Winlogon.exe infection!?

Question

I recently ran a PC Scan using the Comodo Firewall Pro's virus scanning engine, and it detected a Trojan Horse malware (trojan.Win32.patched.m(ID=0x517d0) located within the System File winlogon.exe. I realize that this is a critical system process, and if deleted, will cause the entire system to crash.

Is it possible to get this thing off of my PC safely, without deleting the winlogon.exe file?

If not, then is there a way to replace the file without having to reformat my disk drive?

Any assistance will be greatly appreciated.

Answer 1

hi

the first important thing would be turn off the system restore and then change hidden files to show option . winlogon is an important file fr the windows during log on so u need to safely bk this up . use kaspersky antivrus to remove this or do a clean swipe of ur c drive and install fresh copy of win xp . plz make sure u bk up ur c drive files . i hope this helps and u cme out of this crisis .

Answer 2

There are forums like bleepingcomputer.com which can provide you with an expert answer

Answer 3

The original winlogon.exe is an important program to logon to windows as the name already says.

It is ALWAYS placed in the system32 folder. (C:\Windows\System32)

If it is not placed in the system32 folder,it is a virus.

I would just delete the file.