As it was mentioned in the previous question, the CPU/RAM consumption of the original process is very low. So, the Csrss.exe that uses a lot of hardware capacity is definitely a virus. Another way to understand that this process belongs to a malicious program is its location inside of the Task Manager. System processes are listed in the corresponding thread, so the ClientServer Runtime Process among the user’s background processes is a sign of malware presence.