What is winsys.exe?
Winsys.exe is a executable file (a program) within Windows. The filename extension .exe denotes an executable file. You should only run executable files from publishers you trust, because executable files can potentially change your computer settings or harm your computer. The free file information forum can help you determine if winsys.exe is a virus, trojan, spyware, or adware that you can remove, or a file belonging to a Windows system or to an application you can trust.
Winsys.exe file information
The process known as DOT MFC Application or Aurthor: Ben Nelson or Module or WinLog Daemon Service
belongs to software DOT Application or Winlog or winsys32 or NNC module or DOT MFC Application
by Microsoft (www.microsoft.com) or NoName or Daemon (www.daemon-tools.cc) or MLabs (www.mlabs.com).
Description: Winsys.exe is not essential for Windows and will often cause problems. The file winsys.exe is located in the folder C:\Windows\System32.
Known file sizes on Windows 7/XP are 135,168 bytes (63% of all occurrences), 200,704 bytes and 7 more variants.
The software has no file description. Winsys.exe is not a Windows core file. The program has no visible window. Winsys.exe is located in the Windows folder, but it is not a Windows core file. The program starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell). Winsys.exe is able to record inputs. Therefore the technical security rating is 63% dangerous, however also read the users reviews.
Recommended: Identify winsys.exe related errors
If winsys.exe is located in the folder C:\Windows, the security rating is 82% dangerous. The file size is 12,288 bytes (47% of all occurrences), 8,704 bytes and 7 more variants. There is no information about the author of the file. The file is not a Windows core file. The winsys.exe file is an unknown file in the Windows folder. The program has no visible window. Winsys.exe is able to record inputs, manipulate other programs, monitor applications and connect to the Internet.
If winsys.exe is located in a subfolder of "C:\Documents and Settings", the security rating is 48% dangerous. The file size is 28,160 bytes (50% of all occurrences) or 548,864 bytes. The program is not visible. Winsys.exe is not a Windows core file.
If winsys.exe is located in a subfolder of C:\Windows, the security rating is 88% dangerous. The file size is 49,152 bytes.
If winsys.exe is located in a subfolder of "C:\Program Files", the security rating is 64% dangerous. The file size is 361,984 bytes.
If winsys.exe is located in a subfolder of C:\Windows\System32, the security rating is 70% dangerous. The file size is 3,415,040 bytes.
External information from Paul Collins:
There are different files with the same name:
- "Microsoft Update" definitely not required. Added by the RBOT-GV WORM!
- "ssate.exe" definitely not required. Added by the BEAGLE.K WORM!
- "Winsys" can run at start up. Win-Spy - surveillance software that creates records of everything people do on a computer, ie, spying or monitoring depending upon how you call it
Important: Some malware camouflages itself as winsys.exe, for example W32.SillyFDC or Adware.Gen (detected by Symantec), and Worm:Win32/Autorun.BZ or VirTool:Win32/VBInject (detected by Microsoft). Therefore, you should check the winsys.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.
BudeII (further information)
Rockman (further information)
Erebus (further information)
Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.
Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.
SpeedUpMyPC scans, cleans, repairs and optimizes your computer.
mcieplg.dll d347bus.sys tabuserw.exe winsys.exe symlcbrd.sys etdctrl.exe cledx.exe eushlext.dll mcbrhlpr.dll avgse.dll sqlbrowser.exe [all]