Last night my computer got infected by some Trojan virus after listening on a
song. I closed all applications and ran my spyware and anti virus programs
right away. I removed all the infected files to the vault. Now every time I
restart I receive this message " Windows cannot find "logon.exe". Make sure
you typed the name correctly and try again...". I may have moved the
infected file to the vault. How can I fix this? I didn't get the Windows XP
CD when I bought this computer from surplus. Thank you.

The file 'logon.exe' was probably the name of the quarantined virus, but it is still
being called to run by some entry in the registry but is no longer present in it's
original location - so you get an error message.

"Start Menu" > "Run" > msconfig.exe

...and go to the "Startup" tab.

"Logon.exe" should be listed there - simply "uncheck" it and the error message should
stop assaulting you.

==

Cheers, Tim Meddick, Peckham, London. :-)




"artsami2" <artsami2@discussions.microsoft.com> wrote in message
news:C05D98B9-3E77-4E6D-98CC-FD41539AB4F3@microsoft.com...
> Last night my computer got infected by some Trojan virus after listening on a
> song. I closed all applications and ran my spyware and anti virus programs
> right away. I removed all the infected files to the vault. Now every time I
> restart I receive this message " Windows cannot find "logon.exe". Make sure
> you typed the name correctly and try again...". I may have moved the
> infected file to the vault. How can I fix this? I didn't get the Windows XP
> CD when I bought this computer from surplus. Thank you.

P.S. "Logon.exe" is not a valid Windows XP Operating System file.

==

Cheers, Tim Meddick, Peckham, London. :-)




"Tim Meddick" <timmeddick@gawab.com> wrote in message
news:%23jIaq9IHKHA.1336@TK2MSFTNGP05.phx.gbl...
>
> The file 'logon.exe' was probably the name of the quarantined virus, but it is
> still being called to run by some entry in the registry but is no longer present in
> it's original location - so you get an error message.
>
> "Start Menu" > "Run" > msconfig.exe
>
> ..and go to the "Startup" tab.
>
> "Logon.exe" should be listed there - simply "uncheck" it and the error message
> should stop assaulting you.
>
> ==
>
> Cheers, Tim Meddick, Peckham, London. :-)
>
>
>
>
> "artsami2" <artsami2@discussions.microsoft.com> wrote in message
> news:C05D98B9-3E77-4E6D-98CC-FD41539AB4F3@microsoft.com...
>> Last night my computer got infected by some Trojan virus after listening on a
>> song. I closed all applications and ran my spyware and anti virus programs
>> right away. I removed all the infected files to the vault. Now every time I
>> restart I receive this message " Windows cannot find "logon.exe". Make sure
>> you typed the name correctly and try again...". I may have moved the
>> infected file to the vault. How can I fix this? I didn't get the Windows XP
>> CD when I bought this computer from surplus. Thank you.
>

"Tim Meddick" <timmeddick@gawab.com> wrote in message
news:#jIaq9IHKHA.1336@TK2MSFTNGP05.phx.gbl...
>
> The file 'logon.exe' was probably the name of the quarantined virus, but
> it is still being called to run by some entry in the registry but is no
> longer present in it's original location - so you get an error message.
>
> "Start Menu" > "Run" > msconfig.exe
>
> ..and go to the "Startup" tab.
>
> "Logon.exe" should be listed there - simply "uncheck" it and the error
> message should stop assaulting you.
>
> ==
>
> Cheers, Tim Meddick, Peckham, London. :-)
>
>
>
>
> "artsami2" <artsami2@discussions.microsoft.com> wrote in message
> news:C05D98B9-3E77-4E6D-98CC-FD41539AB4F3@microsoft.com...
>> Last night my computer got infected by some Trojan virus after listening
>> on a
>> song. I closed all applications and ran my spyware and anti virus
>> programs
>> right away. I removed all the infected files to the vault. Now every
>> time I
>> restart I receive this message " Windows cannot find "logon.exe". Make
>> sure
>> you typed the name correctly and try again...". I may have moved the
>> infected file to the vault. How can I fix this? I didn't get the
>> Windows XP
>> CD when I bought this computer from surplus. Thank you.
>


MSCONFIG should only be used to diagnose program issues. It should never be
used to totally and permanently stop a program from running at startup. The
proper way to stop a startup program is to find it's location using the
msconfig program to locate the place the errant program is starting from.
See my post to the OP.

Why not?

==

Cheers, Tim Meddick, Peckham, London. :-)




"LVTravel" <none@nothere.com> wrote in message
news:OW6G$XJHKHA.4168@TK2MSFTNGP05.phx.gbl...
>
>
> "Tim Meddick" <timmeddick@gawab.com> wrote in message
> news:#jIaq9IHKHA.1336@TK2MSFTNGP05.phx.gbl...
>>
>> The file 'logon.exe' was probably the name of the quarantined virus, but it is
>> still being called to run by some entry in the registry but is no longer present
>> in it's original location - so you get an error message.
>>
>> "Start Menu" > "Run" > msconfig.exe
>>
>> ..and go to the "Startup" tab.
>>
>> "Logon.exe" should be listed there - simply "uncheck" it and the error message
>> should stop assaulting you.
>>
>> ==
>>
>> Cheers, Tim Meddick, Peckham, London. :-)
>>
>>
>>
>>
>> "artsami2" <artsami2@discussions.microsoft.com> wrote in message
>> news:C05D98B9-3E77-4E6D-98CC-FD41539AB4F3@microsoft.com...
>>> Last night my computer got infected by some Trojan virus after listening on a
>>> song. I closed all applications and ran my spyware and anti virus programs
>>> right away. I removed all the infected files to the vault. Now every time I
>>> restart I receive this message " Windows cannot find "logon.exe". Make sure
>>> you typed the name correctly and try again...". I may have moved the
>>> infected file to the vault. How can I fix this? I didn't get the Windows XP
>>> CD when I bought this computer from surplus. Thank you.
>>
>
>
> MSCONFIG should only be used to diagnose program issues. It should never be used
> to totally and permanently stop a program from running at startup. The proper way
> to stop a startup program is to find it's location using the msconfig program to
> locate the place the errant program is starting from. See my post to the OP.

"artsami2" <artsami2@discussions.microsoft.com> wrote in message
news:C05D98B9-3E77-4E6D-98CC-FD41539AB4F3@microsoft.com...
> Last night my computer got infected by some Trojan virus after listening
> on a
> song. I closed all applications and ran my spyware and anti virus
> programs
> right away. I removed all the infected files to the vault. Now every
> time I
> restart I receive this message " Windows cannot find "logon.exe". Make
> sure
> you typed the name correctly and try again...". I may have moved the
> infected file to the vault. How can I fix this? I didn't get the Windows
> XP
> CD when I bought this computer from surplus. Thank you.

If this program needs to be removed from startup see the below information:

Program initiation on startup is controlled by various locations in Windows.

Using an administrator account start Windows Explorer then go to
1. Documents and Settings\All Users\Start Menu\Programs\Startup to find the
program that is starting. If located delete the program's shortcut.

2. Perform the same for all available ... Settings\username\ .

If you still haven't found the program click Start, Run, type Regedit and
hit enter. Navigate to
HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/Current version/Run and see if
the program is there.

Some programs are also started in HKEY_CURRENT_USER/..... as continued as
above.

Still can't find it click the top of the listing (Computer) in Registry
Editor started above. Click Edit, Find and type logon.exe, click Match
whole string only and then click find. It should find any instances of any
key with it's full phrase. Ensure that only the full phrase shows and it is
not part of a phrase (I.e., winlogon.exe.) If full name you can delete the
entire key.

If you just want to disable it for one time (and also an easier way of
finding where the program is starting from) you can click Start, Run, type
in MSCONFIG and hit enter. Click the startup tab, find the program and undo
it's check box. This should be used for a one time boot only and not a fix
for the startup program.

To find out where it is started from, find the program and then drag the
sizing line at the top right edge for the location heading to the right.
You can repeatedly drag the sizing line if more space is needed and then a
scroll bar at the bottom will appear.

Hope this helps, let us know.

"Tim Meddick" <timmeddick@gawab.com> wrote in message
news:#AVHCdJHKHA.1376@TK2MSFTNGP02.phx.gbl...
> Why not?
>
> ==
>
> Cheers, Tim Meddick, Peckham, London. :-)
>
>
>
>
> "LVTravel" <none@nothere.com> wrote in message
> news:OW6G$XJHKHA.4168@TK2MSFTNGP05.phx.gbl...
>>
>>
>> "Tim Meddick" <timmeddick@gawab.com> wrote in message
>> news:#jIaq9IHKHA.1336@TK2MSFTNGP05.phx.gbl...
>>>
>>> The file 'logon.exe' was probably the name of the quarantined virus, but
>>> it is still being called to run by some entry in the registry but is no
>>> longer present in it's original location - so you get an error message.
>>>
>>> "Start Menu" > "Run" > msconfig.exe
>>>
>>> ..and go to the "Startup" tab.
>>>
>>> "Logon.exe" should be listed there - simply "uncheck" it and the error
>>> message should stop assaulting you.
>>>
>>> ==
>>>
>>> Cheers, Tim Meddick, Peckham, London. :-)
>>>
>>>
>>>
>>>
>>> "artsami2" <artsami2@discussions.microsoft.com> wrote in message
>>> news:C05D98B9-3E77-4E6D-98CC-FD41539AB4F3@microsoft.com...
>>>> Last night my computer got infected by some Trojan virus after
>>>> listening on a
>>>> song. I closed all applications and ran my spyware and anti virus
>>>> programs
>>>> right away. I removed all the infected files to the vault. Now every
>>>> time I
>>>> restart I receive this message " Windows cannot find "logon.exe". Make
>>>> sure
>>>> you typed the name correctly and try again...". I may have moved the
>>>> infected file to the vault. How can I fix this? I didn't get the
>>>> Windows XP
>>>> CD when I bought this computer from surplus. Thank you.
>>>
>>
>>
>> MSCONFIG should only be used to diagnose program issues. It should never
>> be used to totally and permanently stop a program from running at
>> startup. The proper way to stop a startup program is to find it's
>> location using the msconfig program to locate the place the errant
>> program is starting from. See my post to the OP.
>

Because you are leaving potentially unwanted items in the start menu. Then
if you forget that you defeated the warning window that pops up every time
you uncheck an item in the msconfig that can cause a later issue. It is
always better to permanently get rid of a problem than using a workaround.
I just finished posting to the OP so please look at that.

This KB article http://support.microsoft.com/kb/310560 states that "It does
not manage the programs that run when Windows starts." It goes on to give
information on how to remove startup programs.

Nothing you have said makes be think that there is anything wrong with using
msconfig.exe [only] to remove a startup item.

Regarding your statement : "Because you are leaving potentially unwanted items in the
start menu"

They are *not* left in the start menu at all, but are deleted from it and a reference
is placed under the "msconfig" key should the user want to re-activate the entry at a
later date (undo changes).

This is very useful if you happened to remove the WRONG entry, as a method of undoing
any changes is instantly at hand ("re-checking" the item in msconfig).

Finally, I would never advise anyone to go in and edit the registry directly without
a most basic of warnings

e.g.: -

*Note - Please exercise care when editing the registry, always create a backup and /
or create a 'System Restore' point first.

As editing the registry, if you have had no experience (even with very clear
instructions, which IMO yours are not) is potentially dangerous if you don't know
what your doing.

I would still *always* advise a poster to use "msconfig.exe" to remove an unwanted
startup entry.

For more advanced users - I would refer them to editing the reg-run key[s]
directly...

==

Cheers, Tim Meddick, Peckham, London. :-)




"LVTravel" <none@nothere.com> wrote in message
news:OfD1bkJHKHA.4376@TK2MSFTNGP03.phx.gbl...
>
>
> "Tim Meddick" <timmeddick@gawab.com> wrote in message
> news:#AVHCdJHKHA.1376@TK2MSFTNGP02.phx.gbl...
>> Why not?
>>
>> ==
>>
>> Cheers, Tim Meddick, Peckham, London. :-)
>>
>>
>>
>>
>> "LVTravel" <none@nothere.com> wrote in message
>> news:OW6G$XJHKHA.4168@TK2MSFTNGP05.phx.gbl...
>>>
>>>
>>> "Tim Meddick" <timmeddick@gawab.com> wrote in message
>>> news:#jIaq9IHKHA.1336@TK2MSFTNGP05.phx.gbl...
>>>>
>>>> The file 'logon.exe' was probably the name of the quarantined virus, but it is
>>>> still being called to run by some entry in the registry but is no longer present
>>>> in it's original location - so you get an error message.
>>>>
>>>> "Start Menu" > "Run" > msconfig.exe
>>>>
>>>> ..and go to the "Startup" tab.
>>>>
>>>> "Logon.exe" should be listed there - simply "uncheck" it and the error message
>>>> should stop assaulting you.
>>>>
>>>> ==
>>>>
>>>> Cheers, Tim Meddick, Peckham, London. :-)
>>>>
>>>>
>>>>
>>>>
>>>> "artsami2" <artsami2@discussions.microsoft.com> wrote in message
>>>> news:C05D98B9-3E77-4E6D-98CC-FD41539AB4F3@microsoft.com...
>>>>> Last night my computer got infected by some Trojan virus after listening on a
>>>>> song. I closed all applications and ran my spyware and anti virus programs
>>>>> right away. I removed all the infected files to the vault. Now every time I
>>>>> restart I receive this message " Windows cannot find "logon.exe". Make sure
>>>>> you typed the name correctly and try again...". I may have moved the
>>>>> infected file to the vault. How can I fix this? I didn't get the Windows XP
>>>>> CD when I bought this computer from surplus. Thank you.
>>>>
>>>
>>>
>>> MSCONFIG should only be used to diagnose program issues. It should never be used
>>> to totally and permanently stop a program from running at startup. The proper
>>> way to stop a startup program is to find it's location using the msconfig program
>>> to locate the place the errant program is starting from. See my post to the OP.
>>
>
> Because you are leaving potentially unwanted items in the start menu. Then if you
> forget that you defeated the warning window that pops up every time you uncheck an
> item in the msconfig that can cause a later issue. It is always better to
> permanently get rid of a problem than using a workaround. I just finished posting
> to the OP so please look at that.
>
> This KB article http://support.microsoft.com/kb/310560 states that "It does not
> manage the programs that run when Windows starts." It goes on to give information
> on how to remove startup programs.

Very well said!

--

All the Best,
Kelly (MS-MVP/DTS&XP)

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm


"LVTravel" <none@nothere.com> wrote in message
news:%23zMWZgJHKHA.1380@TK2MSFTNGP02.phx.gbl...
>
>
> "artsami2" <artsami2@discussions.microsoft.com> wrote in message
> news:C05D98B9-3E77-4E6D-98CC-FD41539AB4F3@microsoft.com...
>> Last night my computer got infected by some Trojan virus after listening
>> on a
>> song. I closed all applications and ran my spyware and anti virus
>> programs
>> right away. I removed all the infected files to the vault. Now every
>> time I
>> restart I receive this message " Windows cannot find "logon.exe". Make
>> sure
>> you typed the name correctly and try again...". I may have moved the
>> infected file to the vault. How can I fix this? I didn't get the
>> Windows XP
>> CD when I bought this computer from surplus. Thank you.
>
> If this program needs to be removed from startup see the below
> information:
>
> Program initiation on startup is controlled by various locations in
> Windows.
>
> Using an administrator account start Windows Explorer then go to
> 1. Documents and Settings\All Users\Start Menu\Programs\Startup to find
> the program that is starting. If located delete the program's shortcut.
>
> 2. Perform the same for all available ... Settings\username\ .
>
> If you still haven't found the program click Start, Run, type Regedit and
> hit enter. Navigate to
> HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/Current version/Run and see
> if the program is there.
>
> Some programs are also started in HKEY_CURRENT_USER/..... as continued as
> above.
>
> Still can't find it click the top of the listing (Computer) in Registry
> Editor started above. Click Edit, Find and type logon.exe, click Match
> whole string only and then click find. It should find any instances of
> any key with it's full phrase. Ensure that only the full phrase shows and
> it is not part of a phrase (I.e., winlogon.exe.) If full name you can
> delete the entire key.
>
> If you just want to disable it for one time (and also an easier way of
> finding where the program is starting from) you can click Start, Run, type
> in MSCONFIG and hit enter. Click the startup tab, find the program and
> undo it's check box. This should be used for a one time boot only and not
> a fix for the startup program.
>
> To find out where it is started from, find the program and then drag the
> sizing line at the top right edge for the location heading to the right.
> You can repeatedly drag the sizing line if more space is needed and then a
> scroll bar at the bottom will appear.
>
> Hope this helps, let us know.
>
>

Clean your system. Some of the best are listed here:
http://www.kellys-korner-xp.com/xp_s.htm#spy

--

All the Best,
Kelly (MS-MVP/DTS&XP)

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm


"artsami2" <artsami2@discussions.microsoft.com> wrote in message
news:C05D98B9-3E77-4E6D-98CC-FD41539AB4F3@microsoft.com...
> Last night my computer got infected by some Trojan virus after listening
> on a
> song. I closed all applications and ran my spyware and anti virus
> programs
> right away. I removed all the infected files to the vault. Now every
> time I
> restart I receive this message " Windows cannot find "logon.exe". Make
> sure
> you typed the name correctly and try again...". I may have moved the
> infected file to the vault. How can I fix this? I didn't get the Windows
> XP
> CD when I bought this computer from surplus. Thank you.

The logon.exe file is part of my MSI SecureDoc encryption program that came
with my original MSI motherboard, which is long gone, but I still have the
software. I usually kill it unless I need something from archieves. So I keep
it on my boot list and kill it from the tray after booting up. Seems harmless
to me and obeys my command!

All the best,

Just another Pirate!

"artsami2" wrote:

> Last night my computer got infected by some Trojan virus after listening on a
> song. I closed all applications and ran my spyware and anti virus programs
> right away. I removed all the infected files to the vault. Now every time I
> restart I receive this message " Windows cannot find "logon.exe". Make sure
> you typed the name correctly and try again...". I may have moved the
> infected file to the vault. How can I fix this? I didn't get the Windows XP
> CD when I bought this computer from surplus. Thank you.

yea the same think happend to me while listening to a song on myspace....
i got a bunch of virusis deleted them, and now i get the same message on
start up, how do i fix it, i tryed the ways listed above but none of them
have worked, and my virus scaner keeps picking up virus every time i run it,
anyone have any idea how to fix this with out formating ?

"artsami2" wrote:

> Last night my computer got infected by some Trojan virus after listening on a
> song. I closed all applications and ran my spyware and anti virus programs
> right away. I removed all the infected files to the vault. Now every time I
> restart I receive this message " Windows cannot find "logon.exe". Make sure
> you typed the name correctly and try again...". I may have moved the
> infected file to the vault. How can I fix this? I didn't get the Windows XP
> CD when I bought this computer from surplus. Thank you.

If the file is part of software that is outdated and no longer installed - why would
you choose to keep this file on your system?

It is only making the boot process a little longer and may interact badly with some
other applications in the future.

Just delete it from the system and remove the reference to it that calls for it at
boot from the registry.

(Probably located in either the
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run
....or the :
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run
....keys)

XP is by no means "infallible" and can sometime "lock-up".

These "freezes" are caused by code that has left residual data in RAM and the more
errant data is around, the more likely is that this will happen. All non-essential
programs should not be allowed to run on startup as services or background
applications...

==

Cheers, Tim Meddick, Peckham, London. :-)




"pdjpirate" <pdjpirate@discussions.microsoft.com> wrote in message
news:9B65F3FD-D749-4F3F-9ED7-6EF38A0DF058@microsoft.com...
> The logon.exe file is part of my MSI SecureDoc encryption program that came
> with my original MSI motherboard, which is long gone, but I still have the
> software. I usually kill it unless I need something from archieves. So I keep
> it on my boot list and kill it from the tray after booting up. Seems harmless
> to me and obeys my command!
>
> All the best,
>
> Just another Pirate!
>
> "artsami2" wrote:
>
>> Last night my computer got infected by some Trojan virus after listening on a
>> song. I closed all applications and ran my spyware and anti virus programs
>> right away. I removed all the infected files to the vault. Now every time I
>> restart I receive this message " Windows cannot find "logon.exe". Make sure
>> you typed the name correctly and try again...". I may have moved the
>> infected file to the vault. How can I fix this? I didn't get the Windows XP
>> CD when I bought this computer from surplus. Thank you.

I found an entry in the registry that stops this dialog box on boot. Use
"regedit" and navaigate through the registry, going to
"HKLM>Software>Microsoft>Windows NT>Winlogon" and double clicking on the
"shell" entry. In the dialog box, remove the entry after "explorer.exe"
(which is "Logon.exe"). Close the box and close the editor. Reboot and you
shouldn't have the "Windows cannot find..." dialog box.

"artsami2" wrote:

> Last night my computer got infected by some Trojan virus after listening on a
> song. I closed all applications and ran my spyware and anti virus programs
> right away. I removed all the infected files to the vault. Now every time I
> restart I receive this message " Windows cannot find "logon.exe". Make sure
> you typed the name correctly and try again...". I may have moved the
> infected file to the vault. How can I fix this? I didn't get the Windows XP
> CD when I bought this computer from surplus. Thank you.

Tim: "...why would you choose to keep this file on your system?"
....Well, let's flash back to my original post...
Me: "I usually kill it [from the boot up, so it does not run unless I tell
it to] unless I need something from archieves!"

It gives me no problem, cause it sits, fitches and stays when told to and it
gives me no problem and serves its master well.

PIRATE :-)

"Tim Meddick" wrote:

> If the file is part of software that is outdated and no longer installed - why would
> you choose to keep this file on your system?
>
> It is only making the boot process a little longer and may interact badly with some
> other applications in the future.
>
> Just delete it from the system and remove the reference to it that calls for it at
> boot from the registry.
>
> (Probably located in either the
> HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run
> ....or the :
> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run
> ....keys)
>
> XP is by no means "infallible" and can sometime "lock-up".
>
> These "freezes" are caused by code that has left residual data in RAM and the more
> errant data is around, the more likely is that this will happen. All non-essential
> programs should not be allowed to run on startup as services or background
> applications...
>
> ==
>
> Cheers, Tim Meddick, Peckham, London. :-)
>
>
>
>
> "pdjpirate" <pdjpirate@discussions.microsoft.com> wrote in message
> news:9B65F3FD-D749-4F3F-9ED7-6EF38A0DF058@microsoft.com...
> > The logon.exe file is part of my MSI SecureDoc encryption program that came
> > with my original MSI motherboard, which is long gone, but I still have the
> > software. I usually kill it unless I need something from archieves. So I keep
> > it on my boot list and kill it from the tray after booting up. Seems harmless
> > to me and obeys my command!
> >
> > All the best,
> >
> > Just another Pirate!
> >
> > "artsami2" wrote:
> >
> >> Last night my computer got infected by some Trojan virus after listening on a
> >> song. I closed all applications and ran my spyware and anti virus programs
> >> right away. I removed all the infected files to the vault. Now every time I
> >> restart I receive this message " Windows cannot find "logon.exe". Make sure
> >> you typed the name correctly and try again...". I may have moved the
> >> infected file to the vault. How can I fix this? I didn't get the Windows XP
> >> CD when I bought this computer from surplus. Thank you.
>
>