Re: Winlogon.exe chewing up CPU



Sounds like a Vundo/WinFixer infection. At this time, no anti-malware tools can identify and remove all Vundo/Winfixer variants. You will have to post your HijackThis log to one of the above forums and take several steps to remove it, all under the guidance of someone experienced in this Bag Guy.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
  http://aumha.org/a/quickfix.htm
  http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
  http://inetexplorer.mvps.org/archive/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/

When all else fails, HijackThis v1.99.1
(http://aumha.net/downloads/hijackthis.zip) is the preferred tool to use. It will help you to both identify and remove any hijackware/spyware. **Post your log to http://forums.spywareinfo.com/, http://castlecops.com/forum67.html or http://aumha.net/viewforum.php?f=30 for expert analysis, not here.**
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), AH-VSOP


Barryco wrote:
My system is running very very slowly.  A check of Task Manager shows that
Winlogon.exe is continually using 50-60% of the CPU.

This happens regardless of which user account you log on to.

When you do a fresh reboot, logon to one account and then have nothing
else running, good old Winlogon is sitting there chugging away - cycling
around between System Idle process and WInlogon, CPU sitting around
average 60% used with spikes up to 100%.

I have scanned for viruses, malware and nothing comes up.  XP with SP2,
all regular updates automatically applied, running eTrust AV and regular
scans with Adaware and Spybot.

The system is unusable this state.

Suggestions welcome - thanks in advance.

.



Relevant Pages

  • Re: Trojan Horse Downloader Lookme. A Removal
    ... Post your HijackThis log to one of the previously suggested Forums. ... Mike Burgess http://www.mvps.org/winhelp2002/ ... Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file ...
    (microsoft.public.security.virus)
  • Re: IE Error on Only One Webpage
    ... Run a thorough check for hijackware, including posting your HijackThis log to an appropriate forum. ... HijackThis is the preferred tool to use. ... After an expert gives your HijackThis log a clean bill of health and the machine has the latest drivers and BIOS upgrades installed, install WinXP SP2 _with your anti-virus application disabled_. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Device Manager, Task Manager, or any other mgmt tool not displ
    ... Visit any of these forums below to post your HijackThis log. ... Ramesh, Microsoft MVP ... >>>> Task Manager, they flash for a second and quit. ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: Cannot open IE, cannot read OE email after installing Windows
    ... I have now loaded MSN Messenger V7 and it works fine. ... received any response on my HijackThis log but am working my way through it ... I am still nervous about attempting to install SP2... ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: IE6 SP2 crashes with mshtml.dll
    ... Is the machine fully patched at Windows Update and is Automatic Updates ... Run a /thorough/ check for hijackware, including posting your hijackthis log ...
    (microsoft.public.windows.inetexplorer.ie6.browser)