computer slow, trying to check location of csrss

[rsh]

Computer seems to be busy (doing more than my stuff). As per old threads, tried to check csrss location by right click in task manager- but nothing shows; how do I find it's location?

Btw, one of the old comments indicated it was "the only process w/o a description", but I notice conhost.exe has two entries, the first of which also has no description. They have 256k & 264k memory use respectively. Is this odd or a problem?

Much thanks to all

 

[VistaUltimate]

csrss.exe is located in C:\Windows\System32.

Let me search for conhost.exe and I will type the answer.

 

[LMiller7]

You have to select "Show processes from all users" to run Task manager with an elevated account. Otherwise it will not have permissions to obtain some information. It is not unusual to see 1 or more entries for conhost.exe. The memory usage for all processes can vary widely. The normal location for csrss.exe and conhost.exe is c:\windows\system32.

Nothing you have described is unusual.

 

[rsh]

I know it is SUPPOSED to be there, but it does not appear when I look. Could it be hidden, and how do I determine if it is there?

Also, only the conhost.exe that has the description gives any result when I select "properties" -is this common or is one of them bogus?

How would I "Show processes from all users"? I have the only user account as far as I understand, so this may be irrelevant.

 

[LMiller7]

The "Show processes from all users" option is in the Processes tab of Task Manager and it is by no means irrelevant. Without this option you will not see most of the system processes and Task manager will be running with the normal non-elevated account. This account does not have the rights to access some information for some system processes. By selecting this option Task Manager will run with an elevated account which does. When examining system processes this option is a must.

This all assumes you are running with UAC enabled, the default condition.

 

[Layback Bear]

A user does not have to be another person on your computer.
A user can be Windows System or other Services or programs that are using all kinds of things.

Just select All Users as LMiller7 has instructed. It cost nothing and hurts nothing.

 

[rsh]

Thanks for your replies; but I do not see any option or selection possible of "Show processes from all users" no right or left click, scroll, nothing opens up, no selection options, no action visible or audible (no hard drive revving up).

Do please enlighten me, though I suspect something should have popped up, it did not... could this be hidden or disabled by malware?

Btw, does malwarebytes free version conflict w/ avg free version? I recently downloaded Mbytes' and ran it twice in a row, and it did not appear to conflict. Haven't run it since then.

 

[LMiller7]

It is a checkbox in the lower left corner of the Process tab of Task Manager.

 

[rsh]

Oops, I see it now, and unless it is unusual for there to be two showing in TM (which point to the same file location), I must look elsewhere for my slowing problem. Any suggestions?

Btw, there are eight svchost.exe processes running w/ just 4 tabs, TM, and Realplayer on; seems a bit odd -could this be because I had hibernated it last night?

Holy S; suddenly two more (now 10) appeared w/o my doing anything but bringing Realplayer's window to the front and then looking at TM again.

Closed Realplayer and saw the list shift a couple of times (unsure where the reason for this occurred, but above the scvhost files I was watching.

Also saw the number increase to eleven momentarily and then return to ten.

Any thoughts/ suggestions on this as well?

 

[LMiller7]

It is not unusual to have a dozen or more instances of svchost.exe running. I currently have 12 but have seen more. Each instance hosts one or more system services. There are complex technical reasons why this was done. The exact number of running instances can vary from one moment to another as services start and stop.

What you are seeing here is 100% normal.