Somehow I got a virus that ran an automatic setup file in C:\ and I found the batch file that it ran, this is the source: @Echo off :S Del winlogon.exe If Exist winlogon.exe Goto S :H Del f.exe If Exist f.exe Goto H Del x.dat Del z.dat Del n.bat It created x,z, and n files in my C:\ and I think it deleted my winlogon file and changed it with a fake one so I don't know what to do. I don't want to turn my computer off for fear of not being able to boot back up. John Dick

Thats a nasty little bat! Never asked for conformation? How did it find winlogin? No path. What is in the x and z dat files? Use notepad to open. Bat instruction say they too should of been deleted. I could be wrong, so get a second opinion ,but wont windows rebuild those files on reboot if they have been deleted. I would do a search and see if winlogin is still there. Bet it is. W.L.

Once this issue gets sorted, I suggest blocking batch processing except for the administrator using policies on NTFS permissions. Windows should restore the files unless you have been silly enough to turn off Windows File Protection.        My blog