Virus? Duplicate csrss.exe and winlogon.exe files outside Windows/System32

Question

Hi,
My computer has been running extremely slowly while performing normal tasks (i.e. web browsing, typing).
I found a second copy of 'csrss.exe', which as I understand is frequently a trojan. The copy is located in the following file path:
C:\Windows\winsxs\x86_microsoft-windows-csrss_31bf3856ad364e35_6.1.7600.16385_none_58ba39fb456943bd
I also found two extra copies of 'winlogon.exe', at the following paths, as well as in Windows\System32:
C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166
C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500
I ran the Norton antivirus scan, the Norton Power Eraser, a few csrss.exe-targeted scans, and spyware search & destroy, none of which detected a virus. I tried moving/renaming the file, but this is denied by the system.
I used Windows Process Explorer, and the first time,  both csrss.exe & winlogon.exe were verified as system processes. This time I ran and the processes have no info (Version: n/a; Build Time: n/a; Path: [Error opening process]).
I'm running Windows 7 Professional on a local domain.
Thanks in advance for your advice.

Answer 1

SOF
The second copy is a backup and in that location probably normal.  I doubt malware is the cause of your system running slow more likely system corruption
Please provide us with your Event Viewer administrative logs by following these steps:
Click Start Menu
Type eventvwr into Search programs and files (do not hit enter)
Right click eventvwr.exe and click Run as administrator
Expand Custom Views
Click Administrative Events
Right click Administrative Events
Save all Events in Custom View As...
Save them in a folder where you will remember which folder and save as Errors.evtx
Go to where you saved Errors.evtx
Right click Errors.evtx -> send to -> compressed (zipped) folder
Upload the .zip file to Onedrive or a file sharing service and put a link to it in your next post
If you have updated to win 8.1 and you get the error message "the system cannot find the file specified" it is a known problem.  The
work around is to edit the registry.  If you are not comfortable doing this DONT.  If you are, backup the key before you do
Press Win+"R" and input regedit
Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels. Delete "Microsoft-Windows-DxpTaskRingtone/Analytic"
Wanikiya and Dyami--Team Zigzag