egimatic

WINLOGON.EXE-32C57D49.pf ?

3 posts in this topic

Hello,

I've got a problem i've got 2 winlogon.exe files one called WINLOGON.EXE-32C57D49.pf based in the Prefetch folder. And one called winlogon.exe based in the system32 folder. I know that the one in the system32 is save, but I don't trust this file WINLOGON.EXE-32C57D49.pf I used a scanner and it says it was save but some people it's not so i'm not sure anyone can tell me if it's save?

Thank you very much!

Share this post


Link to post
Share on other sites

If you believe you are infected, you can always seek help from Malware Experts.

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

Thank you. :)

Share this post


Link to post
Share on other sites

Hi

These may be of help to you.

http://windows.microsoft.com/en-US/windows-vista/What-is-the-prefetch-folder

http://blogs.msdn.com/b/ryanmy/archive/2005/05/25/421882.aspx

XP systems have a Prefetch directory underneath the windows root directory, full of .pf files -- these are lists of pages to load. The file names are generated from hashing the EXE to load -- whenever you load the EXE, we hash, see if there's a matching (exename)-(hash).pf file in the prefetch directory, and if so we load those pages.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.