system of Comodo internet security keeps report this file as a Trojan horse, winlogon.exe

Basically, whenever my computer is turned on and at different times of the day, my comodo internet security keeps report this file as a Trojan horse, press on to clean but always reports the same custom let me remove it so is it true or just a false positive to be added to my files of trust?

Sometimes these sites to work, but they seem to be OK now (I just tried both).

If your system seems to be starting and running OK and Comodo is complaining, it seems that your Comodo can be afflicted and considered a 'false positive '.  Make sure you have the latest version and definitions for your Comodo.

If Comodo thinks the file is afflicted, and if you leave Comodo to delete the file, your system unbootable, and you will see a message like this on the next reboot:

STOP: c000021a {fatal system error}
The Windows logon process ended unexpectedly with the status of 0xc0000034 (0 x 0000000 0000000 x 0).
The system has been shut down.

It is usually not too difficult difficulty, but I would take measures to ensure that this never happens in the first place!

Tags: Windows

Similar Questions

  • Comodo Internet Security is?

    Comodo Internet Security keeps popping up on my computer.  Can you tell me what it is and if it's safe or a virus?  I t interferes with my work

    Comodo Internet Security keeps popping up on my computer.  Can you tell me what it is and if it's safe or a virus?  I t interferes with my work

    It is a reputable program. http://antivirus.Comodo.com/ http://en.wikipedia.org/wiki/Comodo_Internet_Security 

    Read the popup and do what he says.

    teengeek.freehostingcloud.com

  • Webroot security found a file that is a threat to my system. Serial.sys Can I delete this file and download a new serial.sys or is this a file I do not have?

    My malwarebites program keeps blocking a signal out to various websites... When I installed and ran the program of webroot it detected the file serial.sys as a threat similar to my system.  I'm assuming that this file is probably infected.  I guess my first question is whether or not, it is a necessary file?

    If it is can I delete and download a new serial.sys?

    Thank you very much

    Hi John Sw140,.

    Microsoft Windows serial should be located in the folder C:\Windows\System32\drivers . This file serial.sys is safe and should not be considered a threat to the computer. The serial.sys process is part of Microsoft Windows and should not be removed or prevented from loading at each loading Windows. This could cause errors or Windows to stop working.

  • Is this file - {b0e20f13-746f-b0a8-ad14-2c6a2b158ff7} .exe - file legitimate Microsoft?

    This file has recently appeared in my start - it's in c:\Program Data\Microsoft on my desktop running Windows 7.

    I think it appeared late December - but recently I get the error message at the start and the program closes: it does not seem to cause problems.

    I noticed the file only after I had a problem following an unsolicited to update for my McAfee - which seems to fail and the people support he took off and could not reinstall it.  The computer began to crash and it seemed to be a display driver problem, I updated the driver - the computer is not not crashing, but I just thought that he may have followed what the above file has begun to show an error message.  I have not tried to reinstall Mcafee-I installed Security Essentials while I cover.

    I would really like to know if it is a legitimate program or not because I'm afraid it might be malware

    any help appreciated

    Hello

    I would like to apologize for the delay in responding.

    This issue could be caused due to any third party/app program. I would like to know some information about this problem so that we can help you further.

    1. have you made changes on the computer before this problem?

    2. What is the full error message that you receive when you start?

    I would suggest trying the following methods and check if it works for you.

    Method 1:

    Start safe mode and check if the problem persists. If the problem does not persist, then we can confirm that this problem is due to any third-party program. To check which program is causing this problem, we will place the computer in a clean boot state.

    Step 1: Start the computer in Mode safe.

    See the following article from Microsoft Help to start safe mode.

    http://Windows.Microsoft.com/en-us/Windows/Start-computer-safe-mode#start-computer-safe-mode=Windows-7

    Step 2: Put the computer in a clean boot state.

    See the following Microsoft Support article to place the computer in a clean boot state.

    http://support.Microsoft.com/kb/929135 
    Note: After the boot minimum troubleshooting step, see the "How to reset the computer to start as usual after a clean boot troubleshooting" section in the link provided to return the computer to a Normal startup mode.

    Method 2:
    Try the procedure described in the following Microsoft Help article and check if your computer is infected with a virus or not. This article consists of the steps to find if your computer has a virus infected or not.
    http://Windows.Microsoft.com/en-us/Windows/how-remove-computer-virus#how-remove-computer-virus=Windows-7

    If it detects a virus on your computer, and then try the steps in the following Microsoft Help article.
    http://Windows.Microsoft.com/en-us/Windows/how-remove-computer-virus#how-remove-computer-virus=Windows-7

    Please reply with the status of the issue so that we can better help you.

  • I received a message that says: attention! The security of Email Hotmail system discovered a potential virus or unauthorised code (for example, a Trojan horse) in an email sent to you. »

    It was followed by "Hotmail.livelogin - USA.com sent a security warning and wants me to download this msupd271401.exe file.

    Then when I tried to "close" without downloading it (3 x), I noticed it was being downloaded in my files - I did not open it and as soon as I saw what is happening that I sent to the basket that emptied then as well. Any suggestions on the best follow procedure to do now, what to do next? With the help of MAC Book PRO...

    If it was in your email, then right-click and mark it as Spam or junk e-mail. However, your describtion, I guess it was in a Web page. If that were the case, close it or cancel download would be the best way and also remove the trash.

    Make sure that you run anti-virus updated.

    You can try to test your system by running the full scan:

    http://OneCare.live.com/site/en-us/default.htm

  • I am trying to download itunes. I get the guest (your security settings allow this file to download).

    I have lowered the security settings, popup blocker and firewall lowered to re - try and have the same thing happen. Help, please! Thank you.

    XP forums:

    http://social.answers.Microsoft.com/forums/en-us/category/WindowsXP

    Link above is for XP Forums.

    There is a list of the different Forums XP to the link above to help you.

    You get the help you need there.

    Here is the Vista Forums.

    See you soon

    Mick Murphy - Microsoft partner

  • After an automatic update of the El Capitan, initialize to send diagnostic request. Is this real or a Trojan horse?

    Auto-installé update for El Cap 10.11.2 12/17 unattended via usual application store auto-updated. When I opened to the top of the standby mode the MacBook was initially white Virgin, then spinning dot gray then the screen asking permission to send diagnostics to Apple and the developers. All looked for real, but it could be a kind of Trojan horse?

    Whether it's a major OS update, such as 10.11.1 to 10.11.2, it is legitimate.

    It will look as if you set partially up the computer again. Should ask you to allow the diagnosis must be sent, and then show a computer small logo that says: "Setting your Mac upward" with a few small "data bars" on the screen. I don't know why Apple did allow you to send diagnostics and set up your mac after each update. I guess they have to ask anytime you install new software to avoid any legal problems.

  • Who is responsible for this file S-1-5-21, bak. How can I remove it entails?

    I have a file C:\$Recycle Bin S-1-5-21-1036034521, as well as 3 other series of numbers or letters, I understand that there is a bak. file. I want to know how to remove/place restriction, do something to prevent this file in my system. This file contains a virus/malware/spyware/hacker, I don't know exactly what. This file has caused me to destroy two windfows CD (XP/Vista) operating systems. I have 8 hard drive I can't use, because whoever it is, has made this possible. I also have three mothers who are inoperationable because of this file. My system has so many back doors, it's unreal. IAt, once I have hadf (Microsoft) help me to try to get rid of what I had. This file name has requested special connections in my system. This file, at the same time, place themselves in the properties, in an area of heavy, in giving himself, special previlages. I even went as far as the evolution of operating systems. I was using Ubuntu, until I realized, that was someone else on my system, not to mention I... This file is the use of systems as a means of entry volume, it also has the system volume jump to Windows XP SP 3, he jumped into other applications. IE Ccleaner, it's how I know. C Cleaner is on 4.39 kbs, when I check the size of the file c cleaners, he says now its 4 439 MB. You can indicate what sound files are been, because the file sizes have changed. Finally, I have three towers of substitute, to replace those that are damaged tyemporarily. I would like to place one in operation. But until I can figure out what to do about this file, I am skeptical. My system has been down for almost six months. My question is why this issue requires special log ons? Are you the microsft this? If it's you, what I've done wrong.  Once I get my system running again, if I need help, can someone help me if I find this file again. I'm not the only one who has this problem with someone trying to use the special connection and the same file name. It started about six months ago. I've been a problems, real player was suspended, then other programs started hanging. So I have sent e microsoft for assistance, which I thought was microsoft. Was real someone else. I have authorized him to my computer, it then my, life has been (). You know the word I want to use. Help, please!

    Hello

    1. When do you have the problem started? Have you added or deleted programs?

    2 have you tried to do a system restore to an earlier point of time?

    Try to run Microsoft Safety Scanner for any malware or spyware infection and check if it helps.

    http://www.Microsoft.com/security/scanner/en-us/default.aspx

    Note: the Microsoft Safety Scanner expires 10 days after being downloaded. To restart a scan with the latest definitions of anti-malware, download and run the Microsoft Safety Scanner again.

    I also suggest you to check the properties of the file.

  • Winlogon.exe.MUI file system or malware?

    In the previous post the discussion was the performance permanently winlogon.exe.

    I'm deeper, found a " " "winlogon.exe.mui" file in system32\ subfolder... and some members of the community wrote this is a malware, > .
    "winlogon.exe.mui is known as malware, installed by a rogue anti-spyware/AV program.

    But unforunately I have not yet replied to explain or confirm its 100% true.
    I is not got a lot of software, I have just the standard + a couple of soft professional, they are harmful to you. Also the driver software came with the computer, but also not much and I didn't install all his tricks for further assistance. Thus, none of the additional applications or speedupmypc etc.
    If I it scan with avira and the Malwarebytes mentioned above, they find nothing.
    Would appreciate any help
    Thanx.

    Hello

    The winlogon.exe.mui is a legitimate system file. You will see thousands of these files on the system.

    Explanation:

    Unlike previous versions of Windows, the code of the binary files that are used to build Windows 7 are neutral language. This means that at least one Language Pack must be installed which sets the Basic language for this version of Windows 7. The basic language could not be uninstalled.

    These. MUI files are the language pack files.

    The following article explains how this works.

    In Windows 7 Language Packs:

    http://msdn.Microsoft.com/en-us/goglobal/ee461121

    As long as you have used your antivirus program to scan the file, it should be OK.

    Concerning

  • Does not not the user system for winlogon.exe?

    In the Task Manager for the admin, winlogon.exe show the SYSTEM user account, but

    In the task for the user account manager, winlogon.exe displays no user (white) at all.

    I would like to know if it is normal or pc is infected by a virus.

    Does anyone have any suggestions?
    Thanks in advance for your suggestions

    This is perfectly normal.

  • What is the purpose of this file?

    Last week, I had a nasty virus and had to reinstall WIN XP.  I always save files to download for my programs and PhotoshopElements_8_Mul.exe had saved and reinstall PSE 8 without any problem.  I also found a PhotoshopElements_8_Mul.7z file of course I save it for some reason any downloading of PSE 8.  My question is: "what is the purpose of this file?  Am I supposed to install it? HOW?

    Thanks in advance

    Files whose extension is '7z' are of type 7-zip compressed files.  (Similar to zip files).  You no longer need this file because it contains the 'PhotoshopElements_8_Mul.exe' file (compressed, of course).

    Ken

  • The error message is im like error: 0xC004D401 Description: the security processor reported a system file mismatch error. After doing the update of windows Vista.

    There is a problem with your license so notifications will no longer appear
    You will no longer receive communications, including those concerning your license or activation.
    To try and fix this problem click on one of the links below.
    Error: 0xC004D401
    Description:
    The security processor reported a system file mismatch error.

    Vista Service Pack 2 (SP2) is installed?

    ==========================

    1. Download this diagnostic tool, save it to your desktop, then right click on the saved file and select run as administrator to run the utility: http://go.microsoft.com/fwlink/?linkid=56062

    2. once the race completed, click the continue button, and then click the copy button (on the Clipboard).

    Note: You can open a new file in Notepad, paste the contents of the Clipboard in it & keep for future reference.

    3. start your own, new thread in the following Microsoft Genuine Advantage forum and paste the results of the diagnosis of MGA tool in your post, and a clear description of your problem:

    http://social.Microsoft.com/forums/en-us/genuinevista/threads

    4 Troubleshooting specialist will analyze the data and recommend an appropriate solution.

  • When I try to access Microsoft, my Internet Security provider tells me that this is a site without certificate - seriously? Microsoft may not have a certificate?

    Very frustrated and get VERY annoyed the monopoly total Microsoft have my PC. The system they have is beyond a joke. To change the password sign - "for my own safety', I need to enter the last 4 digits of my cell phone - to receive a 'code' to continue. Sometimes I don't get a code - OR I get an error message! Seriously? I could get into Fort Knox easier! I can't access my pc when I turn it on until I have enter the password - I LIVES ON MY OWN - that is trying to access my pc - the goldfish? I need to log in - but Microsoft have totally taken over my computer and I can't cancel the password. When I try to access Microsoft, my Internet Security provider tells me that this is a site without certificate - seriously? Microsoft may not have a certificate?

    Hi RF R,.

    Frustrating indeed sounds and it looks to me that you have two step of checking enabled for your Microsoft Account. Here are some instructions on how to disable it:

    On the two-step verification - Windows help

    I hope this helps!
    David

  • I have something that says ' XP internet Explorer warning: visiting this site may pose a threat to your system ' and I want to get rid of it

    I've got something that says it's "XP Internet Security 2012 Alert and also Firewall alert". It won't let me take my Internet and says the programs I'm trying to get to pose a security risk — software malware, worms, Trojans, hackers etc... It does not interfere with things like my Microsoft Works or photographs, just at the moment where I'm trying to go up on my browser. I have no idea how to get rid of him, he wants me to buy a product that I didn't need and I really get annoyed because I rely on my computer for many things. Anyone know what I can do?

    First of all, the program asks you to purchase their product is a scam - it's actually the problem and a form of malware.

    Rogue Security Software | False Virus Alerts. Scareware:
    http://www.Microsoft.com/security/PC-security/antivirus-rogue.aspx

    The two programs are probably tied or one-in-the-same problem, see

    How to remove XP Internet Security 2012?

    How to remove System Security Firewall Alert?

    Then you will need to run a full scan with your programs anti-virus and anti-spyware to ensure that you have been able to remove the malicious software and you have no other. I would also say to running analyses by the following:

    Microsoft safety scanner
     http://www.Microsoft.com/security/scanner/en-us/default.aspx

    Malwarebytes
     http://www.Malwarebytes.org/

    SUPERAntiSpyware
     http://www.SUPERAntiSpyware.com/

    Microsoft Safety Scanner is a free tool to scan on demand and ends 10 days after it is downloaded.

    Malwarebytes and SUPERAntiSpyware are also free and are excellent tools for on-demand scan.

    I hope this helps.

  • Vista can only boot mode safe after updating Panda Internet Security installed on the system

    Original title: VISTA can only successfully starts in Mode safe. When you try the System Restore restarts in Normal Mode and restore failed "Volume Shadow Copy Service used by the system restore does not work"

    Problem started (I think) after that PANDA INTERNET SECURITY did a update and says a restart is required (29/09/2010). System could not restart normally. Started, but virtually nothing loaded and couldn't do anything.

    In Safe Mode, first mistake was a Protection Exception for TPSrv.exe (a PANDA executable)

    Tried to do a Safe Mode system restore to point before PANDA update (28/09/2010). System Restore starts safe mode and then restart in Normal Mode.  After about an hour comes up with error message "Volume Shadow Copy Service used by the system restore does not work. (0 x 81000202) event log.

    I also tried sfc.exe but found no compromise windows

    Hello

    Follow the steps mentioned below.

     

    Method 1:

    Check if the Volume Shadow Copy service is started. Follow the steps mentioned below.

    a. click the Start button and in the search box, type in: Services.

    b. press "Enter" to open the Services window.

    c. find related services that are listed above and check the status (on the road) and the Startup Type (automatic).

    d. double-click the service to change the status of started and set the startup type to automatic.

    Try to do a system restore and check.

    Method 2:

    Since you are able to boot into safe mode, I suggest you perform a clean boot and disable all non-Microsoft applications, then boot normally and control.

    To perform a clean boot follow the steps mentioned in the link given below.

    How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7

    http://support.Microsoft.com/kb/929135

    Note: Follow step 7 to start the computer in normal startup.

    Method 3:

    If you think it's a Panda Security software that causes this problem then, I suggest to uninstall Panda security of the system and check if you're able to boot normally.

    http://www.pandasecurity.com/homeusers/support/card?ID=23010&IdIdioma=2

    Thanks and regards.

    Thahaseena M
    Microsoft Answers Support Engineer.
    Visit ourMicrosoft answers feedback Forum and let us know what you think.

Maybe you are looking for

  • Why is the box allow cutting down

    Very annoying to allow guard falling on almost all the sites I. I then click on it and it keeps constantly falling back down.I can click it a dozen times and it just re appears. Ready to drop Firefox, even if I go to options and uncheck the pop ups,

  • Cannot install driver LAN on my Satellite A100-036

    I change my Satellite A100 - 036 operating system for Windows XP SP2 home edition and the ethernet controller not installed it.I downloaded almost all the LAN driver on the Web from Toshiba site and it will not install. Someone help me pls?

  • field of password missing Mac mail

    Mac mail, accounts, lack of field of password for all IMAP e-mail accounts. I've updated the Yahoo password online, how to change password in mac mail?

  • 2014 mac mini can play a sound in my sound bar?

    Hello and thanks in advance. I use my Mac mini to 2014 as a HTPC, I'm having the hardest time trying to get my mini play sounds through my bar of the Harmon Kardon SB16. Currently I have the mini connected via HDMI to the tv and optical ranging from

  • How to convert java ' instanceof' to Labview?

    Dear Sir I would use a comparison function that is 'instanceof' in java, but I don't know how to get a similar function in labview OOP (I know normal type, but for the classes that I don't know). In my project, I have 2 classes, one is the parent (Pa