ares1214

Splendid
Hello all, recently I have been cleaning my computer out, and I have come across a file called csrss.exe. I have heard it is either a microsoft thing, or a virus, but i have 2 files. when I try to delete 1, it sends me to blue screen, and i restart. any advice?
 

saran008

Distinguished
Where do you find this file?
Note: The csrss.exe file is located in the folder C:\Windows\System32. In other cases, csrss.exe is a virus, spyware, trojan or worm!

Have a look at this!
http://www.neuber.com/taskmanager/process/csrss.exe.html
http://www.processlibrary.com/directory/files/csrss/

If you feel that is an virus, download removal tool from here & do a scan!
http://www.symantec.com/security_response/writeup.jsp?docid=2001-103004-2955-99

To keep your system secure all the time,
Download & Install the following 3 freewares & Keep them always updated. It forms a free complete security suite for your system!
1. Avira Anvivir - http://www.free-av.com/en/download/index.html .
Avira is best & light solution for excellent overall system protection & internet security with real time updates, .

2. Malwarebytes - http://www.malwarebytes.org/ .
Malwarebytes is one of the best & effective antimalware tool out there.

3. Ccleaner - http://www.piriform.com/ccleaner/download .
CCleaner is a system optimization, privacy and cleaning tool with an efficient & most useful registry cleaner.

The Best Security & System Optimization combo for all types of systems.

Always use ccleaner & Disk cleanup for system cleaning, don't do it manually unless you are sure.
 

ricky_critic

Distinguished
May 27, 2010
183
0
18,710


csrss.exe - Client/Server Runtime Server Subsystem
The csrss.exe which is from Microsoft is located in the c:windowsSystem32 folder. We've been able to find one virus that runs as csrss.exe to fool you.

you may have been infected with a strain of the Ahlem.A worm.

csrss.exe is considered to be a security risk, not only because antivirus programs flag Ahlem.A Worm as a virus, but also because a number of users have complained about its performance.

Ahlem.A Worm is likely a virus and as such, presents a serious vulnerability which should be fixed immediately! Delaying the removal of csrss.exe may cause serious harm to your system and will likely cause a number of problems, such as slow performance, loss of data or leaking private information to websites.
 

I think you might reasonably expect to find a second copy of csrss.exe in the C:\Windows\winsxs folder also. As long as it has the same size and properties as the one in System32 I wouldn't be suspicious of it.
 

ricky_critic

Distinguished
May 27, 2010
183
0
18,710


The csrss.exe file included with Microsoft Windows is not spyware, a trojan, or a virus. However, like any file on your computer it can become corrupted by a virus, worm, or trojan. antivirus programs can detect and clean this file if it has become infected. Because this file is part of Microsoft Windows users should never delete or remove this file if they think it is infected, let the antivirus program handle it.