Solved

winlogon.exe Abnormal Program Termination

Posted on 2004-09-13
3
401 Views
Last Modified: 2013-12-11
We have a Packard Bell Windows ME machine that displays this mesage when it shutsdown.

winlogon.exe
Abnormal Program Termination

Any ideas, please???
0
Comment
Question by:Flexology
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 29

Accepted Solution

by:
blue_zee earned 500 total points
ID: 12045917

That file is not installed with Windows Millenium.

It may be a worm.

Have you tried an online virus scanner?

Panda ActiveScan
http://www.pandasoftware.com/activescan 

Bitdefender
http://www.bitdefender.com/scan/Msie/index.php 

McAfee FreeScan
http://us.mcafee.com/root/mfs/default.asp 

Symantec Security Check
http://security.symantec.com/sscv6/ 

Pc-Cillin (Trend Micro Housecall)
http://housecall.antivirus.com/housecall/start_pcc.asp 

PcPitstop
http://pcpitstop.com/antivirus/default.asp 

RAV
http://www.ravantivirus.com/scan/ 

Zee
0
 
LVL 29

Expert Comment

by:blue_zee
ID: 12045945

I would~also download, update and run these tools (the 3 of them!):

Ad-Aware:
http://www.majorgeeks.com/download506.html

SpyBot Search and Destroy
http://www.safer-networking.org/index.php?page=download

Spy Sweeper
http://www.webroot.com/wb/products/spysweeper/index.php

Zee
0
 
LVL 27

Expert Comment

by:Jonvee
ID: 12047855
Flexology,
Looks like a Trojan Horse, also known as "Backdoor.GrayBird".    See link below for more details, particularly the section
on 'Technical Details':    

                 http://securityresponse.symantec.com/avcenter/venc/data/backdoor.graybird.html

Zee's recommendations will probably fix it.      If not, you may like to scan with GFI's online 'Trojan' scanner:

                http://www.trojanscan.com

0

Featured Post

[Webinar] Learn How Hackers Steal Your Credentials

Do You Know How Hackers Steal Your Credentials? Join us and Skyport Systems to learn how hackers steal your credentials and why Active Directory must be secure to stop them. Thursday, July 13, 2017 10:00 A.M. PDT

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

No single Antivirus application (despite claims by manufacturers) will catch or protect you from all Virus / Malware or Spyware threats. That doesn't stop you from further protecting yourself however - and this article is to show you how.
Determining the an SCCM package name from the Package ID
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question