Sign in with
Sign up | Sign in
Your question
Solved

Winlogon.exe proccess in task manager! I'm scared D:>

Last response: in Windows 7
Share
February 21, 2012 2:58:27 AM

Today after I updated my game "Eve Online" and played it awhile, but then it crashed. I check my processes like I always do when a game crashes to make sure its .exe isn't running after the crash to keep my computer running smooth. I then noticed winlogon.exe, something I never noticed before. I has no use name or description, using non of my CPU and has 1,424K memory being used. I searched it on google and some said it was nothing and others said only if it is effecting your computers performance that it is a virus. I did a system restore to 3 days ago, and its still here, but its not effecting anything on my computer at all. So should I be worried and remove it some how? Please help, I'm so scared T-T

Best solution

a b $ Windows 7
February 21, 2012 3:16:07 AM

"winlogon.exe" runs in the background. Winlogon is a part of the Windows Login subsystem, and is necessary for user authorization and Windows activation checks. Do not delete it, it is a valid windows system file.
Share
a b $ Windows 7
February 21, 2012 3:17:40 AM

That's a standard file for Windows. I'm running XP, and it's right there in my Task Manager as a System file.
m
0
l
Related resources
February 21, 2012 11:13:54 AM

Best answer selected by Pepto.
m
0
l
February 22, 2012 2:54:38 PM

Pepto said:
Today after I updated my game "Eve Online" and played it awhile, but then it crashed. I check my processes like I always do when a game crashes to make sure its .exe isn't running after the crash to keep my computer running smooth. I then noticed winlogon.exe, something I never noticed before. I has no use name or description, using non of my CPU and has 1,424K memory being used. I searched it on google and some said it was nothing and others said only if it is effecting your computers performance that it is a virus. I did a system restore to 3 days ago, and its still here, but its not effecting anything on my computer at all. So should I be worried and remove it some how? Please help, I'm so scared T-T


Winlogon.exe is a system process ONLY when it loads from C:\Windows\System32 folder.

There are different files with the same name:

"FriendlyTypeName" definitely not required. Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup!
"ICQ Net" definitely not required. Added by variants of the NETSKY WORMS! Note - this is not the legitimate winlogon.exe process which should NOT appear in Msconfig/Startup!
"Microsoft Visual SourceSafe" definitely not required. Added by the NEVEG.A WORM! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup or the Microsoft Visual SourceSafe program
"System Update2" definitely not required. Added by the AUTOTROJ-C TROJAN!
"WinAuth" definitely not required. Added by an unidentified VIRUS, WORM or TROJAN! Note - this is not the valid winlogon.exe process
"winlogon" must run at start up. Windows Logon Process - handles user logons described here
"winlogon" definitely not required. Hijacker or adult content dialler - file is located in C:\Windows or C:\Winnt, and not in it's System or System32 subdirectory, as is the case with the legitimate Windows Logon (winlogon.exe) process
"winlogon" definitely not required. Added by the TRODAL TROJAN! Note - this is not the legitimate winlogon.exe process, which should not appear in Msconfig/Startup! File is located in C:\Windows or C:\Winnt, and not in it's System or System32 subdirectory
"xp_system" definitely not required.

What is winlogon.exe
m
0
l
!