Client Server Runtime

crss.exe

It rings a bell, but for some reason only just recently has it decided it wanted internet access. I blocked it, naturally, because the first thing i thought was that it had got altered by somthing, and there seem to be no ill effects so far.

Can anyone shed some light on this?

 

http://www.answersthatwork.com/Tasklist_pages/tasklist_c.htm

 

Can you confirm you mean crss and not csrss as indicated by Kodo's link? or are they one and the same thing?

 

oh, whoops yes is IS csrss
lol!

I presume there is no reason why it should need internet access?

 

You've done the usual Trojan and virus scans?

For example there are worms that make use of SMSS and CSRSS http://securityresponse.symantec.com/avcenter/venc/data/w32.dalbug.worm.html and the notorious Nimda http://www.symantec.com/region/sg/press/sp_011031.html

What you need is something that shows the process tree for which CSRSS was started from.