thanx blackspear ive found the warning it says c:\windows\system32\csrss.exe process ID: 668 Type:ZwProtectVirtualMemory was blocked from modifying c:\windows\explorer.exe process ID: 320 do i leave it like that or do i permit it cos ive no idea wot csrss.exe is thnx
I have it permited, as it is part of Windows: http://www.liutilities.com/products/wintaskspro/processlibrary/csrss/ Cheers