What is the Csrss.exe process? Is the Csrss.exe process a virus?

What is the Csrss.exe process?

Csrss.exe is usually the normal process of the system, the process file is Csrss or Csrss.exe, is a Microsoft client, server-side run-time subsystem, windows, one of the core processes. Managing Windows graphics-related tasks is important to the normal operation of the system. CSRSS is the abbreviation of Client/server Runtime Server subsystem, the client/server subsystem, which controls the Windows graphics-related subsystem and must be run all the time. CSRSS is used to maintain Windows control, create or delete threads, and some 16-bit virtual MS-DOS environments. It could also be created by viruses such as w32.netsky.ab@mm.

Csrss.exe Process Information

Process: Csrss.exe, CSRSS
Process file: Csrss or Csrss.exe
Process Name: Microsoftclient/serverruntime Subsystem
Process Category: Other processes
Produced by: Microsoft Corp.
Belongs to: Microsoft Windows operating System
System process: Yes
Background program: Yes
Network Related: No
Common error: Blue screen after Force end
Memory Usage: Unknown
Security Level (0-5): 0
Spyware: No
Advertising software: No
Virus: No
Trojan: No
This process mainly controls the graphics subsystem, manages the threads, and executes the graphics window and some other parts of the MS-DOS environment. This is an important process that will automatically open and run as the system starts. In most cases it is safe that you should not terminate it, but there are similar viruses that appear [1].

Is the Csrss.exe process a virus?

Many Trojan Horse downloader to infect Windows system files Csrss.exe file as a kill-free way, bypassing antivirus software and game protection system. Once an infected system file is loaded into memory by a network game, will be stored in the server on the internet stolen Trojan horse download to the user computer (characterized by the extension of DRV), stealing "DNF", "through the FireWire," "Tianlong Eight" and other popular online games account password. At the same time, will also be in the course of the game frequently card machine, if by some no System file repair function of anti-virus software will be infected with the virus Csrss.exe files deleted, and even cause system crashes.

Virus and security

Obviously as long as some key processes will get Trojan virus program "preferential treatment", Csrss.exe is no exception. Information from computer security software vendors shows the existence of such trojans, which may modify Csrss.exe or confuse users with similar process names to gain more trust.

Related malicious processes: Csrsc.exe, Csrs.exe, Csrsses.exe, Csrssc.exe, Csrse.exe

These processes listed above are mainly Trojan virus, they are mainly used to steal account and password of the keyboard recorders or variants, if the computer has these Trojan virus, they will steal your various account password. So if you find a similar suspicious process or Csrss.exe program size is not (Professional Edition should not be greater than 6KB, the flagship version of WIN7 should not be greater than 8KB) or in a System32 directory, you should immediately use anti-virus software to process the computer.

Csrss.exe directory location in the system:

C:/windows/system32/csrss.exe (Size: 6KB, I see them in the same size on XP and Win7)

My actual test found that this process has only one Windows XP, Windows 7 has two, the size is 8KB

And there is only one Csrss.exe process in the XP system, and there are two in the Win7 system. Others responded that Vista also has two, because I did not understand Vista so not clear, the use of this system people want to be able to leave a message feedback. The Csrss.exe in the System32 directory can be assured if the size is not abnormal, and you should be wary of this process in any other directory. (