Ack! Too many e-mails?!

[romrom]

sndmix.dll -> infected by Downloader.Agent.AVZ ...
not found with Avast 

[Lisandro]

sndmix.dll -> infected by Downloader.Agent.AVZ ... not found with Avast

Do you need the files for avast?

Can you send the samples to virus@avast.com ?
You can zip and password the files... Inform a link to this thread and the password used.
You can send the files to Chest and, from there, resend to Alwil for analysis.
Thanks.

[romrom]

Sure, will do 

[romrom]

Damn, unable to zip it, copy it or do whatever I want.
There is a lock from winlogon.

So, I cannot send it to you or let me know how to do it

Rom

[DavidR]

Can you add it to the User Files section of the avast chest (File, Add and navigate to the file) you can sedn it to avast from there.

This assumes you can unlock it, there are a number of programs that can do this 'WhoLockMe' is just one - http://www.pcworld.com/downloads/file_description/0,fid,25368,00.asp

[romrom]

Well,

It should be in the chest of AVG now...

I said should because the PC went down and looks like it doesn't really want to reboot...
It's an other story.
Be sure that if I can get this file, you will have it!

Rom

[Lisandro]

I said should because the PC went down and looks like it doesn't really want to reboot...

Do you have avast and AVG at the same time in the same computer? Both residents?

[Juanjo]

Hello all. First of all, sorry about my english. I only want to say that we have several customers that reported us the same problem: numerous messages with the message of "time out" related with winlogon.exe.

In all the cases we solved the problem with hijackthis, but I am sure that there is some malware circulating that is not detected by avast! not by the majority of antispyware programs (these customers tested many programs of this type), which were not finding anything in the troubled computers. And since it has been said hereabouts, it is a question of a program that uses the pc of the victim as a zombie to send spam.

[Lisandro]

Thanks for posting Juanjo. Knows this makes us comfortable.
This seems not only a malware cdoes not detected by a lot of programs. I'm thinking there is any rootkit technology involved with its behavior.

[DavidR]

winlogon.exe depending on the location of the file is almost certainly some form of malware, possibly a component of W32.Netsky or a trojan backdoor, a google search will show this, http://www.liutilities.com/products/wintaskspro/processlibrary/winlogon/
A forum search for winlogon.exe would also return hits.

HJT is a very useful analysis tool to stop items from running.
These are usefull for an on-line analysis - HiJackThis Log file - On-line Analysis
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast), if you need any help with any of the analysis let us know.
OR HiJackThis Log file - On-line Analysis 2

[romrom]

I said should because the PC went down and looks like it doesn't really want to reboot...

Do you have avast and AVG at the same time in the same computer? Both residents?

Yes... found that...
Just put AVG as resident and stop service for Avast for the moment... I need to clean this sndmix.dll
By the way... sent to you

[Lisandro]

Yes... found that...
Just put AVG as resident and stop service for Avast for the moment... I need to clean this sndmix.dll
By the way... sent to you

You have everything to lose and nothing to earn doing that.
You will, for sure, conflict both antivirus. They aren't compatible as they were in the past.

[romrom]

I see but for the moment, I hve only one resident at the same time, not both of them
 

[DavidR]

You have two AVs installed that expect to be on-access Resident scanners.

They will each have registry entries for AVs that expect to be the resident scanner not a Shared Resident Scanner, that in itself can cause conflict. You have a simple choice to make avast or AVG as resident (Installed) AV and use an AV that is an on-demand only solution or an on-line scanners for backup.

[Lisandro]

I see but for the moment, I hve only one resident at the same time, not both of them

I won't be enough... Like David posted, you'll have drivers conflicts, Registry keys, services and files trying to be accessed.
The only secure way to have AVG 7 and avast is not EVEN INSTALLING one of the residents. Well, I've tried. If you have luck, go ahead, just my advice: you could have troubles