Citrix - CSRSS.exe consumes 50% CPU usage

[SystemAdminstration]

I ve Windows2000, FR3, SP4.
Often CSRSS.exe seems to take 50% of CPU Utilization even if no users are connected to. I cannot kill this process.
It runs on high priority.

 

[muddyjohn]

This handles graphics for windows sub systems. You could try running FR3 with Service pk3. We run a asp for Citrix and have had problems with service pack 4.
Also you may have a worm: w32.dalbug.worm

Run a virus scan for this worm.

 

[CitrixEngineer]

csrss.exe is the Client Server Runtime Subsystem - you can't kill it because it's the very heart of Microsoft Terminal Services. A new instance is launched for each user. The graphical subsystem is handled by win32.sys, the multi-user kernel abd vdtw30.dll, the ICA Thinwire component (the Citrix display dricer for the User Kernel).

Does this typically happen when a user logs on or off, and is this for every instance of csrss, or are you only looking at the administrator's copy? What processes are being run inside the session that could cause the subsystem to consume resource - you could use a tool such as handle.exe from

http://www.sysinternals.com

to investigate. I also recommend using TaskManagerEx, the Task Manager extender, from the same site, as an extremely useful add-on.

Hope this helps