If you have a virus in Winlogon what can you do?

I hate winlogonBoot into safe mode with CMD, since Windows isn't running you can delete the .dll that's running on winlogon. If you know the path to the file that you need to delete, good - if not, you should be able to get that info from your HJT scan.

Also you can use Knoppix, a distribution that boots and runs completely from CD and can read/write to ntfs.

Also you can try killing the winlogon process and delete the worm, without usig any boot disk or recovery console.

Read step by step istructions here:

http://snsays.com/26/removing-winlogon-virus/

or use malwarebytes antimalware to remove the winlogon

http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.HTML?tag=mncol

Edit: Or download anti virus called "avast anti virus" doesn't matter pro version or the free version hes good at free almost as the pro one.

when you finished downloading and installing.. just time a boot scan then it will restart your computer and start scaning for viruses and malwares from boot before Windows starts which means no dlls loaded and no proccess started then the anti virus will remove the intruder.

It worked for me perfectly my anti virus always saves my me.