Runaway csrss.exe use 4GB, how to kill?

Hi.

We have a problem at one of our servers. One (out of 4) csrss.exe
process uses 1.1GB of mem and 4GB of VM. That process seems to be dead
(as in not doing anything) and I'd like to kill it. The server is
almost out of virtual memory and will crash in 5-10 hours.

OS is Windows 2003 EE on IA64.

Anyway, my questions are:
- Is it safe to kill the csrss.exe process?
- What's the recommended way to kill it?
- Does anyone know the cause of our problems?

Rebooting is not an option yet. We will be forced to reboot in a day
or two, but cannot accept any down time right now.

Thanks in advance for all answers.
Bj=F8rn

Tony
Thu Feb 08 13:37:52 CST 2007

It seems this file is responsible for running the Client/Server subsystem,
watch out for duplicate instances of this process - apparently, it can be a
Virus impersonating this system file!!!

I am not a Server guy - don't know what to advice.


Tony. . .


<bjorn.augestad@gmail.com> wrote in message
news:1170960494.679151.11410@p10g2000cwp.googlegroups.com...
Hi.

We have a problem at one of our servers. One (out of 4) csrss.exe
process uses 1.1GB of mem and 4GB of VM. That process seems to be dead
(as in not doing anything) and I'd like to kill it. The server is
almost out of virtual memory and will crash in 5-10 hours.

OS is Windows 2003 EE on IA64.

Anyway, my questions are:
- Is it safe to kill the csrss.exe process?
- What's the recommended way to kill it?
- Does anyone know the cause of our problems?

Rebooting is not an option yet. We will be forced to reboot in a day
or two, but cannot accept any down time right now.

Thanks in advance for all answers.
Bjørn

bjorn
Thu Feb 08 16:37:35 CST 2007

On Feb 8, 8:37 pm, "Tony Sperling" <tony.sperl...@dbREMOVEmail.dk>
wrote:
> It seems this file is responsible for running the Client/Server subsystem,
> watch out for duplicate instances of this process - apparently, it can be=
a
> Virus impersonating this system file!!!
>
> I am not a Server guy - don't know what to advice.
>
> Tony. . .
>
> <bjorn.auges...@gmail.com> wrote in message
>
> news:1170960494.679151.11410@p10g2000cwp.googlegroups.com...
> Hi.
>
> We have a problem at one of our servers. One (out of 4) csrss.exe
> process uses 1.1GB of mem and 4GB of VM. That process seems to be dead
> (as in not doing anything) and I'd like to kill it. The server is
> almost out of virtual memory and will crash in 5-10 hours.
>
> OS is Windows 2003 EE on IA64.
>
> Anyway, my questions are:
> - Is it safe to kill the csrss.exe process?
> - What's the recommended way to kill it?
> - Does anyone know the cause of our problems?
>
> Rebooting is not an option yet. We will be forced to reboot in a day
> or two, but cannot accept any down time right now.
>
> Thanks in advance for all answers.
> Bj=F8rn

Please discard this post, turns out that the process wasn't abandoned
after all. It leaks memory, but cannot be killed.

Bj=F8rn