Csrss.exe generates false updates from MS word

In general, 15 minutes after a system restart, a popup opens to tell me that an update is available in Word. Following the process in the Task Manager, I find that it is csrss.exe which is causing the issue. If I close the popup via the Task Manager it doesn't happen until the next reboot, and even not by clicking ok in the pop-up window seems do nothing (I followed the tasks Manager). How can I go to get rid of this problem?

Windows 7, usually last updated I think.

I get a random BSOD once in a while (maybe every month 2-4), which I always thought was my motherboard having problems and spoil, but perhaps this is too much. I've upgraded my PC to sleep most of the time rather than stop it.

- And your protection to the real-time AV program is...?

-What anti-malware scanners have tried so far to confirm that it is a malware related issue?

Following the process in the Task Manager, I find that it is csrss.exe which is causing the issue.

How do you determine this? Could you please elaborate more. Where is it located? Have you looked up in msconfig for a 'false' startup program?

The file real csrss.exe is located in the C:\Windows\System32 folder. In other cases, csrss.exe is a virus, spyware, Trojan or worm which should not be confused with the C:\Windows\System32\csrss.exe legitimate.

Suggest that you scan the PC using some (or all) of the following free anti-malware tools:

- ESET Online Scanner

- Malwarebytes Anti-Malware (Free Edition ONLY! ) Not the trial version - not the Premium version). To do this, you must 'uncheck' > 'enable the free trial version of Malwarebytes Anti-Malware bonus '.

- HitmanPro3 (free license - 30 days).

I get a random BSOD once in a while (maybe every 2-4 months)...

The course of behavior unacceptable:(dont vous devez prendre soin de l'ASAP.)

Tags: Windows

Similar Questions

  • Y at - it an update from Microsft Word? __

    I have just recived my Windows 7 upgrade via e-mail. I upgraded my computer last night but think dat any programs like Microsoft Word etc. has been deleted.  My question is can I continue to use the Vista in Microsoft Word form or y at - it a new version of it for Windows 7?

    Do I need an upgraded version of Microsoft Word?
    How much it will cost?
    Where can I get cheaper?

    Microsoft Word is not part of Windows and is a separate application.

    The current version is Word 2007.
    You can reinstall your Microsoft Word on your Windows 7 computer.

    It seems that you have done a fresh install rather than an upgrade of Vista. TaurArian [MVP] 2005-2010 - Update Services

  • Updates from HP.exe has encountered a problem and needs to close

    I get this message every time I start the desktop computer, and I'm afraid that I can't receive full updates from HP.   I have a HP Pavilion m7680y desktop computer.   How can I do this prompt go away?

    Hello Siberhusk,

    There is a program that starts when your computer starts. The start-up is managed by MSCONFIG. You will need to isolate the program that generated the message before finding the solution.

    To place your computer in a clean boot state... instructions available here
    http://goo.GL/w3KQH

    Once in a clean boot, see if the problem still occurs.

    If not then start programs turning under a little bit at a time until you isoliez what program to launch at startup generates the error.

  • When I turn on my computer and the desktop comes up, I get error Runner "file name (updates from HP.exe) Runner has no... "

    When I turn on my computer and the desktop comes up, I get a Runner error - "doesn't have a Runner (updates from HP.exe) file name '-' (the id separator).»  If I click OK everything continues normally.  What should I do?

    It is an HP with Windows XP computer.

    Hello

     
     
     
    Try to perform the clean boot and check if it helps, here is the link:
    How to configure Windows XP to start in a "clean boot" State
     
     
    Note:
     
    How to configure Windows to use a Normal startup state
    After you have used the boot is a way to solve your problem, you can follow these steps to configure Windows XP to start normally.
    1. click Start and then click Run .
    2. type msconfig, and then click OK.
    The System Configuration Utility dialog box appears.
    3. click on the general tab, click Normal Startup - load all device drivers and services and then click OK.
    4. When you are prompted, click restart to restart the computer.
  • When I open the Task Manager and select "Show processes from all users" there are 2 files virus csrss.exe?

    original title: virus csrss.exe?

    I use Vista Home Premium.  When I open the Task Manager and select "Show processes from all users" there are 2 files csrss.exe.  I learned that this indicates that I was infected by a virus.  Is this the case?

    Hi Julie,.

    Did you the latest changes on the system?

    Csrss.exe is Client/Server Runtime Subsystem.  All the Microsoft system has file csrss.exe running in the Task Manager, but it is likely to be infected by others. If it uses a lot of time processor and extremely abnormal in activities in the Task Manager, you can run a scan of the system security.

    You can read the following article to download the Microsoft Safety Scanner and perform a full scan on your computer.

    Microsoft safety scanner

    Note: When you perform the analysis, there are chances of losing the data that you can take a backup of important data before performing analysis.

    Hope this information is useful.

  • Csrss.exe & winlogon.exe shown in 'process' of the Task Manager with no user name or from a cache. How can I remove or put an end to this process?

    Csrss.exe is a knowledge trojen or spyware to invade the PC security

    Hi Albert,

    Csrss.exe, this is the part of the user mode of the subsystem Win32 (Win32.sys being the kernel-mode portion). CSRSS means client/server run-time Subsystem and is an essential subsystem that must run continuously. CSRSS is responsible for console windows, creating or deleting threads, and some parts of the 16-bit virtual MS-DOS environment.

    Winlogon.exe is the part of Windows Login subsystem. This process is responsible for managing the security key sequence (by pressing Ctrl + Alt + Delete before you see the logon box), loading of user profiles, the locking system when a screensaver is running and check the activation key for the operating system.

    I suggest you to run the Microsoft Safety Scanner and check if there is no virus.

    Microsoft Safety Scanner: http://www.microsoft.com/security/scanner/en-us/default.aspx

    Note: The Microsoft Safety Scanner ends 10 days after being downloaded. To restart a scan with the latest definitions of anti-malware, download and run the Microsoft Safety Scanner again. The data files that are infected can be cleaned by removing the file completely, which means that there is a risk of data loss.

    Let us know the status of the issue.

  • Is CSRSS.exe Trojan horse and how get rid of?

    I was told by one of the representatives of the Office to help HP that CSRSS.exe is a Trojan horse and the reason for which their printer is not working and why internet Explorer began to crash after I tried to install their printer... question is one CSRSS.exe Trojan and if I do I delete it from my computer.

    Hello

    If you need search malware here's my recommendations - they will allow you to
    scrutiny and the withdrawal without ending up with a load of spyware programs running
    resident who can cause as many questions as the malware and may be harder to detect as
    the cause.

    No one program cannot be used to detect and remove any malware. Added that often easy
    to detect malicious software often comes with a much harder to detect and remove the payload. Then
    its best to be thorough than paying the high price later now too. Check with them to one
    extreme overkill point and then run the cleaning only when you are sure that the system is clean.

    The methods below are for Windows 7 - Vista is very similar - for XP using RUN instead of
    Start - Search,.

    It can be made repeatedly in Mode safe - F8 tap that you start, however, you must also run
    the regular windows when you can.

    TDSSKiller.exe. - Download the desktop - so go ahead and right-click on it - RUN AS ADMIN
    It will display all the infections in the report after you run - if it will not run changed the name of
    TDSSKiller.exe to tdsskiller.com. If she finds something or not does not mean that you should not
    check with the other methods below.
    http://support.Kaspersky.com/viruses/solutions?QID=208280684

    Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone.
    (If Rootkits run UnHackMe)

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Malwarebytes - free
    http://www.Malwarebytes.org/products/malwarebytes_free

    SuperAntiSpyware Portable Scanner - free
    http://www.SUPERAntiSpyware.com/portablescanner.HTML?tag=SAS_HOMEPAGE

    Run the malware removal tool from Microsoft

    Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

    You should get this tool and its updates via Windows updates - if necessary, you can
    Download it here.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
    (Then run MRT as shown above.)

    Microsoft Malicious - 32-bit removal tool
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

    Microsoft Malicious removal tool - 64 bit
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495e-94E7-6349F4EFFC74&displaylang=en

    also install Prevx to be sure that it is all gone.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Prevx - Home - free - small, fast, exceptional CLOUD protection, working with others
    security programs. It is a single scanner, VERY EFFICIENT, if it finds something to come back
    here or use Google to see how to remove.
    http://www.prevx.com/   <-->
    http://info.prevx.com/downloadcsi.asp?prevx=Y  <-->

    Choice of PCmag editor - Prevx-
    http://www.PCMag.com/Article2/0, 2817,2346862,00.asp

    Try the demo version of Hitman Pro:

    Hitman Pro is a second scanner reviews, designed to save your computer from malicious software
    (viruses, Trojans, rootkits, etc.). who infected your computer despite safe
    what you have done (such as antivirus, firewall, etc.).
    http://www.SurfRight.nl/en/hitmanpro

    --------------------------------------------------------

    If necessary here are some free online scanners to help the

    http://www.eset.com/onlinescan/

    -----------------------------------

    Original version is now replaced by the Microsoft Safety Scanner
    http://OneCare.live.com/site/en-us/default.htm

    Microsoft safety scanner
    http://www.Microsoft.com/security/scanner/en-us/default.aspx

    ----------------------------------

    http://www.Kaspersky.com/virusscanner

    Other tests free online
    http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1

    --------------------------------------------------------

    After the removal of the malware: (for VISTA and XP, you must use their recommended
    methods to perform the SFC and CHKDSK which are similar.)

    Also follow these steps for the General corruption of cleaning and repair/replace damaged/missing
    system files.

    Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN

    Enter this at the command prompt - sfc/scannow

    How to fix the system files of Windows 7 with the System File Checker
    http://www.SevenForums.com/tutorials/1538-SFC-SCANNOW-Command-System-File-Checker.html

    How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
    generates in Windows Vista cbs.log
    http://support.Microsoft.com/kb/928228

    Also run CheckDisk, so we cannot exclude as much as possible of the corruption.

    How to run check disk in Windows 7
    http://www.SevenForums.com/tutorials/433-disk-check.html

    -----------------------------------------------------------------------

    If we find Rootkits use this thread and other suggestions. (Run UnHackMe)

    http://social.answers.Microsoft.com/forums/en-us/InternetExplorer/thread/a8f665f0-C793-441A-a5b9-54b7e1e7a5a4/

    ======================================

    VISTA and XP need other methods for a repair Installation.

    If necessary AFTER you are sure that the machine is clean of any malware. (DO NOT USE IF)
    MALWARE IS STILL PRESENT).

    How to do a repair installation to fix Windows 7
    http://www.SevenForums.com/tutorials/3413-repair-install.html

    =======================================

    For extreme cases:

    Norton Power Eraser - eliminates deeply embedded and difficult to remove crimeware
    This traditional antivirus analysis does not always detect. Because the Norton Power Eraser
    uses aggressive methods to detect these threats, there is a risk that it can select some
    legitimate programs for removal. You should use this tool very carefully and only after
    you have exhausted other options.
    http://us.Norton.com/support/DIY/index.jsp

    ================================

    If you are in North America, you can call 866-727-2338 for virus and spyware help
    infections. See http://www.microsoft.com/protect/support/default.mspx for more details. For
    international information, see your subsidiary local Support site.

    Microsoft support - Virus and Security Solution Center
    http://support.Microsoft.com/contactus/cu_sc_virsec_master?ws=support#TAB0

    I hope this helps.

    Rob Brown - Microsoft MVP<- profile="" -="" windows="" expert="" -="" consumer="" :="" bicycle=""><- mark="" twain="" said="" it="">

  • Infected computer - unable to end csrss.exe and winlogon.exe in the Task Manager

    original title: Trojan horses and worms: _

    in my pc win 7 when I run the task mngr I see to the process without all the properties and descriptions and I cannot put an end to these processes, how do I know that they are infected, the processes are 1: csrss.exe 2:winlogon.exe
                                                    

    Hello

    Those who are part of Windows and should be in the process. Normally they are not a problem unless you
    have an infection that affects them.

    =======================

    If you need search malware here's my recommendations - they will allow you to
    scrutiny and the withdrawal without ending up with a load of spyware programs running
    resident who can cause as many questions as the malware and may be more difficult to detect as the
    cause.

    No one program cannot be used to detect and remove any malware. Added that often easy
    to detect malicious software often comes with a much harder to detect and remove the payload. Then
    its best to be thorough than paying the high price later now too. Check with them to one
    extreme overkill point and then run the cleaning only when you are sure that the system is clean.

    It can be made repeatedly in Mode safe - F8 tap that you start, however, you must also run
    the regular windows when you can.

    Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone.
    (If Rootkits run UnHackMe)

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Malwarebytes - free
    http://www.Malwarebytes.org/

    Run the malware removal tool from Microsoft

    Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

    You should get this tool and its updates via Windows updates - if necessary, you can
    Download it here.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
    (Then run MRT as shown above.)

    Microsoft Malicious - 32-bit removal tool
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

    Microsoft Malicious removal tool - 64 bit
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495e-94E7-6349F4EFFC74&displaylang=en

    also install Prevx to be sure that it is all gone.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Prevx - Home - free - small, fast, exceptional CLOUD protection, working with others
    security programs. It is a single scanner, VERY EFFICIENT, if it finds something to come back
    here or use Google to see how to remove.
    http://www.prevx.com/   <-->
    http://info.prevx.com/downloadcsi.asp  <-->

    Choice of PCmag editor - Prevx-
    http://www.PCMag.com/Article2/0, 2817,2346862,00.asp

    Try the demo version of Hitman Pro:

    Hitman Pro is a second scanner reviews, designed to save your computer from malicious software
    (viruses, Trojans, rootkits, etc.). who infected your computer despite safe
    what you have done (such as antivirus, firewall, etc.).
    http://www.SurfRight.nl/en/hitmanpro

    --------------------------------------------------------

    If necessary here are some free online scanners to help the

    http://www.eset.com/onlinescan/

    New Vista and Windows 7 version
    http://OneCare.live.com/site/en-us/Center/whatsnew.htm

    Original version
    http://OneCare.live.com/site/en-us/default.htm

    http://www.Kaspersky.com/virusscanner

    Other tests free online
    http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1

    --------------------------------------------------------

    After the removal of malicious programs:

    Also follow these steps for the General corruption of cleaning and repair/replace damaged/missing
    system files.

    Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN

    Enter this at the command prompt - sfc/scannow

    How to fix the system files of Windows 7 with the System File Checker
    http://www.SevenForums.com/tutorials/1538-SFC-SCANNOW-Command-System-File-Checker.html

    How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
    generates in Windows Vista cbs.log
    http://support.Microsoft.com/kb/928228

    Also run CheckDisk, so we cannot exclude as much as possible of the corruption.

    How to run check disk in Windows 7
    http://www.SevenForums.com/tutorials/433-disk-check.html

    -----------------------------------------------------------------------

    If we find Rootkits use this thread and other suggestions. (Run UnHackMe)

    http://social.answers.Microsoft.com/forums/en-us/InternetExplorer/thread/a8f665f0-C793-441A-a5b9-54b7e1e7a5a4/

    ======================================

    If necessary AFTER THAT you are sure that the machine is clean of any malware.

    How to do a repair installation to repair Windows 7
    http://www.SevenForums.com/tutorials/3413-repair-install.html

    I hope this helps.

    Rob Brown - MS MVP - Windows Desktop Experience: Bike - Mark Twain said it right.

  • Csrss.exe - system error. The program cannot start because mozutils.dll is missing on your computer. Try reinstalling the program to fix this problem.

    Windows 7 SP1 and Firefox installed recently version 9.0.1. After having tired of the limitations of the opera.
    At startup I get ~ 20 of these boxes on the desk of dialogue (or he repeats when I try to get rid of).

    -msconfig doesn't show any crap from Firefox on the Startup tab
    -Fast Dial addon installed

    • -Windows Defender running
    • -installed / ran WinPatrol to review the startup entries and I noticed of csrss.exe 4 associated with Windows Defender and 3 Audio programs
    • -installed/ran Malwarebytes (w. definitions updated) and found Worm.Rebhip in 11 places, of which 4 have been associated to the above WinPatrol
    • -license of Malwarebytes to remove and reboot needed.

    NO error (s) on the desktop once started

  • Help! atieclxx.exe winlogon.exe and csrss.exe running with no description?

    Help, recently I realized that this three processes are running on my task manager process list. > aticlxx.exe and csrss.exe, winlogon.exe< they="" have="" no="" username,="" commandline,="" and="" no="" description,="" i="" cannot="" end="" any="" of="" them="" myself,="" i="" suspect="" its="" a="" malware.="" help="" is="" needed="" and="" tell="" me="" if="" it="" is="" suppose="" to="" be="" running="" at="" all,="" if="" yes="" why="" are="" there="" no="" description.="" i="" have="" trend="" micro="" titanium="" security="" running="" which="" i="" disabled="" before="" the="" dds="" scan="" below.="" i="" have="" used="" malware="" bytes="" to="" scan="" but="" nothing="" is="" detected.="" help="" of="" comfort="" is="" greatly="" needed="" as="" i="" want="" to="" know="" if="" its="" reallly="" a="" malware="" or="" just="" my="" mind="" having="" a="" false="">

    I noticed that my internet is slow with very high ping, my laptop is starting to become slower, although it is a new on
    Core i5 2.5 ghz ram 4 GB ddr3

    I ran norton 360, but nothing came out, and they are still running, I got my laptop, hard drive formatted and reinstalled windows, but they are still there

    When I start window in safe mode I find csrss.exe and winlogon.exe with description, but under normal conditions, that they are not

    pls help me :(

    Try "show processes from all users".

    Or run Process Explorer with 'show details for all processes"selected on the file menu.

    http://TechNet.Microsoft.com/en-us/Sysinternals/bb896653

  • my xp pro laptop will no longer updates from Microsoft.

    my xp pro laptop will no longer updates from Microsoft. I tried the automatic correction of Microsoft and a manual fix listed but not affect?

    This may have been following a 'clean' without a backup registry.

    Them

    Hi,

    It would help if you provided the WHOLE message and CORRECT, including all codes completely written word for Word - this can often help us identify the problem.

    If you think you know when it started, and it is recent, then see if a system restore to before that the problem will work.  If you use Windows 7, seehttp://www.sevenforums.com/tutorials/700-system-restore.html. If you are using Vista, seehttp://www.howtogeek.com/howto/windows-vista/using-windows-vista-system-restore/. If you are using XP, seehttp://support.microsoft.com/kb/306084. Sometimes this simple process made the rounds and sometimes that doesn't help - but it is easy and worth if she has recently begun.

    When everything is fixed, get rid of any program you use to do a cleaning of the registry.  Even if it wasn't the cause, it could easily be the next time.  It is poisonous to your system and is not necessary because Windows is a research work on its own.

    ***************************************************************

    Try the following compliments of Alvise - MVP:

    1 open administrative tools by clicking the Start button, and then click Panel.In control of administrative tools type search box, click on its entry.

    2. double-click on Services.

    3. in the Services dialog box, click Background Intelligent Transfer Service (you may need to scroll to find it, the entries are in alphabetical order).

    4. observe the selection (indicated in the third column) State. If you see it stopped, click the right mouse button on the Background Intelligent Transfer Service, make sure that she she defined to automatic and click Start. (If it does not start, click dependencies and do the same for each of them to confirm that they are not the cause of it starts do not.) Continue to the end, then reverse at the beginning and see if she will now stay on automatic and start and stay started. Do the same for services that follow if they does not start).

    5. in the Services dialog box, click Windows Update (you may need to scroll to find it, the entries are in alphabetical order).

    6 observe the State of selection (indicated in the third column). If you see it stopped, click the right button of the mouse on Windows Update and make sure that it is set to automatic and click Start.

    7. in the Services dialog box, click workstation (you may need to scroll to find it, the entries are in alphabetical order).

    8 observe the State of selection (indicated in the third column). If you see it stopped, click the right button of the mouse on my computer and make sure it is set to automatic and click Start.

    9. close the Services dialog box.

    Reboot and see if that helps.

    *********************************************************************************

    If this does not work,

    In C:\Windows\SoftwareDistribution, find and delete the content (but not the folders themselves) records ONLY the following two: downloads and the data store.

    If this does not work, try this: click Start > run > paste the following command into the Run dialog box, and then press ENTER. Wait for the success message.

    % SYSTEMROOT%\SYSTEM32\REGSVR32. EXE, % SYSTEMROOT%\SYSTEM32\WUAUENG. DLL

    If the above does not help, then I recommend the following in order of presentation:

    Try to reset components WU:
    How to reset the Windows Update components?

    Try the system update readiness tool:

    Description of the preparation tool system update for Windows Vista for Windows Server 2008, for Windows 7 and for Windows Server 2008 R2

    Try the Fix WU Utility:
    Repair & difficulty of the Windows with Fix WU Utility updates | The Windows Club

    ***************************************************************************************

    I hope this helps.

    Good luck!

  • Windows (xp) can't find csrss.exe,

    When I start my computer I find a message that windows (xp) cannot find csrss.exe, what can I do to fix this?

    Although the csrss process is a legitimate windows file, malware can often assume the name of legitimate files in an attempt to deceive the user. I recommend that you analyze firstly your computer with Malwarebytes which can be downloaded from the link below. Make sure that update you it before analysis. You can choose to run a quick scan.

    Malwarebytes.org

  • I have a virus in my system of csrss.exe

    I have two systems of csrss.exe on my computer. I know that one is a viruse and who he is. can someone tell me hoe to remove it.

    Thanks in advance.

    I recommend that you let your virus scanner check your computer infections rather worry that you are not familiar with the system files.

    http://www.trickyways.com/2010/03/what-is-Csrss-exe-process-in-Windows-is-it-a-virus-how-to-identify-orignal-file/

    Suggest that you first spread malware as the cause of the problem by following these steps:

    I. - delete your temporary files

    Clean the system (compensation to all temp/tmp folders and included all the content offline, the tif browser, delete the cookies of compensation.)

    http://winhelp2002.MVPs.org/delcache.htm>

    Click Start > all programs > Accessories > System Tools > Disk Cleanup
    II. - have your system scanned as a result of security/antivirus installed.
    III. - run this tool from Kaspersky: how to remove malware belonging to the family of Rootkit. Win32.TDSS

    http://support.Kaspersky.com/viruses/solutions?QID=208280684>
    IV. - download, install, update and run both of these tools to a-squared free scans:

    A very good antimalware app is SUPERAntiSpyware (SAS) and MalwareBytes Anti-Malware (MBAM).

    It is recommended to use the intelligent quick scan regularly, and complete analysis on a longer frequency - weekly, monthly - or only when something is found or you have a reason to suspect

    MalwareBytes anti-malware (MBAM)

    http://www.Malwarebytes.org/products/malwarebytes_free>

    SUPERAntiSpyware (SAS)

    http://SUPERAntiSpyware.com/superantispywarefreevspro.html>

    Csrss.exe is a standard part of Windows, and the Task Manager cannot display their properties.

    To make sure that they are legitimate Windows programs, you can examine them with the free program from Windows Sysinternals Process Explorer :

    1. Download ProcessExplorer.zip from the link I gave.

    2. Right-click and unzip the file.

    3. Right click on the extracted Procexp.exe file.

    4. Click run as administrator .

    5. Make a right click Csrss.exe or winlogon.exe in the process list.

    6. Click on Properties .

    7. Click the Image tab.

    8. Click on the check button.

    It should show that the file is loaded from the directory C:\Windows\System32\ and tell (checked) Microsoft Windows .

    UTC/GMT is 17:36 Wednesday, May 23, 2012

  • Questions about csrss.exe

    I have two questions on the process 'csrss.exe' running Vista Business 32 b SP2.

    1. In a variety of sites on the web, I read that having two processes csrss.exe running is an indication that a virus or malware are present, posing as one of the two images csrss.exe in memory.  If I bring up the Task Manager and a quick glance, I see only a single process csrss.exe (PID = 652, private memory = 1332K.  Field name of the image, the command line path and Description are white). However, if I hit the button "Show processes from all users", a second process csrss.exe appears, on PID = 596, private memory = 1200K (PID = 652 is now using 1 412 K or private working set memory).  No process uses any CPU at the moment, as far as I know.  Both display the same values following the different fields in the table:

      • Username = SYSTEM
      • Name=C:\Windows\System32\csrss.exe image path
      • Line=C:\Windows\system32\csrss.exe command ObjectDirectory = \Windows SharedSection = 1024, 12288, 512 Windows = SubSystemType = Windows ServerDll = basesrv, 1 ServerDll = winsrv:UserServerDllInitialization, 3 ServerDll = winsrv. ConserverDllInitialization, 2 = Off MaxRequest ProfileControl
      • Description = Client Server Runtime Process

      When I researched the csrss.exe file c:\ system, I found the following files csrss.exe. 'Properties' information after each. None of these files listed all the previous versions tab "Previous Versions":

      C:\Windows\System32\csrss.exe:

      File Client Server Runtime process Type Application version 6.0.6001.18000 file Description product name of the Microsoft Windows Operating System version 6.0.6001.18000 Copyright Microsoft Corporation product. All rights reserved size 6.00 KB updated Day 2008-01-19 03:33 language English (United States)

      C:\Windows\winsxs\x86_microsoft-Windows-csrss_31bf3856ad364e35_6.0.6001.18000_none_58e3e3d7e415ae4c\csrss.exe:
      File Client Server Runtime process Type Application version 6.0.6001.18000 file Description product name of the Microsoft Windows Operating System version 6.0.6001.18000 Copyright Microsoft Corporation product. All rights reserved size 6.00 KB updated Day 2008-01-19 03:33 language English (United States)

      C:\Windows\winsxs\x86_microsoft-Windows-csrss_31bf3856ad364e35_6.0.6000.16386_none_56ad21dbe72a9d78

      File Client Server Runtime process Type Application file version 6.0.6000.16386 Description product name of the Microsoft Windows Operating System version 6.0.6000.16386 Copyright Microsoft Corporation product. All rights reserved updated dimensions 7,50 KB day 02/11/2006 language English (United States)

      In addition, here are the MD5 signatures for each file:

      c:\Windows\System32\csrss.exe abca209eba02cb59233614db83b4f50d c:\Windows\winsxs\x86_microsoft-windows-csrss_31bf3856ad364e35_6.0.6001.18000_none_58e3e3d7e415ae4c\csrss.exe abca209eba02cb59233614db83b4f50d c:\Windows\winsxs\x86_microsoft-windows-csrss_31bf3856ad364e35_6.0.6000.16386_none_56ad21dbe72a9d78\csrss.exe 117b7c8a8b026a5dce5e3180ed05e823

      So the new version is identical in both of its directories. But there is an older version (6.0.6000.16386) hang out there.

      One last thing: when I look into a review process advantage 3rd, 596 PID and PID 652 tool appear as:

      Version 6.0.6001.18000 time: 2008-01-19 03:33

      And when I run the equivalent of the UNIX 'strings' command against them, I find that both contain the following (among others):

      version = "5.1.0.0.

      Is this normal? Or do I have to remove the old file csrss.exe?

    2. Csrss.exe does need access to the wider internet, or only certain addresses in the range of the internet on my home network behind my firewall/router; or only the loopback address?  Because Zonealarm says sometimes csrss.exe is asked for internet access. And when I allow it, it okays two access my local network and to the internet as a whole.  This behavior is normal? For now, I have disabled access to the wider internet of csrss.exe, and I'm limiting access to machines behind my firewall. I would like to be able to restrict it to my loopback address.  Nothing wrong with that?
    Thank you!

    Hello elg476,

    You can download (free) MalwareBytes link: http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572
    .html? tag = mncol install, Update and do a scan of your system to make sure that it is indeed clean. To be completely sure that your computer is safe do this scan in safe mode. Restart it and press the F - 8 key several times when the system boots and select Safe mode and run Malwarebytes in safe mode, it will attract the most difficult malware.

    Hope this helps you. Let us know anyway. Make it a great day!

    "In the end the love you take is equal to The Love You Make" (The Beatles last song from their latest album, Abbey Road.)

  • Windows Update does not install the updates from 14/04/2009. Error code 80070002.

    I'm running 32-bit Windows Vista Home Premium on a Dell Dimension E520 PC desktop with processor Pentium dual core and 3 GB of RAM.
    Reasonably up-to-date hardware. Well protected and all software security entirely to so far.
    My problem that goes from Windows Update is not install updates from 14/04/2009 and returns the error Code 80070002.
    I followed the advice and went in the Windows Software Distribution folder and remove all the contents of the data store and records downloads and tried again about thirty times now.
    I get regarding the acceptance of the license agreement and clicking on, ok, when Vista dims the screen and asks if I started it and then the error message in Windows Update, saying: "some updates were not installed."
    Is not a computer expert, I guess that what is described in help Windows Update error Code 80070002 is the same as 0 x 80070002 for which I found advice on a Microsoft page to save these commands
    net stop wuauserv
    CD %systemroot%\SoftwareDistribution
    Ren Download.old download
    net start wuauserv
    as a windows batch file and run as administrator.
    I now have a download folder and Download.old folder. Fascinating but no help at all!
    I infer that the numbers of 0x0 are my six error codes failed attempts to install Vista Service Pack 1, a few months ago who always ended up with an unusable computer suspended with a black screen and the white writing showing 46 thousand of 96 thousand file and something, followed by a number of 0x0.
    The only way I could get of these attempts was by booting from the Installation of Vista disk, masking the Service Pack 1 update and using the system restore, but that's another story.
    Have an impact on my current problem, I wonder?
    For absolute clarity are the updates that won't install:
    Explores update for Internet Explore 7 edition (KB963027) 14/04/2009 (Just editing that.) Typed a wrong number in a first time. Sorry).
    Four updates of security for Windows Vista (KB952004) (KB956572) (KB959426) (KB960803)
    Windows Malicious Software Removal Tool - April (KB890830). (I downloaded it manually and run it from my office and we found no problem).
    Update of security for Microsoft Office System 2007 (KB960003)
    Update of security for Microsoft Office Excel 2007 (KB959997).
    I'm at a loss what to try next.
    FYI, I use Uni-bleu Power Suite 2009, McAfee Total Protection and Ad-Aware Anniversary Edition with Ad-Watch Live on.
    I tried to do everything that it with Ad-Aware died, but my hunch is that the problem is in Vista ot the updates themselves.
    I'm quite competent with guests of orders, not to mention manually editing the registry!
    However, any help would be received with gratitude and I guess that if the instructions are evidence of fool I have very carefully follow step by step.

    I have the same symptoms: from a distinct point in time updates of windows works more and every time returned the error code 80070002.
    After a few hours, I found the solution: sfc/scannow reported the wuauclt.exe file.
    And the reason was: McAfee virusscan put this file in quarantine. He is falsely W32/Generic.worm.aa in there.
    Restore this file from the GUI of McAfee completely solved this problem.

Maybe you are looking for

  • HP ProBook 470 G3: HP ProBook 470 G3 HDD Support

    Hello people, I bought a HP ProBook 470 G3 and I'm trying to insert a second hard drive in the laptop. The first disc is a SSD M2. I discovered that there is no support inside the laptop, so I can't provide hard drive. I found the material to drive H

  • HP probook 4530 s: webcam problem

    Pls I can't access my webcam on my hp probook 4530 s. I don't know if I'm missing a driver but there is no exclamation point in my device manager. Please help me.

  • PCI Simple Communications controller &amp; unknown device

    I don't know what to do with that driver. Need help! PCI\VEN_8086 & DEV_1E3A & SUBSYS_17F6103C & REV_04 PCI\VEN_8086 & DEV_1E3A & SUBSYS_17F6103C PCI\VEN_8086 & DEV_1E3A & CC_078000 PCI\VEN_8086 & DEV_1E3A & CC_0780 And this: ACPI\HPQ6000 * HPQ6000

  • Problem with the disk check.

    32-bit Vista Home Premium: About 6 months ago, I ran a Check Disk from my C drive (using Vista error checking tool) and checked the two boxes before starting (fix Auto file system and search for errors / attempt to recover bad sectors). He ran throug

  • wiwdows store

    Hello I managed not to open Windows store under W8 have you a solution thanks