Tuesday, February 19, 2019

csrss.exe information

The Client Server Runtime Server subsystem (csrss.exe) is a component of Microsot Windows NT OS. It mainly responsible for Win32 console handling and Graphical User Interface (GUI) shutdown (http://en.wikipedia.org/wiki/Client/Server_Runtime_Subsystem). It is critical to system operation; thus terminating the process will result in system failure (Blue Screen of Death = BSOD). Under normal circumstances, CRSS cannot be terminated with the taskkill command or with Windows Task Manager.

Complete name : C:\Windows\System32\csrss.exe
Format : MZ
Format profile : Executable / Intel i386
File size : 6.00 KiB
Encoded date : UTC 2009-07-13 23:11:09


csrss.exe version



Length Of Struc: 0398h
Length Of Value: 0034h
Type Of Struc: 0000h
Info: VS_VERSION_INFO
Signature: FEEF04BDh
Struc Version: 1.0
File Version: 6.1.7600.16385
Product Version: 6.1.7600.16385
File Flags Mask: 0.63
File Flags:
File OS: NT (WINDOWS32)
File Type: APP
File SubType: UNKNOWN
File Date: 00:00:00 00/00/0000

Struc has Child(ren). Size: 828 bytes.

Child Type: StringFileInfo
Language/Code Page: 1033/1200
CompanyName: Microsoft Corporation
FileDescription: Client Server Runtime Process
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
InternalName: CSRSS.Exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: CSRSS.Exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 6.1.7600.16385

Child Type: VarFileInfo
Translation: 1033/1200

You may not see description on the Taskmanager to tell the csrss.exe process is belong to Microsoft Corp but actually it's 100% genuine not virus or Trojan.

2 comments:

  1. When I start my computer and I check processes with task manager I see a csrss process running that has no information, it does not allow yoi to see any property or file location. I can remove or stop 0r kill this process.I got help from here you can try it.

    ReplyDelete
    Replies
    1. I think the csrss.exe is important although there is no information about it. It's normal and every PC has it

      Delete