Page 2 of 2 FirstFirst 12
  1.    15 Feb 2017 #11
    Join Date : Aug 2016
    Posts : 553
    Windows 10 Home

    SPLESHER,

    My apology for the late reply!

    Let's see if we can find the file...

    Please download SystemLook from the applicable link below and save to the Desktop.

    32 bit: http://jpshortstuff.247fixes.com/SystemLook.exe
    64 bit: http://jpshortstuff.247fixes.com/SystemLook_x64.exe

    Please right-click the downloaded file and select: Run as Administrator
    Double-click SystemLook.exe to run it.

    At the SystemLook interface, in the blank square area, Copy and Paste the content of the following code box:

    Code:
    :FileFind
    winlogon.exe
    Now, click the Look button to start the scan.

    When finished, a notepad window opens with the results.

    Please attach the SystemLook-Notepad report in your reply.

    Note: The scan may take a while depending on the number of files in the system and how fast your computer can perform the task.


    Also, can you attach the report of the last scan with Malwarebytes Anti-Malware? Thank you!
      My ComputerSystem Spec
  2.    16 Feb 2017 #12
    Join Date : Feb 2017
    Posts : 5
    Windows 10
    Thread Starter

    @cottonball
    malwarebytes found nothing and system look found :
    SystemLook 30.07.11 by jpshortstuff
    Log created at 17:34 on 16/02/2017 by Sebastian
    Administrator - Elevation successful

    ========== FileFind ==========

    Searching for "winlogon.exe"
    C:\Windows\System32\winlogon.exe --a---- 673792 bytes [18:00 11/01/2017] [04:24 14/12/2016] 917F081E2AB667C44F7D96DE1D16DFAE
    C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.14393.0_none_9d376c91eba4205c\winlogon.exe --a---- 59370 bytes [19:44 16/01/2017] [19:44 16/01/2017] 74F4EFA2E3B0CAE393E01FEB94BE4559
    C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.14393.594_none_a963f3fb73055680\winlogon.exe --a---- 673792 bytes [18:00 11/01/2017] [04:24 14/12/2016] 917F081E2AB667C44F7D96DE1D16DFAE

    -= EOF =-
      My ComputerSystem Spec
  3.    16 Feb 2017 #13
    Join Date : Aug 2016
    Posts : 553
    Windows 10 Home

    SPLESHER,

    This particular file might have a problem, the MD5 does not seem right:

    C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.14393.0_none_9d376c91eba4205c\winlogon.exe --a---- 59370 bytes [19:44 16/01/2017] [19:44 16/01/2017] 74F4EFA2E3B0CAE393E01FEB94BE4559


    Let's see if we can get some other opinions on it from @Bree and other members.

    I have an appointment and won't be back until later.


    Edit:


    MD5 74F4EFA2E3B0CAE393E01FEB94BE4559 is not returning enough search hits to draw a conclusion
    on this file. Will err on the side of caution on deciding what to do with this file, and take the safe road, instead of taking a risk.
    Last edited by cottonball; 17 Feb 2017 at 20:26.
      My ComputerSystem Spec
  4.    16 Feb 2017 #14
    Join Date : Aug 2016
    Posts : 553
    Windows 10 Home

    SPLESHER,

    Let's try the following. Just not sure about replacing the file mentioned above. It has been a few years since I worked with this type of issue. This program may provide more information.

    Please use the Farbar Recovery Scan Tool Download
    Save FRST to your Desktop.

    [Note: You need to run the version compatible with your system: 32 bit or 64 bit]

    Double-click FRST to run it.
    When the tool opens click Yes to the disclaimer.
    Next, press the Scan button.

    When done, the tool makes a log (FRST.txt) on the Desktop.
    Also, the first time the tool is run, it makes another log: (Addition.txt).

    Please attach both reports in your reply.



    Now, please go back to the FRST main screen.

    In the area to the right of Search, type in: winlogon.exe
    Click the Search Files button.

    Also attach the Search.txt in your reply.


    Last, you mentioned that Malwarebytes had found a winlogon.exe file.

    Can you provide a copy of that report?
    Last edited by cottonball; 16 Feb 2017 at 23:26.
      My ComputerSystem Spec

 
Page 2 of 2 FirstFirst 12

Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 02:42.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums