Error Message at startup.

Jason · **Posted:** September 8th, 2009, 8:33 am

My mom doesn't know much about computers (being general, most of the planet doesn't know much about computers either) and said we got a word but she removed it. I dont know what happened but the computer is fine know except for a error message at startup.

It reads "Windows cannot find the file "logon.exe"
Then it says you can search for the file and blah blah.

What do I need to to do fix this?

Adbot · **Posted:** September 8th, 2009, 8:33 am

Pfkninenines · Global Moderator 12/4/08

According to Threatexpert, it's probably a spyware/trojan program. I wouldn't be too unhappy if the computer's antivirus/antimalware program is doing its job by removing the program.

Jason · **Posted:** September 8th, 2009, 12:00 pm

So you are saying it is nothing and i should leave it alone?

Pfkninenines · Global Moderator 12/4/08

If there aren't any issues other than that one error, I'd leave it be. Try to remove it from startup programs (msconfig / Windows Defender might help), and definately run a full scan on your computer with whatever you use for Anti-virus / Anti-malware. If you've had something once, you might still have something else.

hummerwar921 · **Posted:** September 8th, 2009, 3:41 pm

OK I had a botnet a while ago, but I got rid of it.

However, the registry entries did not get removed.

I got that error every time I booted up Windows. Just recently, I was crusing regedit, when I found the entry.

Here's what you do, open up regedit (Run -> regedit), and navigate to here:

HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Winlogon

On the right, find an entry containing logon.exe. Edit it out.

Hope this helps

Jason · **Posted:** September 8th, 2009, 8:07 pm

hummerwar921 wrote:

OK I had a botnet a while ago, but I got rid of it.

However, the registry entries did not get removed.

I got that error every time I booted up Windows. Just recently, I was crusing regedit, when I found the entry.

Here's what you do, open up regedit (Run -> regedit), and navigate to here:

HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Winlogon

On the right, find an entry containing logon.exe. Edit it out.

Hope this helps

Ok i found a few files titled "logon" in the subfolder under: HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Winlogon Titled "NOTIFY". So i dont know which one to edit.

Adbot · **Posted:** September 8th, 2009, 8:07 pm

hummerwar921 · **Posted:** September 8th, 2009, 8:24 pm

Well it depends on what entry it made, and where.

I don't want to make you accidentally **** up your registry, so, want me to assist you?

Do you have MSN?

Jason · **Posted:** September 8th, 2009, 9:31 pm

No I don't. I'm kinda busy to do anything about it right now and will be for the rest of the week. Plus since it isn't affecting my computer at all i will leave it alone. This weekend ill do some more research on it and maybe PM you about it if i need more help.

Aquw VettelS 776 · **Posted:** September 10th, 2009, 3:27 pm

If this is indeed a virus or trojan of some sort, EVEN IF there seems to be no other problems, I personally would reinstall the OS.

I wouldn't want to risk harbouring dangerous software of my computer. And as far as I'm concerned, the apparent lack of anything else other than this error message would make me even more worried. At least with a lot of viruses you can see what it's doing. With this, you have no idea.

My verdict is reinstall the OS, unless you can find out pretty definitely that it's not actually a virus. Better safe than sorry.

hummerwar921 · **Posted:** September 10th, 2009, 3:39 pm

Reinstalling the OS keeps all the previous files.

Jason · **Posted:** September 10th, 2009, 6:02 pm

Whatever it was has been removed, I am sure of that.