[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

csrss.exe appears and requests permition to install on startup

Posted on 2006-11-05
5
Medium Priority
?
319 Views
Last Modified: 2011-08-18
Hello,

Everytime I turn my computer I get a message that an aplication CSRSS.EXE request permition to install. c:\windows\system32\1095. open file security alert.

I press cancell and disapears....how can I get rid of this problem.


Thanks for your help,


suplyair.-
0
Comment
Question by:suplyair
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 47

Expert Comment

by:rpggamergirl
ID: 17875970
Let's look at your hijackthis log.

Please download HijackThis 1.99.1
http://www.cyberanswers.org/forum/uploads/HijackThis1991.exe
http://danborg.org/spy/hjt/alternativ.exe
Open Hijackthis, click "Do a system scan and save a logfile" don't fix anything yet.

Then upload the logs to any hosting sites,
or go to the below link and login using your Experts-Exchange username and password.
http://www.ee-stuff.com
Click on "Expert Area" tab
type or paste the link to your Question
"Browse" your pc to the location of your Hijackthis log and click "Upload"
Copy the resulting "url" and post it back here.

OR: paste the log to either of these sites:
1. http://www.rafb.net/paste/
then at the bottom left corner click "paste"
Copy the address/url and post it here.

2. or at --> http://www.hijackthis.de/ 
and click "Analyse", click "Save".  Then post the link to the saved list here.
0
 

Author Comment

by:suplyair
ID: 17877726
Hello,

Here is the link to the analiyse result...

http://www.hijackthis.de/logfiles/39ab3e44d18a4c79b4b63ec6633464d3.html

Could you please help me decide whick ones I should delete,


Thanks


suplyair.-
0
 
LVL 47

Accepted Solution

by:
rpggamergirl earned 500 total points
ID: 17877879
Run Hijackthis and put a check next to these entries, close all browsers and other windows and click "Fix Checked":
O4 - HKLM\..\Run: [Runtime] "C:\WINDOWS\system32\1095\csrss.exe" /run
O16 - DPF: {A1426AC5-8CE5-4A00-B71E-011D35709AC6} (Progetto1.int_ver34) - http://advnt01.com/dialer/int_ver34.CAB 
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/0432e5d9486446e8dc16/netzip/RdxIE601_es.cab 


It is safe to fix any 04 entries (programs that you don't want to run at startup)
You have so many 016 entries, if you don't really visit these sites everyday you're better off fixing them because they all load when IE opens, any plugins will be downloaded again when you visit those sites or when the program you are running calls for it.



C:\WINDOWS\system32\1095\csrss.exe<--delete this file
C:\WINDOWS\system32\1095 <-- this is a very suspicious folder, rename it, or just delete it.
0
 

Author Comment

by:suplyair
ID: 17878533
Hello,

Worked perfect!


Thanks


suplyair.-
0
 
LVL 47

Expert Comment

by:rpggamergirl
ID: 17878957
No problem!

Glad to know it's resolved.

Thanks!
0

Featured Post

Are You Ready for GDPR?

With the GDPR deadline set for May 25, 2018, many organizations are ill-prepared due to uncertainty about the criteria for compliance. According to a recent WatchGuard survey, a staggering 37% of respondents don't even know if their organization needs to comply with GDPR. Do you?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
The recent Petya-like ransomware attack served a big blow to hundreds of banks, corporations and government offices The Acronis blog takes a closer look at this damaging worm to see what’s behind it – and offers up tips on how you can safeguard your…
This course is ideal for IT System Administrators working with VMware vSphere and its associated products in their company infrastructure. This course teaches you how to install and maintain this virtualization technology to store data, prevent vuln…
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : http://www.videocopilot.net/presets/after_shake/ All lightning effects with instructions : http://www.mediaf…

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question