Task Manager csrss / Csrss

  • Thread starter Thread starter Bob
  • Start date Start date
B

Bob

My task manager shows two versions of this program running, the first
entitled 'Csrss.exe' and the second csrss.exe.

Is this normal for XP sp1 ?

Do I have a virus ?


I also have 5 verions of running (3 on 'system' proceses, 1 on
'network' and 1 on 'local service')

Do I need to investigate these as viruses or are they 'trusted'
processes ?

Thanks
Bob
 
I also have 5 verions of running (3 on 'system' proceses, 1 on
'network' and 1 on 'local service')
Click to expand...


Sorry I forgot to include the filename "svchost.exe"

I must be suffering from data leakage!
Bob
 
Bob said:
My task manager shows two versions of this program running, the first
entitled 'Csrss.exe' and the second csrss.exe.

Is this normal for XP sp1 ?

Do I have a virus ?


I also have 5 verions of running (3 on 'system' proceses, 1 on
'network' and 1 on 'local service')

Do I need to investigate these as viruses or are they 'trusted'
processes ?

Thanks
Click to expand...

Bob

What your seeing is normal for XP.

CSRSS.EXE is the user-mode portion of the Win32 subsystem (with Win32.sys
being the kernel-mode portion). Csrss stands for client/server run-time
subsystem and is an essential subsystem that must be running at all times.
Csrss is responsible for
console windows, creating and/or deleting threads, and some parts of the
16-bit virtual MS-DOS environment.

Multiple instances of svchost.exe is also normal. This file acts as a host
or container for multiple services that may be running on the system. See
the following article for a description.

A Description of Svchost.exe in Windows XP:
http://support.microsoft.com/?kbid=314056


--
Ronnie Vernon
Microsoft MVP-Windows Shell/User

Please reply to the newsgroup so all may benefit.
http://www.dts-l.org
http://www.mvps.org
 
Back
Top