explorer.exe winlogon.exe virus

G

gavros777

New member
Local time
2:20 PM
Messages
8
malwarebytes,eset find explore.exe,winlogon.exe w.dll as a virus and want to remove them, if that happens then i'll have to reinstall the windows, anyone knows how to deal with this kind of problem?
 

My Computer My Computer

At a glance

Windows 7 Home Premium 32bit
OS
Windows 7 Home Premium 32bit
What is the Make/Model of your Computer?
 

My Computer My Computer

At a glance

Windows 7 Professional x64 SP1 ; Windows Serv...Intel Core i5 2400 @ 3.10GHz8.0GB DDR3 @ 665MHz (2GBx4)AMD Radeon HD 6870
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Built
OS
Windows 7 Professional x64 SP1 ; Windows Server 2012 R2 Standard
CPU
Intel Core i5 2400 @ 3.10GHz
Motherboard
Foxconn H67MP-S/-V/H67MP
Memory
8.0GB DDR3 @ 665MHz (2GBx4)
Graphics Card(s)
AMD Radeon HD 6870
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
AOC 2243W & SMB1930NW
Screen Resolution
1440x900 & 1920x1080
Hard Drives
977GB Seagate ST31000524AS ATA Drive (SATA)
250GB WD iSCSI attached Drive
PSU
750W Gaming PSU
Case
Novatech Night
Cooling
Fan
Keyboard
Dell Standard PS/2 Keyboard
Mouse
R.A.T 07 Gaming Mouse
Internet Speed
Download: 10 Mbps Ping: 30ms Upload: 0.81 Mbps
Browser
Google Chrome
Other Info
Optiarc DVD RW AD-5260S ATA Device
gavros777 said:
malwarebytes,eset find explore.exe,winlogon.exe w.dll as a virus and want to remove them, if that happens then i'll have to reinstall the windows, anyone knows how to deal with this kind of problem?
Click to expand...

Go to Malwarebytes Forum and ask them. They are very helpful.
 

My Computer My Computer

At a glance

Windows 7 x64Intel Core i7 930OCZ 6GBkit OCZ3G1600LV6GK 8-8-8-24-2T 1.65V(2) HIS ATI Radeon HD 5770 CROSSFIRE (H577QT1GD)
Computer Manufacturer/Model Number
Built by Mark
OS
Windows 7 x64
CPU
Intel Core i7 930
Motherboard
Gigabyte GA-X58A-UD3R Bios F5
Memory
OCZ 6GBkit OCZ3G1600LV6GK 8-8-8-24-2T 1.65V
Graphics Card(s)
(2) HIS ATI Radeon HD 5770 CROSSFIRE (H577QT1GD)
Sound Card
On board Realtek HD
Monitor(s) Displays
Samsung SyncMaster 2343 22" Wide Screen
Screen Resolution
2048x1152
Hard Drives
Two Western Digital 320 Gig Blue series WDC WD3200AAKS-00L9A0
PSU
Corsiar 750 watts TX750W
Case
Antec NINE Hundred Two (air filters & adjustable fan speed)
Cooling
Cooler Master Hyper 212 Plus CPU cooler
Keyboard
Logitech
Mouse
Logitech MX310
Internet Speed
20 meg down/ 5 meg up
Other Info
Hewlett Packard Deskjet 932C printer
Epson 4990 Photo scanner
Both explore.exe and winlogon.exe can look to be legit MS files, but malware can diguise itself to look like legit files.
 

My Computer My Computer

At a glance

Windows 7 Ultimate 32bit SP1Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz4 GBATI Radeon HD 2600 Pro
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Bruce ... somewhere in his 40's
OS
Windows 7 Ultimate 32bit SP1
CPU
Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz
Motherboard
INTEL/D975XBX2
Memory
4 GB
Graphics Card(s)
ATI Radeon HD 2600 Pro
Monitor(s) Displays
Samsung SyncMaster 914v
Screen Resolution
1280 x 1024
Hard Drives
2/500GB each ... ST3500630AS ATA Device.
One is not connected
PSU
Rocketfish 700 W
Case
G.Skill Gigabyte Chassis
Keyboard
Standard PS/2 Keyboard
Mouse
Microsoft PS/2 Mouse
Internet Speed
DSL
Antivirus
Avira Internet Security
Browser
IE 11
Other Info
ATI HDMI Audio
Take a look here w.dll | ThreatExpert statistics
w.dll is a hacktool, password stealer, infostealer.

Let MBam and Eset quarantine the infected files, and change all your passwords using a different (clean) computer. Don't use the infect one to do this with!
 

My Computer My Computer

At a glance

Windows 7 Ultimate 32bit SP1Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz4 GBATI Radeon HD 2600 Pro
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Bruce ... somewhere in his 40's
OS
Windows 7 Ultimate 32bit SP1
CPU
Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz
Motherboard
INTEL/D975XBX2
Memory
4 GB
Graphics Card(s)
ATI Radeon HD 2600 Pro
Monitor(s) Displays
Samsung SyncMaster 914v
Screen Resolution
1280 x 1024
Hard Drives
2/500GB each ... ST3500630AS ATA Device.
One is not connected
PSU
Rocketfish 700 W
Case
G.Skill Gigabyte Chassis
Keyboard
Standard PS/2 Keyboard
Mouse
Microsoft PS/2 Mouse
Internet Speed
DSL
Antivirus
Avira Internet Security
Browser
IE 11
Other Info
ATI HDMI Audio
Jacee said:
Take a look here w.dll | ThreatExpert statistics
w.dll is a hacktool, password stealer, infostealer.

Let MBam and Eset quarantine the infected files, and change all your passwords using a different (clean) computer. Don't use the infect one to do this with!
Click to expand...

i had to restart my computer for malware bytes and eset to remove explorer.exe and winlogon.exe and now my computer doesn't login to the windows but restarts by itself. is there a way to clean those infected files without removing them since are needed by the computer?
 

My Computer My Computer

At a glance

Windows 7 Home Premium 32bit
OS
Windows 7 Home Premium 32bit
do you have install any theme before that have change your explore.exe and winlogon.exe

if yes you need to restore your system, you cant delete explorer.exe and winlogon.exe because it needed by windows.
 

My Computer My Computer

At a glance

Windows 7 Ultimate x86
OS
Windows 7 Ultimate x86
gavros777 said:
Jacee said:
Take a look here w.dll | ThreatExpert statistics
w.dll is a hacktool, password stealer, infostealer.

Let MBam and Eset quarantine the infected files, and change all your passwords using a different (clean) computer. Don't use the infect one to do this with!
Click to expand...

i had to restart my computer for malware bytes and eset to remove explorer.exe and winlogon.exe and now my computer doesn't login to the windows but restarts by itself. is there a way to clean those infected files without removing them since are needed by the computer?
Click to expand...

In case the actual files got infected and removed by the AVs, you can do the following.

Start your pc and tap F8/F12 to get to the advanced boot options screen..
Select Repair your Computer.
Enter your account name and password if prompted and select the keyboard layout.
It'll try and detect the problem bu itself, but nevermind, just click the link "More recovery options" or something like that.
Goto the command prompt.
Type sfc /scannow and hit enter.
Wait for its completion and restart.
 

My Computer My Computer

At a glance

Winbdows 7 ultimate x64 | Ubuntu 12.04 x64 LTSCore 2 Duo e7400 @ 2.90GHz3GB DDR2Asus Nvidia GTX 560Ti 1GB
Computer Manufacturer/Model Number
HCL
OS
Winbdows 7 ultimate x64 | Ubuntu 12.04 x64 LTS
CPU
Core 2 Duo e7400 @ 2.90GHz
Motherboard
Gigabyte G31M-ES2L
Memory
3GB DDR2
Graphics Card(s)
Asus Nvidia GTX 560Ti 1GB
Sound Card
On-board
Monitor(s) Displays
HCL eZeeBee 18.5" LCD
Screen Resolution
1366x768 @ 60Hz
Hard Drives
Western Digital 320GB
PSU
Corsair CX500 V2 500W
Cooling
Stock
Keyboard
Stock
Mouse
Stock
Internet Speed
15-25kBps D/L | 10kBps U/L | Hey Don't laugh
You cannot do a System File checker in System Repair Options - I have tried in the past and it has not worked
 

My Computer My Computer

At a glance

Windows 7 Professional x64 SP1 ; Windows Serv...Intel Core i5 2400 @ 3.10GHz8.0GB DDR3 @ 665MHz (2GBx4)AMD Radeon HD 6870
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Built
OS
Windows 7 Professional x64 SP1 ; Windows Server 2012 R2 Standard
CPU
Intel Core i5 2400 @ 3.10GHz
Motherboard
Foxconn H67MP-S/-V/H67MP
Memory
8.0GB DDR3 @ 665MHz (2GBx4)
Graphics Card(s)
AMD Radeon HD 6870
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
AOC 2243W & SMB1930NW
Screen Resolution
1440x900 & 1920x1080
Hard Drives
977GB Seagate ST31000524AS ATA Drive (SATA)
250GB WD iSCSI attached Drive
PSU
750W Gaming PSU
Case
Novatech Night
Cooling
Fan
Keyboard
Dell Standard PS/2 Keyboard
Mouse
R.A.T 07 Gaming Mouse
Internet Speed
Download: 10 Mbps Ping: 30ms Upload: 0.81 Mbps
Browser
Google Chrome
Other Info
Optiarc DVD RW AD-5260S ATA Device
You must log in or register to reply here.

Similar threads

How to remove Explorer.exe
Replies
1
Views
4K
samuria
samuria
Recovering from a Virus - some advice
Replies
2
Views
2K
Snick
Snick
Explorer.exe not responding when exiting a game running at diff. res.
Replies
1
Views
5K
iko22
I
Blank icons, Explorer.exe crashing, Exception code: 0xc0000374
Replies
1
Views
3K
torchwood
torchwood
Solved Is there a program or trick to delete a Task (LOCAL) after a virus?
Replies
10
Views
3K
Tactics
Tactics
Back
Top