Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Windows Process

  • Please log in to reply
2 replies to this topic

#1 xRileyx


  • Members
  • 20 posts
  • Local time:06:14 PM

Posted 01 November 2012 - 08:09 PM

When I pull up Windows Task Manager and look at processes, I see one called csrss.exe and one called winlogon.exe. Unlike the other process that list a username and description, these have neither of those things listed. Also, when I right click on either one it says 'perform administrative tasks' instead of all the other options that come up for the other processes. When I googled this, it said that there were viruses and malware that could target both of these processes. Is that what has happened?

BC AdBot (Login to Remove)


#2 narenxp


  • BC Advisor
  • 16,371 posts
  • Gender:Male
  • Location:India
  • Local time:06:14 PM

Posted 01 November 2012 - 08:45 PM

They are legitimate system files.

#3 Hadnjury


  • Members
  • 144 posts
  • Local time:05:14 PM

Posted 01 November 2012 - 08:49 PM

Hello xRileyx


Csrss stands for "Client/Server Run-Time Subsystem" and is a part of every Windows program. The subsystem is an essential part of the computer, and disabling it can cause problems.

winlogon is a process belonging to the Windows login manager. It handles the login and logout procedures on your system. This program is important for the stable and secure running of your computer and should not be terminated.

I would only be concerned if you have multiple instances of this showing in task manager
Some people think technology has the answers - Kevin Mitnick

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users