[Destroyer1990]

So I'm pretty sure I have the winlogon.exe virus. I know little to nothing about computers, other than common knowledge from using one casually for most of my life. But as far as debugging and computer specs, and the like go, I'm basically a noob. I've reinstalled Windows 7 twice now. The first time I forgot to wipe my partition and the second time I DID wipe it. Thing is, going to task manager, I see winlogon.exe without a username or description given. I've never seen it before, and I cannot end the process, so I'm pretty sure it's a virus. If any of you could PLEASE take a look at my computer and see what you can do, my gratitude would be endless.

Edit: also, there's csrss.exe listed in my task manager without a user or description listed.

This post has been edited by Destroyer1990: 07 February 2010 - 03:44 AM

[ibfreeekout]

Destroyer1990, on 07 February 2010 - 03:41 AM, said:

So I'm pretty sure I have the winlogon.exe virus. I know little to nothing about computers, other than common knowledge from using one casually for most of my life. But as far as debugging and computer specs, and the like go, I'm basically a noob. I've reinstalled Windows 7 twice now. The first time I forgot to wipe my partition and the second time I DID wipe it. Thing is, going to task manager, I see winlogon.exe without a username or description given. I've never seen it before, and I cannot end the process, so I'm pretty sure it's a virus. If any of you could PLEASE take a look at my computer and see what you can do, my gratitude would be endless.

Edit: also, there's csrss.exe listed in my task manager without a user or description listed.

They aren't viruses. They should say SYSTEM under the USER NAME tab. For me the csrss.exe description is Client Server Runtime Process and the winlogon.exe is Windows Logon Process. Check to see what yours say.

[SniperX]

Destroyer1990, on 07 February 2010 - 03:41 AM, said:

So I'm pretty sure I have the winlogon.exe virus. I know little to nothing about computers, other than common knowledge from using one casually for most of my life. But as far as debugging and computer specs, and the like go, I'm basically a noob. I've reinstalled Windows 7 twice now. The first time I forgot to wipe my partition and the second time I DID wipe it. Thing is, going to task manager, I see winlogon.exe without a username or description given. I've never seen it before, and I cannot end the process, so I'm pretty sure it's a virus. If any of you could PLEASE take a look at my computer and see what you can do, my gratitude would be endless.

Edit: also, there's csrss.exe listed in my task manager without a user or description listed.

lulz, nah dawg those are virus, delete them both, and then delete everything in your system32 file, that should clear it up.

[Destroyer1990]

I tried deleting them but it says "You require permission from TrustedInstaller to make changes to this file." So I ran in safemode and tried to delete it, same problem. However, in safemode I got a file description and a listed user.
Also, when I click "show processes from all users" I see two csrss.exe files, but only one winlogon.exe. There was another random process listed when I got on, but when I run safemode it's not listed in the task manager anymore.

[SniperX]

Destroyer1990, on 07 February 2010 - 02:19 PM, said:

I tried deleting them but it says "You require permission from TrustedInstaller to make changes to this file." So I ran in safemode and tried to delete it, same problem. However, in safemode I got a file description and a listed user.
Also, when I click "show processes from all users" I see two csrss.exe files, but only one winlogon.exe. There was another random process listed when I got on, but when I run safemode it's not listed in the task manager anymore.

lulz wuttan00b. Winlogon is not a virus but the handler used by windows to manage logon policies, csrss.exe is a vital component to windows as it handles process threading and the execution of fancy schmanzy win32 console and what not. You can have 2 legitimate instances of csrss.exe running. If you seriously couldn't be bothered to look in microsoft support articles, stop using a real computer and just buy a MAC.

[MajorLag]

SniperX, on 07 February 2010 - 03:28 PM, said:

stop using a real computer and just buy a MAC.

No. Dont listen to him. There is absolutely no reason anyone should buy a Mac. Ever.

[ninjafish]

Destroyer1990, on 07 February 2010 - 03:41 AM, said:

So I'm pretty sure I have the winlogon.exe virus. I know little to nothing about computers, other than common knowledge from using one casually for most of my life. But as far as debugging and computer specs, and the like go, I'm basically a noob. I've reinstalled Windows 7 twice now. The first time I forgot to wipe my partition and the second time I DID wipe it. Thing is, going to task manager, I see winlogon.exe without a username or description given. I've never seen it before, and I cannot end the process, so I'm pretty sure it's a virus. If any of you could PLEASE take a look at my computer and see what you can do, my gratitude would be endless.

Edit: also, there's csrss.exe listed in my task manager without a user or description listed.

What makes you think you have a virus? What antivirus/utilities have you used to scan with that say you have a virus?

[Destroyer1990]

SniperX, on 07 February 2010 - 03:28 PM, said:

lulz wuttan00b. Winlogon is not a virus but the handler used by windows to manage logon policies, csrss.exe is a vital component to windows as it handles process threading and the execution of fancy schmanzy win32 console and what not. You can have 2 legitimate instances of csrss.exe running. If you seriously couldn't be bothered to look in microsoft support articles, stop using a real computer and just buy a MAC.

oh no being made fun of for something I already admitted to. How ever will I survive?
You think I didn't search for information on this already? First off, I've never seen these on my task manager before, so that's why I was worried, secondly, there's no specific answers as to what to do because sometimes virus' take the names of these necessary processes. Hence why I asked here.

[Destroyer1990]

ninjafish, on 07 February 2010 - 04:41 PM, said:

What makes you think you have a virus? What antivirus/utilities have you used to scan with that say you have a virus?

Microsoft Security Essentials picked up and deleted a virus when I tried running (what I learned to be) a corrupt crack for Mirror's Edge. I checked my temp folder to be safe, and found i4jdel0.exe which is known as a pretty bad virus. I sent it to the recycle bin, it came back, deleted again and emptied the bin and haven't seen it since. That's when my browswer randomly got rerouted to some ad filled page, I couldn't open iTunes and I got an error whenever opening firefox (something wrong with security). I couldn't open sticky notes and the like.

So I reinstalled W7 twice and now I'm seeing processes in my task manager I've never seen before. MSE doesn't find anything wrong, but it didn't find anything wrong before I reinstalled at all.

[SniperX]

Well if you think you're still infected, a battery of forefront, malware-bytes, clamwin, and spy bot should just about butt fuck anything you have. As far as the reroute I'll bet money in your connections tab (assuming you use ie) a proxy has been set up to reroute, remove it.

[Joga]

Windows 7 here. I have two copies of csrss.exe and one copy of winlogon.exe running. Been there since the dawn of time.

You don't have a virus. The End.

[Destroyer1990]

Joga, on 07 February 2010 - 06:48 PM, said:

Windows 7 here. I have two copies of csrss.exe and one copy of winlogon.exe running. Been there since the dawn of time.

You don't have a virus. The End.

I hate being paranoid. Thanks.

[Avalon]

Very buttzy troll.

[cyb.tachyon]

I CAN'T TELL WHO'S TROLLING IN THIS THREAD ANYMORE!!!!

For some reason I feel only ibfreekout, ninjafish, and joga got trolled, and everyone else was a troll-ee. Hmmm. Makes my head hurt.

This post has been edited by cyb.tachyon: 08 February 2010 - 01:17 AM

[Joga]

cyb.tachyon, on 08 February 2010 - 01:15 AM, said:

I CAN'T TELL WHO'S TROLLING IN THIS THREAD ANYMORE!!!!

For some reason I feel only ibfreekout, ninjafish, and joga got trolled, and everyone else was a troll-ee. Hmmm. Makes my head hurt.

Well, in my defense, Destroyer wouldn't play L4D2 last night because he thought he had a virus. And forgoing a game of L4D2 is a pretty extreme measure to take just for a troll - I mean, L4D2 is just so good. It's like Lucky Charms... or cocaine.

[Zuccolo]

Gamma trolled us by not trolling us.

[ninjafish]

cyb.tachyon, on 08 February 2010 - 01:15 AM, said:

I CAN'T TELL WHO'S TROLLING IN THIS THREAD ANYMORE!!!!

For some reason I feel only ibfreekout, ninjafish, and joga got trolled, and everyone else was a troll-ee. Hmmm. Makes my head hurt.

I saw him complaining about a virus and actually requesting help on facebook so I figured it was legit.

Maybe your trolling yourself by being so paranoid, or maybe your being trolled.

[TerranUp16]

Btw Destroyer, iTunes isn't helping things Do some research into how that particular app fucks-up Windows.

But anyway, my guess for why you weren't seeing those processes before is that you may have had some issue with your prior installation or some other undetected piece of malware that suppressed them (or maybe you just flipped a switch somewhere and they hid themselves- I've no clue really). When you reinstalled W7, you restored everything pretty much to its proper, initial state which fixed whatever was suppressing showing those processes.

[Zuccolo]

TerranUp16, on 08 February 2010 - 06:13 AM, said:

Btw Destroyer, iTunes isn't helping things Do some research into how that particular app fucks-up Windows.

Is there another, more Windows-friendly application that allows me to sync my music to my iPod? I'd rather not use iTunes because of this...

...and mostly because of the simple fact that I hate Apple and anything they produce/develop/publish, and I think iTunes is one of the trashiest, most user-unfriendly applications in existence.

[TerranUp16]

Zuccolo, on 08 February 2010 - 10:58 AM, said:

Is there another, more Windows-friendly application that allows me to sync my music to my iPod? I'd rather not use iTunes because of this...

...and mostly because of the simple fact that I hate Apple and anything they produce/develop/publish, and I think iTunes is one of the trashiest, most user-unfriendly applications in existence.

The solution is to not get an iPod Plenty of perfectly good, if not better, alternate MP3 players around. Myself, I have a Creative Zen Vision-M- a bit long in the tooth now, but unlike my sister's iPod, my Zen still works just fine