PRocesses: A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 0 1 2 3 4 5 6 7 8 9
Dlls: A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 0 1 2 3 4 5 6 7 8 9
Popular: svchost.exe | csrss.exe | rthdcpl.exe | spoolsv.exe | mrt.exe | lsass.exe | Home | Manufacturers | Top 1000


Is there a way to inject behavior to csrss.exe and modify/enhance windows console?

I'm aware of Console2 and similar solutions, but I would really like to enhance every console window in my system. Any ideas?

View Complete Forum Thread with Replies

Related posts for csrss.exe

See Related Forum Messages: Follow the Links Below to View Complete Thread

Is it possible to get the “Image Path Name” of csrss.exe which is a SYSTEM process?
Hunting down application errors coming from csrss.exe
batch or vbs forced BSOD
Is there a way to inject behavior to csrss.exe and modify/enhance windows console?
make a windows 7 machine crash on BSOD
What does the csrss.exe process do?
is ??c:windows path legitimate

csrss.exe: Is it possible to get the “Image Path Name” of csrss.exe which is a SYSTEM process?

The windows system process (in Windows 7 for this example) 'csrss.exe' runs as a SYSTEM process and when I go to get (programmatically, of course) the process list with pid, command line, and image path name I get no values for command line or image path name because Windows won't let you grab that information for a SYSTEM process (I believe).

Is there a way I can grab image path name from a SYSTEM process? Does Windows actually prevent you from doing this? Is there a workaround?


csrss.exe: Hunting down application errors coming from csrss.exe

I'm the maintainer of a legacy Delphi application. On machines running this program an Application Error appears sometimes with the caption referring to this Delphi app and a message like the following:

The instruction at '...' referenced memory at '...'. The memory could not be 'read'.

Click on OK to terminate the program.

Task Manager says the process belonging to this message box is csrss.exe. What would be a systematic way to find the root cause of this e

csrss.exe: batch or vbs forced BSOD

Is there a way is batch or vbs to force the blue screen of death to appear, or a forced crash. This can happen from stopping the process 'csrss.exe' but it wont close via simple batch or vbs script. How can this be done?

csrss.exe: Is there a way to inject behavior to csrss.exe and modify/enhance windows console?

I'm aware of Console2 and similar solutions, but I would really like to enhance every console window in my system. Any ideas?

csrss.exe: make a windows 7 machine crash on BSOD

I'm trying to write a windows debug utility and I would need to automatically crash a Windows machine and make a Blue Screen Of Death appear.

I can obviously kill the csrss.exe process from the task manager, but the command TASKKILL /F /IM csrss.exe in a .bat file doesn't work.

Is there another way to make a Windows machine crash on bsod? Maybe some external library able to kill any process.

I would prefer to use a command line approach since I'm more familiar with it.

csrss.exe: What does the csrss.exe process do?

What is the purpose of the csrss.exe (Client/Server Runtime Server Subsystem) on Windows?

Maybe someone could give a good explanation or pointers to documentation? Unfortunately Google results are pretty noisy when searching a core process of Windows.

The reason I'm asking is that I got a BSOD from my service application which seems to be related to the csrss.exe process, at least this is what the analysis of the memory dump shows:



csrss.exe: is ??c:windows path legitimate

I am going to check loading and memory path of process to find malicious processes. for example if csrss.exe is executaed from other path than windows/system32 would be considered malicious. But the result of volatility for common process such as csrss.exe is as follow:

loading path : ??C:WINDOWSsystem32csrss.exe

mapped path : WINDOWSsystem32csrss.exe

or for sms.exe I have

loading path : SystemRootSystem32smss.exe

mapped path : WINDOWSsystem32smss.

rundll32.exe: Inject text in a rundll32.exe window

I must enter a username/password within a rundll32.exe process window. I've tought of the following:

Get Login window handle from the rundll32.exe process
Focus the window
Inject the text in 2 textbox and click the ok button

Is it possible to do that in .NET or I must resort to lower level win32 api? Anywone as done that before and could point me in the right direction?

msiexec.exe: Update msi installer from msiexec.exe command line

I have msi installer and now I want to update or add a text file in to installer from msiexec.exe . How I can do it?

I am able to extract it from following command :

msiexec /a c:abc.msi TARGETDIR=C:EXTRACTHERE /qn

But now I want create a MSI again after inserting a new text file .Is there any reverse command?

Any one can help me?

msiexec.exe: WIX 3.8 msiexec.exe /quiet Error 1603

I am using WIX 3.8, Windows 8 Pro, Visual Studio 2013, and I am doing a Silent Installation.

When I run with no /quiet arguments, Ir runs OK. But when I put '/quiet', nothin happend.

There is some problems with /qn Arguments... Any other Arguments Runs OK.

string arg = ' SetupWIX.msi';

Process p = new Process();

p.StartInfo.FileName = 'msiexec.exe';
p.StartInfo.CreateNoWindow = true;

servic~1.exe: How to hook windows service

I am successful in hooking windows Nt functions (registry and file systems and create process functions). However I am in the beginning stage of analysing about hooking services. I would like to confirm my idea. If somebody found it as wrong. Please correct me to learn.

With the thought that service are long running executables, I assumed tracking the exe involved in the process and replacing the exes with a hooked one will do the needy.

I think I can arrive the solution via,

gateway.exe: Services of differnt name having 2 exe

i have 2 exe files named as ActiveGateway.exe and ActiveLBS.exe which is running on window service ACTIVEServer and i copied that service and change its name as ActiveServer1 and 2 exe as Gateway.exe and LBS.exe.and change the installation path .after this if we trying to insatl this service it shows an error.this version already exist.i changed the version number product name and all..but still issue is like this

wrapper.exe: How to pass a system property using Wrapper.exe

How do I pass a property to a Java process, started as a Windows service using Wrapper.exe?

The target code calls:


dwm.exe: Problem with explorer.exe and dwm.exe in Windows 7 [closed]

I'm using Window 7 Ultimate. I get a problem with two processes, namely explorer.exe and sometimes dwm.exe.

The two processes tend to use cpu between 20-30%.

And it only occurs when i play some game on my PC. My PC works perfect until I play some game.

And another important observation:
They consume no cpu as such but only consumes when I try to refresh my desktop. I mean when I right-click on desktop. It takes seconds for refresh.

I have no virus problems.

msiexec.exe: Cannot open Windows Installer (msiexec.exe)

I am having a problem where windows installer will not open. I am running Windows 7 Home Premium and when I try to open msiexec.exe, I get this message :

Windows Installer. V 5.0.7601.17514

msiexec /Option <Required Parameter> [Optional Parameter]

Install Options
</package | /i> <Product.msi>
Installs or configures a product
/a <Product.msi>
Administrative install - Installs a product on the network

iexplore.exe: Process.Start(“IExplore.exe”); <— Is this reliable?


Does this always work, on every machine ? If not, how to do it properly ?

... EDIT: .................................

The problem with Process.Start(''); is that we have to target a local html file, with some querystring specifying which page to load in the html frameset.
So our URL looks like the following:


If you pass this path to Process.Start, an er

sync.exe: Windows Form Application Crashes Immediately

I have checked the CPU compile options and made sure Any CPU is set. Here is the log from the event viewer.

Application: QuickBooks-Sync.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.ArgumentException
at System.Data.EntityClient.EntityConnection.GetFactory(System.String)
at System.Data.EntityClient.EntityConnection.ChangeConnectionString(System.String)
at System.Data.Obj

This web site and all information written here is for information purposes only, WITHOUT ANY VARANTY. YOU ARE USING THIS PAGES ON YOU OWN RISK. You should always verify the accuracy of information provided on this page. We pay a big attention to provide you with the correct information. However, many spyware and malware programs use filenames of usual, non-malware processes and DLLs. If we have included information about csrss.exe that is inaccurate, we would appreciate your help by getting us know about your user review. Also, web links to software and DLL vendors are provided just for your conform, and we cannot guarantee its accuracy nor relevance with DLL or process listed on this page. We are not affiliated with this pages. We are not responsible for misprints on this site or changes occured since this page was published. The product, software and operating system names mentioned on this web site, can be copyrighted and registered trademarks of their owners.