Windows Logon

Is there a virus which captures windows Xp logon and loggs off after one loggs in.
My son’s pc was behaving as above, as I have not seen this before I ended up formating the drive..
What is this virus called and how to look for it.
or what is the work around?