Okay, I know that there should only be ONE csrss.exe in the system32 file, right? Well, I did a search of my PC and it came up with a few in winsxs and now one in windows]software distribtion\download... with file names like x86_microsoft-windows-csrss_31bf3856ad364e35_6.0.6001.18000_none_58e3e3d7e415ae4c

do i delete these? or are there normal?

Edited June 21, 200818 yr by jason_guy13

I got one in %SystemRoot%\system32 too, and one copy somewhere in the WinSxS store as well. As for the other in software distribtion\download, I'd be looking at it more closely (might be a patch or something, not sure).

WinSxs folder is the "side-by-side assemblies" store, owned by TrustedInstaller and you don't want to go deleting anything in there.

The fact that TrustedInstaller owns it and even "Administrators" cannot write in there means that files you find in there shouldn't be suspect.

There is a pretty good summary here: http://www.winvistaclub.com/f16.html

As for the SoftwareDistribution folder, that's where the Windows Update client stores the files it downloads - I would only recommend clearing out this folder if you run into Windows Update problems.

thanks guys.

so i formatted coz i worry too much lol. i just went into the task manager and 'performed administrative task', is this normal?

Yes

okay thank you