Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Somehow this file, csrss.exe got dowloaded onto my computer. I have no idea what it does and deleted it in DOS. I could not delete it in Windows. The only thing I could find was that it is used with NT for something and it may be microsoft spyware. Anyone have idea what this application does?

Not a good idea to delete that file.
csrss - csrss.exe - Process Information
Process File: csrss or csrss.exe
Process Name: Client/Server Runtime Server Subsystem
Description: Windows client server run-time subsystem handles Windows and graphics functions for all subsystems.
Company: Microsoft Corp
System Process: Yes

Thank you Jennifer, but after doing some more research, it is indeed spyware of some sort. It may not be Microsoft's spyware, but this application or file does not come with windows me. I found csrss.exe in my start-up menu one day when my computer was running really slow. I said this file was never in my startup menu and deleted it. My computer is back to runnning normal again.

I also suspect this file, because a few days ago anoying pop-up screens are coming up after closing IE windows.
I can't remember installing any software, but somehow my computer is infected.
Investigation with the standard Windows Taskmanager lead me to this file.I wonder who is responsible for writing this csrss.exe, and if indeed this file is the cause of my anoyance I think the writer of it must be treated like other malicious virus writers.

I am having the same problem too.. I am running windows XP prof and this csrss.exe keeps popping up anoying ads.. I couldnt delete it in windows... Let me know if you ever deleted that file and if your os is working fine without it? thankz

rob77072,
That file is REQUIRED for all versions of WinNT, which includes Win2k and WinXP. Your popups are most likely caused by Messenger (NOT Windows Messenger), which is installed by default, and causes LOTS of problems, which have been addressed on computing.net previously.
You should have posted this in the WinXP forums, since you're not using a DOS-based (Win9.x) OS. Search for help with killing Messenger in WinXP there, and you'll be ahead of the game.
This link should also provide some good info about actual problems with csrss.exe:
http://www.joryanick.com/fixingCSRSS.htm
There IS a trojan named csrss.exe; you can learn more here:
http://www3.ca.com/threatinfo/virusinfo/virus.aspx?ID=37583
Good luck; HTH.
Pete

The file csrss.exe is a system file. It should not be deleted.
However, if you are having problems with constant pop-up messages from csrss.exe while on the internet, it means that someone has your IP address and is using it to send you these messages over the internet, using the "net send 167.176.xxx.xxx [Ad message]".
You can solve this problem by either installing a FIREWALL to protect your open ports, or
Stop the Messenger Service by going to "Start Button > Programs > Administrative Tools > Services" and then selecting 'Messenger' from the list. Right click on it and choose 'Stop'. You will not get anymore annoying pop-ups from csrss.exe.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |