after i tried to solve the issue with 26 csrss.exe running, it seemed to meany, i no longer see LogonUI.exe in task manager.

forum posts from csrss.exe topic.

Post 1

i tried process explorer & trying stuff with that i opened a new csrss.exe & that works under my user not system & i cant kill that process (i double clicked on it), after restart it goes away? or should i just pull the cable out? i mane sudden shut down, status suspended, but it is on the list in task manager, how to get rid off it, end progress tree?

it just it did not have any info about csrss, so i tried to open it with process explorer, but that thing did not do what i though, that's why it all happened.

it also opened new Client server runtime process, i guess that csrss.exe under user is still in task manager list.

Post 2

restart solved the issue, at least it seems so, also that incident removed 24 csrss.exe from task manager, i had 26 running new i have only 2, i did it just to find out that maybe i can remove the csrss.exe what i opened after restart, but i did not expect this result, maybe this what some call zombie processes, they were in use once & when the process stopped they were stuck?


some processes disappeared, example LogonUI.exe is no longer running, i had 25 LogonUI.exe running before, with restart it booted, i hope that PC will start tomorrow to, i hope i did not mess up something & it wont start, or i messed up PC security, made security holes.

Another forum

Post 1

u have no idea what happened, i got both Process Monitor & explorer, i messed up double clicked on csrss.exe & that opened a new csrss.exe in task manager under my user, then i tried to kill the process, but it only suspended it, then i was thinking maybe after restart it lets me remove it totally from task manager, i made restart & what do i see when i open task manager? i see only 2 csrss.exe running, LOL sometimes messing up fixes the problem.

maybe this what some call zombie processes, they were in use once & when the process stopped they were stuck?

but all csrss.exe seemed legitimate, & no infection.

Post 2

does LogonUI.exe really run right new? is it just not showing? if its not running then i would have error message or problems with display? it would be funny if tomorrow i have all the 26 csrss.exe back.

is LogonUI.exe running & just hidden, was it normal that LogonUI.exe was shown in task manager before? or is it  normal when its hidden? will it effect gaming? cant test, no games installed right new.

but csrss.exe is not the only process that has more then 2 running & some over 10, one i counted it is 25.

ok this are gone to, maybe this were connected to csrss.exe issue, but i have 10 svchost.exe, this should be normal?

some processes disappeared, example LogonUI.exe is no longer running (well it seems it is no longer running, cause its no longer shown in task manager), i had 25 LogonUI.exe running before, with restart it booted, i hope that PC will start tomorrow to, i hope i did not mess up something & it wont start, or i messed up PC security, made security holes.

i know some of my post i copied here repeat some things i said before, i copied the post cause i was thinking that it will help people to understand my situation better :).

& i only double clicked on csrss.exe in windows system32 & created a new process, & i did end task to it & it was only suspended not killed, there was 2 win explores opened, one was cause i double clicked csrss.exe trough explorer, well u can see the files with out it, i was unable to remove it so i made a restart, & some processes were gone after that.

i wonder did i mess up my windows & stopped some necessary progresses? despite the fact that PC is running, & seem to be running fine.

csrss.exe was running 25 times & csrss.exe was running 26 times, but there was more processes that were running more then 3 times & they are gone to.

if some processes i don't see any more are necessary i hope they at least run on background silently, is LogonUI.exe meant to run all the time like it did before? or only for few sec on log-on/start-up? so user never see it.

PC seems to run fine right new, i did that stuff yesterday.

i also have alienautopsy  & PC-Doctor to what is part of alienautopsy, i mentioned it in case it matters, also when i got in windows i so some strange process for few sec in task manager, its icon looked like computer chip, cant remember the process name, but if i remember correctly it was DLL or Intel process.

under what name is LogonUI.exe admin tools service? i could check it from there, if u think its necessary

• Edited by Sugram22 Thursday, October 16, 2014 10:57 PM

Hi,

For the logon changes, we could take a look at the following blog:

Startup Processes and Delayed Automatic Start

"

LogonUI can host multiple credential providers concurrently and managers the UI displayed to users.  Credential Providers may also specify custom elements to display on the logon screen.  Once the user credentials have been passed to WINLOGON.EXE by LOGONUI.EXE, the LOGONUI.EXE process exits.

"

Consider logonUI.exe is a system process, we'd better leave it where it is.

And csrss.exe is the user-mode portion of the Win32 subsystem (with Win32.sys being the kernel-mode portion). Csrss stands forclient/server run-time subsystem and is an essential subsystem that must be running at all times. Csrss is responsible for console windows, creating and/or deleting threads, and some parts of the 16-bit virtual MS-DOS environment. Ending it from task manager is access denied.

Hope this information is helpful

Best regards

despite the fact i did not get it 100% it was helpful :)

i mentioned csrss.exe thing to explain how logonUI.exe disappeared from task manager

my question was, is logonUI.exe suppose to be invisible, not show in task manager, is it running under WINLOGON.EXE new what is shown in task manager? that i so logonUI.exe in task manager beforewas a fluke? or what i did killed logonUI.exe process, that's why i wrote so long TXT, to give full picture before i ask

so that i so LOGONUI.EXE running before i dealt with csrss.exe issue was a fluke, a system mistake? if LOGONUI.EXE would not run i would have problems that can be seen? does the same rule apply to win7, the rule that LOGONUI.EXE should not be seen in task manager, i ask cause i know some who have win7 & they see one LOGONUI.EXE running

does the thing i did by accident that decreased the number of csrss.exe running, is it possible that it also did something bad? i mean had negative effect? PC seems to run normally at the moment, or is it just like retarding windows explorer to remove notification icons of programs that are no longer exist? after all that happened only 2 csrss.exe remain, i guess the other were from something old & system did not detect that they should not be running anymore, or something like that

is it normal for example browser, even after 1h memory usage is example 340MB & when it hase run hole day, in the end of day its 540MB, i mean is it normal that memory usage increases over time, same is with PC, PC memory usage increase as well, first its 16% later its 29%, or is it sing of instability?as long as PC & browser seems to run with out problems or error messages i should ignore what i see in task manager? the memory usage?

this is message below is meant for all that read this.

considering how low effect it had to performance, i should have just left the 26 csrss.exe running alone, it was pointless, no infection just some windows bug or system bug, same goes for LogonUI.exe, if it is seen in task manager people should just ignore it ( ignore until u have to meany of them, that they take 1GB ram or more, even then i suggest u show ur PC to expert unless u really know what ur doing, if u have learned the stuff needed for it from some1), & when the time comes for user to take the PC in to shop for maintenance then they handle it in their way, its good idea to do it at least once a year, cause there are stuff that users cant do & some stuff that some users don't know

• Edited by Sugram22 Friday, October 17, 2014 9:08 AM

Hi,

Winlogon.exe at startup will have a call to start logonUI.exe to pass the credential providers. Once finished, it will stay running in Task Manager. Killing it from Task Manager have no issues occurred on my test machine, by now.

The effects of what we have done by accident is hard to tell. We could take a check into Event Viewer and Action Cernter for the error messages.

And for the Internet Explorer RAM usage, it depends on the webpage:

Diagnosing memory problems in your webpages

Best regards

well LogonUI.exe is listed on my task manager again, i mean its back, & about csrss, i have 3 running, i had 2 running yesterday (in task manager all 3 are running under system), with process explorer, it did not matter which of the csrss info i looked, all is same, all are runede by same processes, i could not copy that info under environment, but what i remember is, one was a  Invidia Pshysx, second & 3th was something to do with Intel, then i remember powershel, all that i remember, not worried about csrss yet, cause its still just 3, but i wonder about LogonUI.exe, for some reason i can't add picture/screenshot here

dunno is it all normal or not, but i write it down here just in case, no problems with high memory nor cpu usage, PC seems to run normally

if its not normal i have no idea whats causing it, i guess i need to just w8 a year or so before i give my PC to shop for maintenance, cause this is beyond me i think, cause no infections found & PC seems to run & function normally, maybe its caused by some old registry entries, i know registry cleaners are dangerous & can harm windows, so i think windows team should create their own reg cleaner free ware that finds only unnecessary reg entries that are no longer needed, a safe reg cleaner, also it mite be software issue/bug like example Invidia maybe is creating to meany hosts or how are this things called, csrss is connected to host service as far as i know, same goes for powershell & others that use csrss.exe, or windows bug, or bug that is caused by both, win8.1 & this drivers, well that's just a guess

maybe its a bug, system has problems with removing some closed processes from the list, or shutting town the ones that were suppose to run temporarily?

maybe i should ignore it until it starts to cause problems? i mean hit performance in a negative way

i also noticed 2 dwm.exe & winlogon.exe running

i used Ccleaner, but not for registry, i cleaned internet temporary files system temporary files event logs & memory dumbs & so on & on (its to much writing to write down all it cleans), if some of this type of files what are deleted with that, can it cause some processes to multiply? maybe among this files is a file where its written example what processes should be running or which process is connected to which process, like the Path & stuff, so registry cleaning is not the only cleaning that can cause issues?  or is it coincidence that after cleaning next day i see 1 extra csrss.exe & dwm.exe & winlogon.exe? either way i don't know do i want to test it & use cleaner 5 days after today again, does windows delete this things i mentioned i cleaned with cclener automatically over time? either way, i think i won't try anything to solve the extras issue, but if the number of this processes grows & it starts to cause problems i may just take the PC to a expert

PC seems to run & respond normally

EDIT 21/10/2014:

today there is 2 csrss.exe & the other processes are back to 1 as well & LogonUI.exe is gone again, well i did not look processes when i turned PC on, i did it after restart, maybe it accrues after boot when win opens, that some processes remain & some are double

is it normal that when i'm not doing anything with PC it takes 19% memory after PC start until i shut down & after restart it takes 16% memory (when i use restart button in windows), does this mean start up requires more memory & processes that remain running after start-up?

• Edited by Sugram22 Tuesday, October 21, 2014 8:08 AM

or can this cause the issue, its post of some1 else.

wiko1934 replied on August 26,2014

I think I found the reason for the two identical versions running at the same time.  Its not the "system" being regarded as a 2nd user but my graphic's card, for whatever reason - based on info on the company's website - sets itself up as a users, so all is legitimate and this MS service is running for each user

source

https://answers.microsoft.com/en-us/windows/forum/windows_vista-system/multiple-csrssexe-processes-running/f1674fb0-8af4-4b8a-8f91-a3d4244916e1

does invidia has a same issue & other software as well?

i was also thinking, if Cclener also finds files that contain information, about just that stuff that company's website - sets itself up as a users, if that info is gone it sets a new user & multiple's processes cause of that?

I'm also curios about Windows Audio Device Graph Isolation under processes, sometimes its there & sometimes its not, my question is, is it normal that sometimes it goes away from the list?

well i hear low vlume static when i turn on PC & get in windows to(dunno is static right word for what i hear, it just i don't know any other word in eng to describe it), until i click on speaker volume icon to make sound or open a video, after that no static , well the static may not be connected to Audio Device Graph Isolation, but it sure is with relationship between windows & audio drives, sometime the static starts when i'm afk some time (no sleep mode), is it normal?

• Edited by Sugram22 Monday, October 20, 2014 7:31 PM

Hi Sugram22,

Apologize for the late reply and thanks for your update.

Foe Windows startup issue, we may take a check with the Startup items under task manager. The usage might be caused by the programs listed.

If you would like to take a further investigation, we could take a Windows start up trace with xbootmgr included in WPT tool: Windows Performance Toolkit Technical Reference

For Windows Audio Device Graph Isolation and the speaker volume issue, we may first take a try with the troubleshooter: Control Panel\All Control Panel Items\Troubleshooting\Hardware and Sound, run the Playing Audio and the Recording Audio.

Sometimes the audiodg.exe would cause high disk usage, see: Windows Audio Device Graph Isolation (audiodg.exe) causes 100% disk load. Windows 8.1.

And here is an MSDN blog about audiodg.exe:

What is AUDIODG.EXE?

Hope the information above would help to determine if the behavior is normal, based on your situation.

Best regards

well CPU & Memory usage with processes does not seem high, total CPU 0%-10% depends on what i'm doing & whats is running, memory 19% with browser (waterfox) it can rise to 30%, usually its 26% - 28%

about audio, in my old PC i had windows start-up sound turned on so when win opened the static was gone, i guess audio drives have have a delay about when they are fully active & problem with going fully active, & any sound from inside PC like win start-up sound or video file that gives signal to audio drives will activate audio drives, i suspect this cause this static i hear all the time when i turn on speakers when PC was still in BIOS (with my previous speakers i heard nothing in Bios), cause in BIOS there is no connection with audio drives so that's normal, with different speakers i probably would not hear the static, cause this are the cheaper kind that are missing some extra stuff what wont connect speakers to PC until speakers get connection from PC (dunno how to explain it better), no problem with volume, its just that the static sound it self has low volume, in other words, the static noise is not loud. its not abnormal, but its defiantly audio drive bug, cause its incapable of going fully active automatically with out u opening audio file that gives signal to audio drive or opening video watching site, i have Realtek audio, well that bug mite have always been, but did not notice with old PC cause in there win start-up sound was  turned on, also in other words, speakers are plugged in but can't feel the connection/signal from PC audio until audio file is opened or video site is opened that's send signal to audio drives & that send two signals to speakers, two cause one is connection & second is the song

does win start-up sound take memory to, increase win memory usage?

disk usage 99% - 100% is only on win start-up when i just got in win & when i open task manager i see 99% for a short time, until most processes get running, then it starts to decrease, i guess its normal for start-up

• Edited by Sugram22 Thursday, October 23, 2014 10:53 AM

You may try to disable startup sound and see if the memory usage would change:

http://lifehacker.com/5959230/customize-the-logon-logoff-and-shutdown-sounds-in-windows-8

Rgds

startup sound is disabled, i was asking would that increase memory usage if i enable it :), it is enabled in my old PC