winlogon.exe runtime error

  1. 30-12-2005  #1
    Engelien
    Engelien is offline Newbie

    winlogon.exe runtime error

    Hi, the last couple of days I get the above error when I try to logon to my Windows XP Professional NL system. By trial and error I figured out that this only happens when I'm running in standalone mode, when I attach to my Intranet, connected to Internet, I have no problems. I've read throug some earlier complaints about this and did the following, I do not know how I should use the Hijack tools. (I'm running NOD):

    1) I ran CCcleaner
    2) I ran the Kapersky online scanner and deleted severall .dll libraries, except the browsela.dll file (cannot delete it). The Not a virus files I did not delete, because it seems that this is caused by the way I'm running NOD at the moment.

    Any clue on how to solve this problem?

    Kapersky log:

    SKY ON-LINE SCANNER REPORT
    Friday, December 30, 2005 22:18:25
    Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
    Kaspersky On-line Scanner version: 5.0.67.0
    Kaspersky Anti-Virus database last update: 30/12/2005
    Kaspersky Anti-Virus database records: 168384
    -------------------------------------------------------------------------------

    Scan Settings:
    Scan using the following antivirus database: extended
    Scan Archives: true
    Scan Mail Bases: true

    Scan Target - My Computer:
    C:\
    D:\
    E:\
    F:\
    G:\
    H:\

    Scan Statistics:
    Total number of scanned objects: 38898
    Number of viruses found: 4
    Number of infected objects: 140
    Number of suspicious objects: 0
    Duration of the scan process: 3644 sec

    Infected Object Name - Virus Name
    C:\Program Files\ESET\cache\FND0.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND1.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND10.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND11.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND12.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND13.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND14.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND15.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND16.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND17.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND18.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND19.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND1A.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND1B.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND1C.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND1D.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND2.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND20.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND21.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND23.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND24.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND25.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND29.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND2A.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND2B.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND2C.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND2E.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND2F.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND31.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND32.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND33.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND35.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND4.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND5.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND6.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND7.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND8.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FND9.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FNDA.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FNDB.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FNDC.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FNDD.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FNDE.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\cache\FNDF.NFI Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\0ZD313CA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\14BUTIAA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\2L0R4VDA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\2NOC5LDA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\3BJGPKDA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\3I0WXYCA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\3KGH5EAA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\4ZQ1NFBA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\5KEANXDA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\5RWKGGBA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\A5QQXEDA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\B0P4VZAA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\BAWR3UBA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\CC3CPABA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\CIEXFQBA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\CML0G3CA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\COQIDWCA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\CVPDMKDA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\E2HGXWDA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\FNXUV3BA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\HVNRFVDA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\IBJYU0AA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\IGBFWLDA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\IJZIQPAA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\JMRGZ1DA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\KHSJ0OAA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\LYPNWMAA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\MLUXPWCA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\NBLE1SCA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\NEVU51AA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\NMJGNPBA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\NO2S0PDA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\NUBO5WDA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\RD4FA3AA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\SZJAEEBA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\TLK3UHBA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\UBBRJKAA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\USXIWDDA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\VL2SXRAA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\WJ1SITBA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\WWZMDNBA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\X5ZOHGBA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\XQC4MJCA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\XU3ZL2DA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\YCG2KPAA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\YHAIOECA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\YHYL44CA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\YSW1GUCA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\Z2DCO3AA.NQF Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\Program Files\ESET\infected\Z2RDLNCA.NQF Infected: Trojan-Clicker.Win32.Delf.eb
    C:\System Volume Information\_restore{0258E00C-86B4-46C3-8574-C230D29FC984}\RP82\A0033756.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\System Volume Information\_restore{0258E00C-86B4-46C3-8574-C230D29FC984}\RP82\A0033782.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\System Volume Information\_restore{0258E00C-86B4-46C3-8574-C230D29FC984}\RP84\A0035959.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\System Volume Information\_restore{0258E00C-86B4-46C3-8574-C230D29FC984}\RP84\A0035970.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\System Volume Information\_restore{0258E00C-86B4-46C3-8574-C230D29FC984}\RP84\A0036050.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\System Volume Information\_restore{0258E00C-86B4-46C3-8574-C230D29FC984}\RP84\A0036997.DLL Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\System Volume Information\_restore{0258E00C-86B4-46C3-8574-C230D29FC984}\RP84\A0037002.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\System Volume Information\_restore{0258E00C-86B4-46C3-8574-C230D29FC984}\RP84\A0037007.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\System Volume Information\_restore{0258E00C-86B4-46C3-8574-C230D29FC984}\RP84\A0037034.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\System Volume Information\_restore{0258E00C-86B4-46C3-8574-C230D29FC984}\RP84\A0037045.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\System Volume Information\_restore{0258E00C-86B4-46C3-8574-C230D29FC984}\RP84\A0037050.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\System Volume Information\_restore{0258E00C-86B4-46C3-8574-C230D29FC984}\RP84\A0037058.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\g3357377.dll Infected: Trojan-Downloader.Win32.Delf.aeo
    C:\WINDOWS\g3519470.dll Infected: Trojan-Downloader.Win32.Delf.aeo
    C:\WINDOWS\system32\agtodisc.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\ahmeter.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\azaq0eh5eh4.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\browsela.dll Infected: Trojan-Downloader.Win32.Delf.aeo
    C:\WINDOWS\system32\calbact.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\dcwave.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\dfnwsock.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\e8020idoe80c0.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\fn0021dmg.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\fp8003lme.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\fpp2037oe.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\g004ladq1d0e.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\hrp8057ue.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\hrr8059ue.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\hX23msp.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\i6jqlg1516.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\ihfxress.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\ir22l5fo1.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\irpml5711.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\k608lgdu1608.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\l44q0eh5eh4.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\lvn2095oe.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\m082lalo1dqc.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\m4460ehseh460.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\msvcp.exe Infected: Backdoor.Win32.Codbot.bh
    C:\WINDOWS\system32\mzctf.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\n0l80a3ued.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\n44s0eh7eh4.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\n66qlgj516o.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\n6n6lg5s16.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab
    C:\WINDOWS\system32\split1.exe Infected: Backdoor.Win32.Codbot.bh
    C:\WINDOWS\system32\wjbcheck.dll Infected: not-a-virus:AdWare.Win32.Look2Me.ab

    Scan process completed.

  3. 31-12-2005  #2
    DJNafey
    DJNafey is offline UK site moderator
    Engelien,

    What's "NOD" ?
  4. 31-12-2005  #3
    jephree
    jephree is offline ¨*·.¸ «.·°·..·°·.» ¸.·*¨
    Quote Originally Posted by DJNafey
    Engelien,

    What's "NOD" ?
    Perhaps: http://www.nod32.com/scriptless/download/download.htm

    Engelien I suggest running this by our HijackThis Pros:

    Please follow the instructions HERE & then post your log in a new thread in the Spyware, Adware, Viruses and HijackThis Logs section.
    (Not in this section please).
  5. 31-12-2005  #4
    DJNafey
    DJNafey is offline UK site moderator
    Quote Originally Posted by jephree
    Perhaps: http://www.nod32.com/scriptless/download/download.htm
    Ah, I see
  6. 31-12-2005  #5
    Engelien
    Engelien is offline Newbie
    Hi DJNafey, thanks for picking this one, about your NOD question, I saw the replies and NOD stand for NOD32 Antivirus System, a virsusscanner etc. used in Europe. However seeing what Kaparsky found after I ran NOD32, I might have to reconsider which scanner to use in the future. I will try to get Hijackthis working (never used it before and will come back asap.

    Engelien
+ Reply to Thread
« Major Blue-Screen Problem | PC won't boot. »