• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 502
  • Last Modified:

publisher cannot be verified for csrss.exe file appears at each startup, asks if I want to run

Hello,
I downloaded a file sent to me by an unknown. When the file showed unverifiable I did not open it. Now at each start up I get this alert asking me if I am sure I want to run the software. I press cancel and it goes away. I want this off of my system as I'm sure it's doing damage. I ran Norton repair and it did not help. I searched EE and saw a similar question listed about the same file name, so I followed the first instructions by downloading hijackthis and doing a scan. I DIDN'T MAKE ANY CHANGES...I will now upload the file link here for your review...Please Help!
hijackthis.log
0
najasky
Asked:
najasky
  • 3
  • 2
2 Solutions
 
torimarCommented:
Run HJT again and put a checkmark next to the entry:
F2 - REG:system.ini: Shell=explorer.exe "C:\Documents and Settings\Venus\Application Data\wtdh2ahuy1wbocdcmxnzeorsrgpk3vn2\csrss.exe"

Then let HJT fix it.

Afterwards, download Malwarebytes and run a complete scan: http://www.malwarebytes.org/mbam.php
0
 
najaskyAuthor Commented:
Okay, thank you I will try it now
0
 
najaskyAuthor Commented:
Thank you so much...it worked perfectly...
you made it seem so easy!
0
 
torimarCommented:
No problem :)

Don't forget to run the Malwarebyte's scan in order to clean up and check for other nasties.
0
 
najaskyAuthor Commented:
I did all that crying for nothing...you guys are great!
0

Featured Post

Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now