9x Winlogon.exe Duplicates?

Toggle sidebar Toggle sidebar
J

James237

Honorable
Jan 3, 2014
5
0
10,510
I have recently checked my task manager and discovered that i have not only one winlogon.exe but 9, however when i go to their properties they are all in fact identical and say they were created about 2 years before the other winlogons actually came, for example they all say they were created the same second in January 2013 and they are all directed/stored in C:\Windows\System32 however when i attempt to find them there i can only find one. Thanks for any help, all is appreciated - James
-Edit- I have also ran a full avg scan on my computer and i says i can fine with no treats or viruses and am fully protected.
 
Solution
P
Yeah that is odd. In task manager under the details tab right click on the column header and select "Select Columns" and scroll down to "Image Path Name" and select it. Then find the offending programs and make sure that the image for each one is exactly "C:\Windows\system32\winlogon.exe". It's common for malware to masquerade as legitimate system programs by giving themselves the same name. They will usually hide in similar sounding folders such as "system" or ".system32" or even in a legitimate folder where such a file does not belong such as SysWOW64.
Sort by date Sort by votes
J

James237

Honorable
Jan 3, 2014
5
0
10,510


@Pinhedd Thanks for the reply but no i am the only user on my computer and i have rebooted my computer about 5 times since they showed up and they have not disappeared. Do you think it is anything i should be worried about as they have suddenly just appeared?
 
Upvote 0 Downvote
P

Pinhedd

Champion
Aug 7, 2007
10,342
20
56,965
Yeah that is odd. In task manager under the details tab right click on the column header and select "Select Columns" and scroll down to "Image Path Name" and select it. Then find the offending programs and make sure that the image for each one is exactly "C:\Windows\system32\winlogon.exe". It's common for malware to masquerade as legitimate system programs by giving themselves the same name. They will usually hide in similar sounding folders such as "system" or ".system32" or even in a legitimate folder where such a file does not belong such as SysWOW64.
 
Upvote 0 Downvote
Solution
J

James237

Honorable
Jan 3, 2014
5
0
10,510

Thank you, It turns out that 2 days after my original post they had just fanished anyways :), Thank you so much for your contribution
 
Upvote 0 Downvote
You must log in or register to reply here.

TRENDING THREADS

Latest posts

Moderators online

Share this page

COMPANY
RESOURCES
FOLLOW
Top Bottom