| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 102692 | 2009-08-29 00:54:00 | What is winlog.exe? | Colpol (444) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 805032 | 2009-08-29 00:54:00 | Hi all. Found this in my startup on my Desktop PC. (Not found on Work laptop) Searched Google and found heaps, all of it contradictory some say it is a virus and others say leave it there. Vista on both Now confused. Can anyone clarify what it is. If it is bad how do you get rid of it. Cheers Colin |
Colpol (444) | ||
| 805033 | 2009-08-29 01:07:00 | Dont get it confused with winlogon.exe which is a windows file WHAT folder is it in? It may belong to agobot a worm. There is also a program called Salfeld Personal Security tool. But you would be in a program files folder. Remove it from startup with ccleaner, then reboot. If there are any other suss entries in startup, delete them too. And if winlog.exe is running now kill it. Scan your system with something |
Speedy Gonzales (78) | ||
| 805034 | 2009-08-29 01:12:00 | Thnks speedy. I know what all other startup entries are. This file is located in Users\Admin\App data\Roaming\Microsoft\winlog.exe |
Colpol (444) | ||
| 805035 | 2009-08-29 01:20:00 | Kill its process, then delete its entry in startup then delete that file. Then reboot. It looks like it does belongs to Agobot. Then reboot. Then scan the whole hdd with whatever AV program. Use something like trojan remover if this is 32 bit, update it then scan. Then select all options under utils You probably got it if your system isnt up to date, or you use P2P programs. MAKE SURE it is winlog.exe NOT winlogon.exe |
Speedy Gonzales (78) | ||
| 805036 | 2009-08-29 02:14:00 | Download and run MBAM and Spyware Terminator. Make sure System Restore is disabled. www.malwarebytes.org www.spywareterminator.com Blam |
Blam (54) | ||
| 805037 | 2009-08-29 06:24:00 | Thanks Blam and Speedy. All good now. Cheers Colin |
Colpol (444) | ||
| 1 | |||||