G DATA Software AG: Antivirus, Virenschutz, Virenscanner, Internet Security

G Data: Details

Home

Details

« Go back

Question:

I am using the Windows 2000 SP4 operating system. The WINLOGON.EXE has been deleted or quarantined owing to a virus monitor error and I am now unable to start my PC.

Response:

Please proceed as follows: Repairing using the Windows 2000 SP 4 CD: 1) Start the system using the Windows 2000 CD (you may need to reset the boot order in the BIOS) 2) Select “Repair Windows” (Press R key) 3) Select “Windows Recovery Console” (Press C key) 4) Choose your setting (this is normally “1”) and press ENTER 5) Enter your administrator password and press ENTER to confirm 6) Swap to the CD drive (if this is D, type in “cd d:” (no inverted commas; please type the relevant letter if you are using another drive) 7) Go into the i386 directory (cd i386) 8) Enter the following command: copy winlogon.ex_ c:winntsystem32winlogon.exe. Once WINLOGON is repaired or replaced: Please restart your computer. Disable the monitor and update your virus signatures. When you re-enable the monitor, it will not identify the LOGON.exe incorrectly now that you have updated the virus signatures. Please restart your PC in safe mode if you set the virus monitor up so that it does not alert you when a virus is found, but deletes it or immediately places it in quarantine. Then change the virus monitor setting to disabled (Start -> Settings -> Control Panel -> Services -> “AVK Virus Monitor”). Now restart your PC and update the virus signatures. When you re-enable the monitor, it will not identify the LOGON.exe incorrectly now that you have updated the virus signatures. We hope you have found this information helpful.

Category: AntiVirusKit 2006 InternetSecurity