?
Solved

csrss.exe appears and requests permition to install on startup

Posted on 2006-11-05
5
Medium Priority
?
317 Views
Last Modified: 2011-08-18
Hello,

Everytime I turn my computer I get a message that an aplication CSRSS.EXE request permition to install. c:\windows\system32\1095. open file security alert.

I press cancell and disapears....how can I get rid of this problem.


Thanks for your help,


suplyair.-
0
Comment
Question by:suplyair
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 47

Expert Comment

by:rpggamergirl
ID: 17875970
Let's look at your hijackthis log.

Please download HijackThis 1.99.1
http://www.cyberanswers.org/forum/uploads/HijackThis1991.exe
http://danborg.org/spy/hjt/alternativ.exe
Open Hijackthis, click "Do a system scan and save a logfile" don't fix anything yet.

Then upload the logs to any hosting sites,
or go to the below link and login using your Experts-Exchange username and password.
http://www.ee-stuff.com
Click on "Expert Area" tab
type or paste the link to your Question
"Browse" your pc to the location of your Hijackthis log and click "Upload"
Copy the resulting "url" and post it back here.

OR: paste the log to either of these sites:
1. http://www.rafb.net/paste/
then at the bottom left corner click "paste"
Copy the address/url and post it here.

2. or at --> http://www.hijackthis.de/ 
and click "Analyse", click "Save".  Then post the link to the saved list here.
0
 

Author Comment

by:suplyair
ID: 17877726
Hello,

Here is the link to the analiyse result...

http://www.hijackthis.de/logfiles/39ab3e44d18a4c79b4b63ec6633464d3.html

Could you please help me decide whick ones I should delete,


Thanks


suplyair.-
0
 
LVL 47

Accepted Solution

by:
rpggamergirl earned 500 total points
ID: 17877879
Run Hijackthis and put a check next to these entries, close all browsers and other windows and click "Fix Checked":
O4 - HKLM\..\Run: [Runtime] "C:\WINDOWS\system32\1095\csrss.exe" /run
O16 - DPF: {A1426AC5-8CE5-4A00-B71E-011D35709AC6} (Progetto1.int_ver34) - http://advnt01.com/dialer/int_ver34.CAB 
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/0432e5d9486446e8dc16/netzip/RdxIE601_es.cab 


It is safe to fix any 04 entries (programs that you don't want to run at startup)
You have so many 016 entries, if you don't really visit these sites everyday you're better off fixing them because they all load when IE opens, any plugins will be downloaded again when you visit those sites or when the program you are running calls for it.



C:\WINDOWS\system32\1095\csrss.exe<--delete this file
C:\WINDOWS\system32\1095 <-- this is a very suspicious folder, rename it, or just delete it.
0
 

Author Comment

by:suplyair
ID: 17878533
Hello,

Worked perfect!


Thanks


suplyair.-
0
 
LVL 47

Expert Comment

by:rpggamergirl
ID: 17878957
No problem!

Glad to know it's resolved.

Thanks!
0

Featured Post

Get real performance insights from real users

Key features:
- Total Pages Views and Load times
- Top Pages Viewed and Load Times
- Real Time Site Page Build Performance
- Users’ Browser and Platform Performance
- Geographic User Breakdown
- And more

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
The recent Petya-like ransomware attack served a big blow to hundreds of banks, corporations and government offices The Acronis blog takes a closer look at this damaging worm to see what’s behind it – and offers up tips on how you can safeguard your…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…
Suggested Courses

800 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question