winlogoo removal

[Guest kevin]

Running xp home.have virus called winlogoo in system32 folder next to

winlogon ...cannot remove it ,i need help please.

tks

kev

[Guest PA Bear [MS MVP]]

1. See if you can download/run the MSRT manually:

http://www.microsoft.com/security/malwareremove/default.mspx

 

2. Run this online scan (in safe mode w/networking, if need be):

http://onecare.live.com/site/en-us/center/howsafe.htm

 

3. Run additional checks for hijackware, including posting your hijackthis

log to an appropriate forum.

 

Checking for/Help with Hijackware

http://aumha.org/a/parasite.htm

http://aumha.org/a/quickfix.htm

http://aumha.net/viewtopic.php?t=5878

http://mvps.org/winhelp2002/unwanted.htm

http://inetexplorer.mvps.org/data/prevention.htm

http://inetexplorer.mvps.org/tshoot.html

http://www.mvps.org/sramesh2k/Malware_Defence.htm

http://defendingyourmachine2.blogspot.com/

http://www.elephantboycomputers.com/page2....emoving_Malware

 

When all else fails, HijackThis v2.0.2

(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in

conjuction with some other utilities). HijackThis will NOT fix anything on

its own, but it will help you to both identify and remove any

hijackware/spyware with assistance from an expert. Post your log to

http://spywarehammer.com/simplemachinesfor....php?board=10.0,

http://forums.spybot.info/forumdisplay.php?f=22,

http://aumha.net/viewforum.php?f=30, or another appropriate forum for review

by an expert in such matters, not here.

 

If the procedures look too complex - and there is no shame in admitting this

isn't your cup of tea - take the machine to a local, reputable and

independent (i.e., not BigBoxStoreUSA) computer repair shop.

--

~Robear Dyer (PA Bear)

MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002

AumHa VSOP & Admin http://aumha.net

DTS-L http://dts-l.net/

 

kevin wrote:<span style="color:blue">

> Running xp home.have virus called winlogoo in system32 folder next to

> winlogon ...cannot remove it ,i need help please.

> tks

> kev </span>