how to replace $NtServicePackUninstall$\logonui.exe file?

Hello,

File C:\WINDOWS\$NtServicePackUninstall$\logonui.exe infected by
"Trojan.Win32.Agent.on" Virus! Action Taken: No Action Taken.

If person were to delete the above file, how would one replace it with good
file?

Thank you for information.
Susan

You may need to install SP-2 again to regain that file...not really a good
idea.
Are you planning to uninstall SP-2?
If not simply delete $NtServicePackUninstall$ since its only purpose is to
uninstall the Service Pack.
Also see:
http://www3.telus.net/dandemar/spack.htm

--
Jupiter Jones [MVP]
http://www3.telus.net/dandemar
http://www.dts-l.org


"Susan" <> wrote in message
news:...
> Hello,
>
> File C:\WINDOWS\$NtServicePackUninstall$\logonui.exe infected by
> "Trojan.Win32.Agent.on" Virus! Action Taken: No Action Taken.
>
> If person were to delete the above file, how would one replace it with
> good file?
>
> Thank you for information.
> Susan

File C:\WINDOWS\I386\LOGONUI.EX_ infected by "Trojan.Win32.Agent.on"
This file is infected too but I understand that the EX_ means it is the file
for SP1 and the working copy is in System32.
What would you do concerning the LOGONUI.EX_ file?

"Jupiter Jones [MVP]" <> wrote in message
news:%...
> You may need to install SP-2 again to regain that file...not really a good
> idea.
> Are you planning to uninstall SP-2?
> If not simply delete $NtServicePackUninstall$ since its only purpose is to
> uninstall the Service Pack.
> Also see:
> http://www3.telus.net/dandemar/spack.htm
>
> --
> Jupiter Jones [MVP]
> http://www3.telus.net/dandemar
> http://www.dts-l.org
>
>
> "Susan" <> wrote in message
> news:...
>> Hello,
>>
>> File C:\WINDOWS\$NtServicePackUninstall$\logonui.exe infected by
>> "Trojan.Win32.Agent.on" Virus! Action Taken: No Action Taken.
>>
>> If person were to delete the above file, how would one replace it with
>> good file?
>>
>> Thank you for information.
>> Susan
>
>

Susan;
I am not sure about that file.
Ask in a newsgroup specific to your operating system:
http://aumha.org/nntp.htm

--
Jupiter Jones [MVP]
http://www3.telus.net/dandemar
http://www.dts-l.org


"Susan" <> wrote in message
news:...
> File C:\WINDOWS\I386\LOGONUI.EX_ infected by "Trojan.Win32.Agent.on"
> This file is infected too but I understand that the EX_ means it is the
> file for SP1 and the working copy is in System32.
> What would you do concerning the LOGONUI.EX_ file?
>
> "Jupiter Jones [MVP]" <> wrote in message
> news:%...
>> You may need to install SP-2 again to regain that file...not really a
>> good idea.
>> Are you planning to uninstall SP-2?
>> If not simply delete $NtServicePackUninstall$ since its only purpose is
>> to uninstall the Service Pack.
>> Also see:
>> http://www3.telus.net/dandemar/spack.htm
>>
>> --
>> Jupiter Jones [MVP]
>> http://www3.telus.net/dandemar
>> http://www.dts-l.org

Susan,

Which antivirus/antimalware program is detecting logonui.exe and
LOGONUI.EX_ as being infected ? You may be witnessing a False Positive
and *not* an infection.

MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============

Susan wrote:

> Hello,
>
> File C:\WINDOWS\$NtServicePackUninstall$\logonui.exe infected by
> "Trojan.Win32.Agent.on" Virus! Action Taken: No Action Taken.
>
> If person were to delete the above file, how would one replace it with good
> file?
>
> Thank you for information.
> Susan
>
>
>
>
>