csrss.exe issue

Hi guys I'm on the latest insider build and my csrss.exe has a 1 malware warning by it and an untrusted root certificate under details. my PC has no malware so I'm curious how do I replace csrss.exe with a clean version without reloading my system?

Hello PatL

You could try the Windows 10 reset while keeping your files etc option, see MS info here

What anti-virus are you running? If you are using an insider build you should disable all third party anti-virus software.

I am running Windows Defender with Malwarebytes Premium

If I reset though I may as well do a clean install. I really don't want to do that though!

Edited by PatL, 29 March 2021 - 09:09 AM.

VT list it as having a 1 infection and untrusted root certificate

You have been advised to post here by a malware removal expert and they would not have done that if it were not safe for us to help you.

Regarding the reset, did you read the information at the link provided, only Windows gets reinstalled and not your personal stuff, that said, you should never do anything such as a reset without backing up your personal data first in any event.

As an asides, Insider Previews are akin to Beta software and you will often get such glitches such as this, it comes with the territory.

I read about the reset. Unfortunately I tried that method before and bricked my device, so I'm wary to redo that tbh. I looked at the windows.old csrss.exe and it's clean but still has the untrusted root certificate. I'm going to assume this is a bug and not a super hacker coming after me and just relax on it for a bit.

I`m afraid that without carrying out what is effectively a repair installation learning to live with it until the next Insider Preview release may be your only option.

Question, why are you running Insider Preview in any event, those who do so long term are well aware of such issues.

Nasdaq actually wnts me to delete the file...I think if you delete it the system breaks. In regards to your question, I misread the information apparently and by the time I realized you can't opt out of or roll back from Developer builds, it was too late, oh well, such is life, right?

I am fine waiting till the next release really no big deal in my mind.

Edited by PatL, 29 March 2021 - 11:36 AM.

How to opt out of Insider Previews info here

Yeah I get that but once you install a developer build you must do a clean install and I don't want to have to re-download all my games/files again I don't have the bandwidth.

Not a nice position to be in, rather messy in fact, you really are stuck with waiting on the next preview build and with fingers crossed that it installs without issue.

Too late now but this is an example of why Windows should always be installed on it`s own partition away from other programs.

Yeah, it's not the end of the world but it is what it is you know?

Post the VirusTotal analysis results link showing the results of the CSRSS.EXE file in question.

It would be interesting to see the results and hashes.