PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

Tip from the PitCrew

Every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

Furthermore, perhaps the quickest and most straight forward method to detect malware is through a running process analysis.

Process Library

  

Click here to run our free scan and see if your computer's processes are safe.


More than one possible match was found; all matches are listed below in order of their prevalence. This only tells you what the file and the correct action might be.

To understand which possibility is actually running on your own system, perform an Overdrive test and then look at the Software|Processes tab.

You may find more information on this process by visiting Process Detail Pages.


Match #1

csrss.exe (Client Server Runtime Server Subsystem)

Percentage of recently scanned PC's with this process running: 2.74%
Average CPU use for this program: 0%
Average RAM for this program: 3 MB


PC Pitstop Analysis

csrss.exe - Client Server Runtime Server Subsystem. It is responsible for console program, threads managing and supporting for 16-bit virtual MS-DOS environment.

Attention with the Vendor, Product match and Path. If it's not the same it migh be a virus.

If you have problems with csrss.exe you may want take a look in these links:

http://support.microsoft.com/kb/934330
http://support.microsoft.com/kb/555021


Recommendation

Win Patrol

csrss.exe is required by third-party software or hardware and should not disabled.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides a easy to understand descriptions of over 15,000 processes and programs.



Identification

In addition to the file name, csrss.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:Microsoft Corporation
Product contains:Microsoft
File name contains:\system32\

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called csrss.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
csrss.exe> 20
#MD5Size
10xddec5eb28431d99f2db75b69b9fdd4c06144 bytes
20xca6c20c09d4fa2beee81f7586b89e09f97280 bytes
30x117b7c8a8b026a5dce5e3180ed05e8237680 bytes
40x9a2015d8a2ab6941025a949402711b6d688640 bytes
50x7674235ea52ed864aad4dcc4bdddbceb6144 bytes
60x5143989a9a459192137f876e76e344986656 bytes
70xabca209eba02cb59233614db83b4f50d6144 bytes
80xdee02ab15d2431bd7627b43df870a964698368 bytes
90xcb1627ed9f4c1d6b21837b6d031a91186144 bytes
100xe107c3fc26dcb615aa48f2fbbccd7cae7680 bytes
110x44f275c64738ea2056e3d9580c23b60f6144 bytes
120x6ae96dbb893a88b732952a46507fde6d6144 bytes
130xf12b178b1678d778cfd3ff1fc38c71fb6144 bytes
140xfb4d840d43f1273777276ec6302219e26144 bytes
150x7378d0ab67b54396ca0fb623a5aaac946144 bytes
160x3a161036d0a071f3d66e11ed1908a2c56144 bytes
170xcdacc26997a7a38f7806697fdce8d83d6144 bytes
180xb82cd0ad8b605f64ead6c46d70a2c9934096 bytes
190x56332b8fb030700e276e0ea5314b1ba66144 bytes
200xfe6e7d743253edc394190136a672e4066144 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. csrss.exe (Client Server Runtime Server Subsystem) has been seen on 2.74% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 3 MB. The average CPU load for this program was 0%.



Match #2

csrss.exe (Agobot virus)

Percentage of recently scanned PC's with this process running: 0.00%
Average CPU use for this program: 0%
Average RAM for this program: 4 MB


PC Pitstop Analysis

csrss.exe - Part of the Agobot virus or other similar virus. (There is a legitimate CSRSS.EXE file in Windows 2000/XP/Vista, but it is in the System32 directory and has vendor information that indicates it is written by Microsoft.)


Recommendation

CA AntiVirus

csrss.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

csrss.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.



Identification

The file name alone identifies this program.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called csrss.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
csrss.exe> 20
#MD5Size
10x7596cda37b602e7ccd794d0f51fb814a94208 bytes
20xea6e61b8b3863891746932325cebe1e894208 bytes
30x8673b79b65e0b6c51e1a93b76549dc1a76288 bytes
40x20ede4905d2493bba0095f6250bd134b147456 bytes
50x0e55ab94b1ac3175f033d9d160a5702281920 bytes
60x7f0e031bc4079e1a273585ff897a816e819200 bytes
70x3a9451f8378a5fc6605b05dc4a5741c9141606 bytes
80xfa4203512332f93a8e59ed3134503bc9141644 bytes
90x27a6f69983e9cc99add9e067c2cb7cbf812838 bytes
100xb7336e1f39e392f46f414933d6cba682151552 bytes
110xe0af026c4efe89e8efd590b1ac61c794812838 bytes
120x777fe191ef6923bf60469d2650e2e3f1720900 bytes
130x82e67827dd2fbcac32b2697d3e825349812838 bytes
140x4ec4459d7759689cda849b8ac1c3cb7e622592 bytes
150xed8df523d30a0da8943fa5d040bd0c2d866086 bytes
160xee638581014bbc2a8fe7ff5061696a55866086 bytes
170x1b8749e08c242038ac2676a334bc6a30812838 bytes
180xd0e0189a8b2946e9acaa47557013757b747302 bytes
190xc23537bd2fcd1132086094abdb99f5c117966 bytes
200xa9285d585c88fe35fde6329c0e728b32866086 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. csrss.exe (Agobot virus) has been seen on 0.00% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 4 MB. The average CPU load for this program was 0%.


Important note: A file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory. If you are unable to identify a file, ask about it in our forums after running our full tests.