this is in Process Guard but when I click for on line information the result is 'this item is not in our data base'. It came to my attention following alarms - Thu 08 - 01:17:44 [MODIFY] c:\windows\system32\csrss.exe  was blocked from modifying c:\windows\explorer.exe  Did a Google search and found: "Note: The Explorer.exe file is located in the c:\windows\System32 folder. In other cases, Explorer.exe is a virus, spyware, trojan or worm" put Explorer.exe in find and got several items, only one in system32 dllcache two related I think to SPack update the others are 'explorer' with no exe. Earlier I added csrss.exe for protection having read a post that sounded sensible on the topic (it was not in Process Guard before this) and now it seems to be at war with explorer.exe. I guess I need to know which one to take out of Process Guard...the new csrss entry or the explorer.exe that loaded with the programme. I have several 'alarms' and it's related also in some way to the 'find' system as a new one comes up with each search entry. Hope that makes sense, not good at this stuff at all and as it's way past my bedtime at nearly two a.m., I'll go to bed and hope that some kind person can help me overnight. Thanks in advance.