2-3 csrss and 2 winlogon process?

[johnny]

Alright, so my main gaming computer has 2 csrss.exe and 1 winlogon.exe. (Note I only get 1 csrss when I don't press show processes for all users, but I am the only user of the computer) My laptop has 3 csrss.exe and 1-2 winlogon.exes. I ran a scan with Avast, Malware bytes, Rkill, and tdsskiller on both computers, yet nothing was found. I wanted to know if this was normal. (Note all the processes are under the user name SYSTEM, and when I open the file location, it brings me to c:/windows/system32/csrss.exe/winlogon.exe.

[alcoholic philipp mainländer]

Some trojans (Trojan.Zlob and Trojan.Vundo variants mostly) may disguise as critical system files which was very effective back in the Windows XP days as Windows would prevent the user from killing the same-named malicious processes. But assuming you aren't being sent to shady porn sites or constantly showered by alerts from rogue antivirus programs it's probably just because somebody else has logged into that computer (maybe yourself, I don't know), then logged off and left the computer on, this can cause duplicate winlogon and csrss processes. Also, what is the amount of memory (can be seen in Task Manager) that these duplicate processes use? As always, Google is your friend in these situations. My computer would once just freeze when I pressed "Show file location" on a duplicate csrss.exe process, and when I did
a scan with MBAM, it found over 20 Zlob infections. If your computer doesn't behave strangely, there's probably nothing wrong.