winlogon.exe application error

Have a client that has XP Home and all of a sudden she is telling me this error is coming up -

winlogon.exe-Application Error the instruction at "0x10017ef4" referenced memory at 0x0116e000" the memory Could not be read

Have looked all over the web but not able to find anything definite as to a possible cause. Has anyone seen this before or have any ideas to try ???

Thanks.

 

Can you be a bit more specific? When does the error appear? Is she trying to access a particular program or during the use of a particular program? Does the error appear while doing nothing? Can you elaborate?

 

Right now we are communicating by email so below is what she sent me. It looks like when the desktop appears the problem starts. I have also asked her by return email to be more descriptive but no reply from her yet. As soon as I get the response I will add to this request.


Click on ok to terminate the Program

Click on cancel to debug the progrAM

If i click ok it turns white screen Freezes up !!

 

Seems like windows is trying to reference memory allocated for itself and is having problems doing so. Its trying to reference part of the memory at that location that either 1. thats not there or has been moved 2. or thats memory location or data has been corrrupted. Could be she has a bad memory chip or a bios problem IMO. Keep me posted I will try to give more info with more details.

 

edited above messages see changes...

 

In checking the error on Google, three of four responses seem to feel it may be a virus or trojan. Have her run some scans (Her updated virus program or online. Spybot S&D, Adaware, etc.).

 

If the winlogon.exe file is located in the c:\windows\System32 folder, it is legitimate. In other cases (most frequently in c:\windows folder), winlogon.exe is a virus (W32/Netsky.d@MM or a variation).
In any case, it never hurts to scan for viruses, spyware, etc.
More info
http://vil.nai.com/vil/content/v_101064.htm

 

winlogon - winlogon.exe - Process Information
Process File: winlogon or winlogon.exe
Process Name: Windows Logon Process
Description: Windows NT logon utility that manages user logons and logoffs. The utility prompts you for the password when you log on and allows you to log off or shut down.
Company: Microsoft Corp.
System Process: Yes
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): No
Common Errors: N/A

For more info on windows processes look here

http://www.liutilities.com/products/wintaskspro/processlibrary/iexplorer/

I would have to concur with welshjim also. That file may also probably be found not only in your system 32 directory but here as well- C:\WINNT\ServicePackFiles Also sometimes virus authors will name a file after a critical system file for example svchost.exe is a normal program that runs on your pc BUT the virus would look like this-SVCHOST.EXE. It is best to run adware 6.0 which I swear by and Norton 2004
Although I DO NOT recommend Norton 2004 for windows ME. It wracked havoc on my sons WIN ME system and let me tell you it wasnt easy to fix. LOL
as always imclueless (only on somethings LOL)

 

I think maybe I should start using googles a little more. I searched on Yahoo and looked at probably a 100 hits and nothing really pointed to what you all are saying. I sorta thought this might be the problem cuz the client uses dial-up and I'm guessing the XP updates probably havent been done since the XP was put on her system.

Thanks to all that have shared their thoughts.