Please do yourself a favor an either disable outbound firewall blocking in
Zone Alarm, or uninstall Zone Alarm altogether and use the built-in firewall.
Yes, CSRSS is a real program. It is the Client Server Runtime Sub-System of
Windows that handles creation of windows, processes and other things.
For as long as you keep using the kind of outbound firewall that Zone Alarm
implements you will get hundreds of these warnings. Virtually all of them
will be legitimate, and the blocking provides no security value at all. It is
simply a nuisance. Any malicious program would make sure it connects out
without giving you a warning.
Your question may already be answered in Windows Vista Security:
> my OS is Vista Home
> I have Zonealarm which has recently been reporting that csrss.exe
> is trying to access the internet.
> Is it supposed to do that? Is the real program equipped to do that?
> It resides in Windows C:\Windows\System32 and I have looked for
> any other instance without success.
> The file size is 8k
> My AVG is updated and scans once per day.