groovyTip

What Is csrss.exe And Is It Safe To Be Running?

Groovy Windows Help, Tips, Tricks, Answers, Tutorials, How-To, Solutions, and Stuff

Good news, Client/Server Runtime Subsystem, or csrss.exe, is a critical Windows operating system component.  The process is designed to handle the end-user side of Windows, including console and interface windows, as well as threading.  You’ll find csrss.exe in Windows XP, 2003, Vista, Server 2008, and Windows 7.

Is csrss.exe dangerous?

By default, csrss.exe is a standard Windows component put there by Microsoft.  It shouldn’t use very much memory, and it will just run in the background and happily keep your computer going.  In other words, it’s perfectly safe and is actually supposed to be there.  However, it can become corrupted or infected and cause problems. We’ll talk more about that below.

If you open up Task Manager (Ctrl+Shift+Esc shortcut on your keyboard), you can see it running.  The User Name should be SYSTEM, and the Description should be Client Server RunTime Process.  Also, the CPU usage should be relatively close to 00 and the memory should be under 10,000 K if you aren’t running anything.

csrss.exe as seen in the windows 7 task manager

Could csrss.exe be infected with something?

Although relatively uncommon, there have been some who’ve reported problems with their csrss.exe becoming infected or impersonated by malware (malicious software.) Here are a few ways which might help you determine if you’ve got an issue on your hands:

  • There should only be one csrss.exe running at all times. If you see multiple copies of it, then the extra processes running are likely a virus/malware.
  • If the CPU usage of csrss.exe reaches 100%, it’s experiencing an error of some sort.
  • Right-Click csrss.exe in the Task Manager, then Select End Process.  Windows will not allow you close the process if it’s the real thing since csrss.exe is a protected component.**

**If you’re running task manager in an elevated prompt you will be able to close critical system processes; this could crash your computer and force a restart so be careful and make sure to save any open document. 

What can I do to protect my system components like csrss.exe from becoming infected?

Regardless of which version of Windows you’re running, it’s imperative you always have a solid anti-virus app. installed and updated.  See MrGroove’s guide on system security for more information on staying safe regardless of which operating system you’re using.

How To Fix the 100% CPU Use csrss.exe Error

There are two main reasons why most users encounter the maxed out CPU error with the csrss.exe process.  The first reason is – typically due to a corrupted user profile.  When this happens, you can fix the error by creating a new Windows user account and then deleting your old one.  Don’t forget to backup your information from your My Documents and other folders before deleting the old profile!

The second problem could be a corrupted registry.  This issue usually occurs when poorly installing written software, hardware failure, or if you’ve been messing around with regedit a bit too much.  There’s not a great fix if you have registry issues. However, the first thing I would do is try to use a to repair the problem.  Try to go back to a date when you know the system was working 100%.  Other than that, you might be looking at a reinstall of .  I know, sorry.

Have you had any experience with a rogue csrss.exe or another system process?  Drop a note and let us know what happened!

4 Comments

4 Comments

  1. Justtina

    February 15, 2011 at 9:24 pm

    I have two csrss.exe but they both have a user name of SYSTEM and CPU of never more than 3, the memory is less than 2,500 and the description is Client Server Runtime Process. How do I know if one of them is corrupted or not supposed to be there? I tried to end process for both but both came up with the same notification that it could ruin my computer.

    • OstinBostin

      February 15, 2011 at 11:45 pm

      As far as the processes go, 2-3 csrss is normal for Windows Vista. But if you are running Windows 7 you should only have 1 csrss as the article says.

      If I can remember correctly Windows XP should only have 1 running as well.

      For more details you can download Process Explorer (from Microsoft), it can get you a closer look at what each csrss is doing and where it is running from.

      The real process should be in C:\Windows\System32
      A virus one will usually install to just C:\Windows

      • Justtina

        February 17, 2011 at 12:51 pm

        Thank goodness. A computer company is trying to tell me that the csrss.exe is corrupted and my computer will crash at any moment. They haven’t even looked at it!
        Thank you very much.

  2. Justtina

    February 17, 2011 at 12:52 pm

    Sorry I forgot to mention… Thank goodness, because it’s Windows Vista that I have.

Leave a Reply

Your email address will not be published. Required fields are marked *

 

To Top