Hi,
This could be the klepper trojan, or at least a remnant of it. If your
antivirus software is doing its job, then it may have removed the infecting
file, but not the run entry that loads it. Click start/run, type regedit and
click ok. Expand the plus (+) signs to look at these keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Click on the key, then look at the strings in the right pane. If you see one
that loads winlogon.exe, click on that string and delete it.
Incidentally, winlogon.exe is a normal system process, the klepper trojan
uses the same name. If you are able to logon to your system, then the legit
file is fine. If you are not, and after the error message you get logged
out, you may have a missing file.
--
Best of Luck,
Rick Rogers, aka "Nutcase" - Microsoft MVP
Windows help -
www.rickrogers.org
