Subscribe RSS
Home > Unable To > Unable To Expand The Winlogon.ex_

Unable To Expand The Winlogon.ex_

I hope to hear from you guys soon, I have MBAM but It will not update, AVG did update successfully but MBAM will not, my PC will not do a system Back to top #9 benko916 benko916 Topic Starter Members 23 posts OFFLINE Gender:Male Location:Sacramento California Local time:01:28 AM Posted 25 August 2010 - 12:45 AM Thank you for replying I Anyway I will give more detailed instructions tomorrow its time to go home. I start college again in 5 days and this is my only PC, please help me.Thank you for your time, all the help is much appreciated!!!

Thank you, Ill Check back in a few hours to see if I have a reply. I believe my little sister somehow caused this, and of course she failed to tell me about the problem, so i have no idea when it started, therefor i cant just Wont even load up the log in screen... Back to top #5 rikdewinter rikdewinter Members 2 posts OFFLINE Local time:08:28 AM Posted 19 August 2010 - 06:19 PM I have the same virus.

ComboFix usage, Questions, Help? - Look hereIt is also aginst forum rules see... Now we expand the new files On the desktop you will see what drive letter your cd is for this we are going to call it d:\ yours may be different. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook Have you Software ▼ Security and Virus Office Software PC Gaming See More...

From safe mode navigate with explorer to the windows directory. RSS ALL ARTICLES FEATURES ONLY TRIVIA Search The How-To Geek Forums Have Migrated to Discourse How-To Geek Forums / Windows XP Windows cannot switch accounts? You shouldn't get an error just another c:\windows type cd system32 hit enter and you should be in c:\windows\system32 type del winlogon.exe hit enter. So it looks like my PC is toast.

You shouldn't get an error just a c:\windows\system32 This removes the infected files. Now if you start up avg again, the warnings appear again, but if you close the screen, the messages stop returning. Sort by date modified and near the top you will find the virus name Mine was named whaqilizo. Better to use the System File Checker (SFC) to check all protected system files and let XP replace any that it finds corrupt.

Just sort the windows dir by date when it first comes up or check combofix log. I hope you didn't forget about me. Choose the recovery console and at the prompt type expand D:\i386\winlogon.ex_ c:\windows\system32\ Assuming your cd/dvd drive is D: """next remove the disk and slave it to another computer and remove c:\windows\EXPLORER.EXE I have a C code SSDT root kit viewer custom built by me that doesn't appear to be a root kit but rather to use one as a payload delievery system.

Please be patient as this can take some time.When the scan completes, push "List of found threats"Push "Export to text file", and save the file to your desktop using a unique Check This Out BleepingComputer is being sued by the creators of SpyHunter. Back to top #7 boopme boopme To Insanity and Beyond Global Moderator 67,038 posts OFFLINE Gender:Male Location:NJ USA Local time:01:28 AM Posted 19 August 2010 - 10:53 PM hello. I am going crazy!!

It looks to be a toddler version of a previous rk which if i recall was tdss variant. Using the site is easy and fun. Thank you again for your reply and help Much appreciated!! help please. (13 posts) Started 8 years ago by satansoldier Latest reply from mafj Topic Viewed 3283 times satansoldier Posts: 319 This post has been reported.

Reports: · Posted 8 years ago Top ScottW Posts: 6609 This post has been reported. Edited by Blade Zephon, 19 August 2010 - 09:02 AM. I also have the hp recovery console and recovery disks, as well as an i386 folder on my c: drive. Any help appreciated, thanks in advance.

Really annoying. This was the only log in the program files... My AVG resident shield just keeps popping up every 10 seconds telling me I am infected...

I tried simply copying the winlogon.ex_ file from the cd to my windows\system32 folder and then renaming it winlogon.exe.

I tried to replace them with the same files from another pc, but that ofcourse doesn't work (should've known, explorer.exe is being used by the computer, so it can't be replaced, By the way, if anyone needs a fast way to check if the virus is still there, without being warned by avg every 10 seconds, press ctrl+alt+delete, search for the only You can read more about the SFC in this MS KB article: Reports: · Posted 8 years ago Top Jump to content Sign In Create Account Search Thank You again!!!

I am not very good with computers but you guys are always really good with helping me and getting me to understand. You will find upon reboot that you will get BSOD of Winlogon.exe The reason your AVG is consantly going of is the virus is overwriting explorer.exe and winlogon.exe reinfecting it. What do I do? Move to AII. ~BZ Back to top BC AdBot (Login to Remove) Register to remove ads #2 DreadTech DreadTech Members 91 posts OFFLINE Gender:Male Location:Here Local time:02:28 AM

Javascript Disabled Detected You currently have javascript disabled. Save it to your desktop.Double click on the Eset Smart Installer icon on your desktop.Check the "YES, I accept the Terms of Use"Click the Start button.Accept any security warnings from your Here is the log.... C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\E1HSUCTZ\upgrade[1].cab a variant of Win32/Adware.OneStep application deleted - quarantined C:\Program Files\Everest Poker\cstart-tmp.exe a variant of Win32/Casino application cleaned by deleting - quarantined C:\Program Files\Everest Poker\CStart.exe a

See More: copying file to windows system32 folder Report •


© Copyright 2017 All rights reserved.