Is my system criptomining?


  1. Posts : 668
    Win 10 pro
       #1

    Is my system criptomining?


    I have this strange(?) process in task manager, is this some kind of criptominer virus or is it normal? Thanks!

    Is my system criptomining?-immagine.png
      My Computer


  2. Posts : 42,963
    Win 10 Pro (22H2) (2nd PC is 22H2)
       #2

    The first is probably the DWM - desktop windows manager - at least that's how it translates.

    The second is less obvious being so generic.

    What you can do is rt click each one, click Properties and post a screenshot.
    Is my system criptomining?-1.jpg

    If concerned, you can rt click, open file location, and then upload the file to a site called Virustotal for assessment.
    https://www.virustotal.com/#/home/upload

    Note: it helps if you can provide a translation into English. Thanks!
      My Computers


  3. Posts : 6,839
    22H2 64 Bit Pro
       #3

    As suggested right click and open file location. Check the file.

    Is my system criptomining?-task-manager.jpg
      My Computer


  4. Posts : 31,630
    10 Home x64 (22H2) (10 Pro on 2nd pc)
       #4

    dalchina said:
    The first is probably the DWM - desktop windows manager - at least that's how it translates.

    The second is less obvious being so generic.
    The purpose of the Client Server Runtime process is describe by the How-To Geek here...
    ....you’ll definitely see one or more Client Server Runtime Process (csrss.exe) processes running on your PC. This process is an essential part of Windows...

    ...Could It Be a Virus?
    It’s normal for this process—or even multiple processes with this name—to always be running on Windows. The legitimate csrss.exe file is located in the C:\Windows\system32 directory on your system. To verify it’s the real Client Server Runtime Process, you can right-click it in Task Manager and select “Open file location”.
    https://www.howtogeek.com/321581/wha...ning-on-my-pc/
      My Computers


  5. Posts : 668
    Win 10 pro
    Thread Starter
       #5

    Thanks all, the file seems to be csrss.exe in windows system32, what I find odd is the constant and never stopping "GPU0 - 3D" 8, as in post #1, associated activity that seems have popped up a couple of day ago, before the process was there but without gpu activity
    I'm running 1709 16299.547.
    Do you have the same constant gpu activity? is it normal?
    Thanks.
      My Computer


  6. Posts : 42,963
    Win 10 Pro (22H2) (2nd PC is 22H2)
       #6

    Same build, same text in column 'GPU Engine' (if I add that to the default task manager columns) vs dwm.exe.

    Seems you're delving 'under the hood' and perhaps getting concerned about things you needn't.
      My Computers


  7. Posts : 668
    Win 10 pro
    Thread Starter
       #7

    Ok thanks, all normal then, i did not add the GPU Engine column though, maybe because mine is a clean 1709 install and yours an upgrade (?).
      My Computer


  8. Posts : 42,963
    Win 10 Pro (22H2) (2nd PC is 22H2)
       #8

    I clean installed 1511 I think it was orginally, and did each upgrade to 1709 after they were released. I had to find and add that column to my task manager.

    Maybe a clean install is different in that respect...
      My Computers


  9. Posts : 822
    Microsoft Windows 10 Pro 64-bit
       #9

    If one of those were a Cryptominer the CPU would not be a 0 % , It would be around 100 %
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 22:40.
Find Us




Windows 10 Forums