Cubbie3798 Posted July 24, 2009 ID:101855 Share Posted July 24, 2009 Hi! I have had the same problem. After AVG ran a scan yesterday, it found the psw.agent.abku virus in the winlogon.exe file. After unsuccessfully trying numerous programs to remove it, I found something that worked. My dad and I have the same computer, so I copied his clean winlogon.exe file to a thumb drive and renamed it 'winlogon.new.exe.' I then copied it into my Windows>System32 folder (where the infected file was located). I rebooted the computer in Safe Mode and chose the "Command Prompts" option. Once in DOS, I changed the directory to System32. I then renamed the infected file to 'winlogon.old.exe' and renamed the clean file to 'winlogon.exe'. Because the winlogon file is used all the time while Windows is operating, the only way to change the name is through the DOS commands. I rebooted the computer and verified that the old winlogon file still had the infection (had to make sure it didn't move elsewhere), and deleted that file. I then ran a full system scan, and I am now virus free! You should be able to do this same thing as long as the clean file is coming from a computer running the same operating system and service pack.Good luck! Link to post Share on other sites More sharing options...
Staff miekiemoes Posted July 25, 2009 Staff ID:102329 Share Posted July 25, 2009 Since this issue is already resolved, this thread is closed. Link to post Share on other sites More sharing options...
Recommended Posts