Backddor.cli virus... winlogon.exe not found error

[DoubleHelix747]

Hi there, my laptop running windows xp got infected by the trojan backdoor.cli as well as some generic virus labelled bloodhound by norton antivirus. I have cleansed the laptop using norton antivirus with laptop in the safe mode. I also manually deleted all references to winlogIn.exe file as well as the trojan payload file in the registry that were not removed by norton. However, now everytime I boot my computer I get an error saying winlogOn.exe file mentioned in registry not found. Search proves this. I did an XP reinstall hoping everything will be taken care off but the problem persists.

Qs 1) How do I get my winlogon.exe file back?

Qs 2) How can I be sure that norton really did clean this trojan.? The fact that it left the winlogin.exe and the payload file in the registry makes me suspicious. Especially since there are times when the harddrive is working away for no reason and quietens down when I disconnect the network cable.

Note winlogin.exe is creatred by the trojan, I think to replace native window file winlogon.exe.

Thanks.

 

[Aleksandar]

Dude maby i can email my winlogon.exe to you or something so you put it in windows folder from dos?

 

[DoubleHelix747]

Originally posted by: Aleksandar
Dude maby i can email my winlogon.exe to you or something so you put it in windows folder from dos?

Will that work? Isn't the winlogon.exe file unique for each system or is it same for all? what exactly does it do?

If this works, I can just copy it from one of my other computers. But thanks for the offer though, I really appreciate you taking out the time to reply.

 

[Aleksandar]

yah i think it will work and the winlogon.exe just logs you on as admin or some user i know this will work
there are a lot of windows xp cracks that replace that winlogon.exe so windows wont search for activation.
give it a try