winlogon issue maybe

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

hi
basically i was wondering if someone could help me my brotehr was on my
computer a few days ago on msn wen someone sent him a link n he dwnloaded a
file from it and it gave a popup about how winlogon has been after this i
yelled at my brotehr of course lol but then ran my av which is kaspersky but
didnt work. since then things have been acting weirdly things like teh
internet randomly closing msconfig and cmd tend to close after a few seconds
and system restore keeps being disabled
can anyone help?
 
trottski said:
hi
basically i was wondering if someone could help me my brotehr was on my
computer a few days ago on msn wen someone sent him a link n he dwnloaded a
file from it and it gave a popup about how winlogon has been after this i
yelled at my brotehr of course lol but then ran my av which is kaspersky but
didnt work. since then things have been acting weirdly things like teh
internet randomly closing msconfig and cmd tend to close after a few seconds
and system restore keeps being disabled
can anyone help?

Please post the exact error messages you get, you are infected by a worm or
a virus that is trying to have full control on your machine.
Try this steps and see if it will get you into shape and clean up the machine:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Taps:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
For Malwares download both these software:
http://www.lavasoft.com/products/ad-aware_se_personal.php
http://www.safer-networking.org ; for Spybot S&D

Try to run Disk Clean up to do that follow these steps:
Open My Computer by double clicking it then on the C:\ partition right click
it and select Properties.
On the C:\ Drive properties click on General tab then click on Disk Clean Up
and make sure you check mark all boxes in the new Pop-up window.
Then Open windows explorer and delete the Temp:
C:\Windows\Temp\TemporaryInternet Files =< Delete all sub-folders in capital
letters they will be here>
Open a run command and type these commands:
ipconfig /flushdns click [OK]
ipconfig /renew click [OK]
netsh winsock rset click [OK]
Reboot your computer and see if you will be able to connect.

If you don't have an anti-virus go here and download this free AVG:
http://free.grisoft.com/doc/5390/lng/us/tpl/v5
Run the AVG updates engine and run a scan in both Safe Mode and Normal Mode.
HTH.
Let us know.
Salaam,
nass
===
www.nasstec.co.uk
 
i tried all that and it doesnt seem to have worked i found some spyware and
removed it but hasnt made much different
although i think i might hvae found teh root of the problem

C:\WINDOWS\system32\cfajwet\winlogon.exe
problem is i cant see the folder so cnt delete it however i can get inside
the folder
this came up when i installed S&D as it was trying to delete the registry
entries for S&D
any ideas?
 
trottski said:
i tried all that and it doesnt seem to have worked i found some spyware and
removed it but hasnt made much different
although i think i might hvae found teh root of the problem

C:\WINDOWS\system32\cfajwet\winlogon.exe
problem is i cant see the folder so cnt delete it however i can get inside
the folder
this came up when i installed S&D as it was trying to delete the registry
entries for S&D
any ideas?

Here are something to try:
= Try this fix from kelly-korner:
http://www.kellys-korner-xp.com/xp_tweaks.htm
Line 263- Restore winlogon/userinit.
Also download this tool to delete the folder:
http://www.ccleaner.com
HTH.
nass
===
www.nasstec.co.uk
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Back
Top