This app can't run on your PC

SPLESHER,

My apology for the late reply!

Let's see if we can find the file...

Please download SystemLook from the applicable link below and save to the Desktop.

32 bit: http://jpshortstuff.247fixes.com/SystemLook.exe
64 bit: http://jpshortstuff.247fixes.com/SystemLook_x64.exe

Please right-click the downloaded file and select: Run as Administrator
Double-click SystemLook.exe to run it.

At the SystemLook interface, in the blank square area, Copy and Paste the content of the following code box:

Code:

:FileFind
winlogon.exe

Now, click the Look button to start the scan.

When finished, a notepad window opens with the results.

Please attach the SystemLook-Notepad report in your reply.

Note: The scan may take a while depending on the number of files in the system and how fast your computer can perform the task.


Also, can you attach the report of the last scan with Malwarebytes Anti-Malware? Thank you!

SPLESHER,

This particular file might have a problem, the MD5 does not seem right:

C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.14393.0_none_9d376c91eba4205c\winlogon.exe --a---- 59370 bytes [19:44 16/01/2017] [19:44 16/01/2017] 74F4EFA2E3B0CAE393E01FEB94BE4559


Let's see if we can get some other opinions on it from @Bree and other members.

I have an appointment and won't be back until later.


Edit:

MD5 74F4EFA2E3B0CAE393E01FEB94BE4559 is not returning enough search hits to draw a conclusion
on this file. Will err on the side of caution on deciding what to do with this file, and take the safe road, instead of taking a risk.

SPLESHER,

Let's try the following. Just not sure about replacing the file mentioned above. It has been a few years since I worked with this type of issue. This program may provide more information.

Please use the Farbar Recovery Scan Tool Download
Save FRST to your Desktop.

[Note: You need to run the version compatible with your system: 32 bit or 64 bit]

Double-click FRST to run it.
When the tool opens click Yes to the disclaimer.
Next, press the Scan button.

When done, the tool makes a log (FRST.txt) on the Desktop.
Also, the first time the tool is run, it makes another log: (Addition.txt).

Please attach both reports in your reply.



Now, please go back to the FRST main screen.

In the area to the right of Search, type in: winlogon.exe
Click the Search Files button.

Also attach the Search.txt in your reply.


Last, you mentioned that Malwarebytes had found a winlogon.exe file.

Can you provide a copy of that report?