Is it normal to have two instances of this process running? Both point to C:\Windows\System32, identify Microsoft as their "creator" and are dated July of 2009 as creation date. And both point to a large number of services. I run PC Tools Spyware Doctor as my AV/anti-Malware. Is there a way to know if one of these is malware? Is it ok that two instances are running? Both are small letters, but details, although saying MSFT is publisher, said they used to be called "CSRSS.exe" and that kind of worries me. I know not to kill them since I will BSOD my system as it is a legitimate, required process. I've also heard 2 instances can be a corruption issue of the OS itself, somewhere in a .dll. That's beyond my ability to snoop around with. I'm getting occassional spikes and freezes and it shows one of the instances going to 100% CPU usage. Thanks for any help.