English | Deutsch


How to remove an winlogin error


The free file information forum can help you determine if winlogin.exe is a virus, trojan, spyware, or adware that you can remove, or a file belonging to a Windows system or an application you can trust.

Click to Run a Free Scan for winlogin.exe related errors


Winlogin.exe file information

The process known as mIRC or Winlogin status or dfhyhr1ty1t1ezefzefzef or IQMVdfL5Atw3DQ7 or Generic Host Process for Win32 Services or System or UUTZJCJoBA or Windows Session Loginner

appears to be part of software mIRC or Microsoft® Windows (version 2000 Operating System) or NEXCqezmS1u9k or System or kIsaTyn or br1rytzzfefsvvzzerezrs or wNdyl or BZm43W2GxgbB

by mIRC Co. (www.mirc.com) or J & A or Microsoft (www.microsoft.com) (version 2011) or YQEMso7buqzPTm7E or tryrt4rhrthrthrthrzrgq or Ujf1R or TQOnCvfNPkM or Microsofti.

Description: winlogin.exe is located in the folder C:\Windows\System32. Known file sizes on Windows 7/XP are 20,992 bytes (27% of all occurrences), 203,209 bytes and 9 more variants. http://www.file.net/process/winlogin.exe.html 
Winlogin.exe is not a Windows core file. File winlogin.exe is a file without information about the developer of this file. The file is an unknown file in the Windows folder. The program is not visible. Program starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, C:\Windows\win.ini, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run). Program uses ports to connect to a LAN or the Internet. winlogin.exe is able to record inputs, hide itself and monitor applications. Therefore the technical security rating is 74% dangerous, however also read the users reviews.

Recommended: Identify winlogin.exe related errors

If winlogin.exe is located in a subfolder of "C:\Documents and Settings", the security rating is 61% dangerous. The file size is 15,000 bytes (33% of all occurrences), 26,112 bytes and 7 more variants. The program is not visible. File winlogin.exe is not a Windows system file. The program has no file description. The process starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, C:\Windows\win.ini, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run). winlogin.exe is able to record inputs.

If winlogin.exe is located in a subfolder of C:\Windows\System32, the security rating is 91% dangerous. The file size is 502,272 bytes (50% of all occurrences), 812,852 bytes and 4 more variants. There is no description of the program. It is located in the Windows folder, but it is not a Windows core file. The program is not visible. The file is not a Windows core file. winlogin.exe is able to record inputs, monitor applications, hide itself and manipulate other programs.

If winlogin.exe is located in a subfolder of "C:\Program Files", the security rating is 50% dangerous. The file size is 344,064 bytes (42% of all occurrences), 250,600 bytes, 503,808 bytes, 4,165,632 bytes or 133,377 bytes.

If winlogin.exe is located in the folder C:\Windows, the security rating is 66% dangerous. The file size is 197,090 bytes (20% of all occurrences), 52,224 bytes, 51,716 bytes, 24,576 bytes or 49,837 bytes.

If winlogin.exe is located in the Windows Temp folder, the security rating is 61% dangerous. The file size is 311,296 bytes (50% of all occurrences), 15,000 bytes or 192,512 bytes.

If winlogin.exe is located in a subfolder of the "My Files" folder, the security rating is 76% dangerous. The file size is 11,057 bytes (66% of all occurrences) or 11,233 bytes.

If winlogin.exe is located in a subfolder of C:\Windows, the security rating is 68% dangerous. The file size is 285,184 bytes.

External information from Paul Collins:
There are different files with the same name:

  • "NDplDeamon" definitely not required. Added by the RANDEX.E WORM!
  • "Windows Logon" definitely not required. Added by the SPYBOT-C TROJAN!
  • "WinLogin" definitely not required.
  • "winlogon" definitely not required. Added by the RANDEX.E WORM!

Important: Some malware camouflages itself as winlogin.exe, particularly when located in the c:\windows or c:\windows\system32 folder. Therefore, you should check the winlogin.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.



Score

User Comments

True Active Monitor. This is a monitoring software that is installed by the user to monitor the actions performed on the computer. This is installed at the workstation usually by the owner of the equipment
  Ron  
keylogger and system monitor-legit program if you installed it, dangerous if you are unaware of where it came from-software called TAM-true active monitor
  R  
winlogin.exe is added to the system as a result of the RANDEX.E virus. It is an IRC Trojan horse gives remote access to your computer using IRC.
  Mary  
It's your Windows (example, Windows 7) login program!
  J  
Rating chart


Summary: Average user rating of winlogin.exe: based on 7 votes with 4 reviews.
1 user think winlogin.exe is essential for Windows or an installed application. 1 user think it's neither essential nor dangerous. 1 user suspect danger. 4 users think winlogin.exe is dangerous and recommend removing it.


Do you have additional information? Help other users!
What do you know about winlogin.exe: 
How do you rate it: 
Link for more info's: 
Your Name: 


Winlogin scanner


Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

SpeedUpMyPC scans, cleans, repairs and optimizes your computer.


Other processes


winlogin.exe [all]