Well one csrss is a important part of the Microsoft (oh god something or other) BUT it can be a virus that has the SAME name or CLOSE enough. Since it is a critical part of the system if you try and delete it it should give you fair warning if it is indeed part of Microsoft.
If I where you I would keep looking because if it is not you want to git rid of it now.
Permalink Reply by Kat on November 2, 2008 at 8:48pm
If it is located in the system32 folder, it's fine. Csrss.exe CSRSS is the Client Server Runtime SubSystem. CSRSS is started by SMSS. When the user application makes a Win32 API call, it is usually CSRSS which communicates with the operating system’s Kernel to execute the API call.
If it is located anywhere else on the system, it is likely a keylogger or virus. :)
Permalink Reply by Kat on November 2, 2008 at 9:16pm
no no!! If you know the answer.. help someone! Your answer wasn't even 'wrong'. All I did differently was explain to the user exactly what it means, and let them know that if it's in the sys32 folder, to leave it alone. :)