Microsoft Corporation•Safe
conhost.exeWhat is conhost.exe?
conhost.exe is a legitimate Windows system process from Microsoft. It stands for Console Window Host and helps Command Prompt and other console apps d...
csrss.exeSafeWhat is csrss.exe?
Publisher: Microsoft CorporationTypical location:
C:\Windows\System32\csrss.execsrss.exe is a legitimate Windows system process called the Client Server Runtime Subsystem. It is part of Windows itself and is normally safe to see running in Task Manager.
What it does
csrss.exe helps Windows handle important core tasks for user sessions, including parts of console windows and system runtime functions. It is a required operating system component, so Windows starts it automatically and depends on it to run properly.
Is it safe?
Yes, the real csrss.exe is safe and should be left alone. However, malware can sometimes use this exact name to hide. To tell the difference, check that the file is located in C:\Windows\System32\csrss.exe, and that its publisher is Microsoft Corporation. If it is running from another folder, has no valid Microsoft signature, or looks unusual, treat it as suspicious.
Why it causes high CPU or disk usage
- 1A buggy app or driver is stressing Windows session/runtime components.
- 2Corrupted system files are causing repeated errors.
- 3Malware is disguising itself as csrss.exe.
- 4A Windows update or system service is misbehaving.
How to check if it's legitimate
- In Task Manager, right-click csrss.exe and open Properties or Open file location.
- Confirm the path is
C:\Windows\System32\csrss.exe. - Check the file Publisher or digital signature. It should say Microsoft Corporation.
- If it is in a different folder, has no signature, or uses high CPU only when other apps are open, run a malware scan and check for Windows updates.
How to remove it
Do not try to delete or end the real csrss.exe. It is a core Windows process, and stopping it can make your PC unstable or cause Windows to shut down. If the file is in the wrong location or not signed by Microsoft, treat it as a possible malware copy instead: scan for malware, check the file path carefully, and use a trusted security tool to remove the suspicious file.
Recommended fixes
Restart your device
A restart clears temporary state that often causes transient errors.
- Save your work and close open apps.
- Restart the device from the power menu.
- Reproduce the issue to check whether it persists.
Install Windows updates
- Open Settings > Windows Update.
- Click Check for updates and install everything available.
- Restart if prompted.
Run System File Checker and DISM
- Open Command Prompt as administrator.
- Run
sfc /scannowand let it complete. - Then run
DISM /Online /Cleanup-Image /RestoreHealth. - Restart your PC.
Scan for malware (Windows)
- Open Windows Security > Virus & threat protection.
- Run a Full scan.
- Quarantine or remove anything detected, then restart.
Need more help?
Run a free diagnostic scan to identify and fix issues automatically.
Download Quickfix AI