Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Missing File?


  • Please log in to reply
7 replies to this topic

#1 sam-my

sam-my

  • Members
  • 122 posts
  • OFFLINE
  •  
  • Local time:08:17 PM

Posted 27 January 2008 - 01:52 PM

When the PC is finishing the Start process I get a window with the following:
" Windows cannot find C:\WINDOWS\winlogon.exe. Make sure you typed the name
correctly and try again. To search for a file, click the Start button and click Search."

Is it a missing file? What this information window means?

Thanks for your support.

BC AdBot (Login to Remove)

 


#2 Tomo2

Tomo2

  • Members
  • 402 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Wanganui, Aotearoa NZ
  • Local time:01:17 PM

Posted 27 January 2008 - 02:29 PM

It means your computer is probably infected. Winlogon.exe is a vital system file but it belongs in the C:\WINDOWS\System32\ folder. It is most likely a real message but caused by some malware. Update your AV and run a scan.

L&P, World Famous in New Zealand since ages ago!
Posted Image
Avast! Antivirus : Spybot S&D : Trend Micro Housecall : Hosts file : HiJack This
Don't be too open minded - your brains will fall out


#3 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:09:17 PM

Posted 27 January 2008 - 03:28 PM

FWIW - this is an error message telling you that Windows cannot find the virus. That's most likely because it was removed by your antivirus software. Has that happened to you recently? Have you done any free, online scans to double check the status of your system?

http://safety.live.com
http://housecall.trendmicro.com

If you think that you still may be infected, please visit this forum for more expert assistance: http://www.bleepingcomputer.com/forums/f/103/am-i-infected-what-do-i-do/

Once you're sure that you're system isn't infected, post back and we'll remove these remnants. The reason for this is that attempting to remove virus stuff may cause the virus to work harder at hiding itself - which will then make it harder to remove.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#4 sam-my

sam-my
  • Topic Starter

  • Members
  • 122 posts
  • OFFLINE
  •  
  • Local time:08:17 PM

Posted 27 January 2008 - 05:39 PM

Thanks Tomo2 and Usama

1. I scan my PC using NOD32: On-demand scanner - In depth analysis .
It found : C:\WINDOWS\System32\urqqqpp.dll - Win32/Adware - Virtumonde application.
The file has been deleted.
2. I ran the TrendMicro on-line scanner: "No potential threats found"
3. I ran AVG Antispyware free: "No infection found"
4. I ran SuperAntispyware: No infection found
5. Ran Vindofix V6.7.7: no infection found

Is there anything else to perform?

Thanks

#5 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:09:17 PM

Posted 27 January 2008 - 06:22 PM

Download this free program to figure out which startup process is calling this bugger: http://www.microsoft.com/technet/sysintern...s/Autoruns.mspx

In the Everything tab, scroll down until you find C:\WINDOWS\winlogon.exe in the Image Path (the last column)
Remove the checkmark from the box to the left of that entry and close Autoruns. Restart your computer and the message should have gone away.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#6 sam-my

sam-my
  • Topic Starter

  • Members
  • 122 posts
  • OFFLINE
  •  
  • Local time:08:17 PM

Posted 28 January 2008 - 01:26 PM

Usama Thanks a lot.

The message went away.

I was really surprised to see how many executables are launched automatically!
Are all these files required during the PC start or some of them are only burden?
How to determine which are the not requested ones?

#7 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:09:17 PM

Posted 28 January 2008 - 06:20 PM

In order to figure out which ones are needed, I'd suggest a trip to the BC Startup List database ( http://www.bleepingcomputer.com/startups/ ).

The Everything tab contains EVERYTHING that loads. In order to see a more user friendly list, try this free program: http://www.mlin.net/StartupCPL.shtml It'll put an icon in your Control Panel named "Startup" - and you can use this to disable/enable the entries.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#8 hamluis

hamluis

    Moderator


  • Moderator
  • 55,388 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:17 PM

Posted 28 January 2008 - 09:09 PM

FWIW: The Logon tab in Autoruns concerns itself only with startup items :thumbsup:.

Louis




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users