Re: MULTI-POST - winlogon.exe consuming 50% CPU time



Did as suggested but no entries of "O20 Winlogon" were in the log file.

Mike
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:OSf5D$myIHA.4772@xxxxxxxxxxxxxxxxxxxxxxx
From: "Mike in Nebraska" <Mike_Webb@xxxxxxxxxxxxxxxxx>

| Sorry to reply so late ...... the path to the file is:
| C:\WINDOWS\system32\winlogon.exe
|
| Mike
|


That's the legitimate file. The question is are there hooks in Winlogon
that is causing a
higher CPU utilization.

Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

Save a log and open it in Notepad.

Find the lines that start with "O20 - Winlogon ..."
Copy and paste ONLY those lines in your reply.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp




.