CSRSS (?) always reading something, the LED flashing every seconds.

R

R-J

Hi all!

I use XP Prof. SP3. The system works perfectly, so I don't have any problems in the performance, but I show, that the HDD LED always flash. If I don't do anything, that access the disk, the led even flashing.
I have run the filemon, and I show, that csrss many times try to reading something.
Here is a part of the filemon logfile:

15494 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.5512.Policy SUCCESS FileNameInformation
15495 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.5512.Policy BUFFER OVERFLOW FileFsVolumeInformation
15496 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.5512.Policy BUFFER OVERFLOW FileAllInformation
15497 2:04:23 csrss.exe:816 READ C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.5512.Policy SUCCESS Offset: 0 Length: 4095
15498 2:04:23 csrss.exe:816 READ C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.5512.Policy END OF FILE Offset: 621 Length: 8178
15499 2:04:23 csrss.exe:816 CLOSE C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.5512.Policy SUCCESS
15500 2:04:23 csrss.exe:816 OPEN C:\WINDOWS\Assembly\GAC\Policy.6.0.Microsoft.Windows.Common-Controls\ NOT FOUND Options: Open Directory Access: 00100001
15501 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest SUCCESS Attributes: A
15502 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest SUCCESS Attributes: A
15503 2:04:23 csrss.exe:816 OPEN C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls.mui_6595b64144ccf1df_hu-HU_6ec554f7\ NOT FOUND Options: Open Directory Access: 00100001
15504 2:04:23 csrss.exe:816 OPEN C:\WINDOWS\Assembly\GAC\Policy.6.0.Microsoft.Windows.Common-Controls.mui\ NOT FOUND Options: Open Directory Access: 00100001
15505 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls.mui_6595b64144ccf1df_6.0.2600.5512_hu-HU_444d1f81.Manifest NOT FOUND Attributes: Error
15506 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\assembly\GAC\Microsoft.Windows.Common-Controls.mui\6.0.2600.5512_hu-HU_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL PATH NOT FOUND Attributes: Error
15507 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu-HU\Microsoft.Windows.Common-Controls.mui.DLL NOT FOUND Attributes: Error
15508 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu-HU\Microsoft.Windows.Common-Controls.mui.MANIFEST NOT FOUND Attributes: Error
15509 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu-HU\Microsoft.Windows.Common-Controls.mui\Microsoft.Windows.Common-Controls.mui.DLL PATH NOT FOUND Attributes: Error
15510 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu-HU\Microsoft.Windows.Common-Controls.mui\Microsoft.Windows.Common-Controls.mui.MANIFEST PATH NOT FOUND Attributes: Error
15511 2:04:23 csrss.exe:816 OPEN C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls.mui_6595b64144ccf1df_hu_451bf397\ NOT FOUND Options: Open Directory Access: 00100001
15512 2:04:23 csrss.exe:816 OPEN C:\WINDOWS\Assembly\GAC\Policy.6.0.Microsoft.Windows.Common-Controls.mui\ NOT FOUND Options: Open Directory Access: 00100001
15513 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls.mui_6595b64144ccf1df_6.0.2600.5512_hu_a23e28e1.Manifest NOT FOUND Attributes: Error
15514 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\assembly\GAC\Microsoft.Windows.Common-Controls.mui\6.0.2600.5512_hu_6595b64144ccf1df\Microsoft.Windows.Common-Controls.mui.DLL PATH NOT FOUND Attributes: Error
15515 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu\Microsoft.Windows.Common-Controls.mui.DLL NOT FOUND Attributes: Error
15516 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu\Microsoft.Windows.Common-Controls.mui.MANIFEST NOT FOUND Attributes: Error
15517 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu\Microsoft.Windows.Common-Controls.mui\Microsoft.Windows.Common-Controls.mui.DLL PATH NOT FOUND Attributes: Error
15518 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu\Microsoft.Windows.Common-Controls.mui\Microsoft.Windows.Common-Controls.mui.MANIFEST PATH NOT FOUND Attributes: Error
15519 2:04:23 csrss.exe:816 OPEN C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest SUCCESS Options: Open Sequential Access: Read
15520 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest BUFFER OVERFLOW FileNameInformation
15521 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest SUCCESS FileNameInformation
15522 2:04:23 csrss.exe:816 READ C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest SUCCESS Offset: 0 Length: 2
15523 2:04:23 csrss.exe:816 CLOSE C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest SUCCESS
15524 2:04:23 csrss.exe:816 OPEN C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest SUCCESS Options: Open Sequential Access: Read
15525 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest BUFFER OVERFLOW FileNameInformation
15526 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest SUCCESS FileNameInformation
15527 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest BUFFER OVERFLOW FileFsVolumeInformation
15528 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest BUFFER OVERFLOW FileAllInformation
15529 2:04:23 csrss.exe:816 READ C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest SUCCESS Offset: 0 Length: 4095
15530 2:04:23 csrss.exe:816 READ C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest END OF FILE Offset: 1862 Length: 8178
15531 2:04:23 csrss.exe:816 CLOSE C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83.Manifest SUCCESS
15532 2:04:23 csrss.exe:816 OPEN C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_hu-HU_ae6b0d0a\ NOT FOUND Options: Open Directory Access: 00100001
15533 2:04:23 csrss.exe:816 OPEN C:\WINDOWS\Assembly\GAC\Policy.6.0.Microsoft.Windows.Common-Controls\ NOT FOUND Options: Open Directory Access: 00100001
15534 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu-HU SUCCESS Attributes: D
15535 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu SUCCESS Attributes: D
15536 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\ SUCCESS Attributes: D
15537 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\ SUCCESS Attributes: D
15538 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_hu-HU_1c9506b5.Manifest NOT FOUND Attributes: Error
15539 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\assembly\GAC\Microsoft.Windows.Common-Controls\6.0.0.0_hu-HU_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL PATH NOT FOUND Attributes: Error
15540 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu-HU\Microsoft.Windows.Common-Controls.DLL NOT FOUND Attributes: Error
15541 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu-HU\Microsoft.Windows.Common-Controls.MANIFEST NOT FOUND Attributes: Error
15542 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu-HU\Microsoft.Windows.Common-Controls\Microsoft.Windows.Common-Controls.DLL PATH NOT FOUND Attributes: Error
15543 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu-HU\Microsoft.Windows.Common-Controls\Microsoft.Windows.Common-Controls.MANIFEST PATH NOT FOUND Attributes: Error
15544 2:04:23 csrss.exe:816 OPEN C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_hu_84c1abaa\ NOT FOUND Options: Open Directory Access: 00100001
15545 2:04:23 csrss.exe:816 OPEN C:\WINDOWS\Assembly\GAC\Policy.6.0.Microsoft.Windows.Common-Controls\ NOT FOUND Options: Open Directory Access: 00100001
15546 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_hu_7a861015.Manifest NOT FOUND Attributes: Error
15547 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\assembly\GAC\Microsoft.Windows.Common-Controls\6.0.0.0_hu_6595b64144ccf1df\Microsoft.Windows.Common-Controls.DLL PATH NOT FOUND Attributes: Error
15548 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu\Microsoft.Windows.Common-Controls.DLL NOT FOUND Attributes: Error
15549 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu\Microsoft.Windows.Common-Controls.MANIFEST NOT FOUND Attributes: Error
15550 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu\Microsoft.Windows.Common-Controls\Microsoft.Windows.Common-Controls.DLL PATH NOT FOUND Attributes: Error
15551 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\system32\hu\Microsoft.Windows.Common-Controls\Microsoft.Windows.Common-Controls.MANIFEST PATH NOT FOUND Attributes: Error
15552 2:04:23 csrss.exe:816 OPEN C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\ SUCCESS Options: Open Directory Access: 00100001
15553 2:04:23 csrss.exe:816 DIRECTORY C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\ SUCCESS FileBothDirectoryInformation: *.policy
15554 2:04:23 csrss.exe:816 DIRECTORY C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\ SUCCESS FileBothDirectoryInformation
15555 2:04:23 csrss.exe:816 DIRECTORY C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\ NO MORE FILES FileBothDirectoryInformation
15556 2:04:23 csrss.exe:816 CLOSE C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\ SUCCESS
15557 2:04:23 csrss.exe:816 OPEN C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.5512.Policy SUCCESS Options: Open Sequential Access: Read
15558 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.5512.Policy BUFFER OVERFLOW FileNameInformation
15559 2:04:23 csrss.exe:816 QUERY INFORMATION C:\WINDOWS\WinSxS\Policies\x86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.5512.Policy SUCCESS FileNameInformation

What is this? And why?
I use AVAST!, and ZoneAlarm, and I am a carefulk user, so I think this is not a virus.
But what is this? What is the csrss? And why want to read that file? Can I solve this problem (is this a problem??) without a reinstall?

Many thanks for your help!
 
do you have the indexing service enabled??

have you run either checkdisk with the /r parameter and/or the drive checking program from you hard drive manufacturer??
 
Thank you for your answer!

I turned off the indexing service on the C: drive, and the CSRSS almost disappeared from that filemon-log. :) Thank you!
But many other process access to the drive, and the LED flashes every 1-2 seconds. Is that normal? I upload a filemon log.
 

Attachments

  • Filemon4.zip
    100.4 KB · Views: 264
have you talked with avast support? are they still supporting xp? and do you have free or paid version??

----------

What does the ANIWConnService.exe file do?

The ANIWConnService.exe process is also known as ANIWConnService and is a part of ANIWConn Service or, as the case may be, D-Link DWA-160. This software is produced by unknown. An obsolete or defective version of ANIWConnService.exe can cause problems for your computer that can range from slowness to error messages

do you have the above service for internet?? and it should be located in the system32 folder, is it??

-----------

The genuine httpd.exe file is a software component of Apache HTTP Server by Apache Software Foundation. Httpd.exe is an executable file that belongs to the Apache HTTP Server, a open-source implementation of a Web Server.

are you running as a server?? if so I am not sure whether anything I help you with will work as I only have regular xp desktop and not a server.

therefore I do not know if it is good or bad to have httpd.exe listed more than once.

---------
wscntfy.exe

if you are using zone alarm firewall, then this should be (security center service) disabled.

---------

chrome, and thunderbird do not support xp anymore
not sure if sunbird is supporting xp or not, do you keep several browsers open at once??

------------

looking at all your processes there are a lot that seem to deal with servers, and I am not sure if you need them all running at once or not, I only have 17 processes running at this time for just my desktop. my lights flash constantly when I am searching my hd for something particular, but other than that it does not flash much, so the best thing to do is end the processes one at a time wait a few and see if the light is still flashing, if it is then turn off another one, (only the oddball processes) and check your light again, do this until you find that your light is not flashing and that should be your culprit program.
 
Thank you!
I disabled all unnecessary processes, then started the Windows in safe mode, and.... the HDD LED is flashing every seconds.
I think, I'll reinstall the system soon.
 
if the light is still flashing something is still searching, but a reinstall would be a good thing, I like to reinstall at least once a year. but I do not have a lot running on my pc. let me know if I can still help.
 
You must log in or register to reply here.
Back
Top