PRocesses: A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 0 1 2 3 4 5 6 7 8 9
Dlls: A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 0 1 2 3 4 5 6 7 8 9
Popular: svchost.exe | csrss.exe | rthdcpl.exe | spoolsv.exe | mrt.exe | lsass.exe | Home | Manufacturers | Top 1000

csrss.exe

What does the csrss.exe process do?

What is the purpose of the csrss.exe (Client/Server Runtime Server Subsystem) on Windows?

Maybe someone could give a good explanation or pointers to documentation? Unfortunately Google results are pretty noisy when searching a core process of Windows.

The reason I'm asking is that I got a BSOD from my service application which seems to be related to the csrss.exe process, at least this is what the analysis of the memory dump shows:

PROCESS_OBJECT: 85eeeb70

IMAGE_NAME: csrss.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 0
MODULE_NAME: csrss
FAULTING_MODULE: 00000000
PROCESS_NAME: PreviewService.
BUGCHECK_STR: 0xF4_PreviewService.
DEFAULT_BUCKET_ID: DRIVER_FAULT
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from 80998221 to 80876b40

STACK_TEXT:
f5175d00 80998221 000000f4 00000003 85eeeb70 nt!KeBugCheckEx+0x1b
f5175d24 8095b1be 8095b1fa 85eeeb70 85eeecd4 nt!PspCatchCriticalBreak+0x75
f5175d54 8082350b 00000494 ffffffff 051bf114 nt!NtTerminateProcess+0x7a
f5175d54 7c8285ec 00000494 ffffffff 051bf114 nt!KiFastCallEntry+0xf8
051bf114 00000000 00000000 00000000 00000000 ntdll!KiFastSystemCallRet

STACK_COMMAND: kb
FOLLOWUP_NAME: MachineOwner
FAILURE_BUCKET_ID: 0xF4_PreviewService._IMAGE_csrss.exe
BUCKET_ID: 0xF4_PreviewService._IMAGE_csrss.exe

Followup: MachineOwner


EDIT: Thanks already for the good answers, but I actually don't need help concerning my service, I just would like to get some basic understanding of what the purpose of this service is.

View Complete Forum Thread with Replies

Related posts for csrss.exe

See Related Forum Messages: Follow the Links Below to View Complete Thread

Is it possible to get the “Image Path Name” of csrss.exe which is a SYSTEM process?
Hunting down application errors coming from csrss.exe
batch or vbs forced BSOD
Is there a way to inject behavior to csrss.exe and modify/enhance windows console?
make a windows 7 machine crash on BSOD
What does the csrss.exe process do?
is ??c:windows path legitimate

csrss.exe: Is it possible to get the “Image Path Name” of csrss.exe which is a SYSTEM process?

The windows system process (in Windows 7 for this example) 'csrss.exe' runs as a SYSTEM process and when I go to get (programmatically, of course) the process list with pid, command line, and image path name I get no values for command line or image path name because Windows won't let you grab that information for a SYSTEM process (I believe).

Is there a way I can grab image path name from a SYSTEM process? Does Windows actually prevent you from doing this? Is there a workaround?

U

csrss.exe: Hunting down application errors coming from csrss.exe

I'm the maintainer of a legacy Delphi application. On machines running this program an Application Error appears sometimes with the caption referring to this Delphi app and a message like the following:


The instruction at '...' referenced memory at '...'. The memory could not be 'read'.

Click on OK to terminate the program.


Task Manager says the process belonging to this message box is csrss.exe. What would be a systematic way to find the root cause of this e

csrss.exe: batch or vbs forced BSOD

Is there a way is batch or vbs to force the blue screen of death to appear, or a forced crash. This can happen from stopping the process 'csrss.exe' but it wont close via simple batch or vbs script. How can this be done?

csrss.exe: Is there a way to inject behavior to csrss.exe and modify/enhance windows console?

I'm aware of Console2 and similar solutions, but I would really like to enhance every console window in my system. Any ideas?

csrss.exe: make a windows 7 machine crash on BSOD

I'm trying to write a windows debug utility and I would need to automatically crash a Windows machine and make a Blue Screen Of Death appear.

I can obviously kill the csrss.exe process from the task manager, but the command TASKKILL /F /IM csrss.exe in a .bat file doesn't work.

Is there another way to make a Windows machine crash on bsod? Maybe some external library able to kill any process.

I would prefer to use a command line approach since I'm more familiar with it.

csrss.exe: What does the csrss.exe process do?

What is the purpose of the csrss.exe (Client/Server Runtime Server Subsystem) on Windows?

Maybe someone could give a good explanation or pointers to documentation? Unfortunately Google results are pretty noisy when searching a core process of Windows.

The reason I'm asking is that I got a BSOD from my service application which seems to be related to the csrss.exe process, at least this is what the analysis of the memory dump shows:

PROCESS_OBJECT: 85eeeb70

IMAGE_NAME

csrss.exe: is ??c:windows path legitimate

I am going to check loading and memory path of process to find malicious processes. for example if csrss.exe is executaed from other path than windows/system32 would be considered malicious. But the result of volatility for common process such as csrss.exe is as follow:

loading path : ??C:WINDOWSsystem32csrss.exe

mapped path : WINDOWSsystem32csrss.exe

or for sms.exe I have

loading path : SystemRootSystem32smss.exe

mapped path : WINDOWSsystem32smss.

soffice.exe: Launching OpenOffice from WPF app. AlwaysOnTop

I am launching openoffice 3.3.0 on Windows 7 from a WPF app no problem, however when launching on XP openoffice always goes behind my WPF any way to stop this ?

C:Program FilesOpenOffice.org 3programsoffice.exe

msiexec.exe: WiX: Change MsiExec.exe error message (not Windows Installer error messages)

Is there a way to change error messages given by MsiExec in WiX?
My goal is to customize the message that appears when users try to install a patch without having the target product installed.

I have tried adding

<Error Id='1642'>You must install my product before installing this patch.</Error>


to the UI section but it doesn't seem to work.

I suspect there is a big difference between Windows Installer errors and MsiExec errors.

Has anyone ev

php.exe: CreateProcess php.exe fsockopen error

I'm trying to launch php.exe via CreateProcess() and while I can get it to lauch and execute my PHP code without a problem, I can't get the PHP code to use socket functions. I get fsockopen(): php_network_getaddresses: getaddrinfo failed: unknown host error.

However, if I execute exactly the same command in a CMD window, the php executes perfectly.

Any ideas?

System is Win7 and PHP 5.4

EDIT: I tried a new thing:

If I ping a.valid.hostname.com via CreateProcess

monitor.exe: How do I monitor the status of an C# windows application?

Lets say I have a Windows application named app.exe, written in C# (Windows Forms), running unattended under any Windows OS (XP to 8).

I would like to monitor the status of the app:


Is the app still running or has it crashed
Has the app run into an internal error state


My idea is to set up a scheduled task in Windows (using the Task Scheduler) to run a Windows Console application, monitor.exe, every 15 minutes.
The monitor app will send an email with the status

logonui.exe: LogonUI.exe process doesn't terminate after switching user

I am developing a Credential Provider (CP) that shows a dialog at logon or unlock screen of Windows Vista/7. That dialog terminates whenever the destructor of my Credential Provider is invoked. For basic scenarios like unlock or logon, that dialog is closed properly; however, I got into trouble with this scenario:


Lock computer: this will show my dialog
Click 'Other Credentials'
Click 'Switch User'


After step 3, a new dialog is created (a new logonUI process creates m

javaw.exe: Eclipse cannot find javaw.exe

When i start eclipse i get this problem:



The location of javaw.exe in my computer is C:Program FilesJavajre7in. I have tried change the path environment variable then i get different error like:

update.exe: How to correctly use File Mapping and pass Data to a child process?

My application is executing another process ('update.exe'), and I would like to pass large data (a Record maybe) from my app to the update program.

Using command line to pass the data parameter(s) is not an option, because the data is too big (also Data size may vary).

How to correctly create CreateFileMapping/MapViewOfFile/UnmapViewOfFile,
then Executing my update.exe,
finally Receiving the data in the update.exe program (OpenFileMapping),
and freeing all handles (from

rundll32.exe: Using “rundll32.exe” to access SpeechUX.dll

Good Day,

I have searched the Internet tirelessly trying to find an example of how to start Windows Speech Training from with in my VB.Net Speech Recognition Application.

I have found a couple examples, which I can not get working to save my life.

One such example is on the Visual Studios Fourms:

HERE

this particular example users the 'Process.Start' call to try and start the Speech Training Session. However this does not work for me. Here is the exmaple from

acrord32.exe: Programmatically determine AcroRd32.exe path and print it !

How do i find the installed adobe path on the system through .net code.
Later this path needs to be sent as a parameter to a function which prints
a pdf document...The later part is handled.

But my question is the print needs to be handled any system, but since
I hard coded the adobe path according to my system it doesn't work on other
systems with different versions of adobe.

I needed a solution to make adobe file compatible on any system.

-system process-: Why is processing a sorted array faster than an unsorted array?

Here is a piece of C++ code that seems very peculiar. For some strange reason, sorting the data miraculously makes the code almost six times faster:

#include <algorithm>
#include <ctime>
#include <iostream>

int main()
{
// Generate data
const unsigned arraySize = 32768;
int data[arraySize];

for (unsigned c = 0; c < arraySize; ++c)
data[c] = std::rand() % 256;

// !!! With this, the next loop runs fas

Disclaimer
This web site and all information written here is for information purposes only, WITHOUT ANY VARANTY. YOU ARE USING THIS PAGES ON YOU OWN RISK. You should always verify the accuracy of information provided on this page. We pay a big attention to provide you with the correct information. However, many spyware and malware programs use filenames of usual, non-malware processes and DLLs. If we have included information about csrss.exe that is inaccurate, we would appreciate your help by getting us know about your user review. Also, web links to software and DLL vendors are provided just for your conform, and we cannot guarantee its accuracy nor relevance with DLL or process listed on this page. We are not affiliated with this pages. We are not responsible for misprints on this site or changes occured since this page was published. The product, software and operating system names mentioned on this web site, can be copyrighted and registered trademarks of their owners.

csrss.exe