CSRSS.EXE & WINLOGON.EXE - is it a virus?

Page 1 of 2 12 LastLast

  1. Gil
    Posts : 109
    Windows 7 x64
       #1

    CSRSS.EXE & WINLOGON.EXE - is it a virus?


    Hi all.
    I'm running Windows 7 Ultimate 64bit and I see that I have 2 running processes csrss.exe and winlogon.exe.

    I've tried to search info in google but I didn't get a conclusive decision. It seems that the info I found was related to WinXP.

    I have NOD32 and except for shark007 codecs that are by mistake considered as tojan, my computer checks out fine.

    So how can I verify the authenticity of these files?

      My Computer


  2. Posts : 8,476
    Windows® 8 Pro (64-bit)
       #2

    These are windows processes. No need to worry.
      My Computer


  3. Gil
    Posts : 109
    Windows 7 x64
    Thread Starter
       #3

    Dinesh said:
    These are windows processes. No need to worry.
    Thanks.
    But how do you know that?
      My Computer

  4.   My Computer


  5. Gil
    Posts : 109
    Windows 7 x64
    Thread Starter
       #5

    The reason I'm asking this, is because I have 2 strange bugs in my OS:
    1. Folder names are being cut short.
    2. Error message stating that I don't have admin permission to save files (JPG).

    Here are screenshots of error No.1. See the highlighted folder name:


    Now here's another:




    And this is the real name:



    It happens with several folders.

    Here's the screenshot of my second error message:




    That's why I think there's a virus but NOD32 and other scans I've made point to nothing.
      My Computer


  6. Posts : 5,642
    Windows 10 Pro (x64)
       #6

    [QUOTE=Gil;566457]
    theog said:
    1. Folder names are being cut short.
    10.02.03_Avatar, the O3_Avatar part is seen as an extension because it comes after the last dot (period).

    2. Error message stating that I don't have admin permission to save files (JPG).
    You need to reset the permissions of the extra partition. I assume you are coming from another system if so it still has its permissions set.

    Your problems nothing to do with any virus or malware.
      My Computer


  7. Gil
    Posts : 109
    Windows 7 x64
    Thread Starter
       #7

    [QUOTE=logicearth;567521]
    Gil said:
    theog said:
    1. Folder names are being cut short.
    10.02.03_Avatar, the O3_Avatar part is seen as an extension because it comes after the last dot (period).

    2. Error message stating that I don't have admin permission to save files (JPG).
    You need to reset the permissions of the extra partition. I assume you are coming from another system if so it still has its permissions set.

    Your problems nothing to do with any virus or malware.
    Thanks for the reply.

    Actually I installed Win7 from scratch. There was no upgrade.

    About the folder names, as of now when I look at the folder, I see the entire name. That's what I'm talking about, it's not consistent. Sometimes the name is shorter sometimes I see the full name:

      My Computer


  8. Posts : 5,642
    Windows 10 Pro (x64)
       #8

    Gil said:
    About the folder names, as of now when I look at the folder, I see the entire name. That's what I'm talking about, it's not consistent. Sometimes the name is shorter sometimes I see the full name:
    One is though the Library which hides the extension, the other is though normal file and folder interactions that is traditional in Explorer.
      My Computer


  9. Posts : 9
    Windows 7 Ultimate 6.1.7600 Build 7600 X86-based PC
       #9

    Hi guys. I have 9 instances of "svchost.exe" running in Task Manager. Is this normal as well?
    Just out of interest, if the "csrss" or "winlogon" or "svchost.exe" were or were not dodgy "how can I verify the authenticity of these files?" (I would also like to know )
      My Computer


  10. Posts : 4,925
    Windows 7 Professional 64-bit
       #10

    I have 12 currently so yes it would be. You can do this which will help you see whats running in svhost:

    1. open task manager
    2. click on processes tab
    3. click view menu and then select columns
    4. tick command line

    now go back to task manager and on the right youl see a new column showing you what svhost is running.
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 17:41.
Find Us