PRocesses: A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 0 1 2 3 4 5 6 7 8 9
Dlls: A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 0 1 2 3 4 5 6 7 8 9
Popular: svchost.exe | csrss.exe | rthdcpl.exe | spoolsv.exe | mrt.exe | lsass.exe | Home | Manufacturers | Top 1000

csrss.exe

make a windows 7 machine crash on BSOD

I'm trying to write a windows debug utility and I would need to automatically crash a Windows machine and make a Blue Screen Of Death appear.

I can obviously kill the csrss.exe process from the task manager, but the command TASKKILL /F /IM csrss.exe in a .bat file doesn't work.

Is there another way to make a Windows machine crash on bsod? Maybe some external library able to kill any process.

I would prefer to use a command line approach since I'm more familiar with it.

View Complete Forum Thread with Replies

Related posts for csrss.exe

See Related Forum Messages: Follow the Links Below to View Complete Thread

Is it possible to get the “Image Path Name” of csrss.exe which is a SYSTEM process?
Hunting down application errors coming from csrss.exe
batch or vbs forced BSOD
Is there a way to inject behavior to csrss.exe and modify/enhance windows console?
make a windows 7 machine crash on BSOD
What does the csrss.exe process do?
is ??c:windows path legitimate

csrss.exe: Is it possible to get the “Image Path Name” of csrss.exe which is a SYSTEM process?

The windows system process (in Windows 7 for this example) 'csrss.exe' runs as a SYSTEM process and when I go to get (programmatically, of course) the process list with pid, command line, and image path name I get no values for command line or image path name because Windows won't let you grab that information for a SYSTEM process (I believe).

Is there a way I can grab image path name from a SYSTEM process? Does Windows actually prevent you from doing this? Is there a workaround?

U

csrss.exe: Hunting down application errors coming from csrss.exe

I'm the maintainer of a legacy Delphi application. On machines running this program an Application Error appears sometimes with the caption referring to this Delphi app and a message like the following:


The instruction at '...' referenced memory at '...'. The memory could not be 'read'.

Click on OK to terminate the program.


Task Manager says the process belonging to this message box is csrss.exe. What would be a systematic way to find the root cause of this e

csrss.exe: batch or vbs forced BSOD

Is there a way is batch or vbs to force the blue screen of death to appear, or a forced crash. This can happen from stopping the process 'csrss.exe' but it wont close via simple batch or vbs script. How can this be done?

csrss.exe: Is there a way to inject behavior to csrss.exe and modify/enhance windows console?

I'm aware of Console2 and similar solutions, but I would really like to enhance every console window in my system. Any ideas?

csrss.exe: make a windows 7 machine crash on BSOD

I'm trying to write a windows debug utility and I would need to automatically crash a Windows machine and make a Blue Screen Of Death appear.

I can obviously kill the csrss.exe process from the task manager, but the command TASKKILL /F /IM csrss.exe in a .bat file doesn't work.

Is there another way to make a Windows machine crash on bsod? Maybe some external library able to kill any process.

I would prefer to use a command line approach since I'm more familiar with it.

csrss.exe: What does the csrss.exe process do?

What is the purpose of the csrss.exe (Client/Server Runtime Server Subsystem) on Windows?

Maybe someone could give a good explanation or pointers to documentation? Unfortunately Google results are pretty noisy when searching a core process of Windows.

The reason I'm asking is that I got a BSOD from my service application which seems to be related to the csrss.exe process, at least this is what the analysis of the memory dump shows:

PROCESS_OBJECT: 85eeeb70

IMAGE_NAME

csrss.exe: is ??c:windows path legitimate

I am going to check loading and memory path of process to find malicious processes. for example if csrss.exe is executaed from other path than windows/system32 would be considered malicious. But the result of volatility for common process such as csrss.exe is as follow:

loading path : ??C:WINDOWSsystem32csrss.exe

mapped path : WINDOWSsystem32csrss.exe

or for sms.exe I have

loading path : SystemRootSystem32smss.exe

mapped path : WINDOWSsystem32smss.

splwow64.exe: How to properly install virtual printer using WinAPI on Win x64?

I am trying to install virtual printer from C++ console program using WinAPI calls. It works fine on Windows XP, but on Windows 7 x64 there are some processes which lock files in system folders, required for install. I think they appear only on x64 Windows systems, but I haven't tested it with Windows XP x64.

These are processes splwow64.exe and PrintIsolationHost.exe. I tried to kill them programmaticly and it turns out well (well, for terminating PrintIsolationHost.exe I've set a Debug

iexplore.exe: invoke iexplore.exe in already launched instance using ShellExecuteEx

I used ShellExecuteEx to call iexplore.exe, Whenever I start the application a new instance of internet explorer is created irrespective of, internet explorer already opened or not.

I want to change this, if already an instance of the Internet explorer is there, I need to open a new tab in that instance with the address I am passing to the ShExecInfo.lpParameters, thus without creating a new window. Is there a way to do this? Please advice..

UPADATE:
In the below answer I have a

frameworkservice.exe: Connecting to WMI: 0x800706ba errors on some machines (but not all)

When I try to connect to WMI from Powershell, ConfigMgr, or WMI explorer, I can talk to the majority of my computers, but some (maybe 30%?) return an 0x800706ba (RPC server is unavailable).

If I turn the firewall off on the remote machine, the queries start working. I have tried a bunch of different configurations of firewall settings, though, and I can't seem to figure out what the right combination of exceptions is.

Here's the relevant bits of my firewall config on the remote ma

dwm.exe: Performance issue when resizing Win32 containing WPF

I am in the process of migrating an existing legacy project. For now we want to use C++/CLI as a bridge between business logic (native C++) and interface (WPF). I followed this MSDN article on how to host WPF content in a Win32 window as a starting point. However, I cannot wrap my head around this problem: Whenever I resize the host window...


There are serious delays and the window is repainting slowly.
It causes the Desktop Window Manager (dwm.exe) to increase dramatically in mem

cfp.exe: Useing Registry value to launch a application? whats wrong with it? .net 2.0 ONLY please

I am trying to write a little piece of code that retrieves the install path of an application, and uses it + the applications name to start the application on click. This is what I have so far but I keep getting the error 'Object reference not set to an instance of an object'. This is the code I'm trying to use, whats wrong?

RegistryKey Copen = Registry.LocalMachine.OpenSubKey(@'SoftwareComodoGroupCDI1');
Copen.GetValue('InstallProductPath');
System.Diagnostics.Process.Start(Copen +

mysqld-nt.exe: taskkill Mysql from .ASPX — Permission Problems?

Our mysql instance occaisionally locks up during backups. Currently we must VPN into the corporate network (to obtain work I.P.), remote desktop into the server, open the task manager, and manually kill the mysqld-nt.exe process.

Instead of doing all of this we are attempting to create a simple webpage that we can log into to kill and restart the service.

The following block of code is wired up inside our new .aspx page works as I intended on my local desktop (running in VS debug m

ntkrnlpa.exe: .NET AppDomain.Unload triggers runaway threads

I have an .NET 3.5 SP1 application that is an Excel Add-in. The application is split into a parent AppDomain (Excel's) and a child domain in which we load all of our dlls. When we wish to update our application, we unload the child domain, replace the files and reload it.

Unfortunately unloading the domain will activate 2 worker threads and they will start consuming CPU cycles (20-40%).

If I debug with VS 2010, at the moment before and after the AppDomain.Unload, there are no thre

thunderbird.exe: Thunderbird compose email in a batch script - continue to next command

Using the following line in a batch script to call thunderbird and compose an email:

thunderbird.exe -compose 'to='email@domain.com',subject='Some Subject',preselectid='id1',body='Message Body',attachment='File.txt''


The command performs perfectly fine, however the batch script will not continue until the application terminates. Is there a way to bypass this so that the script will continue on with the next command?

win.exe: 'php-win.exe' is not recognized as an internal or external command, operable program or batc…

I am using windows , wamp , php5.4.12.
the path of the php is added in the systems environments
The IUSER has read and execute permission to cmd.exe

from cmd.exe I can run php, php.exe, php-win, php-win.exe, so I do not think there are a problem with the path environment

I am trying to run the following command

exec('php background.php > testoutput.php 2>&1 & echo $!', $output);


I tried for php, php.exe, php-win, php-win.exe, but I still get th

iexplore.exe: Process.Start(“IExplore.exe”); <— Is this reliable?

Process.Start('IExplore.exe');

Does this always work, on every machine ? If not, how to do it properly ?

... EDIT: .................................

The problem with Process.Start('http://www.example.com/'); is that we have to target a local html file, with some querystring specifying which page to load in the html frameset.
So our URL looks like the following:

G:PathToHelpFolderindex.html#search?page=1.html


If you pass this path to Process.Start, an er

Disclaimer
This web site and all information written here is for information purposes only, WITHOUT ANY VARANTY. YOU ARE USING THIS PAGES ON YOU OWN RISK. You should always verify the accuracy of information provided on this page. We pay a big attention to provide you with the correct information. However, many spyware and malware programs use filenames of usual, non-malware processes and DLLs. If we have included information about csrss.exe that is inaccurate, we would appreciate your help by getting us know about your user review. Also, web links to software and DLL vendors are provided just for your conform, and we cannot guarantee its accuracy nor relevance with DLL or process listed on this page. We are not affiliated with this pages. We are not responsible for misprints on this site or changes occured since this page was published. The product, software and operating system names mentioned on this web site, can be copyrighted and registered trademarks of their owners.

csrss.exe