Home > General > System32/winlogon.exe


Used for logging into the machine. c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\wininet.dll[7] 2009-10-29 . 7C599DEC022BEF6E3C9F4DB4FC164E8B . 832512 . . [7.00.6000.16945] . . ekei this file is located in the C:\windows\system32\ folder in winxp pro..... I could not get into my notebook rey to many people confuse this with the winlogon.exe, it has a capital i in the name to look like an I. navigate to this website

c:\windows\system32\browser.dll[7] 2004-08-04 . c:\windows\system32\comres.dll[7] 2004-08-04 07:56 . 6728270CB7DBB776ED086F5AC4C82310 . 792064 . . [2001.12.4414.258] . . Can anyone help? the machine remains rebooting. http://www.neuber.com/taskmanager/process/winlogon.exe.html

drgrafix Jr. scanning hidden files ... CA5CB4F174592090FBECFEAD9B51BB90 . 841216 . . [7.00.6000.21148] . . Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

  • No, it is not.
  • If winlogon.exe is located in a subfolder of C:\Windows\System32, the security rating is 54% dangerous.
  • Once I removed PC Tools my resource usage was back to normal.
  • Make sure you save your file if working on a document.
  • c:\windows\system32\dllcache\beep.sys[7] 2001-08-18 .
  • Very few programs should be started in this way.
  • c:\windows\$hf_mig$\KB2559049-IE7\SP3QFE\mshtml.dll[7] 2011-04-25 . 4C57EAF103103F4BCD084A9A353573B0 . 3608576 . . [7.00.6000.17098] . .
  • c:\windows\$NtUninstallKB956572$\rpcss.dll[7] 2008-04-14 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512] . .

When this process dies those kernel functions also die with it. Do not delete the real WINLOGON.EXE. I have occasionally been plugging away at this problem and I think I have it minimized (whatever that means LOL) to the point where she is no longer getting repeated popups lucky71 Back to top #4 [email protected] [email protected] Members 2,609 posts OFFLINE Gender:Male Location:Avondale, Arizona USA Local time:05:59 PM Posted 17 July 2007 - 11:11 AM Use last known good from

Christopher sometimes it is a trojan kreeper G but nots if its in the right folder William Right now I have this file. Javascript Disabled Detected You currently have javascript disabled. Ted Can you help me, people say that all these treats and some people say that it is essential for your computer. https://forum.avast.com/index.php?topic=73036.0 Write down all of the dll files that have been recently created on your system then delete or rename them.

Please include the C:\ComboFix.txt in your next reply.Note: If you have difficulty properly disabling your protection programs, refer to this link --> http://www.bleepingcomputer.com/forums/topic114351.htmlDo not mouse click ComboFix's window while it's running. c:\windows\ServicePackFiles\i386\powrprof.dll[7] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\mswsock.dll[7] 2008-06-20 . 943337D786A56729263071623BBB9DE5 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll[7] 2008-07-07 20:06 .

Windows Logon Process - handles user logons described here "winlogon" definitely not required. More hints Do NOT delete or remove from process list. See also: Link Cyborg i have a pc store, i sold about 3 pc's and i have this winlogon problem and i cant hide it because iam afraid if its system c:\windows\ServicePackFiles\i386\qmgr.dll[7] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . .

c:\windows\$NtServicePackUninstall$\rpcss.dll[-] 2005-07-26 . useful reference Contents of the 'Scheduled Tasks' folder 2009-07-06 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 16:34] . . ------- Supplementary Scan ------- . This will stop the registry from looking for the deleted file Dee you need this file, the trojan file causing problems is called winslogin.exe. nic The file is a critical system process, and the real winlogon can not be killed with task manager.

Capi W32/Backdoor-CFB Martin Polder There is a trojan variant of Backdoor.Padador that hides unser the name winIogon.exe(that is really winiogon.exe, the 'i' is capitalized) i believe this is really a '5" Then click "Start" "Run" type "msconfig" "ok" Under the Startup tab look for winlongon. Greg This is the worst thing I have ever gotten. http://recupsoft.com/general/system32-dll.html scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - >'winlogon.exe'(872) c:\windows\system32\Ati2evxx.dll c:\windows\system32\LMIinit.dll c:\windows\system32\LMIRfsClientNP.dll - - - - -

c:\windows\$NtUninstallKB2509553$\mswsock.dll[7] 2008-06-20 . It also keeps track of your computer's license(s) if you are using Windows XP. mobile security drgrafix Jr.

Completion time: 2009-07-15 15:34 - machine was rebooted [Compaq_Owner] ComboFix-quarantined-files.txt 2009-07-15 19:33 Pre-Run: 50,478,583,808 bytes free Post-Run: 50,410,614,784 bytes free 234 --- E O F --- 2009-06-16 00:36 0 Comment Question

The system has been shut down. See also: Link Sandra - Houston, TX The only one needed in system32 is fine until a trojan attaches itself to it. dcalin slick little process gets added to the HKLM\...\run\ registry. In my case both.

Craig It doesn't hang anything when I remove process. Try a safe boot and edit all occurrences of "inetsrv" from the registry! Hope it helps. 0 Message Author Comment by:TheTechEase ID: 248686692009-07-16 I will give it a shot in normal mode. http://recupsoft.com/general/system32-com.html Slow as a B***CH on startup.

To the one who asked, winlogon should only take a maximum of 3MB of memory. you get a bsod when you kill it. c:\windows\I386\NTFS.SYS.[7] 2001-08-18 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . ZZ If U find it in system32 directory, save.

take the current version and change the name and then download a new file? Member Posts: 20 Re: Is "C:\Windows\system32\winlogon.exe" a real/false virus or infected file? « Reply #8 on: May 12, 2011, 11:37:48 PM » I know a lot of time has passed since I hope this site helps other in need. c:\windows\ie7updates\KB2559049-IE7\mshtml.dll[7] 2011-04-25 . 7E9C4CD54CC21D3F0F7AC8A562FF7101 . 3610624 . . [7.00.6000.21300] . .