How to remove csrss error

 Click to Run a Free Scan for csrss.exe related errors

csrss.exe file information

The process Client Server Runtime Process or FTP Serv-U Daemon or AutoIt v3 Compiled Script or mIRC or Transparent Proxy Server or NAV Update or You may not distribute this software without the expressed verbal and written consent of it's auth or Microsoft Critical Update service or Csrss Helper File or Live Update or Microsoft Firewall Manager or Generic Hosts for WinService or Live Update 64 bit or Aurthor: Ben Nelson or np or MyCafeCup Platinum Client or csrss.exe or WSC-MA2 Application or Client-Server-Laufzeitprozess or Microsoft Safe belongs to the software Microsoft Windows Operating System or Serv-U or csrss.exe or Internet Proxy or DVD Solution or mIRC or MicrosoftR WindowsR Operating System or Client Server Runtime Process or Infector or Transparent Proxy Server or Microsoft Data Access or Keep Running or me-naked or NAV Update or All In One or Adobe Photoshop or WinDLL DLL Loader or NTLOAD or You may not distribute this software without the expressed verbal and written consent of it's aut or Microsoft Critical Update service or ChodeBot or Project or Windows Security Drivers or Microsoft¢ç Windows¢ç Operating System or svchost or Live Update or Csrss Helper File or Microsoft Firewall Manager or BaiduAdsSpy or Live Update 64 bit or explorer or Floater or Webcam Preview or upate or Universal Copy/Print Service or Outerinfo or HandyDriver or Panasonic Document Management or csrss.exe or np or Microsoft Common Services Runtime Scripting Server or MyCafeCup Platinum or WSC-MA2 (UTF-8) or Betriebssystem Microsoft Windows or csrss.exe" -vt yazb or Subsytem Spooler Application or sm4ck3d.hopto.org or RemTool or fsdfs by Microsoft Corporation (www.microsoft.com) or Cat Soft (www.cat-soft.com) or mIRC Co. Ltd (www.mirc.com) or Microsoft Windows or Home or Transparent Proxy Server or NAV Update Sdn or csrss or Salfeld Computer or You may not distribute this software without the expressed verbal and written consent of it's auth or Microsoft Windows Operating System or Organization or Potek Corporation or Gangstar or Sym or Symt or Symt64bit or Xero Inc or Unitrin Data Systems or BR1GH7N4RY or TSoft or MyCafeCup Software Co.,Ltd or FSOFT or YAMAHA CORPORATION or Removal Tool or Gareth Software or Programs and Designs Inc.

Description: csrss.exe is located in the folder C:\Windows\System32. Known file sizes on Windows XP are 6,144 bytes (83% of all occurrence), 4,096 bytes, 7,680 bytes.
File csrss.exe is a Windows core system file. It is a trustworthy file from Microsoft. The program is not visible. Therefore the technical security rating is 4% dangerous, however also read the users reviews.

Recommended: Identify csrss.exe related errors

If csrss.exe is located in a subfolder of C:\Windows\System32 then the security rating is 87% dangerous. File size is 74,240 bytes (12% of all occurrence), 2,121,216 bytes, 104,960 bytes, 70,656 bytes, 112,170 bytes, 119,296 bytes, 118,272 bytes, 80,384 bytes, 104,448 bytes, 3,364,352 bytes, 73,216 bytes, 112,923 bytes, 112,970 bytes, 3,541,982 bytes, 76,800 bytes, 79,872 bytes, 79,360 bytes, 2,996,736 bytes, 3,205,632 bytes, 766,464 bytes, 1,076,814 bytes, 4,580,352 bytes, 4,572,160 bytes, 7,128 bytes, 4,527,616 bytes, 151,998 bytes, 1,567,744 bytes, 74,752 bytes, 1,599,488 bytes, 2,932,736 bytes, 4,535,296 bytes, 4,546,560 bytes, 16,896 bytes, 28,160 bytes, 128,000 bytes, 20,480 bytes, 221,184 bytes, 113,028 bytes, 470,528 bytes, 4,571,648 bytes, 3,364,353 bytes, 4,483,584 bytes, 43,520 bytes, 312,383 bytes, 151,490 bytes, 57,344 bytes, 53,248 bytes, 29,696 bytes, 80,896 bytes, 674,304 bytes, 2,001,408 bytes, 183,733 bytes, 4,548,608 bytes, 43,072 bytes, 3,206,144 bytes, 440,344 bytes, 24,576 bytes. It is not a Windows core file. The program has no visible window. There is no description of the program. The file is located in the Windows folder, but it is not a Windows core file. The program is loaded during the Windows boot process (see Registry key: C:\Windows\win.ini, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit, , HKEY_LOCAL_MACHINE\SOFTWARE\Classes\batfile\shell\open\command, -, HKEY_LOCAL_MACHINE\SOFTWARE\Classes\piffile\shell\open\command, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce, , HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders). csrss.exe is able to monitor applications, hide itself.

If csrss.exe is located in a subfolder of C:\Windows then the security rating is 75% dangerous. File size is 698,368 bytes (25% of all occurrence), 122,913 bytes, 43,078 bytes, 845,606 bytes, 55,390 bytes, 141,606 bytes, 747,302 bytes, 38,982 bytes, 131,916 bytes, 812,838 bytes, 74,240 bytes, 829,222 bytes, 157,478 bytes, 25,137 bytes, 149,286 bytes, 6,144 bytes, 788,262 bytes, 710,438 bytes, 2,063,160 bytes, 90,905 bytes, 94,208 bytes, 102,912 bytes, 870,182 bytes, 227,110 bytes, 16,896 bytes, 132,915 bytes, 169,766 bytes, 45,056 bytes, 67,072 bytes, 103,424 bytes, 69,632 bytes, 688,128 bytes, 866,086 bytes, 52,294 bytes, 266,316 bytes, 90,884 bytes, 147,456 bytes, 122,896 bytes, 48,198 bytes, 167,314 bytes, 684,032 bytes, 81,920 bytes, 185,887 bytes, 791,040 bytes, 808,742 bytes, 5,378,048 bytes, 25,061 bytes, 1,369,088 bytes, 165,676 bytes, 4,096 bytes, 61,952 bytes, 185,026 bytes, 17,966 bytes, 568,832 bytes, 28,742 bytes, 57,856 bytes, 67,584 bytes, 89,600 bytes, 241,664 bytes, 90,326 bytes, 123,076 bytes, 101,888 bytes, 229,376 bytes, 145,702 bytes, 684,037 bytes, 25,053 bytes, 88,576 bytes, 97,348 bytes, 57,344 bytes, 416,016 bytes, 1,056,768 bytes, 22,609 bytes, 172,774 bytes, 48,640 bytes, 176,422 bytes, 74,752 bytes, 244,777 bytes. It is not a Windows core file. The program is not visible. File csrss.exe is an unknown file in the Windows folder. There is no description of the program. Program uses ports to connect to LAN or Internet. csrss.exe is able to hide itself, record inputs, monitor applications, manipulate other programs.

If csrss.exe is located in the folder C:\Windows then the security rating is 84% dangerous. File size is 159,744 bytes (20% of all occurrence), 26,493 bytes, 163,840 bytes, 68,608 bytes, 109,056 bytes, 108,544 bytes, 27,409 bytes, 35,328 bytes, 29,184 bytes, 45,056 bytes, 147,968 bytes, 31,965 bytes, 27,876 bytes, 81,920 bytes, 278,528 bytes, 155,648 bytes, 53,248 bytes, 26,112 bytes, 28,672 bytes, 29,010 bytes, 30,093 bytes, 32,768 bytes, 28,130 bytes, 30,801 bytes, 25,969 bytes, 156,948 bytes, 27,136 bytes, 28,793 bytes, 212,992 bytes, 13,312 bytes, 129,024 bytes, 27,537 bytes, 679,424 bytes, 229,173 bytes, 24,064 bytes, 29,696 bytes, 30,720 bytes, 13,824 bytes, 28,974 bytes, 69,632 bytes, 180,224 bytes, 128,000 bytes, 41,140 bytes, 94,208 bytes, 28,172 bytes, 643,584 bytes, 36,227 bytes, 98,304 bytes, 33,760 bytes, 61,057 bytes, 156,672 bytes, 219,194 bytes, 30,208 bytes, 11,721 bytes, 73,216 bytes, 28,796 bytes, 15,872 bytes, 34,804 bytes, 1,923,072 bytes, 304,349 bytes, 38,912 bytes, 25,413 bytes, 128,512 bytes, 22,161 bytes, 47,323 bytes, 40,960 bytes, 23,505 bytes.

If csrss.exe is located in a subfolder of "C:\Program Files" then the security rating is 66% dangerous. File size is 28,672 bytes (18% of all occurrence), 1,052,672 bytes, 2,703,360 bytes, 2,121,216 bytes, 1,174,839 bytes, 1,711,616 bytes, 141,606 bytes, 1,111,688 bytes, 1,142,784 bytes, 49,152 bytes, 1,091,256 bytes, 1,189,549 bytes, 1,930,240 bytes, 769,536 bytes, 1,201,827 bytes, 1,169,068 bytes, 1,056,768 bytes, 1,175,073 bytes, 90,255 bytes, 1,103,737 bytes, 311,808 bytes, 1,160,865 bytes, 1,081,344 bytes, 1,064,960 bytes, 1,066,542 bytes.

If csrss.exe is located in a subfolder of "C:\Documents and Settings" then the security rating is 63% dangerous. File size is 58,033 bytes (13% of all occurrence), 167,314 bytes, 385,536 bytes, 368,128 bytes, 50,151 bytes, 58,880 bytes, 176,581 bytes, 192,000 bytes, 44,435 bytes, 48,432 bytes, 180,909 bytes, 20,480 bytes, 24,576 bytes.

If csrss.exe is located in the folder C:\Windows\System32\drivers then the security rating is 64% dangerous. File size is 81,920 bytes (40% of all occurrence), 335,872 bytes, 542,720 bytes, 6,144 bytes.

If csrss.exe is located in the folder "C:\Program Files" then the security rating is 67% dangerous. File size is 183,470 bytes (50% of all occurrence), 196,096 bytes.

If csrss.exe is located in C:\ then the security rating is 42% dangerous. File size is 82,432 bytes.

External information from Paul Collins:
There are different files with the same name:

• "Microsoft SourceSafe" definitely not required. Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "BagleAV" definitely not required. Added by the NETSKY.AB WORM! Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup!
• "ClickTheButton" definitely not required. ClickTheButton Downloader-MY adware. Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "CSRSS" definitely not required. Search page hijacker, redirecting to http://www.search-aide.com/. Note - this is not the valid Client Server Runtime Subsystem (csrss.exe) process, which provides text window support, shutdown, and hard-error handling
• "DIECOX" definitely not required. Added by a variant of the ATM.GEN TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "KernellApps" definitely not required.
• "Key Logger" definitely not required. Added by the BUCHON.A WORM! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "NTDLM" definitely not required. Added by the HALE TROJAN! Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup!
• "RegWrite" definitely not required. Added by the SOKACAPS TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "Run TaskMrg" definitely not required. Added by the LDPINCH-W TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "rundll32" definitely not required. Added by the GUTTA TROJAN! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "Shockwave" definitely not required. Added by the SNDOG WORM! Note - this is not the legitimate csrss.exe process, which should not appear in Msconfig/Startup!
• "SYSTEMSars32" definitely not required. Added by the AHLEM.A WORM! Note - this is not the legitimate csrss.exe process which should NOT appear in Msconfig/Startup!
• "WinUpdateProtection" can run at start up. ICE Remote Spy monitoring software, "secretly monitors everything your spouse, kids or employees do on the Internet and emails the data to you." Note - this file is installed in a C:\Windowsupdate\Ufp\Irs7 folder

Important: Some malware camouflage themselves as csrss.exe, particularly if they are located in c:\windows or c:\windows\system32 folder. Thus check the csrss.exe process on your pc whether it is pest. We recommend Security Task Manager for verifying your computer's security. It is one of the Top Download Picks of 2005 of The Washington Post and PC World.

Links: csrss.exe, csrss.exe

Windows Systemdatei - sofern im korrekten Verzeichnis (...\System32\). Client-Server runtime Modul: elementar und wichtig! Kann aber beendet werden, wodurch zumeist die Geschwindigkeit/Leistung des System deutlich zunimmt (meiner subjektiven Beobachtung mit XP SP2 zufolge - nicht unbedingt allgemein gültig!)
  Tim  

csrss.exe is a main system file for windows. It can only be in C:\WINDOWS\System32 to be safe; otherwise it is apart of a piece of malware. -- Note for all trainees, you will find this in a lot of logs.
  TechPro5238  

csrss.exe is legitimate, but I found a handle called kdmgk.exe embedded in mine. it's redirecting dns :(
  dvnt bstrd  

well i have two of it running and it only found one file... they are exactly the same and both are running with no capital letters so im just gonna say its a duplicate xD
  gtamad  

legit file
  da-1-to-fix-them-all  

it has been ok 4 me i have it in C:\WINNT\ServicePackFiles\i386 and C:\WINNT\system32 the only weird thing is i keep geting this 1 popup that says that i need 2 restart my computerit comes up every 5 min or so and gives me 4 minutes b4 it restarts my computer unless I press cancel. I am still looking 4 another virus. They are both 6 kb. the 1 in system 32 is capslocked and the 1 in i386 is not can anyone give me any extra info?
  human being  

This infected my friends laptop, and I finally figured out that it was disguising itself as a folder here: c:\program files\common files\system. There were two such system folders in this directory. One was real and one was the trojan. Unfortunately, I don't have admin priveledges and couldn't delete it. Also, there were two other parts in windows\Prefetch with appended filenames ending in .pf which need to be deleted, and one windows\servicepackfiles\i386, but I couldn't delete that one either.
  Joshua  

SAFE if in c:\windows\system32, VIRAL if anywhere else - usually a keylogger in this case csrss.exe known as Ahlem.A Worm csrss
  Harish   (further information)

Every attempt has been made to provide you with the correct information for csrss.exe or AHLEM.A WORM. Many spyware / malware programs use filenames of usual, non-malware programs. If we have included information about csrss.exe that is inaccurate, we would greatly appreciate your help by updating the Process Information database and we will do our best to correct it.
  tarique khan  

Windows SYS 32 file
  Jim  

When the virus of the same name infects yor computer it will eventually cause process failures all over the place. From my experience after infection it caused IE explorer to foul up, and then a multitude of system process to fail. So much so that a rebuild was in order. I made an image of my PC before rebuild for analysis. It appears this came in with a Microsoft Money Hack my wife found in limeWire. If your Virus detection software is up to date, it will easily detroy this little pest. In all honesty it's an amatuer virus at best. Just goes to show everyone gets caught now and then.
  SuperUltraMega  

this file is driving me crazy! based on info i've found it is a critical file however I only have one of these processes running and it gives me a pop-up every 7 seconds. Can you understand how this would lower my quality of internet? i want to throw my computer in the garbage! I don't know what to do, my computer won't let me end this process and internet says i need it but if this is what internet is going to be like, fuck it coz i have enough stress without closing 72 pop-ups all because i left my computer running for an hour when i went out!
  will  

You are so dumb adul, It is true that CRSS.EXE is a file being used by windows to run properly but, viruses or worms can disguise themselves as the CRSS executable. My computer got a bluescreen because of this file.
  Kick My A__ Bill  

Client/Server-RUntime
  sto  

i got this error saying that it cant find this file C:\WINDOWS\system32\ltruoggkeo\csrss.exe and their is like something wrong and its been renamed or something???? every time i restart
  james  

It removed control panel, my adminastrator access, win explorer,all administrator tools and privelages. It keeps changeing homepage to google. Can't access symantic or window updates. Keeps running a spyware popup. Keeps returning after reboot. Keeps loading trojans after cleaning and reboot.It wins this round, time to wipe and reinstall. It maybe just a required system file but there is much more attached to it. Read and tried all the above suggestion and comments. Thanks for the help but it is a bugger.
  skh  

More comments can be found here:
    (further information)

csrss scanner

Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

Registry Booster free scans, cleans, repairs and optimizes your system.

Other processes