What to do !!

[worried]

My Ad-aware6 log showed me this,it was the only one
with a BasePriority=High.In my Task Manager it just
shows as winlogon.exe.
What should I do,can I do,if anything at all,
and where do I find it,if it needs to be changed.

#:2 [winlogon.exe]
FilePath : \??\C:\WINNT\system32\
ThreadCreationTime : 8-9-2004 10:52:12 AM
BasePriority : High

 

[Mike Bright MSP]

Just to check, do you have Anti-Virus installed and up-to-date??. (and
scanned recently).

Run a full system scan with Ad-Aware and see what results it finds. The
following link has some guidence on scanning and then removal using
Ad-Aware:

http://www.bleepingcomputer.com/forums/index.php?showtutorial=48

Regards

Mike Bright MCP, MSP

e:[email protected]

 

[worried]

Yes I have all of the above,up to date.
Nothing has been found except that one time.
I only have 1 winlogon.exe in my taskmanager,
and don't dare remove it.
Thanks for the info..

 

[worried]

I'm sorry I posted here,my so called problem
has nothing to do with security,I found out.
It has something to do with the TaskManager,
and the Processor Activity.
And I believe it is not a problem anymore.
Thanks.

 

[Mike Bright MSP]

If your Anti-Virus is up-to-date and you have ran Ad-Aware since and it has
not reported anything, you should be ok.

WinLogon.exe is a valid Windows Process, however sometimes virus / trojans
use the process name to trick users. If you do only have one copy of it
running in the Task Manager Process list and it's running in the user
context of "System", you should be ok.

However here is another link to run though just to 100% sure:

http://www.kephyr.com/spywarescanner/library/windir.winlogon/index.phtml

Regards

Mike Bright MCP, MSP

e:[email protected]

 

[worried]

Thanks for your help,
will check on this addy.

-----Original Message-----
If your Anti-Virus is up-to-date and you have ran Ad- Aware since and it has
not reported anything, you should be ok.

WinLogon.exe is a valid Windows Process, however sometimes virus / trojans
use the process name to trick users. If you do only have one copy of it
running in the Task Manager Process list and it's running in the user
context of "System", you should be ok.

However here is another link to run though just to 100% sure:
on/index.phtml

Regards

Mike Bright MCP, MSP

e:[email protected]



.