What is csrss.exe & winlogon.exe?

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by RaineShadow, Dec 2, 2013.

  1. RaineShadow

    RaineShadow Private E-2

    While checking on my processes earlier, I noticed in my task manager that my computer is running csrss.exe and winlogon.exe. When I checked with Process Library, it listed it as a trojan, although Google disagrees. Since I cannot figure it out on my own, I thought I'd double check here to see if I can get a solid answer on whether or not it's a security issue. Task manager will not allow me to view properties or file location for either process.

    Running 64-bit Windows 7 on an HP dv6 if that helps.
     
    RaineShadow, Dec 2, 2013
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    liutilities.com is a terrible/misleading website that cannot be trusted. They are just trying to get you to download and use their bad software which you do not need. Anyone who knows Windows processes at all knows these are valid required Windows processes. The problem comes from when they are not running from the correct location or from when the files which are in the correct location have truly been corrupted/infected. So having their website say the below is totally incorrect/incomplete. And as you can see, they are just pushing to get you to download and install their lousy registr scanning tool which is also junk. When we see UniBlue software on PCs, we have people remove it like we would do for many other junkware / adware apps.
    Now the above is what they list first. Their second listing tells you it can be a Windows system file but this should be listed first not second. They also should not blatantly say csrss.exe is a trojan. It should more clearly state that it could be a trojan if not running from the correct location. Also they should not be telling you to run a registry scan for no reason at all as it has nothing to do with this.
     
    chaslang, Dec 2, 2013
    #2
  3. RaineShadow

    RaineShadow Private E-2

    Thank you for replying so quickly! I was actually using processlibrary.com when I found it. It recommended a scan of some sort, but I don't just download stuff on a whim, hah.
    Regardless, I'm glad I got an answer. I'd seen it mentioned that it's a normal process unless it's in the wrong place. What about winlogon? Same thing?
     
    RaineShadow, Dec 2, 2013
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Yes and the same for hundreds of other Windows files. ;)
     
    chaslang, Dec 2, 2013
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds