Re: Winlogon.exe chewing up CPU



Send me an email at fiveXcornersXme@xxxxxxxxxx and I will send you a fix
tool that will remove that pest. Remove the XXX to make the email valid. Oh
BTW ignore the response you will get from Leythos,or anyone, he is a sick
obsessed stalker who cannot fix your problem. He would rather have you
suffer with this issue then to receive help from me.





"Barryco" <Barryco@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8247E73F-D071-4324-A07F-FBB2EEA73BE7@xxxxxxxxxxxxxxxx
>I think we're on the right track here. I definitely have Winfixer on my PC
> and have been having a bugger of a time trying to get rid of it. Also
> Vundo
> was identified this morning but supposedly cleaned by eTrust.
>
> In trying to get WInfixer sorted out I found out about HijackThis but have
> not had a chance to go through all the steps.
>
> I hoped there was a simple solution :-)
>
> Thanks to you all for your prompt and informative replies.
>
> "PA Bear" wrote:
>
>> Sounds like a Vundo/WinFixer infection. At this time, no anti-malware
>> tools
>> can identify and remove all Vundo/Winfixer variants. You will have to
>> post
>> your HijackThis log to one of the above forums and take several steps to
>> remove it, all under the guidance of someone experienced in this Bag Guy.
>>
>> Checking for/Help with Hijackware
>> http://aumha.org/a/parasite.htm
>> http://aumha.org/a/quickfix.htm
>> http://aumha.net/viewtopic.php?t=5878
>> http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/archive/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://defendingyourmachine.blogspot.com/
>>
>> When all else fails, HijackThis v1.99.1
>> (http://aumha.net/downloads/hijackthis.zip) is the preferred tool to use.
>> It will help you to both identify and remove any hijackware/spyware.
>> **Post
>> your log to http://forums.spywareinfo.com/,
>> http://castlecops.com/forum67.html or http://aumha.net/viewforum.php?f=30
>> for expert analysis, not here.**
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-Windows (IE/OE, Shell/User, Security), AH-VSOP
>>
>> Barryco wrote:
>> > My system is running very very slowly. A check of Task Manager shows
>> > that
>> > Winlogon.exe is continually using 50-60% of the CPU.
>> >
>> > This happens regardless of which user account you log on to.
>> >
>> > When you do a fresh reboot, logon to one account and then have nothing
>> > else running, good old Winlogon is sitting there chugging away -
>> > cycling
>> > around between System Idle process and WInlogon, CPU sitting around
>> > average 60% used with spikes up to 100%.
>> >
>> > I have scanned for viruses, malware and nothing comes up. XP with SP2,
>> > all regular updates automatically applied, running eTrust AV and
>> > regular
>> > scans with Adaware and Spybot.
>> >
>> > The system is unusable this state.
>> >
>> > Suggestions welcome - thanks in advance.
>>
>>


.



Relevant Pages

  • Re: Denied access on IE
    ... > WShredder (fix all found) ... > ask for more advice on one of the other forums afterwards.. ... Error Message When You Attempt to Connect to a Secure Zone Web ... When all else fails, HijackThis ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Spyware problems
    ... AD-AWARE Tutorial ... When you scan with both programs, fix everything that it finds. ... Fixing enties with Hijackthis may leave behind unwanted files on your ... Source for Original Content, Tutorials, and Support for the beginning ...
    (microsoft.public.security.virus)
  • Re: Blank message bodies ... more
    ... When all else fails, HijackThis ... Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder ... CWShredder ("fix" all found) ... > "Robert Aldwinckle" wrote in message ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Website URL Hacked - Stays Forever
    ... Create a separate folder for HijackThis, such as C:\HijackThis - copy the ... Have the latter fix all. ... First update it, ... Spyware Info: ...
    (microsoft.public.security)
  • Re: Website URL Hacked - Stays Forever
    ... Create a separate folder for HijackThis, such as C:\HijackThis - copy the ... Have the latter fix all. ... First update it, ... Spyware Info: ...
    (microsoft.public.security)