Jump to content


Recommended Posts

Hi! I have had the same problem.

After AVG ran a scan yesterday, it found the psw.agent.abku virus in the winlogon.exe file. After unsuccessfully trying numerous programs to remove it, I found something that worked. My dad and I have the same computer, so I copied his clean winlogon.exe file to a thumb drive and renamed it 'winlogon.new.exe.' I then copied it into my Windows>System32 folder (where the infected file was located). I rebooted the computer in Safe Mode and chose the "Command Prompts" option. Once in DOS, I changed the directory to System32. I then renamed the infected file to 'winlogon.old.exe' and renamed the clean file to 'winlogon.exe'. Because the winlogon file is used all the time while Windows is operating, the only way to change the name is through the DOS commands. I rebooted the computer and verified that the old winlogon file still had the infection (had to make sure it didn't move elsewhere), and deleted that file. I then ran a full system scan, and I am now virus free! You should be able to do this same thing as long as the clean file is coming from a computer running the same operating system and service pack.

Good luck!

Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.