Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

winlogon.exe Abnormal Program Termination

Posted on 2004-09-13
3
398 Views
Last Modified: 2013-12-11
We have a Packard Bell Windows ME machine that displays this mesage when it shutsdown.

winlogon.exe
Abnormal Program Termination

Any ideas, please???
0
Comment
Question by:Flexology
  • 2
3 Comments
 
LVL 29

Accepted Solution

by:
blue_zee earned 500 total points
ID: 12045917

That file is not installed with Windows Millenium.

It may be a worm.

Have you tried an online virus scanner?

Panda ActiveScan
http://www.pandasoftware.com/activescan 

Bitdefender
http://www.bitdefender.com/scan/Msie/index.php 

McAfee FreeScan
http://us.mcafee.com/root/mfs/default.asp 

Symantec Security Check
http://security.symantec.com/sscv6/ 

Pc-Cillin (Trend Micro Housecall)
http://housecall.antivirus.com/housecall/start_pcc.asp 

PcPitstop
http://pcpitstop.com/antivirus/default.asp 

RAV
http://www.ravantivirus.com/scan/ 

Zee
0
 
LVL 29

Expert Comment

by:blue_zee
ID: 12045945

I would~also download, update and run these tools (the 3 of them!):

Ad-Aware:
http://www.majorgeeks.com/download506.html

SpyBot Search and Destroy
http://www.safer-networking.org/index.php?page=download

Spy Sweeper
http://www.webroot.com/wb/products/spysweeper/index.php

Zee
0
 
LVL 27

Expert Comment

by:Jonvee
ID: 12047855
Flexology,
Looks like a Trojan Horse, also known as "Backdoor.GrayBird".    See link below for more details, particularly the section
on 'Technical Details':    

                 http://securityresponse.symantec.com/avcenter/venc/data/backdoor.graybird.html

Zee's recommendations will probably fix it.      If not, you may like to scan with GFI's online 'Trojan' scanner:

                http://www.trojanscan.com

0

Featured Post

Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Problem to file 13 56
Two "Pin to Start…" options in Windows 10 4 33
How do I generate a CSR on our root CA server? 1 24
New Users Cannot Create Roaming Profile Folder 2 35
When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
Learn how to PXE Boot both BIOS & UEFI machines with DHCP Policies and Custom Vendor Classes
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question