Forum Home
Press F1
 
Thread ID: 84718 2007-11-15 23:57:00 csrss Constant disk usage (only to two files) rixth (9629) Press F1
Post ID Timestamp Content User
611876 2007-12-29 17:06:00 I am having the exact same problem.
Does anyone know what's going on?

It's not a virus/spyware/malware/anything like that.
It also occurs in SAFE MODE.

Halp!

I will be contacting MS about this (if possible)...
sexconker (13032)
611877 2007-12-30 01:35:00 Hey speedie would we be able to fix it with a HJT log and clean? password (5384)
611878 2007-12-30 01:36:00 Depends if theres anything nasty in the log, that maybe causing it. Speedy Gonzales (78)
611879 2007-12-30 01:38:00 Theres no harm in trying is there? password (5384)
611880 2007-12-30 01:38:00 My system is clean and this has been a problem since install (before going online) from a disc with XP, SP2, and all hotfixed up to the day of install.

I've submitted a support request with some process monitor logs to MS, as others seem to be having the same problem and no one has any idea what's going on.
sexconker (13032)
611881 2007-12-30 01:40:00 Hi guys,

csrss.exe (Window's process) is CONSTANTLY accessing the drive in my laptop. This forces it to not spin down which drains battery life badly. Thing is, it's only reading two little files.

C:\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsof t.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.2982.Policy
C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows. Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03.Manifest



Because if "csrss.exe" i a type if virus as well, it could be working from these directirys maybe?- C:\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsof t.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.2982.Policy
C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows. Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03.Manifest


Hehe im just going out ofn a limb here because its logical lol
password (5384)
611882 2007-12-30 03:57:00 csrss.exe is a system file and Windows would detect if it was tampered with.

I've run the system file checker (start, run, srfc /scannow, make sure you have your windows CD in the CD drive or the I386 folder on your hard drive and the appropriate value in the registry pointed to it) and Windows says all my system files are legit.
sexconker (13032)
1 2