-----Original Message-----
My Windows XP has a big problem because my Winlogon.exe
computer procces goes at 10-50% for nearly an hour before
it finally stops and then the program crashes( the
process only).
This is really getting on my nerves, how do I fix this?
.
·
Overview
Category: Hijacker: Any software that resets your
browser's settings to point to other sites. Hijacks may
reroute your info and address requests through an unseen
site, capturing that info. In such hijacks, your browser
may behave normally, but be slower. Homepage Hijackers
will change your home page to some other site. Error
Hijackers will display a new error page when a requested
URL is not found.
Similar Pests: Hijacker
Origins
Date of Origin: July, 2003
Distribution
Prevalence: WinLogonEXE: 0.0% of all pest reports (12 per
100,000 reports) More Info
Clot Factor: WinLogonEXE: On average, 2 objects detected
in each machine
The "Clot Factor" is a measure of how much a pest "gums
up" a machine by adding registry entries, files, and
directories. As more objects are placed in a machine,
manual removal becomes more difficult and more error-
prone.
Countries Affected: In the past three months, we have
received reports of WinLogonEXE in Australia, Belgium,
Bulgaria, Canada, Denmark, France, Germany, Greece, Hong
Kong, Italy, Japan, Netherlands, Poland, Spain, Sweden,
Switzerland, Turkey, United Kingdom, United States.
Growth: WinLogonEXE: Increased 152.9% over the last 90
days
Operation
Storage Required: at least 1401KB
Browser Performance: Likely to slow performance of
Internet Explorer.
Detection and Removal
Automatic Removal: PestPatrol detects this.
PestPatrol removes this.
Manual Removal: Follow these steps to remove WinLogonEXE
from your machine. Begin by backing up your registry and
your system, and/or setting a Restore Point, to prevent
trouble if you make a mistake.
Stop Running Processes:
Kill these running processes with Task Manager:
winlogon.exe
winlogon.unpacked.exe
Remove AutoRun Reference:
Go To the key
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersi
on\Run.
Unregister DLLs:
Unregister these DLLs with Regsvr32, then reboot:
systemroot+\cntrs.dll
systemroot+\csynth.dll
systemroot+\csyntht.dll
systemroot+\vlrs.dll
Clean Registry:
Remove these registry items (if present) with RegEdit:
HKEY_CURRENT_USER\software\microsoft\windows\currentversio
n\run\winlogon
Remove Files:
Remove these files (if present) with Windows Explorer:
systemroot+\cntrs.dll
systemroot+\csynth.dll
systemroot+\csyntht.dll
systemroot+\vlrs.dllwinlogon.exe
winlogon.exe.txt
winlogon.unpacked.exe
