csrss.exe

Computer Help and Discussions Windows Security
1

I am in windows vista home premium and see two instances of csrss.exe running. Both take about 1 meg of memory and both seem to be microsoft certified. However, the files themselves take about 7 KB. Is this normal?

(Oops...apparently a quick google search wasn't enough before I posted this question. It is normal)

"2 is actually the minimal number that's expected at anytime.

2 SYSTEM processes live per session for pretty much as long as each (TS) session exists (csrss.exe & winlogon.exe).

There are at least 2 sessions at any time, session 0 for services, other sessions for interactive logons.

There are more than 2 sessions when you use fast user switching or remote desktop."

After searching microsoft's site.

2

Dont sweat it - its just the client server run time process for windows internals. No malware can get at protected systems files which is why virus' have largely been supplanted by worms and trojans that dont rely on protected windows stuff.