| Kommentare über winlogon.exe: |
 Alex | The Windows Logon Process is responsible for managing user logon and logoff, and checks the Windows XP activation code. Must be in system32 folder! Siehe auch: Link |
| SvanUden |  Windows Logon Process |
 Michael Thorpe | My dial-up internet service was going crazy before I used "End task" to shut it down. The file creation date was only two days ago. A new registry entry HKLM\Software\...\Run was "ICQ Net C:\WINDOWS\winlogon.exe -stealth". I have never installed ICQ on this machine (win98SE, IE5.5SP2). I deleted the registry entry and the file from the c:\windows dir. No Problems. |
| | windows logon process |
 Nathan | This is the Windows NT logon utility that manages user logons and logoffs. The utility prompts you for the password when you log on and allows you to log off or shut down. It also keeps track of your computer's license(s) if you are using Windows XP. |
 DataFighter | Anmeldedienst von Windows. Aber nicht nur das. Bauen sie im Ihrem Rechner eine neue interne Hardwarekomponente ein, wird die WINLOGON.EXE dieses feststellen und , wenn Windows XP schon mal aktiviert war, dieses rückgängig machen. Sie dürfen bei Microsoft anrufen, und Ihre XP-Version erneut aktivieren. |
| Capi | As said by others, this process is responsible for managing user logon and logoff, both in Windows 2000 and Windows XP. It is perfectly normal and safe, AS LONG ASIT'S IN THE SYSTEM32 FOLDER! If it's running from anywhere else, it's a FAKE - some malware often names itself as a trusted program, only in another directory. |
| Martin Polder | W32/Backdoor-CFB |
 | There is a trojan variant of Backdoor.Padador that hides unser the name winIogon.exe(that is really winiogon.exe, the 'i' is capitalized) i believe this is really a '5" rating if it goes unnoticed, it steals all kinds of cd keys and other private information. |
| Ben | This is a standard for NT machines , can be found in NT/2000/XP but not in windows 98/95/ME, however from what i have experieneced is that there is a Virus CLONE of this and obviously needs to be gone, if you are using 95/98/me and there is a winlogon.exe (or similar) then kill it, you dont need it, NT/2000/XP users will have to look closely at the filename if its Winlogon.exe then its ok if its WinIogon.exe (with Capital i) kill it, or if its Winlogin.exe (notice the change from logon to login) then kill it. but do use extreme caution as you could lock yourself out,if you delete the wrong one |
| pinewood zon | On XP(sp1), You cannot delete C:\Program Files\Movie Maker\*.* or C:\Program Files\NetMeeting\*.* due to winlogon.exe. if some of these files be deleted, winlogon detects the deleting and restore that files. Microsoft never tells about this. |
| Dennis M | Extreamly harmless task. |
| clever_yong@yahoo.com | i have winlogon.exe but it keep saying "error" and when i close the msg box it sudden goes to restart my computer, huh! what should i do? i need a site that has a copy of this file. I also found out that my winlogon.exe has an icon of moon and stars in the window image. I am totally suppecting that this is a virus. pls help me. |
| al1 | I'm not sure, But I think this program caused my computer to restart on its own... it messed up Issas.exe, at least I think it did. Also, is it meant to look like a window with a moon in the background? |
| John Smith | should be a normal process. |
| Blue Wolf | create a backup of the winlogon.exe that is already in the system32 just in case but if it aint 420 KB without updating windows then it gonna take your computer down, after updating with sp1 and sp2 the size might change as at this time i have no idea |
| Derek | slick little process gets added to the HKLM\...\run\ registry. It appears to coexist with the real executable in the system32 directory. It really has a different name that is not displayed. If you try to winzip the file it is displayed as w?nlogon.exe. delete this file if it you experience this and the creation date is recent. Do not delete the real WINLOGON.EXE. |
| Zak | I found winlogon in HLKEY/Run other than the true winlogon of windows, and when i copy and paste its name in wordpad, the name was : w?nlogon.exe, i found that because a hacker was slealing all my yahoo and hotmail passwords, even all my personal information. it is a very dangerous virus, so try to localise it and delete it, ps: when u search by windows, u cant find it, and when u do alt+ctrl+del u will see wVnlogon in the task manager window |
| | This is also used by the TIBS virus bastards!...in which case it will be located in a subdirectory "inetsrv" and is much smaller than the 500 KB os version.. Very hard to kill because windows thinks you are trying to kill the "real" one. Try a safe boot and edit all occurrences of "inetsrv" from the registry! |
| | wenn ich sie löschen will fahrt mein PC heruter |
| Pat | WINLOGON is the windows compenent, winlogin.exe is not. The below link is what I used to fix it...my firewall caught it trying to connect to the internet, if it cant it seems harmless. A well problem solved for me. Siehe auch: Link |
| Craig | This thing may or may not be the real deal, since on my machine, it shows up as file location \??\C:\WINDOWS\system32\winlogon.exe. When I "Remove" the app, the whole computer just shuts off, and I get a BSD (Blue Screen of Death). This is very odd on a Windows XP machine. In fact this may be the first BSD I have ever seen on XP! |
| ZZ | In Windows XP it checks to make sure that you have activated your Windows Operating System. Some people have hacked this file to avoid the activation. A modified winlogon.exe file will not lock you out and won't even remind you that you need to activate Windows. |
| Drefsab | to many people confuse this with the winlogon.exe, it has a capital i in the name to look like an I. Its very persistant it isnt picked up with adaware or antivirus software. It cant be disabled via msconfig. I had to go into safemode delete the exe then remove it out of the registry and it was all over the show in there. |
| Rajesh Pillai | All i know about winlogin.exe is that though it is system file but if u do improper shutdown a few times, whenever you try to open an internet application it will shutdown the computer without user input |
| Colin | Just noticed on my machine that the process running is 'WINLOG0N.EXE' (Note the second 'O' is actually a '0') Sure that it's malicious, so now have to find what it is (Symantec antivirus corporate has not picked up on it !!) |
| ekei | i lend a pal my pc to seek something but it he looked for a stupid no cd patch for a game the problem is one of the sites infected my winlogon.exe and my win32.dll with some subroutines that makes the data choose some stupid commercials on web isnt there a way to remove this part in the data file? |
| A B | this file is located in the C:\windows\system32\ folder in winxp pro..... it took me about 40-45 sec to load windows everytime i click on my account...also my computer was not shuttin down for 1hr ! i'm very disappointed with windows xp....i even updated my windows...still gettin this problem |
| roy masters | winlogon.exe is normal windows system32 file if you have another one spelled with capital i not a lower case L .you have trojan called backdoor armageddon.the hacker remotely controls your pc completely sees all your hard drive info & uses your pc as a proxy for evil deeds. delete it kill it get rid of it asap! |
| Keegan | Winlogon handles interface functions that are independent of authentication policy. It creates the desktops for the window station, implements time-out operations, and provides a set of support functions for the GINA. Some of you are calling it dangerous, it is no different from any other file, if is hijacked by a virus or other maliciuos program it will become hostile. All files are potentially vulnerable to this kind of attack. |
| nerb | mit dem internet verbunden löst die datei einen kritischen fehler aus, der den computer überlastet und zum absturz führt. |
| leex | Anmeldedienst von Windows.Original Dateigröße 495kb(mit updates)!Installierst du neu Hard oder software , erkennt die WINLOGON.EXE dies und regiestriet die neu komponete!!Winlogon.exe überprüft die regiestrienrung bei Microsoft!!Winlogon.exe kann aber auch böse inhalte enthalten, viele backdoor programme tarnen die server datei als winlogon.exe(häufig wird auch winlogin.exe gewählt)!! Jeder rechner der hinter eine Firewall sitzt und eine AntiVirensoftware besitzt ist 99%ig sicher!! Und kann sich eigentlich nicht mit einer Falschen Winlogon.exe anfreunden!!! cu leex |
| | Die datei hat sich bei mir erst bemerkbar gemacht, als ich eine Trojanermeldung von AntiVir bekommen habe! Löschen kann man sie aber offenbar nicht! |
| Vincent lamar | Keine Probleme, auch wenn Winlogon abgestürtzt ist. Wenn dies allerdings mehrere male passiert fehlen Dateien...... |
| Timmey | Bei Windows 98 SE gilt diese Datei als Virus. Sie nennt sich winlogon.exe und ist in der Win.ini und System.ini eingetragen. Man diese Datei mit einem Virenscanner löschen, oder manuell entfernen. Anschließend müssen allerdings die Eintrage zum Ausführen der Datei in den genannten .ini-Dateien gelöscht werden. |
| ...lypô | Datei wird dringend benötigt. Das Problem sind darin enthaltene Viren, Trojaner! |
|
|
