Archived from groups: microsoft.public.windowsxp.security_admin (
More info?)
Startup Name Microsoft System Checkup
libsysmgr.exe is added by the SDBOT-CAF WORM!
http://startup.iamnotageek.com/srch-libsysmgr.exe.html
Startup Name NT Logging Service
Syslog32.exe is added by the DONK.B or DONK.C or DONK.L or DONK.M or DONK.O
WORMS!
http://startup.iamnotageek.com/srch-Syslog32.exe.html
Update your antivirus software and run a full system scan.
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In news:11989C31-D985-45F7-808C-8350EB19E77E@microsoft.com,
CCL <CCL@discussions.microsoft.com> hunted and pecked:
> hi you would appear to be correct about this login service..it's
> listed in the system configuration utility and seems to be associated
> with startup items libsysmgr.exe and syslog32 both on the system32
> folder. have disabled them and will now try to disinfect the system
> THANKS
>
> "Wesley Vogel" wrote:
>
>> Maybe you could explain more about the ntlogin service. Never heard
>> of it.
>>
>> winlogon.exe is Windows NT Logon Application.
>> [[This is the process responsible for managing user logon and logoff.
>> Moreover, Winlogon is active only when the user presses
>> CTRL+ALT+DEL, at which point it shows the security dialog box. ]]
>>
>> lsass.exe is Net Logon service.
>> [[Used for logging onto a Domain Controller. This service is not
>> required on a standalone system, or for a "home" network.]]
>>
>> [[Presence of file ntlogon.exe in your system means that your
>> computer is infected with keylogger TrojanSpy.Win32.Agent.]]
>>
http://www.2-files.com/filename/ntlogon-exe
>>
>> --
>> Hope this helps. Let us know.
>>
>> Wes
>> MS-MVP Windows Shell/User
>>
>> In news:1658FE39-9144-4DDE-80C1-40E52CA925A3@microsoft.com,
>> CCL <CCL@discussions.microsoft.com> hunted and pecked:
>>> in safe mode it's fine..in normal mode it constantly tries to
>>> connect to a series of sites..in no particular order...this in turn
>>> interferes with normal programs..if you try to run them, they flash
>>> up and then disappear. this applies to the run command too.
>>> If I go into services and disable ntlogin service, the problem
>>> disappears...but don't i need this service for normal functioning?
>>> --
>>> would be grateful for any help, especially if it's in idiotproof
>>> format.
Facebook
Twitter
Instagram