How to remove csrss error

 Click to Run a Free Scan for csrss.exe related errors

csrss.exe file information

The process Client Server Runtime Process or AutoIt v3 Compiled Script or FTP Serv-U Daemon or Transparent Proxy Server or mIRC or NAV Update or You may not distribute this software without the expressed verbal and written consent of it's auth or Microsoft Critical Update service or Csrss Helper File or Live Update or Microsoft Firewall Manager or Generic Hosts for WinService or Live Update 64 bit or Aurthor: Ben Nelson or np or MyCafeCup Platinum Client or csrss.exe or WSC-MA2 Application or Client-Server-Laufzeitprozess belongs to the software Microsoft® Windows® Operating System or csrss.exe or MicrosoftR WindowsR Operating System or Serv-U or Internet Proxy or Transparent Proxy Server or Microsoft? Windows? Operating System or DVD Solution or mIRC or Client Server Runtime Process or Infector or Microsoft Data Access or Keep Running or me-naked or NAV Update or All In One or Adobe Photoshop or WinDLL DLL Loader or NTLOAD or You may not distribute this software without the expressed verbal and written consent of it's aut or Microsoft Critical Update service or ChodeBot or Project or Windows Security Drivers or Microsoft¢ç Windows¢ç Operating System or svchost or Live Update or Csrss Helper File or Microsoft Firewall Manager or BaiduAdsSpy or Live Update 64 bit or explorer or Floater or Webcam Preview or upate or Universal Copy/Print Service or Outerinfo or HandyDriver or Panasonic Document Management or csrss.exe or np or Microsoft® Common Services Runtime Scripting Server or MyCafeCup Platinum or WSC-MA2 (UTF-8) or Betriebssystem Microsoft® Windows® or csrss.exe" -vt yazb or Subsytem Spooler Application or sm4ck3d.hopto.org or RemTool by Microsoft Corporation (www.microsoft.com) or Cat Soft (www.cat-soft.com) or Transparent Proxy Server or mIRC Co. Ltd (www.mirc.com) or Microsoft Windows or Home or NAV Update Sdn or csrss or Salfeld Computer or You may not distribute this software without the expressed verbal and written consent of it's auth or Microsoft® Windows Operating System or Organization or Potek Corporation or Gangstar or Sym or Symt or Microsoft® Windows® Operating System or Symt64bit or Xero Inc or Unitrin Data Systems or BR1GH7N4RY or TSoft or MyCafeCup Software Co.,Ltd or FSOFT or YAMAHA CORPORATION or Removal Tool.

Description: csrss.exe is located in the folder C:\Windows\System32. Known file sizes on Windows XP are 6144 bytes (82% of all occurrence), 4096 bytes, 7680 bytes.
File csrss.exe is a Windows core system file. It is a trustworthy file from Microsoft. The program is not visible. Therefore the technical security rating is 4% dangerous, however also read the users reviews.

Recommended: Identify csrss.exe related errors

If csrss.exe is located in a subfolder of C:\Windows\System32 then the security rating is 87% dangerous. File size is 2121216 bytes (16% of all occurrence), 74240 bytes, 104960 bytes, 70656 bytes, 112170 bytes, 119296 bytes, 118272 bytes, 80384 bytes, 3364352 bytes, 104448 bytes, 73216 bytes, 112923 bytes, 112970 bytes, 3541982 bytes, 76800 bytes, 79872 bytes, 79360 bytes, 2996736 bytes, 3205632 bytes, 766464 bytes, 1076814 bytes, 154794 bytes, 1565184 bytes, 4580352 bytes, 4572160 bytes, 7128 bytes, 4527616 bytes, 151998 bytes, 1567744 bytes, 74752 bytes, 1599488 bytes, 2932736 bytes, 4535296 bytes, 4546560 bytes, 16896 bytes, 28160 bytes, 128000 bytes, 221184 bytes, 113028 bytes, 470528 bytes, 4571648 bytes, 3364353 bytes, 4483584 bytes, 43520 bytes, 312383 bytes, 151490 bytes, 57344 bytes, 53248 bytes, 29696 bytes, 80896 bytes, 674304 bytes, 2001408 bytes, 183733 bytes, 4548608 bytes, 3206144 bytes, 440344 bytes, 24576 bytes. It is not a Windows core file. The program has no visible window. There is no description of the program. The file is located in the Windows folder, but it is not a Windows core file. The program is loaded during the Windows boot process (see Registry key: C:\Windows\win.ini, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit, , HKEY_LOCAL_MACHINE\SOFTWARE\Classes\batfile\shell\open\command, -, HKEY_LOCAL_MACHINE\SOFTWARE\Classes\piffile\shell\open\command, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce, , HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders). csrss.exe is able to monitor applications, hide itself.

If csrss.exe is located in a subfolder of C:\Windows then the security rating is 75% dangerous. File size is 698368 bytes (35% of all occurrence), 43078 bytes, 122913 bytes, 55390 bytes, 38982 bytes, 131916 bytes, 157478 bytes, 25137 bytes, 74240 bytes, 141606 bytes, 90884 bytes, 149286 bytes, 53554 bytes, 90905 bytes, 102912 bytes, 2063160 bytes, 227110 bytes, 90326 bytes, 53792 bytes, 132915 bytes, 52294 bytes, 45056 bytes, 103424 bytes, 147456 bytes, 122896 bytes, 123076 bytes, 48198 bytes, 167314 bytes, 229376 bytes, 101888 bytes, 51814 bytes, 81920 bytes, 25053 bytes, 185887 bytes, 88576 bytes, 791040 bytes, 97348 bytes, 169766 bytes, 5378048 bytes, 25061 bytes, 1369088 bytes, 67072 bytes, 6144 bytes, 57344 bytes, 416016 bytes, 4096 bytes, 61952 bytes, 1056768 bytes, 185026 bytes, 22609 bytes, 172774 bytes, 568832 bytes, 28742 bytes, 48640 bytes, 57856 bytes, 74752 bytes, 89600 bytes, 241664 bytes, 244777 bytes. It is not a Windows core file. The program is not visible. File csrss.exe is an unknown file in the Windows folder. The process uses ports to connect to LAN or Internet. There is no file information. csrss.exe is able to hide itself, monitor applications, record inputs.

If csrss.exe is located in the folder C:\Windows then the security rating is 83% dangerous. File size is 159744 bytes (21% of all occurrence), 26493 bytes, 163840 bytes, 68608 bytes, 27409 bytes, 109056 bytes, 108544 bytes, 35328 bytes, 29184 bytes, 45056 bytes, 31965 bytes, 27876 bytes, 278528 bytes, 155648 bytes, 28672 bytes, 26112 bytes, 29010 bytes, 30093 bytes, 32768 bytes, 28130 bytes, 34816 bytes, 30801 bytes, 25969 bytes, 156948 bytes, 27136 bytes, 28793 bytes, 212992 bytes, 13312 bytes, 129024 bytes, 27537 bytes, 679424 bytes, 229173 bytes, 24064 bytes, 29696 bytes, 30720 bytes, 1933824 bytes, 5117 bytes, 13824 bytes, 28974 bytes, 69632 bytes, 180224 bytes, 128000 bytes, 41140 bytes, 94208 bytes, 28172 bytes, 643584 bytes, 36227 bytes, 98304 bytes, 33760 bytes, 61057 bytes, 219194 bytes, 30208 bytes, 11721 bytes, 3609 bytes, 28796 bytes, 15872 bytes, 34804 bytes, 1923072 bytes, 38912 bytes, 304349 bytes, 25413 bytes, 128512 bytes, 22161 bytes, 47323 bytes, 40960 bytes, 23505 bytes.

If csrss.exe is located in a subfolder of "C:\Program Files" then the security rating is 66% dangerous. File size is 28672 bytes (20% of all occurrence), 1052672 bytes, 2703360 bytes, 2121216 bytes, 1174839 bytes, 1711616 bytes, 1111688 bytes, 1142784 bytes, 49152 bytes, 1091256 bytes, 1189549 bytes, 1930240 bytes, 769536 bytes, 1169068 bytes, 1056768 bytes, 1175073 bytes, 90255 bytes, 1103737 bytes, 141606 bytes, 1160865 bytes, 1081344 bytes, 1064960 bytes, 1066542 bytes.

If csrss.exe is located in a subfolder of "C:\Documents and Settings" then the security rating is 62% dangerous. File size is 167314 bytes (15% of all occurrence), 385536 bytes, 368128 bytes, 50151 bytes, 58880 bytes, 176581 bytes, 192000 bytes, 44435 bytes, 48432 bytes, 180909 bytes, 20480 bytes, 24576 bytes.

If csrss.exe is located in the folder "C:\Program Files" then the security rating is 67% dangerous. File size is 183470 bytes (50% of all occurrence), 196096 bytes.

If csrss.exe is located in the folder C:\Windows\System32\drivers then the security rating is 90% dangerous. File size is 6656 bytes (50% of all occurrence), 81920 bytes.

If csrss.exe is located in C:\ then the security rating is 42% dangerous. File size is 82432 bytes.

External information from Paul Collins:
There are different files with the same name:

• "Microsoft SourceSafe" definitely not required. Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "BagleAV" definitely not required. Added by the NETSKY.AB WORM! Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup!
• "ClickTheButton" definitely not required. ClickTheButton Downloader-MY adware. Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "CSRSS" definitely not required. Search page hijacker, redirecting to http://www.search-aide.com/. Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling
• "DIECOX" definitely not required. Added by a variant of the ATM.GEN TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "KernellApps" definitely not required.
• "Key Logger" definitely not required. Added by the BUCHON.A WORM! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "NTDLM" definitely not required. Added by the HALE TROJAN! Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup!
• "RegWrite" definitely not required. Added by the SOKACAPS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "Run TaskMrg" definitely not required. Added by the LDPINCH-W TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "rundll32" definitely not required. Added by the GUTTA TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "Shockwave" definitely not required. Added by the SNDOG WORM! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "SYSTEMSars32" definitely not required. Added by the AHLEM.A WORM! Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup!
• "WinUpdateProtection" can run at start up. ICE Remote Spy monitoring software, "secretly monitors everything your spouse, kids or employees do on the Internet and emails the data to you." Note - this file is installed in a C:\Windowsupdate\Ufp\Irs7 folder

Important: Some malware camouflage themselves as csrss.exe, particularly if they are located in c:\windows or c:\windows\system32 folder. Thus check the csrss.exe process on your pc whether it is pest. We recommend Security Task Manager for verifying your computer's security. It is one of the Top Download Picks of 2005 of The Washington Post and PC World.

Links: csrss.exe, csrss.exe

It is a critical system file. Does this process neeed to access the internet? I've been blocking it.
  Sandeep Luthra  

It is a critical system file.
  Sandeep Luthra  

"La actualización de seguridad actualiza un archivo .exe (..) Sin embargo, no puede forzar la detención de este proceso a menos que apague Windows. Por ejemplo, Csrss.exe es un proceso requerido en Windows." de : http://support.microsoft.com/kb/887012 Saludos
  Khul   (further information)

I now have spam coming out of my computer (sending all sorts of things such as viagra advertisements) thanks to this trojan. Whenver I delete it, it gets created again by 'winlogon.exe' so now I have to investigate how to clean my winlogon.exe
  Ian  

Someone please tell me how big winlogon.exe should be... i have found two on my system: c:\windows\winlogon.exe is 152kb, c:\windows\system32\winlogon.exe has a different icon embedded and is 491kb
  Ian  

CIA Rate copies the server with this name
  Scribnar  

csrss.exe is main exe. file and can't be terminated. some trojans can copy themselves right into the csrss file making them impossible to delete. I used norton antivirus to find this out, it can't remove a file that is a critical process.manual deletion will cause crashes.
  Xano  

My csrss.exe file was located where it was supposed to be, C:\WINDOWS\system32, so no virus, trojan, logger, etc. However, I was experiencing 100% CPU load when working in MS Excel. After reading this info page and a KB article from MS, I decided to erase the profile files stored locally as well those stored on the domain server and voila, no more 100% CPU load, problem solved. Hope this helps
  Ovidiu CRISU   (further information)

Recently found i was sending a tremendous amout of packets and had no programs running, found crss in the internet explorer folder put it in the trash can and internet went back to normal
  willie ha  

Do yourself a favor and get a mac.
   

When terminated by another process (not task manager) the system will be rebooted
  kelvinboy  

I had no Idea this was creating an havoc on my computer every time I log on to the internet. Another screw up of my latest reinstall of XP. DAMN!!!
  hasbriale   (further information)

Infection found on my machine by Acronis True Image team as Windows was spontaneously shutting down during backups. They had me remove this as it appeared in c:\windows\prefetch\CSRSS.EXE.12B63473.pf. There were 2 other files labelled csrss.exe, both in system 32, one a .dll, but I was told to leave these alone (I am no computer whiz). The suspect file deleted easily, and on reboot (which was recommended) I searched again and it was gone from the system. I was told it was a non-dangerous virus by the Acronis techs.
  Sherlock Holmes  

First of all a windows file, but if it's direct in the windows xp root, it's a mass spam mailer, which sends mails trough yahoo!
  Thickness  

More comments can be found here:
    (further information)

csrss scanner

Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

Registry Booster free scans, cleans, repairs and optimizes your system.

Other processes