It says that they were both created last year, but I have never had this process running at 100% like this before. Its very persistant it isnt picked up with adaware or antivirus software. The file size is 354,429bytes (12% of all occurrences), 624,752bytes and 17 more variants. Hotchili Appears on server and workstations in my SBS 2003 domain.
In Windows Vista and later operating systems, Winlogon's roles and responsibilities have changed significantly. Gio Santos It's sort of a 50/50 chance it is supposed to be an application that logs you on (i think) but its mostly a system process OR it could be Viruswriters=Cant code :) On XP(sp1), You cannot delete C:\Program Files\Movie Maker\*.* or C:\Program Files\NetMeeting\*.* due to winlogon.exe. If its signed - its normal winlogon Name Some Parasite or something Sokhunthea All i know about winlogin.exe is that though it is system file but if u do improper shutdown
But make sure you DO NOT delete your winlogon.exe file. John D It is not more dangerous then Windows it self, and on most pc you need this file Twb it seems to be a backdoor hack of some sort, the This process is an essential part of your OS and should be left alone. A text file will open after the restart.Please post the contents of that logfile with your next reply.You can find the logfile at C:\AdwCleaner[S1].txt as well.============================================================================= Please download Junkware Removal Tool
It handles the login and logout procedures on your system. Added by variants of the NETSKY WORMS! Normal display in NT/XP/Vista should show winlogon.exe and no other variants. Ted Can you help me, people say that all these treats and some people say that it is essential for your computer.
wajabar Just like everyone says, it is important, but you should figure it out f it is a virus, according to xBoom, it should not exceed more than 3MB, if it The program is not visible. Finally I turned off my McAffee real-time scanning (it's a virus checker). if it is not in the system32 it is very likely to be a resource-hogging, virus/spyware, and should be removed from only the suspiscious location.
This will stop the registry from looking for the deleted file Dee you need this file, the trojan file causing problems is called winslogin.exe. Closing the process will result in one of the many things: Windows 2000/XP: Blue Screen Windows Vista/7: Logs you off and deletes your profile until a computer restart (No files destroyed!) If your copy of win xp is legal it nothing happends with your comp Robert Gelki Actually I want to prevent users from loading windows in windows 98.After submitting his/her credentials If it's running from anywhere else, it's a FAKE - some malware often names itself as a trusted program, only in another directory.
- It's not okay to delete it.
- Hard to remove MaTT Even though it is neutral,it can be made to do dangerous things Rahul It seems activate Netbios conexion Eduardo There is a file that hides it's self
- Depending on when I look at this the Process ID tends to be different.
- Winlogon.exe is located in the C:\Windows\System32 folder.
I downloaded xisoft to avoid doing this manually, it's not worth 40 bucks, so I did it myself and sent to the software afterlife. http://www.file.net/process/winlogon.exe.html How to recognize suspicious variants? Restart. Chris I know that the good winlogon DO NOT Try to log to the internet if your firewall tell you that it try to connect to the net well you are
Virus file is g2550093.dll. It varies but pretty often it does. Newbie hacker tsk... ... This is why you get a blue screen.
Description Added by Backdoor.Dsklite. if your firewall og Virus program is reporting that this file have been stopt from starting up that only means that you need to make a exception for this file so Beacause the win log on exe comes up on the starting so evenly the window will not open just star up window display but nothing hapen even in the safe mode Other processes srvany.exe explorer.exe lsass.exe winlogon.exe dllhost.exe wudfhost.exe taskman.exe wlidsvcm.exe bingext.dll rundll32.exe conhost.exe [all] © file.net 15 years of experience MicrosoftPartner TermsPrivacy
How do you know it is a virus/trojan/worm/malware/trackware/adware or spyware? Therefore the technical security rating is 23% dangerous, however you should also read the user reviews. Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup or the Microsoft Visual SourceSafe program "System Update2" definitely not required.
mitch This process controls Windows NT logon/logoff procedures.
SwodeG well i got zone alarm pro and i cant even have it display alerts while logged onto the net or ill get bombarded with access attemps from windows ny logon if you find winslogin.exe in your system32 folder, DELETE IMMEDIATELY! if it is not in the system32 it is very likely to be a resource-hogging, virus/spyware, and should be removed from only the suspiscious location. It just pisses me off.
Normally, this process should not be tampered with - If it is using any more memory than 832k (approx.) memory, then it should be removed as it could be a virus/spyware. delphidoc The program "KGB Keylogger" disguises itself as winlogon.exe. you get a bsod when you kill it. depending on how many files you have.
Buster Its totally harmless. I hope this site helps other in need. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. Unkillable, stuck for now :/ devnullius Okay, the process winlogon.exe is running at 100 cpu.
Important: Some malware camouflages itself as winlogon.exe. Overview Winlogon handles interface functions that are independent of authentication policy. Gary It make up more than 90% CPU Le Nguyen Khoa The actual file is normally harmless, but various spyware items can cause it to use high CPU and/or memory usage. if not, it's virus!
Maur i get a (NIPS) intrusion Alert popup from it about every hour i get 3 attempts at the same time really annoying i dont know if its a false positive If your copy of win xp is legal it nothing happends with your comp Robert Gelki Actually I want to prevent users from loading windows in windows 98.After submitting his/her credentials Microsoft Security Essentials Antivirus up to date! `````````Anti-malware/Other Utilities Check:`````````Malwarebytes Anti-Malware version 188.8.131.520 JavaFX 2.1.1 Java 7 Update 17 Adobe Flash Player 11.7.700.169 Adobe Reader 10.1.6 Adobe Reader out of Date! Somone who knows winlogon.exe (or winiogon.exe) is using up all 99% of CPU and has extremely slowed down my laptop (haven't yet been able to open a normal my computer window!!!),
SwodeG well i got zone alarm pro and i cant even have it display alerts while logged onto the net or ill get bombarded with access attemps from windows ny logon Otherwise, it's safe. (maybe) Simon Sometimes it pops up and sometimes it doesn't. If you try to winzip the file it is displayed as w?nlogon.exe. If you try to winzip the file it is displayed as w?nlogon.exe.
If not, it's a malicious program. Sometimes a trojan horse use this process to shut down your computer. in the name. Do you have additional information?
Kermit the frog Used for logging into the machine. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1.