What is csrss.exe?

[JamesJ]

What is csrss.exe. A search on the internet has brought up the
following web page saying in one paragraph that it is 'registered as a
Trojan.'
Then in another paragraph it says 'The Microsoft Client Server Runtime
Server subsystem'

http://www.liutilities.com/products/wintaskspro/processlibrary/csrss/

I don't understand.

James

 

[JamesJ]

I was just curious why the web site says that it is regitered as
a Trojan?

James

 

[JamesJ]

Sorry if I replied twice but I can't 'see' my reply.
You're telling me to replace csrss.exe with the same file
from my Vista Home Basic disk?
A virus scan reported no viruses in csrss.exe

James

 

[Peter Foldes]

James

In what scenario are you getting this error to show. In Vista there is no csrss.exe.
This you will find it in XP and W2K3 only . Apart from that depending in the
scenario it is a Ahlem. A worm otherwise known as csrss.exe

 

[JamesJ]

I see this in Task Manager|Processes. When I right clicked
on it and select 'End Process' my system rebooted and displayed
the bad shut down screen. Now I don't have any options when
I right click other than 'Perform Administrative Tasks'
I'm using Vista Home Basic sp1.

James

 

[Rob Moir]

I was just curious why the web site says that it is regitered as
a Trojan?

Because "csrss.exe" is a name. Nothing more.
More than one program/file can use that name
Good programs can use that name, such as, for example, a Microsoft Windows
component.
Bad programs can use that name too, such as, for example, a trojan horse
program.

A name means very little. Whether it's in the correct location and properly
"signed" by a legitimate vendor is much more important than what name the
file happens to have.

Rob

 

[JamesJ]

Thanks,
James

Because "csrss.exe" is a name. Nothing more.
More than one program/file can use that name
Good programs can use that name, such as, for example, a Microsoft Windows
component.
Bad programs can use that name too, such as, for example, a trojan horse
program.

A name means very little. Whether it's in the correct location and
properly "signed" by a legitimate vendor is much more important than what
name the file happens to have.

Rob

 

[Guest]

It's normal

 

[Bruce Chambers]

I have vista 32 sp1
I show the process 2x


+-------------------------------------------------------------------+
|Filename: Capture.JPG |
|Download: http://www.vistax64.com/attachment.php?attachmentid=12679|
+-------------------------------------------------------------------+

Client Service Runtime Process
http://www.anvir.com/clientserver-runtime-subsystem-csrssexe.htm
http://en.wikipedia.org/wiki/Client/Server_Runtime_Subsystem
http://www.neuber.com/taskmanager/process/csrss.exe.html


--

Bruce Chambers

Help us help you:


http://support.microsoft.com/default.aspx/kb/555375

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot

 

[JamesJ]

Thanks much,
James

My Vista Ultimate x86 (32 bit) has the file c:\windows\system32\csrss.exe.
It's been a core component of the Windows desktop since at least Windows
2000. I have also seen references to csrss.exe flagged as a trojan
program on some web-sites. A google search just now reports that only
AuditMyPC.com is reporting it as a virus. Given that AuditMyPC.com
doesn't seem to know that this file is part of Windows, I would strongly
advice avoiding this site.

Mike Ober.

 

[Woody]

As you found out you cannot rely on answers on the newsgroup as gospel. Also
any site that says a name is a Trojan with an offer to download it's
software to fix the problem is a Trojan in itself just trying to sell you
their software.

 

[JamesJ]

That, I believe!

James

As you found out you cannot rely on answers on the newsgroup as gospel.
Also any site that says a name is a Trojan with an offer to download it's
software to fix the problem is a Trojan in itself just trying to sell you
their software.

 

[LT]

I just purchased a new laptop from Dell and the disk light is continually
flashing. I looked using "task manager" and this program is responsible for
99% of the disk reads when the system is just sitting there. Can you tell me
what it does and can it be re-configured to reduce the disk reads?