What type of anti-virus are you using? Have you performed any anti-spyware scans? Have you tried doing your scans in "SAFE MODE
Find4u is a browser hijacker which displays pop-ups and changes browser settings (your homepage and search page).
The legit Winlogon.exe is located in the C:\Windows\system32 folder not Windows. What program is alerting you to its presence? Have you physically looked for the file? Is it loading at startup? If it is there and is loading at startup, its malware you probably downloaded from the torrent site.
If you locate that file and you have Spybot S&D 1.5
installed, launch it, go to Mode
and select Advanced
. Then go to Tools
, select System Startups
. You will be provided with a list of programs that load when Windows starts. Look for a start up entry for that file and remove it.
Then navigate to its location and delete it. BE CAREFUL not to delete the legit Winlogon.exe file in the system32 folder.
If you don't feel comfortable doing this on your own, then please read and follow all instructions
in the pinned topic titled "Preparation Guide For Use Before Posting A Hijackthis Log
". You may have performed some of these steps already. If you can't perform a step, then skip and continue
with the next. In step #9 there are instructions for downloading HijackThis and creating a log. (This is a self-extracting version which will automatically install HJT in the proper location.
When you have done that, post your log
in the HijackThis Logs and Malware Removal
forum, NOT here
, for assistance by the HJT Team Experts. A member of the Team will walk you through, step by step, on how to clean your computer. If you post your log back in this thread, the response from the HJT Team will be delayed because your post will have to be moved. This means it will fall in line behind any others posted that same day.
Start a new topic, give it a relevant title and post your log along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own. Please include the top portion of the HijackThis log that lists version information
. An expert will analyze your log and reply with instructions advising you what to fix.