download windows 7 themes

What is conhost.exe

Your probably wondering.. what is this conhost.exe process doing in Task Manager, and why it’s running on your shiny new Windows 7 PC. Here you will find the answer.

What it is:

The conhost.exe process fixes a fundamental problem in the way previous versions of Windows handled console windows, which broke drag & drop in Vista.

It’s a completely legitimate executable as long as it’s running from the system32 folder, and is signed by Microsoft. Scanning your computer for viruses is never a bad idea, though.

Tags: what is conhost.exe,conhost.exe,conhost,proccess,windows 7,windows 7 themes

So why do you need it?

Sometimes, there’s a problem with the way the console process works on previous versions of Windows they are all hosted under the csrss.exe service. This process runs as a system privileged account.

If you take a look at the command prompt on Windows XP, you’ll probably notice that the window doesn’t use the active theme at all. This is because the CSRSS process doesn’t have the ability to be themed.

If you take a look at the console in Windows Vista, it looks like it uses the same theme as everything else, but you’ll notice that the scrollbars are still using the old style (look closely). This is because the DWM (Desktop Window Manager) process handles drawing the title bars, but underneath it still works the same way, and the scrollbars are part of the window itself.

You might also notice that Windows Vista broke the ability to drag and drop files from Explorer straight into the command prompt. It just flat out doesn’t work, because of security issues between the CSRSS process running with a higher level of privileges.

Windows 7 is different

Checking it out in Process Explorer under Windows 7 shows that the conhost.exe process is running underneath the csrss.exe process.

The conhost.exe process sitting in the middle between CSRSS and cmd.exe allows Windows 7 to fix both of the problems in previous versions of Windows not only do the scrollbars draw correctly, but you can actually drag and drop a file from Explorer straight into the command prompt. And it’ll paste in the path onto the command line. (of course this example isn’t very useful).

Still Aren’t Convinced?

If you want to be sure, check out the file properties for the conhost.exe executable, and you’ll see that the description says Console Window Host:

If you look at the details of the process from within Process Explorer, you’ll notice that the ComSpec is set to cmd.exe, a clear indication that it’s hosting the command prompt. So now you know what the conhost.exe process does, and why you should never attempt to delete it. Ever.