. Now I...
System Security
csrss.exe, winlogon.exe and nvvsvc.exe How do I locate them?
So I recently have been noticing a weird, little box on my desktop. And when I drag it to a bigger version, its just a black box. Kinda like a blank cmd. After that I went to my Processes, and found these 3 .exe's without any paths. Now I think, that the nvvsvc.exe is Nvidia drivers or something...
System Security
csrss and winlogon
I've heard that these two processes are legit but can sometimes be corrupted by malware. The problem is that on my laptop, the User Name and Description are both blank for csrss and winlogon but on my desktop, they both have an User Name (SYSTEM) and a Description. Now I'm just wondering if...
System Security
explorer.exe winlogon.exe virus
malwarebytes,eset find explore.exe,winlogon.exe w.dll as a virus and want to remove them, if that happens then i'll have to reinstall the windows, anyone knows how to deal with this kind of problem?
System Security
I recently did a full scan in safe mode with the latest version of avira (free) and it popped up with a myriad of trojans etc. After that i ran CCleaner and followed the reccomendations after finding reg conflicts. My question now is that I have winlogon.exe, csrss.exe and nvvsvc.exe running...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 08:25.
Twitter Facebook Google+