PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

Tip from the PitCrew

Each and every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

Furthermore, perhaps the quickest and most straight forward method to detect malware is through a running process analysis.

Process Library

  

More than one possible match was found; all matches are listed below.

Match #1

csrss.exe (Agobot virus)


PC Pitstop Analysis

csrss.exe - Part of the Agobot virus or other similar virus. (There is a legitimate CSRSS.EXE file in Windows 2000/XP/Vista, but it is in the System32 directory and has vendor information that indicates it is written by Microsoft.)


Recommendation

CA AntiVirus

csrss.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

csrss.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.


Identification

The file name alone identifies this program.


PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. csrss.exe (Agobot virus) has been seen on 0.03% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested.

PCs running this program did not have a high average CPU load during testing, which indicates it does not consume a great deal of CPU time on most systems.


Match #2

csrss.exe (Client Server Runtime Server Subsystem)


PC Pitstop Analysis

csrss.exe - Client Server Runtime Server Subsystem. It is responsible for console program, threads managing and supporting for 16-bit virtual MS-DOS environment.

Attention with the Vendor, Product match and Path. If it's not the same it migh be a virus.

If you have problems with csrss.exe you may want take a look in these links:

http://support.microsoft.com/kb/934330
http://support.microsoft.com/kb/555021


Recommendation

CA AntiVirus

csrss.exe is required by third-party software or hardware and should not disabled.

csrss.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.


Identification

In addition to the file name, csrss.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:Microsoft Corporation
Product contains:Microsoft
File name contains:\Windows\system32\

To view version information with Windows Explorer, right-click the file and click Properties, Version.


PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. csrss.exe (Client Server Runtime Server Subsystem) has been seen on 7.21% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested.

PCs running this program did not have a high average CPU load during testing, which indicates it does not consume a great deal of CPU time on most systems.


Important note: A file name alone may not be enough for positive identification. PC Pitstop's full tests and spyware scan use information such as the company name, product name, or install directory. If you are unable to identify a file, ask about it in our forums after running our full tests.