i don't know what is going on, it is taking 10min or better for the computer to boot up, and when it does the cpu usage jumps to 100 and stays there. the only processes doing anything are csrss.exe, explorer.exe, and taskmgr.exe. can someone help
Csrss.exe is the Microsoft client server runtime which generates worker threads for client requests. The confusion over csrss.exe comes from Trojans or viruses that use the same executable name (.exe) as that of csrss.
Many spyware/malware programs use filenames of usual, non-malware programs.
The legitimate csrss.exe is part of the Microsoft client server software and is a very important part of the system which should not be removed.
One way to determine if csrss.exe is a legitimate file besides looking at the date modified is to right click on csrss.exe inside Task Manager and attempt to end process. Because csrss is a critical file, Microsoft should inform you with a message that csrss.exe is a critical system process and end it is not possible.
If you do not receive this message when attempting to end the csrss.exe process, then it may indeed be a virus.
——————–
Once Windows starts, are you able to run applications and do normal functions?
If so, Please use use Windows Explorer (My Computer) to locate the "csrss.exe" file
If there are more than one instances of the file, you may have been infected by a Trojan.
The legitimate file should appear in C:\Windows\System32\ <— however, it too "may" be infected.
"csrss.exe" located in any other folder is "very likely" to be Malware.
To determine if your copy of "csrss.exe" is legitimate or malware, you can upload it for analysis at:
http://virusscan.jotti.org/
Use the "Browse" and "Submit" function buttons on the Virussan Jotti page to submit your file for analysis.
You can post that information back here into this Thread and we can consider follow-up steps.
If you prefer, you could go ahead and submit a HJT Log over into the Malware Removal Forum for expert advice there.
Best Regards
Edited to include the link to Jotti. Sorry about leaving it out earlier.
ok, the csrss.exe settled down, and there is only one of them. this is so annoying. the cpu is still maxed at 100%. now it's just explorer.exe, and taskmgr.exe working. i think i'll have to move to the HJT forum for some in-depth analysis.
If your Firewall is allowing "windows explorer" to access the Internet, —- change the Firewall setting.
There are rare instances when it is useful to have that access allowed, but few and briefly applicable.
✨ Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI