Most antivirus programs identify winlognn.exe as malware—such as Microsoft identifies it as Trojan:Win32/Ertfor.A, and TrendMicro identifies it as TROJ_FAKEALE.BX or TROJ_DLDR.AR.
The process does not contain any data about its author.
Description: Winlognn.exe is not essential for Windows and will often cause problems. The winlognn.exe file is located in a subfolder of the user's profile folder or sometimes in a subfolder of C:\Windows or in the Windows folder for temporary files.
The file size on Windows 10/8/7/XP is 15,000 bytes.
There is no information about the author of the file. Winlognn.exe is not a Windows core file. The program is not visible. The process is loaded during the Windows boot process (see Registry key: MACHINE\Run, Run, DEFAULT\Run). The software listens for or sends data on open ports to a LAN or the Internet. Therefore the technical security rating is 84% dangerous.
Recommended: Identify winlognn.exe related errors
Important: You should check the winlognn.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.
The following programs have also been shown useful for a deeper analysis: ASecurity Task Manager examines the active winlognn process on your computer and clearly tells you what it is doing. Malwarebytes' well-known Banti-malware tool tells you if the winlognn.exe on your computer displays annoying ads, slowing it down. This type of unwanted adware program is not considered by some antivirus software to be a virus and is therefore not marked for cleanup.