csrss.exe Information

csrss.exe

Click here to Run a Free Scan for csrss.exe Related Errors

What is it?
csrss.exe - Client/Server Runtime Server Subsystem

What does it do?
This is the user-mode portion of the Win32 subsystem (with Win32.sys being the kernel-mode portion). Csrss stands for client/server run-time subsystem and is an essential subsystem that must be running at all times. Csrss is responsible for console windows, creating and/or deleting threads, and some parts of the 16-bit virtual MS-DOS environment.

You will not be able to end this through task manager!

More info

Virus Precaution:

The csrss.exe which is from Microsoft is located in the c:windowsSystem32 folder. We've been able to find one virus that runs as csrss.exe to fool you.

Nimda.E - Symantec Corporation

Fix csrss.exe Errors: Free Scan

Recommendation: Run a Free Performance Scan to automatically optimize memory, CPU and Internet Settings

csrss.exe is a Windows System File and should be in a system directory. If it is then this application is safe.

Startup DB Entries:
( 1 ) "Added by the WEBUS.F TROJAN! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the System folder"
( 2 ) "Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process
( 3 ) "Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process
( 4 ) "Added by the DLOADER-QI TROJAN! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder"
( 5 ) "Added by the WinSpy surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the ""ComRoot"" subfolder"
( 6 ) "Added by the NETSKY.AB WORM! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder"
( 7 ) "Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process
( 8 ) "Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process
( 9 ) "ClickTheButton Downloader-MY adware! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!"
( 10 ) "Unidentified malware! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a SystemLevel4 subfolder"
( 11 ) "Added by the BANCBAN-ET TROJAN! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a ""Central de Seguran�a"" subfolder"
( 12 ) "Search page hijacker
( 13 ) "Added by the CHOD WORM! Note - this is not the legitimate csrss.exe process
( 14 ) "Added by the KEYLOG-AQ KEYLOGGER! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in the Windows or Winnt folder"
( 15 ) "Added by the CHODE-J WORM! Note - this is not the legitimate csrss.exe process which is always located in the System (9x/Me) or System32 (NT/2K/XP) folder and should not normally figure in Msconfig/Startup! This file is located in a random subfolder"

Disclaimer

Every attempt has been made to ensure the information about csrss.exe is accurate but alot of malware applications try to pose as valid applications. If it is something other than what was posted above please leave some feedback in the forum.
Printer Friendly

User Comments

Dida I got drmsartload - I tried to remove it but at boot i keeps coming back. I found out that csrss.exe starting it - and that this csrss.exe is in windows directory not in windows/system32 directory
Rich I kept seeing Windows Security Center saying windows firewall was turned off, as well as automatic updates. Also windows firewall was set to group policy, so you could not enable it even though group policy was not configured. Additionally there was always a mysterious connection to stealth.insert.si Booted in safe mode, deleted the csrss.exe from \windows and all is good now.
Rich I kept seeing Windows Security Center saying windows firewall was turned off, as well as automatic updates. Also windows firewall was set to group policy, so you could not enable it even though group policy was not configured. Additionally there was always a mysterious connection to stealth.insert.si Booted in safe mode, deleted the csrss.exe from \windows and all is good now.
Andrew My firewall says csrss.exe is trying to use my internet connection, is the windows os doing this or it is a virus?
Tristan The csrss file is the root of all my problems, but it will now allow me to delete it, nor can I terminate the process. I disable it on startup but it adds itself again. It won't allow me to open any other programs/windows to try and remove it.
ethan I have this problem and i cant see to fix it the only way i can figure out how to get rid of it in a way tat i can understand is to just reinstall vista xp etc....
jordan i am having all of the problems above any fixes yet?

Submit your comment Comments ARE moderated! Please only submit once!

Comment