Thinkpads Forum

Every time I start my computer I get an error that logmon.exe has stopped running. Any ideas?

The file is not on any of my computers (though I do not have a T6x), and a google search points either to a trojan, or back here to article 15342 which was not particularly illuminating. Since article 15342 was in 2005, I would use very good AntiVirus and Anti Spyware tools to see if you can remove it.
... JDH

I ran a full scan of an updated NortonAV and came up with nothing. The thing is, while I too found google results pointing towards a virus, I also found one saying it's part of rescue & recovery.

I did see that someone posted the following on one site. You might see if this is true in your case.
In my old version of Rescue and Recovery I do not see this file.

IBM ThinkVantage Rescue and Recovery has a process named logmon.exe too.
Its path is "c:\program Files\IBM ThinkVantage\Common\logger\logmon.exe"

If you look at this Japanese Lenovo site, it says under Item 13 below Correction Contents: "In order to hold down the load to CPU to minimum, the Logmon.exe file was renewed."

If I continued searching, I believe I could find more. This was just a 10-minute search. My feeling is that this is a legitimate file from Rescue and Recovery version (3 and higher?) and/or the Client Security Solution.

some info from : http://www.tabletpcbuzz.com/forum/topic ... C_ID=28699


logmon.exe monitors the Windows Event Logs so they can be viewed from the "rescue environment" if your windows XP/2K will not function.

If you are running into problems with logmon.exe, the easiest/cleanest way to keep logmon.exe from running is to remove the "Task3=logmon" line from the top of the tvt.txt file located in the C:\Program Files\IBM ThinkVantage folder.

marlinspike wrote:Every time I start my computer I get an error that logmon.exe has stopped running. Any ideas?

according to my process explorer logmon.exe seems to be part of tvtsched.exe or at least associated with it. in other words logmon is invovled in scheduling some tasks. it is part of CSS according to this source: http://file.net/process/logmon.exe.html
to fix this i would try reinstalling CSS from the set up files stored on your HD.

I'm still looking for a solution to this one. My T61p is 11 days old and the problem only started for me today. I attempted to see if inactivating Client Security Solutions or TPM or fingerprint reader or logon password would help but nothing did. I did not uninstall R&R4/CSS but I might.

I did rename C:\Program Files\Common Files\Lenovo\Logger\logmon.exe to logmon_deactivated_20070930.exe and so I no longer get the message.

Also, before I deactivated it, I could see in the CMD box something about could not access files due to security setting.

Anyway, I'd like further information about it. I just don't understand why the problem just started for me today.

I did not apply the Windows Recommended update KB933928 but I did "activate" Windows and MS Office today, although I think they were already activated on install.

Barry

The reason of this error message is that the logmon can not find some of system logs (probably security log).

Best soultion is:

Delete whole folder "Logmon" in registry HKEY_LOCAL_MACHINE\SOFTWARE\Lenovo\Scheduler\Tasks .
The ThinkVantage Scheduler will not try to run logmon.exe anymore.