14 replies to this topic

[NNNOOOOOO]

My PC has 2 csrss.exe files in different locations. They are in:
C:\Windows\System32
C:\Windows\winsxs\x86_microsoft-windows-csrss_31bf3856ad364e35_6.0.6001.18000_none_58e3e3d7e415ae4c

Should I delete the second one, and is it the reason my web browser is messing up?

[web_designer]

well i didn't hear about those files before. and deleting anything from your windows 32 is not recommended since they are they system files unless you know exactly what you are doing. so, why don't you start from the begining and explain how is your browser messed up?? maybe we can find another solutions.

[NNNOOOOOO]

Google searches sends me to random web pages including fake warning screens. I've been reading that the csrss.exe should be only in the System32 folder, but anywhere else, it's a virus. However, I'm confused about the second one, as it has the same properties of the other one. File size, creation date, description. The one in the folder of 50+ characters also has a .mui(?) file in it.

[Iniyila]

no do not delete them if there is two of them and the cpu usage is normal. look at the cpu usage if it is normal they are not virus (my system have two of them too) and don't forget to look at the network usage too and see if they are using any bandwidth. anyway if cpu usage and network usage is normal they are not virus (probably). all those long named folders in C:\Windows\winsxs\ are system folders so don't delete any of them untill your antivirus detects them as an effected file. if you are using internet explorer it's messy by default so don't worry.

[NNNOOOOOO]

Iniyila, on 17 December 2010 - 07:09 PM, said:

no do not delete them if there is two of them and the cpu usage is normal. look at the cpu usage if it is normal they are not virus (my system have two of them too) and don't forget to look at the network usage too and see if they are using any bandwidth. anyway if cpu usage and network usage is normal they are not virus (probably). all those long named folders in C:\Windows\winsxs\ are system folders so don't delete any of them untill your antivirus detects them as an effected file. if you are using internet explorer it's messy by default so don't worry.

But I'm using Chrome. And everything seems normal to me.

[NNNOOOOOO]

It seems that now, the internet is working correctly again.

[anwiii]

maybe the virus spread to your brain and you only THINK it's normal :)anyway, i am running vista and only have that file in the system32 folder.

[truefusion]

I think you should be doing research on the folder "winsxs" rather than the file itself. I do not know what the purpose of the folder is, but i am inclined to say that this may be used by Windows for backing up system files.

[NNNOOOOOO]

truefusion, on 18 December 2010 - 10:24 PM, said:

I think you should be doing research on the folder "winsxs" rather than the file itself. I do not know what the purpose of the folder is, but i am inclined to say that this may be used by Windows for backing up system files.

I read something about that that is what the folder is about. I still don't get any of it. I'm so confused.

[web_designer]

well, if everything in your system working fine then really no need to worry about it or delete anything from your system file. and if your browser not working properly, try to reinstall it or upgrade it to the newest version, or use another one like firefox or opera and see what will happen.

if you decided to delete that file any way, i suggest you to create a restore point before it. so that you can return your system to its actual performance. if you don't know how to do that, here is the way and it is in windows xp pro.

start> all programs> accessories> system tools> system restore> create a restore point and continue with the restorations procedure.