winlogG.exe, winlogO.exe, winlogY.exe, winlogB, winlog.exe

winlogG.exe, winlogO.exe, winlogY.exe, winlogB, winlog.exe

Post by Sm9l » Sun, 24 Oct 2004 15:31:01


The above mentioned programs are requesting access to the internet. I get
notified through my zone alarm. i have not allowed them to access since i do
not recognise any of them. can anyone please let me know what these programs
are, or are if they a threat. i've run a current virus scan and ad aware and
nothing was found. but as i said i do not recognise these programs nor have i
installed anything new. thanks.
 
 
 

winlogG.exe, winlogO.exe, winlogY.exe, winlogB, winlog.exe

Post by Rick "Nutc » Sun, 24 Oct 2004 20:21:53

Hi Joe,

<said like Mr. Rogers>

Can you say "trojan"? I knew that you could.....

<ok, seriously>

They are trojan (virus) files. Follow these "relatively" simple removal
steps:

Restart in Safe mode by hitting F8 as Windows first begins to load on boot.
Logon as administrator. You can find help on doing this here:
http://www.yqcomputer.com/ #Safe%20mode

Start/search/files and folders, look for <filename> and delete it wherever
it is found.

Start/run regedit, expand the + signs to look under these keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg

Look in the right hand pane for the string or strings that load that file.
Delete just those strings that contain the reference. Do not delete other
strings or the keys from the left pane. Close the registry editor when
completed, make sure you check all strings.

Go to the Control Panel/System/System Restore tab. Check the box to "Turn
off system restore on all drives". Click apply/ok. This will remove all
restore points, however you don't want them back as some or all of them will
contain the virus depending upon how recently you got infected.

Restart the system normally. Go back to the Control Panel/System and restart
System Restore.

Update your antivirus software, run a full system scan.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://www.yqcomputer.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org