Processes in Windows NT/2000/XP / winlogon.exe

This information is without engagement! Please consider reading the disclaimer!

Attention should be paid to the notes. You should check the processlinks for other relevant resources, too.
Software for processmanagment and against adware/spyware is listed on the processsoftware page.
Some texts are in German. Please use google's language tools to get a translation...

Show processes starting with (763 processes in database):
0 2 3 5 A B C D E F G H I J K L M N O P Q R S T U V W X Z
Processdetails	reger24 → processes → WINLOGON.EXE    (description 1 / 2 )
filename	WINLOGON.EXE
fullname
type	unknown
manufacturer and other relevant information	Microsoft Corporation Search for WINLOGON.EXE at google.com Search for WINLOGON.EXE at groups.google.com (very helpful!) Search for WINLOGON.EXE at clusty.com (with document clustering!) Find answers for WINLOGON.EXE in the forum... Click here to write a comment... Add information to WINLOGON.EXE...
remarks	Winlogon.exe You cannot end this process from Task Manager. This is the process responsible for managing user logon and logoff. Moreover, Winlogon is active only when the user presses CTRL+ALT+DEL, at which point it shows the security dialog box. Update 01.03.2004 Typical path (XP) is C:\WINDOWS\system32\winlogon.exe (%systemroot%\system32\winlogon.exe). Important Update 01.03.2004 by reger24: If winlogon.exe is running in your system and it"s exe-file is in c:\winnt or c:\windows (%systemroot%) with a filesize of 17,424 Byte you should terminate that process and remove it"s autostart entry because it could be the worm W32.Netsky.D. More information about W32.Netsky.D can be found on the following websites: Network Associates Symantec Corporation Trend Micro
recommended software
first info by	reger24 / last update 01.03.2004
visitor comments newest comments first	Click here to write a comment... (no registration necessary)
Back to the processlist

Show processes starting with (763 processes in database):
0 2 3 5 A B C D E F G H I J K L M N O P Q R S T U V W X Z
Processdetails	reger24 → processes → winlogon.exe    (description 2 / 2 )
filename	winlogon.exe
fullname	Worm/Sober.M
type	background application (worm)
manufacturer and other relevant information	Worm/Sober.M Author(s) Search for winlogon.exe at google.com Search for winlogon.exe at groups.google.com (very helpful!) Search for winlogon.exe at clusty.com (with document clustering!) Find answers for winlogon.exe in the forum... Click here to write a comment... Add information to winlogon.exe...
remarks	Started via: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run " winsystem.sys"=C:\WINDOWS\msagent\win32\smss.exe HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run " _winsystem.sys"=C:\WINDOWS\msagent\win32\smss.exe Files found in c:\WINDOWS\msagent\win32: datamx1.dat datamx2.dat datamx3.dat GoTo1.dat GoTo2.dat GoTo3.dat runnowso.ber smss.exe csrss.exe winlogon.exe zipedso1.ber zipedso2.ber zipedso3.ber
recommended software
first info by	reger24 / last update 22.02.2005
visitor comments newest comments first	Click here to write a comment... (no registration necessary) qiu ruiguang (qiu_th@hotmail.com) at 21 March 2005 - 09:42:38h Write a comment to winlogon.exe
Back to the processlist