English | Deutsch

How to remove winIogon error


The free file information forum can help you find out if winIogon.exe is a virus, trojan, spyware, adware which you can remove, or a file belonging to a Windows system or an application you can trust.

Software  Click to Run a Free Scan for winIogon.exe related errors


winIogon.exe file information

The process belongs to the software winIogon.exe or mIRC or csrss by unknown.

Description: File winIogon.exe is located in the folder C:\Windows\System32. Known file sizes on Windows XP are 161,792 bytes (16% of all occurrence), 90,112 bytes, 68,608 bytes, 73,520 bytes, 110,592 bytes, 64,902 bytes, 95,232 bytes, 53,996 bytes, 56,687 bytes, 40,960 bytes, 64,540 bytes.
There is no description of the program. The process starts when Windows starts (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell, C:\Windows\win.ini, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Run, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run). It is not a Windows system file. The program is not visible. The file is located in the Windows folder, but it is not a Windows core file. winIogon.exe is able to monitor applications. Therefore the technical security rating is 77% dangerous, however also read the users reviews.

Recommended: Identify winIogon.exe related errors

If winIogon.exe is located in the folder C:\Windows then the security rating is 100% dangerous. File size is 127,956 bytes (33% of all occurrence), 447,169 bytes, 128,402 bytes. There is no description of the program. The program is not visible. The file is located in the Windows folder, but it is not a Windows core file. The process is loaded during the Windows boot process (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell, C:\Windows\win.ini, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Run, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run). It is not a Windows system file. Program uses ports to connect to LAN or Internet. winIogon.exe is able to record inputs, hide itself, monitor applications, manipulate other programs.

If winIogon.exe is located in a subfolder of "C:\Program Files" then the security rating is 74% dangerous. File size is 525,312 bytes. There is no file information. The program has no visible window. The file is not a Windows system file. The process listens for or sends data on open ports to LAN or Internet. winIogon.exe is able to hide itself.

Important: Some malware camouflage themselves as winIogon.exe, particularly if they are located in c:\windows or c:\windows\system32 folder. Thus check the winIogon.exe process on your pc whether it is pest. We recommend Security Task Manager for verifying your computer's security. It is one of the Top Download Picks of 2005 of The Washington Post and PC World.

Score

User Comments

Rate
steals part of my bandwidth, it's one of a series of infected files that i keep getting like algs.exe and logon.exe which keep popping up which somehow avoid any detection/deletion by the programs i've tried (McAffee, CA Antivirus and Antivir Guard). I got it off a p2p site
  Sorena  
Rate
Removed with RegRun, McAfee, and Norton AntiVirus
  Death of the Virus   (further information)
Rate
always getting attacked, high cpu-usage, internet connection problems
   
Rate
Have this on my computer, turned firewall off for 10 mins and got it. It closes task manager as soon as you open it so you can't end the process, if you have this problem get Security Task Manager
   
Rate
WinIogon (as opposed to Winlogon - I not L) is a dropper from an exploit of the LSASS vulnerability in Windows. Patch it and all is fine
  Albinus   (further information)
Rate
Can only be deleted in Reconvery Console. Set attributes -RHS to make acessible to delete.
   
Rate
This is a confirmed spyware.
  FarriJ   (further information)
Rate
constantly getting attacked
  Weijie  
Rate
Blocks access to registry, task manager, and command prompt. Disables Integrated Firewall in Windows XP SP2. Extremely difficult if not impossible to remove without a complete reinstallation of windows. Currently being hosted on http://starcrap.cjb.net but CJB is not doing anything about it after several notifications.
  Skoal  
Rate
It disable system restore and msconfig.
  Adam King  
Rate
Back-Door ASB.gen
   
Rate
Virus and/or spyware
   
Rate
Virus
   
Rate
blocks registry and task manager
   

Summary: 2 users suspect danger. 13 users think winIogon.exe is dangerous and recommend to remove it.. 1 user doesn't grade winIogon.exe ("not sure about it").

Do you have additional information?
What do you know about winIogon.exe:
How do you rate it:
Link for more info's:
Your Name:

winIogon scanner


image

Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

Registry Booster free scans, cleans, repairs and optimizes your system.

Other processes


winIogon.exe [all]