Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have the same issue as this:

Windows 7 automatically logs out when logging in

The windows 7 computer it straight away logs out when trying to log in (doesn't even get to the desktop on this computer unlike this person's description).

However, I think it is not because of a corrupted User Profile but rather a virus. The reason I think this is, it still allows me to load the computer on profile 'Scott' and any new profiles I create. But a background process is limiting startup of other programs. So for example Norton antivirus software cannot be booted.

I've done some investigation and found out that on startup the following is loading: Program - EgrNhwnl from C:\Users\USER\AppData\Local\vaaxwweu\egrnhwnl.exe

Pretty sure it's a virus as it looks like a randomly generated string of characters to deter me from searching what virus it is :(

I've tried removing it from start up by disabling and deleting, but it instantly reappears. I've tried doing this in safe mode as well. I've also tried deleting the file from AppData but it doesn't allow me to do this either.

So my question is: Any ideas for the next move in trying to combat this? Any ideas what virus this might be? (as this will help find a remedy)

Thanks for your help

share|improve this question
Do you actually have an anti-virus program installed on your PC? – Lee Taylor Dec 22 '12 at 21:05
Yes as question notes, Norton Antivirus does not load – slawrence10 Dec 22 '12 at 21:10
up vote 0 down vote accepted

As @Nicole Hamilton mentions a check with Norton may help. In some cases the malware has hidden part of itself in your system restore so if you don't disable System restrore, it returns even after a clean scan. Not sure if that is still common

Somem alware has a component that checks for removal and then reinstalls possibly quickly or after a period of time.

Norton has some special tools available Norton rescue Tools I have used Power Eraser and the corporate version of the bootable tool and they have removed some nasty stuff.

share|improve this answer
Thanks @Dave-m, I will try Norton Rescue Tools and get back to you. – slawrence10 Dec 22 '12 at 21:22
Amazingly I noticed that even trying to load a norton website on this computer doesn't work. Clever little virus. But downloaded and transferred from another computer. Unlike most programs currently on the computer, which are switched off as soon as executed...Power Eraser is fingers crossed! – slawrence10 Dec 22 '12 at 21:33
Having confirmed that your system is that thoroughly compromised, I would copy any files of your own you haven't already backed up (perhaps by moving it to a USB enclosure on another machine) and then reformat and reinstall the OS. – Nicole Hamilton Dec 22 '12 at 23:10
I did end up doing a fresh OS install just to be safe, but Norton Rescue Tools opened up the ability to use user profiles again. Thanks guys. – slawrence10 Dec 23 '12 at 23:04
Infected with a Trojan – slawrence10 Dec 23 '12 at 23:05

Try running your Norton AV in safe mode.

share|improve this answer
Unfortunately when I try and do this to perform a full system scan it straight away is closed – slawrence10 Dec 22 '12 at 21:13

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .