winlogon.exe problems

[Mike Marston]

Hi All,
For some unknown reason, when I boot up my WIN2K (sp2) box it starts two
winlogon.exe processes. One in lower case and one in upper case. The lower
case one is causing my CPU usage to be at 100% most of the time. I can't
kill either process. Can anybody help me here? How do I prevent 2
winlogon.exe processes from starting when I boot up?

TIA,
Mike

 

[Cathy Parsons]

The lower case winlogon.exe is actually part of a virus load. Do an internet
search for the deborm worm and you should find plenty of information on how
to get rid of this little beauty. Hope this helps.

 

[Mike Marston]

Thanks for the quick response.
I found the "removal tool" for this virus on the web and ran it. It said I
do not have the virus. I ran "live update" for my Norton Antivirus and then
ran a full system scan. It did not find any viruses. Bottom line....I still
have two winlogon.exe programs running taking up 100% CPU time.

I checked my registry at
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
and found this suspicious entry...
Syncronization Manager...........mobsync.exe/logon
Does this look familiar?

Any other ideas?

Thanks,
Mike

 

[laidback]

hi,
look i've found something. I have the same problem ... type in " Run -> msconfig -> startup tab " If is a virus it must be there ... disable it "uncheck" winlogon item . before to exit and restart .. look for the location of the virus "location and command" after this restart your computer go and delete it from the registry and command. again restart and is done. is not tested but i'm sure that will work i hope .. ))
good look , and sorry for bad english