Forum Home
Press F1
 
Thread ID: 115435 2011-01-18 05:02:00 csrss.exe process in Windows 7 user123 (15924) Press F1
Post ID Timestamp Content User
1170738 2011-01-18 05:02:00 Hi guys
I'm just curious about what the csrss.exe process does, why is it located in %%USERPROFILE%\AppData\Roaming\Microsoft\System\Se rvices\csrss.exe, and why does it lauch at startup? Now when I start up there is a quick cmmand prompt window that starts and closes very quickly. Can someone help me?
Here is my startup list:

HKLM:Run | HDAudDeck | C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
HKLM:Run | Adobe Reader Speed Launcher | "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKLM:Run | Adobe ARM | "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM:Run | csrss.exe | C:\Users\Owner\AppData\Roaming\Microsoft\System\Se rvices\csrss.exe
HKLM:Run | IME14 CHT Setup | C:\PROGRA~2\COMMON~1\MICROS~1\IME14\SHARED\IMEKLMG .EXE /SetPreload /CHT /Log
HKLM:Run | IME14 JPN Setup | C:\PROGRA~2\COMMON~1\MICROS~1\IME14\SHARED\IMEKLMG .EXE /SetPreload /JPN /Log
HKLM:Run | IME14 KOR Setup | C:\PROGRA~2\COMMON~1\MICROS~1\IME14\SHARED\IMEKLMG .EXE /SetPreload /KOR /Log
HKLM:Run | IME14 CHS Setup | C:\PROGRA~2\COMMON~1\MICROS~1\IME14\SHARED\IMEKLMG .EXE /SetPreload /CHS /Log
HKLM:Run | BCSSync | "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
HKLM:Run | IgfxTray | C:\Windows\system32\igfxtray.exe
HKLM:Run | HotKeysCmds | C:\Windows\system32\hkcmd.exe
HKLM:Run | Persistence | C:\Windows\system32\igfxpers.exe
Startup User | MagicDisc.lnk | C:\Program Files (x86)\MagicDisc\MagicDisc.exe

Thanks
user123 (15924)
1170739 2011-01-18 05:40:00 It shouldnt be in startup. Delete its entry, with something like ccleaner then reboot

You can delete this entry too

HKLM:Run | Adobe Reader Speed Launcher | "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
Speedy Gonzales (78)
1170740 2011-01-18 05:41:00 Csrss.exe is Client Server Runtime Process -- Its an important part of windows. If you bring up the Task Manager, right click it - open file location it should be in the Windows/ System32 folder. bit more about it (www.processlibrary.com)


Some infections can also mask themselves as the csrss file.

May pay to do a full virus and malware scan -- what security do you have installed?
wainuitech (129)
1170741 2011-01-18 09:55:00 It shouldnt be in startup. Delete its entry, with something like ccleaner then reboot

You can delete this entry too

HKLM:Run | Adobe Reader Speed Launcher | "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"

Thanks Speedy, I have removed both entries.


Csrss.exe is Client Server Runtime Process -- Its an important part of windows. If you bring up the Task Manager, right click it - open file location it should be in the Windows/ System32 folder. bit more about it (www.processlibrary.com)


Some infections can also mask themselves as the csrss file.

May pay to do a full virus and malware scan -- what security do you have installed?

For some reason it's in my AppData\Roaming folder. Is there any reason why?
I use Avast Internet Security 5. Is it good?
user123 (15924)
1170742 2011-01-18 10:09:00 It's because it's hidden. open explorer and press alt, then tools > folder options and check the box that says "show hidden files and folders" The Error Guy (14052)
1