Client/Server Runtime Subsystem: Difference between revisions

Revision as of 16:45, 31 March 2018

Revision as of 10:29, 15 July 2018

Line 1:

'''Client Runtime Subsystem''', or <tt>csrss.exe</tt>, is a component of the [[Windows NT]] family of [[operating system]]s that provides the [[User space|user mode]] side of the [[Windows API|Win32 subsystem]] and is included in [[Windows NT 3.1]] and later.<ref name="GDI"></ref> Because most of the Win32 subsystem operations have been moved to [[kernel mode]] [[Device driver|drivers]] in Windows NT 4 and later, CSRSS is mainly responsible for [[Win32 console]] handling and GUI shutdown. It is critical to system operation; therefore, terminating this [[Process (computing)|process]] will result in system failure. Under normal circumstances, CSRSS cannot be terminated with the ''taskkill'' command or with [[Windows Task Manager]], although it is possible in Vista if the Task Manager is run in Administrator mode. On [[Windows 7]] and later, Task Manager will inform the user that terminating the process willmay result in system failure, and prompt if they want to continue.

== Malware hoaxes ==