Pepto said:
Today after I updated my game "Eve Online" and played it awhile, but then it crashed. I check my processes like I always do when a game crashes to make sure its .exe isn't running after the crash to keep my computer running smooth. I then noticed winlogon.exe, something I never noticed before. I has no use name or description, using non of my CPU and has 1,424K memory being used. I searched it on google and some said it was nothing and others said only if it is effecting your computers performance that it is a virus. I did a system restore to 3 days ago, and its still here, but its not effecting anything on my computer at all. So should I be worried and remove it some how? Please help, I'm so scared T-T
Winlogon.exe is a system process ONLY when it loads from C:\Windows\System32 folder.
There are different files with the same name:
"FriendlyTypeName" definitely not required. Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup!
"ICQ Net" definitely not required. Added by variants of the NETSKY WORMS! Note - this is not the legitimate winlogon.exe process which should NOT appear in Msconfig/Startup!
"Microsoft Visual SourceSafe" definitely not required. Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup or the Microsoft Visual SourceSafe program
"System Update2" definitely not required. Added by the AUTOTROJ-C TROJAN!
"WinAuth" definitely not required. Added by an unidentified VIRUS, WORM or TROJAN! Note - this is not the valid winlogon.exe process
"winlogon" must run at start up. Windows Logon Process - handles user logons described here
"winlogon" definitely not required. Hijacker or adult content dialler - file is located in C:\Windows or C:\Winnt, and not in it's System or System32 subdirectory, as is the case with the legitimate Windows Logon (winlogon.exe) process
"winlogon" definitely not required. Added by the TRODAL TROJAN! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup! File is located in C:\Windows or C:\Winnt, and not in it's System or System32 subdirectory
"xp_system" definitely not required.
What is winlogon.exe