PRocesses: A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 0 1 2 3 4 5 6 7 8 9
Dlls: A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 0 1 2 3 4 5 6 7 8 9
Popular: svchost.exe | csrss.exe | rthdcpl.exe | spoolsv.exe | mrt.exe | lsass.exe | Home | Manufacturers | Top 1000

csrss.exe

What does the csrss.exe process do?

What is the purpose of the csrss.exe (Client/Server Runtime Server Subsystem) on Windows?

Maybe someone could give a good explanation or pointers to documentation? Unfortunately Google results are pretty noisy when searching a core process of Windows.

The reason I'm asking is that I got a BSOD from my service application which seems to be related to the csrss.exe process, at least this is what the analysis of the memory dump shows:

PROCESS_OBJECT: 85eeeb70

IMAGE_NAME: csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: csrss
FAULTING_MODULE: 00000000
PROCESS_NAME: PreviewService.
BUGCHECK_STR: 0xF4_PreviewService.
DEFAULT_BUCKET_ID: DRIVER_FAULT
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 80998221 to 80876b40

STACK_TEXT:
f5175d00 80998221 000000f4 00000003 85eeeb70 nt!KeBugCheckEx+0x1b
f5175d24 8095b1be 8095b1fa 85eeeb70 85eeecd4 nt!PspCatchCriticalBreak+0x75
f5175d54 8082350b 00000494 ffffffff 051bf114 nt!NtTerminateProcess+0x7a
f5175d54 7c8285ec 00000494 ffffffff 051bf114 nt!KiFastCallEntry+0xf8
051bf114 00000000 00000000 00000000 00000000 ntdll!KiFastSystemCallRet

STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
FAILURE_BUCKET_ID: 0xF4_PreviewService._IMAGE_csrss.exe
BUCKET_ID: 0xF4_PreviewService._IMAGE_csrss.exe

Followup: MachineOwner


EDIT: Thanks already for the good answers, but I actually don't need help concerning my service, I just would like to get some basic understanding of what the purpose of this service is.

View Complete Forum Thread with Replies

Related posts for csrss.exe

See Related Forum Messages: Follow the Links Below to View Complete Thread

Is it possible to get the “Image Path Name” of csrss.exe which is a SYSTEM process?
Hunting down application errors coming from csrss.exe
batch or vbs forced BSOD
Is there a way to inject behavior to csrss.exe and modify/enhance windows console?
make a windows 7 machine crash on BSOD
What does the csrss.exe process do?
is ??c:windows path legitimate

csrss.exe: Is it possible to get the “Image Path Name” of csrss.exe which is a SYSTEM process?

The windows system process (in Windows 7 for this example) 'csrss.exe' runs as a SYSTEM process and when I go to get (programmatically, of course) the process list with pid, command line, and image path name I get no values for command line or image path name because Windows won't let you grab that information for a SYSTEM process (I believe).

Is there a way I can grab image path name from a SYSTEM process? Does Windows actually prevent you from doing this? Is there a workaround?

U

csrss.exe: Hunting down application errors coming from csrss.exe

I'm the maintainer of a legacy Delphi application. On machines running this program an Application Error appears sometimes with the caption referring to this Delphi app and a message like the following:


The instruction at '...' referenced memory at '...'. The memory could not be 'read'.

Click on OK to terminate the program.


Task Manager says the process belonging to this message box is csrss.exe. What would be a systematic way to find the root cause of this e

csrss.exe: batch or vbs forced BSOD

Is there a way is batch or vbs to force the blue screen of death to appear, or a forced crash. This can happen from stopping the process 'csrss.exe' but it wont close via simple batch or vbs script. How can this be done?

csrss.exe: Is there a way to inject behavior to csrss.exe and modify/enhance windows console?

I'm aware of Console2 and similar solutions, but I would really like to enhance every console window in my system. Any ideas?

csrss.exe: make a windows 7 machine crash on BSOD

I'm trying to write a windows debug utility and I would need to automatically crash a Windows machine and make a Blue Screen Of Death appear.

I can obviously kill the csrss.exe process from the task manager, but the command TASKKILL /F /IM csrss.exe in a .bat file doesn't work.

Is there another way to make a Windows machine crash on bsod? Maybe some external library able to kill any process.

I would prefer to use a command line approach since I'm more familiar with it.

csrss.exe: What does the csrss.exe process do?

What is the purpose of the csrss.exe (Client/Server Runtime Server Subsystem) on Windows?

Maybe someone could give a good explanation or pointers to documentation? Unfortunately Google results are pretty noisy when searching a core process of Windows.

The reason I'm asking is that I got a BSOD from my service application which seems to be related to the csrss.exe process, at least this is what the analysis of the memory dump shows:

PROCESS_OBJECT: 85eeeb70

IMAGE_NAME

csrss.exe: is ??c:windows path legitimate

I am going to check loading and memory path of process to find malicious processes. for example if csrss.exe is executaed from other path than windows/system32 would be considered malicious. But the result of volatility for common process such as csrss.exe is as follow:

loading path : ??C:WINDOWSsystem32csrss.exe

mapped path : WINDOWSsystem32csrss.exe

or for sms.exe I have

loading path : SystemRootSystem32smss.exe

mapped path : WINDOWSsystem32smss.

conhost.exe: Python on windows - conhost.exe CPU usage

I'm running a Python script on Windows, and I've noticed that even though the Python process takes ~8% CPU, the associated conhost.exe process takes ~14%.

Why is this so? How come such a large part of the CPU consumption is in the conhost and not in the Python process?
Is there a way to reduce this CPU consumption? (besides optimizing the code of course)

UPDATE 1: Win7 64bit, Python 2.6.6

UPDATE 2: The Python program uses a C++ package via SWIG Python bindings. The C++ pa

vb6.exe: embed a csv file into exe file in vb6

I am trying to make a setup program in vb 6 that will install all the files that are required for the program.
I used a csv file to import data into an array using

file='C:usersadmindesktop able.csv'
Open file For Input As fnum


then i scan whole csv and then get each data seperated by comma into the array

Now the exe file cannot be executed in another laptop and I get the error 'file not found'.

So how to embed this csv document into the .exe file so that th

thunderbird.exe: Escaping commas in batch file START command?

My below .bat file creates an email to be sent by Mozilla Thunderbird email client. I can't get the commas in the subject= to show up. The cmd line interprets commas literally to mean the end of the subject part. How can I escape them?

I have tried double quotes around the commas.
Tried ^,
Tried ,
Tried ,
Tried ','

@ECHO OFF
SETLOCAL ENABLEDELAYEDEXPANSION
start '' 'C:Program Files (x86)Mozilla Thunderbird hunderbird.exe' -compose to=abc123@abc.com,subject=test, t

dumeter.exe: Wait for program to complete

To monitor the bandwidth usage and not to unnecessarily load programs in the start up,I want to execute the dumeter.exe then firefox.exe.When I shutdown firefox it should kill dumeter.I used the following code to start

Set WshShell = WScript.CreateObject('WScript.Shell')
WshShell.Run 'c:progra~1dumeterdumeter.exe'
WshShell.Run 'c:progra~1mozill~1firefox.exe


Need to run taskkill only when firefox is closed.Tried using a bat file but sometimes the dumeter starts and closes

reader: Blackberry smartcard reader example

I am writing an app for BlackBerry that utilizes a BlackBerry smartcard reader. There is not much documentation on the subject, so I'd really like if someone could give me starting examples.

Basically, there is one RSA private key on the card plus a certificate (for paired public key). I would like to be able to encrypt/decrypt data and also sign it as well. The final goal would be to establish an mutual-authenticated SSL connection using client certificate contained on the smartcard.

reader: fingerprint reader or thumb reader

I am wanting to develop an Automatic Attendance System using a thumb reader. When the user enters the office campus, they must put their thumb on to a thumb reader and is then marked as present.

Can anyone suggest a thumb reader that supports API for reading and comparing thumb-print images, so that I can easily integrate it with my attendance system.

I would prefer it if the device supports a Java API.

I have Google'd this a lot, but could not find any good answers.

mmc.exe: How can I access windows root certificate authorities certificates with Delphi?

Question related to Lazarus or Delphi. Is there a way to programmatically access trusted Root Certificate Authorities certificates in Windows. I know there is GUI based tool in Windows called 'mmc.exe', but I need to access certificate files (like .crt or .cer or .pem etc.) using Object Pascal syntax. Can anyone help me with that?

mrt.exe: “mrt.exe._p” and “mrstub.exe” files

I'm using window 8 and I found 'mrt.exe._p' file and 'mrstub.exe' file other than the drive in which window is installed and it disppear after few minutes. Is it harmful or not?

Thankyou

monitor.exe: I would like to see the process status whether which is running or Not responding / Hung in …

I would like to see the process(APPLICATION) status whether which is running or Not responding / Hung in between.

eg: Actually I am running third party tool in my WIN 7 PC where it is getting hung while running. I tried the below way but it doesn't help me:

TASKLIST /fi 'IMAGENAME eq MONITOR.exe /fi 'STATUS eq running'


Here this command shows always the process is running even the process hung.

I'm stuck here can somebody help please...

javaw.exe: Both javaw.exe *32 and javaw.exe runs in process manager

I am developing a portal based on Liferay and I use Eclipse as IDE. I am running a 64 bit windows 7 with 8gb RAM ddr2 and AMD Athlon II X2 255 3.10 GHz. My computers freezes some time when I run service builder or when I want to open an xml file in eclipse. I checked the Process Manager from Task Manager and I have seen that I have two javaw processes running , jaxaw.exe*32 and javaw.exe.Is this normal. If this is a problem can you help me to fix it. Thanks

Disclaimer
This web site and all information written here is for information purposes only, WITHOUT ANY VARANTY. YOU ARE USING THIS PAGES ON YOU OWN RISK. You should always verify the accuracy of information provided on this page. We pay a big attention to provide you with the correct information. However, many spyware and malware programs use filenames of usual, non-malware processes and DLLs. If we have included information about csrss.exe that is inaccurate, we would appreciate your help by getting us know about your user review. Also, web links to software and DLL vendors are provided just for your conform, and we cannot guarantee its accuracy nor relevance with DLL or process listed on this page. We are not affiliated with this pages. We are not responsible for misprints on this site or changes occured since this page was published. The product, software and operating system names mentioned on this web site, can be copyrighted and registered trademarks of their owners.

csrss.exe