The day before yesterday while on my computer Avast alerted me to a trojan which I immediately deleted. Everything was OK for the rest of the day. Yesterday I started to get an box from my firewall - Sygate - asking if I want to allow Winlogon.exe to connect. Doing a Google search only confused me as to how safe this is. I said No to it each time it asked and my computer is running OK, it started up fine this morning. But if it's something important then why is it suddenly asking for permission? Could this be anything to do with the trojan from the day before? I still have not allowed it access because I'm scared to, I'm not very computer techy. It asked me about three or four times yesterday and once so far today. This is the whole thing Sygate asks me:- Windows NT logon application (Winlogon.exe)is trying to connect to [the number values are different here each time] using remote port 80 [http - world wide web] Do you want to allow this program to access the network? I'd be very grateful for some assurance here that this is OK to allow to run. Thanks very much.

First of all, I've found that whenever avast finds a virus...just MOVE it to the chest, don't do any other commands as you said you deleted it. You may want to go into safe mode with networking and do online scans with: Housecall Kaspersky. You may have to turn off system restore before the scan and turn it back on afterv the scan. Hopefully my advice will help you...Please post back with your results....thanks

I had something similar last week. I think the right answer is "NO". After some scouting around, I found that there were 2 winlogon.exe files. The legit one is: 30-10-2001 04:57 178,448 WINLOGON.exe in \winnt\system32 That's w2k, which mat be slightly different but close. The funky one was in \winnt and was about 24KB. First I trashed the file then went into msconfig to stop it from attempting to load. Finally I cleared the registry key. [not for the faint of heart] I believe and I'm not sure why, that this piece of crap is created by a virus, likely a VBS or PIF. HTH If at first you don't succeed, you're about average. M2

XpUser4Real I did all you suggested, thank you. It all came back clear. And I WILL send to the 'Chest' in future thanks. Mechanix2Go I checked on what I have and only seem to see the legit one. Thanks for the help.

Thanks for posting back Hopefully my advice will help you...Please post back with your results....thanks