Anti-Malware, Anti-Trojan, Anti-Worm, Anti-Dialer, Anti-Rootkit and Anti-Spyware all in one program! Emsisoft Anti-Malware - Malware scanner to remove and delete malicious software.

English Deutsch French

Emsisoft HiJackFree

• HiJackFree Home
• Product Details
• Download
• Online Analysis

Support

• Emsisoft Forum
• Knowledgebase
• Process-List
• Autorun-List

About us

• Link to HiJackFree
• Profile

Autorun Details: csrss.exe

Name:	.svchost
Command:	CSRSS.EXE
Status:	Definitely not required. Usually Malware.
Description:	Added by the WEBUS.F TROJAN! Note - this worm replaces the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Name:	.TEXTCONV
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!

Name:	.WMAudio
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!

Name:	_SystemDriver
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the ASCETIC.B TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\addins\explorer

Name:	Application
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BEAGLE.EG WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	ASP.NET State Service
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the DLOADER-QI TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	AtiSound
Command:	csrss.exe
Status:	User's choice. Start if necessary.
Description:	WinSpy surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the same file as the csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "ComRoot" subfolder

Name:	AVManager
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the AUTORUN-DV WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~ subfolder

Name:	BagleAV
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the NETSKY.AB WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	BuildLabs
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!

Name:	ccpApps
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!

Name:	ClickTheButton
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	ClickTheButton adware. Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "drivers" subfolder

Name:	Console de Gerenciamento Microsoft
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Unidentified malware! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "Level4" subfolder

Name:	Console de Gerenciamento Microsoft
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BANCBAN-ET TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "Central de Segurança" subfolder

Name:	Csrss
Command:	CSRSS.EXE
Status:	Definitely not required. Usually Malware.
Description:	Added by the PUNYA-B WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS

Name:	CSRSS
Command:	CSRSS.EXE
Status:	Definitely not required. Usually Malware.
Description:	Search page hijacker, redirecting to h**p://www.search-aide.com/. Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Name:	Csrss
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the CHOD WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a random subfolder

Name:	csrss
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the KEYLOG-AQ KEYLOGGER! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	csrss
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the CHODE-J WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a random subfolder

Name:	csrss
Command:	csrss.exe
Status:	User's choice. Start if necessary.
Description:	BeyondKeylog surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the same file as the csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\Supremtec

Name:	csrss.exe
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the DALBUG WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	csrssLevel4
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Unidentified malware! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "Level4" subfolder

Name:	DIECOX
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by a variant of the ATM.GEN TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Name:	Explorer.exe
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the JUEGO-B WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %AppData%\Microsoft

Name:	FiendlyType
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!

Name:	FirewallActivies
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BANKER-AQ TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "3041" subfolder

Name:	KernellApps
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BANCBAN-AC TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "System" subfolder

Name:	Key Logger
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BUCHON.A WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in the root folder (ie, C:\)

Name:	Krnlcheck
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BOTNACHALA TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	Logon
Command:	CSRSS.EXE
Status:	Definitely not required. Usually Malware.
Description:	Added by the BRONTOK-BH WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data\WINDOWS

Name:	LogonAdministrator
Command:	CSRSS.EXE
Status:	Definitely not required. Usually Malware.
Description:	Added by the KORRON.B WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data\WINDOWS

Name:	Logonrepclient1
Command:	CSRSS.EXE
Status:	Definitely not required. Usually Malware.
Description:	Added by the BRONTOK-BT WORM and variants! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data\WINDOWS

Name:	Logonsara
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BRONTOK-BS WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in Documents and Settings\<User>\Local Settings\Application Data\WINDOWS

Name:	Microsoft SourceSafe
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!

Name:	Microsoft Windows CSRSS
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the KALEL-A WORM! Note - this worm replaces the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Name:	Microsoft Windows Update Client
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the KEBEDE-G WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\Systems32

Name:	Microsoft Word Profissional
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BANCBAN-DB TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "s1613" subfolder

Name:	Microsoft Word Profissional
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BANKER-DJ TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "protect" subfolder

Name:	Microsoft Word Profissional
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BANKER-DP TROJAN! ! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "JavaVM" subfolder

Name:	Norton Protect Activies
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BANKER-CZ TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "D5133" subfolder

Name:	NTDLM
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the HALE TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "Qossrv" subfolder

Name:	nvdisplay
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the VB-FBO WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %AppData%

Name:	Prog
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!

Name:	RegDone Ex
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the WEBUS TROJAN! Note - this is not the legitimate csrss.exe process which should not normally figure in Msconfig/Startup!

Name:	RegWrite
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the SOKACAPS TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\Media

Name:	RPCserv32g
Command:	CSRSS.EXE
Status:	Definitely not required. Usually Malware.
Description:	Added by the BOBAX.AD WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	rundll32
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the GUTTA TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	Runner
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the ADCLICK-AG TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	Runtime Process
Command:	Csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the CIADOOR-J BACKDOOR! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	Runtime Server Subsystem
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the IRCBOT-XV WORM!

Name:	SernellApp.pcx
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BANCBAN-BJ TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "D5133" subfolder

Name:	Services
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by a variant of the RANKY.U TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup!

Name:	Shockwave
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the SNDOG WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	smss.exe
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the DALBUG WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	State Service
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the DADOBRA-CP TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	System
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the LDPINCH.E TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	System Process
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the ADCLICK-AG TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	System32
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the SILLYFDC WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "drivers" subfolder

Name:	SystemDriver
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the ASCETIC.B TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%\addins\explorer

Name:	SYSTEMSars32
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the AHLEM.A WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	TaskMrg
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the LDPINCH-W TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	Update
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the ADCLICK-AG TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	Update
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the MEHEERWAR TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "winupdate" subfolder

Name:	UpDaTer
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the AUTORUN.DIB WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~� subfolder

Name:	Windows 2004
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BANKER-DY TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\Windows 2004\Tools

Name:	Windows Client Service 32
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the RBOT-ALB WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a drivers\winsdriver subfolder

Name:	Windows Explorer SP2
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BANKER-DM TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "JavaBeans" subfolder

Name:	Windows Update
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BANKER-HM TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %Windir%

Name:	WindowsExplorer
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Messenger Blocker rogue security software - not recommended. Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\Common Files\System

Name:	Windowsupdate Service
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BABA-B WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in the root folder (ie, C:\)

Name:	WinUpdateAdministrator
Command:	CSRSS.EXE
Status:	Definitely not required. Usually Malware.
Description:	Added by the PUNYA-A WORM! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in C:\Application Data\WINDOWS

Name:	WinUpdateProtection
Command:	csrss.exe
Status:	User's choice. Start if necessary.
Description:	EmployeeWatch is a commercial surveillance software program designed to monitor user activity on a computer. Note - this is not the same file as the csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a subfolder of C:\windowsupdate\ufp

Name:	WinXP
Command:	csrss.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BANCOS-AG TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\WinXP\Tools

Name:	WinXP-98
Command:	CSRSS.exe
Status:	Definitely not required. Usually Malware.
Description:	Added by the BANKER-DS TROJAN! Note - this is not the legitimate csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in %ProgramFiles%\WinXP-98\Tools

Name:	ZoneUpdate
Command:	csrss.exe
Status:	User's choice. Start if necessary.
Description:	WinSpy surveillance software. Uninstall this software unless you put it there yourself. Note - this is not the same file as the csrss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a "ComRoot" subfolder

Back to the autorun list

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!