Logonui.exe file?

[jammin]

Everytime I run my Adware 6.0 and Norton Antivirus, it picks up a file called "logonui.exe" as some type of threat. I use Windows XP SP2.

Neither Norton Antivirus or Adware 6.0 is able to delete the file.

I did a search of my hard drive and I was able to find the file in "C:WINNTSYSTEM32LOGONUI.EXE "

However, when I place the mouse over this executable file, a dialog box comes up that says "Windows Logon UI. Company: Microsoft Corporation Verion 6.0"

I did a quick search on the internet which revealed that this is a Windows XP logon executable file which I guess I need. Why would such a file appear as a "threat" under both Adware and Norton Antivirus?

I further researched this some more and read somewhere that certain spyware companies release a file with a similar name making it appear to look as if a windows logon executable file when it is infact spyware.

This even made it more confusing as to what I should really do.

Any thoughts? I don't want to delete it unless I am absolutely sure its not a file my computer needs to operate. My gut feeling is telling me its a false positive and I should leave the file as is.

[Rebycman]

Re: Logonui.exe file?

Its possible this file was infected by a virus. *hmm* this is part of the windows login and is a system file which means you do need it.

I just did a google search on it and came up with an option for ya. Before I go into that let me start with saying you should backup your old file before you do ANYTHING.

To replace this file you can download replacement logonui.exe. You can find them on the following website: http://www.themexp.org/

Instructions: (copy from themexp.org)

The simplest and safest way to change a login screen is to use a quality third-party application such as Style XP 2.0 from TGTSoft or Logon Loader by Daniel Milner. If you feel comfortable doing it manually though, here are some excellent instructions courtesy of bFarber Logins.

1. In Explorer, browse to C:WindowsSystem32 and find the file named "logonui.exe".
2. Rename "logonui.exe" to "logonui.exe.bak". This way if anything messes up...you have a backup.
3. Place your new login in C:WINDOWSSYSTEM32 and rename it to logonui.exe.
4. That's it! Now when you log off your new login screen will be there.

Once you get it sorted out you can go back and delete the old file. Be sure to reboot a few times before/after to ensure you dont screw something up [img]/forums/images/graemlins/wink.gif[/img]

Regards,

-Reby

[jammin]

Re: Logonui.exe file?

Thanks for the advice.

I will try it soon.