+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 23
Windows Thread, Strange error occuring. in Technical; Hello all. I'm getting a spate of an single error occuring with the winlogon.exe file, as pictured below. It's started ...
  1. #1

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,037
    Thank Post
    209
    Thanked 425 Times in 306 Posts
    Rep Power
    144

    Strange error occuring.

    Hello all.

    I'm getting a spate of an single error occuring with the winlogon.exe file, as pictured below. It's started this morning on a couple of machines, and seems to be spreading, which is worrying me as I can't find out what's causing it!

    I'm immediatly thinking virus, but sophos is reporting nothing and is completely up-to-date.

    I've seen 12 machines now with the error, and I expect I'm going to find more as the afternoon progresses.

    Can anyone help, Google hasn't been much help so far!!

    Cheers,

    Mike.

    P.S I should add that clicking either button causes the machine to shut down and reboot, then the error occurs again. We've solved it by re-imaging all the machines affected so far, but I'm still puzzled as to what's causing it!
    Attached Images Attached Images

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,802
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Strange error occuring.

    Do you use any software that replaces the MSGINA with its own (Citrix or Netware for example?)

  3. #3

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,037
    Thank Post
    209
    Thanked 425 Times in 306 Posts
    Rep Power
    144

    Re: Strange error occuring.

    Nope, completely generic network from that point of view. We do run ranger as you can see, but that doesn't modify that part of windows as far as I know??

  4. #4

    Join Date
    Nov 2006
    Posts
    547
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Strange error occuring.

    daft question, have you checked the services.

  5. #5
    Guest

    Re: Strange error occuring.

    Are you running WSUS? Could ba an update that the machines are recieving?

  6. #6

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,037
    Thank Post
    209
    Thanked 425 Times in 306 Posts
    Rep Power
    144

    Re: Strange error occuring.

    I can't get onto any affected machines to check services or logs etc.

    Yes we are running WSUS, and that's a good point because machines are set to update on a thursday, meaning most updates are applied at the next reboot, which would have been this morning.

    Cheers,

    Mike.

  7. #7

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,037
    Thank Post
    209
    Thanked 425 Times in 306 Posts
    Rep Power
    144

    Re: Strange error occuring.

    Just checked our WSUS, and the latest updates in that are dated 08/05/2007 which means they would have been installed last week. There's been no updates downloaded this week, so it's very unlikely to be this causing the problem.

    Mike.

  8. #8

    Join Date
    Nov 2006
    Posts
    547
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Strange error occuring.


  9. #9

    Join Date
    Nov 2006
    Posts
    547
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Strange error occuring.

    can you get in the affected system through safemode and replace the effected files?

  10. #10

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,037
    Thank Post
    209
    Thanked 425 Times in 306 Posts
    Rep Power
    144

    Re: Strange error occuring.

    it does the same in safemode!

    I can get onto the machines hdd by using \\machinename\c$\ and look at the files, but I can't do anything with the winlogon.exe file, as it's in use of course! So far I've not had any more reports, so maybe it's just one of those things.

    I've had it suggested that some of the kids may be causing it, as there's been a spate of kids attempting to 'hack' the system recently. Again the problem is I've no idea how they might be doing it, or even what they might be doing to the system to cause this error!

    I guess I'm just going to have to keep monitoring the situation.

    Mike.

  11. #11

    Join Date
    Jun 2006
    Location
    Kendal
    Posts
    85
    Thank Post
    2
    Thanked 15 Times in 11 Posts
    Rep Power
    19

    Re: Strange error occuring.

    do you have anything running that might be attempting to remove a virus/spyware.

    Just read this, you may want to too...

    http://www.lavasoftsupport.com/index.php?showtopic=3013

  12. #12

    Join Date
    Nov 2006
    Posts
    547
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Strange error occuring.

    Do you have any key loging software that can flash on yopur screen certain words a user has typed in to google i.e. hack. then you could monitor them. also do they have access to removable storage? do a search for .bat files etc in all user directories.

    Im sure there is software that you can boot from with ntfs rather than fat32 so you could then restore the .exe and any other related files that are causing the problem. otherwise suppose you would have to send a image to it

  13. #13

    Join Date
    Sep 2006
    Location
    Kettering, Northamptonshire
    Posts
    73
    Thank Post
    0
    Thanked 2 Times in 1 Post
    Rep Power
    16

    Re: Strange error occuring.

    What about plugging the hard disk into another machine to restore the damaged file?

    Robert

  14. #14

    Join Date
    Nov 2006
    Posts
    547
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Strange error occuring.

    snap, just thaught that lol

  15. #15

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,630
    Thank Post
    890
    Thanked 1,314 Times in 798 Posts
    Blog Entries
    1
    Rep Power
    441

    Re: Strange error occuring.

    Just FYI people, I believe Ranger etc link into MSGINA as its the only way I believe you can control CTRL+ALT+DEL. I would remote Ranger of the client and see if it goes away then. What AV you got as well?

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Upgraded to 2d design v2 - now an output error occuring
    By woody in forum Educational Software
    Replies: 7
    Last Post: 5th December 2007, 02:52 PM
  2. Strange win 2k error - failure to logon.
    By Domino in forum Wireless Networks
    Replies: 2
    Last Post: 5th July 2007, 01:36 PM
  3. Replies: 14
    Last Post: 11th October 2006, 04:20 PM
  4. Strange Error
    By wesleyw in forum Learning Network Manager
    Replies: 9
    Last Post: 28th June 2006, 07:38 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •