System Explorer > File Database > winlogon.exe

What is the "winlogon.exe" ?

library

Our database contains 2673 different files for filename winlogon.exe . This files most often belongs to product Microsoft® Windows® Operating System. and were most often developed by company Microsoft Corporation. This files most often have description Windows Logon Application. winlogon.exe Agregate rating is 4 stars - based on 61 reviews. This is executable file. You can find it running in Task Manager as the process winlogon.exe.

On this page, you can find detailed information about the file itself, download information, its demographics distribution, security rating given by users, antivirus reports from AV applications, user's reviews and comments for the file and much more, which can help you to decide if the file can be safe or threat for your computer.

Probably you navigated to this page because some problems with this file or in need of more information. Solving a file-based issue can be sometimes very difficult task even for computer experts. For this and for system monitoring purposes we have developed a free tool which helps you greatly to keep your system under control in very easy and user-friendly way. This tool can also help you to solve problems with high CPU loads, find security issues or speed-up your computer.

winlogon.exe is in most cases the Windows System process responsible for managing user logon and logoff. winlogon is active when the user presses CTRL+ALT+DEL and shows user interface. Specifically for Windows OS : winlogon.exe is a core process from Windows login manager. It handles both login and logout procedures on Windows system. This program is critically important for running of Windows system. Some antiviruses may mark it as a virus. Also as a key process for MS Windows, it can be a target for many viruses. Scan is recommended. Check the MD5 version and directory, it should be located in the %SYSDIR%

winlogon.exe Process

File details of most used file with name "winlogon.exe"

Product:
Microsoft® Windows® Operating System
Company:
Microsoft Corporation
Description:
Windows Logon Application
Version:
6.1.7601.17514
MD5:
1151b1baa6f350b1db6598e0fea7c457
SHA1:
434856b834baf163c5ea4d26434eeae775a507fb
SHA256:
b1506e0a7e826eff0f5252ef5026070c46e2235438403a9a24d73ee69c0b8a49
Size:
390656
Directory:
C:\Windows\System32
Operating System:
Windows 7
Discovered:
January 14, 2011
Occurence:
High oc2

Is the Process "winlogon.exe" Safe or Threat ?

Loading Graph
79% of reviewed files are marked as Safe .
21% of reviewed files are marked as Threat .
34% of reviewed files are marked as System file.
Latest new variant of the file with name "winlogon.exe" was discovered 2 days ago. Our database contains 558 variants of the file "winlogon.exe" with final rating Safe and 282 variants with final rating Threat . Final ratings are based on file reviews, discovered date, users occurence and antivirus scan results.
Process with filename "winlogon.exe" can be Safe or Threat. You must define more file attributes to determine right rating. Our freeware awards winning tool provides easiest way to check your files via our database. Tool contains many useful functions for keep your system under control and uses minimum system resources.
Click Here to Download System Explorer for Free.
Filename "winlogon.exe" is used by Microsoft Windows System files. Many threats uses filenames of System Processes to camouflage itself. You should consider suspected any file which uses system filename and is not stored in system directory or has invalid file version information. Correct system file contains full file version information from Microsoft.

You can also check the list of newly discovered variants of the winlogon.exe

Download of the "winlogon.exe"

Are you searching for download of the "winlogon.exe"? See download instruction for file winlogon.exe

User Reviews of the "winlogon.exe"

There are multiple files in compliance with actual filter settings. All reviews for this files will be displayed.

Reviews for all files with name "winlogon.exe"

  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    lucien photo

    The process "winlogon.exe" runs in the background. Winlogon is a part of the Windows Login subsystem, and is necessary for user authorization and Windows activation checks. http://www.neuber.com/taskmanager/process/winlogon.exe.html Note: The winlogon.exe file is located in the folder C:\Windows\System32. In other cases, winlogon.exe is a virus, spyware, trojan or worm! Check this with Security Task Manager/AV Tools

    (id: 676254)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    3hlav photo

    The process "winlogon.exe" runs in the background. Winlogon is a part of the Windows Login subsystem, and is necessary for user authorization and Windows activation checks. Note: The winlogon.exe file is located in the folder C:\Windows\System32. In other cases, winlogon.exe is a virus, spyware, trojan or worm!

    (id: 508532)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    MikeOne photo

    "Winlogon is the component of Microsoft Windows operating systems that is responsible for handling the secure attention sequence, loading the user profile on logon, and optionally locking the computer when a screensaver is running (requiring another authentication step)." - see more on http://en.wikipedia.org/wiki/Winlogon.exe

    (id: 10115300)
  • THREATrating from user for file %USERPROFILE%\Templates\O86060Z\winlogon.exe

    MikeOne photo

    Worm/Win32.VB virus

    (id: 19733867)
  • THREATrating from user for file C:\Windows\System32\winlogon.exe

    MikeOne photo

    In this MD5 version, this file was marked by most antiviruses as Trojan/W32.Agent virus. Remove it from Your computer. Scan is recommended. Check the MD5 hash and file location, there can more files with this name.

    (id: 46333)
  • THREATrating from user for file %DESKTOP%\writer\writer\winlogon.exe

    MikeOne photo

    Keylogger/Trojan virus

    (id: 19573890)
  • THREATrating from user for file %USERPROFILE%\Configurações locais\Dados de aplicativos\winlogon.exe

    Admin photo

    Most of Antiviruses detects this file as Threat (W32/Rontokbro).

    (id: 2204)
  • THREATrating from user for file %APPDATA%\S85-28348346-UIT83-G3-72366-GDSG-1732735\winlogon.exe

    MikeOne photo

    Generally, the Winlogon is a part of the Windows Login subsystem, process necessary for user authorization and Windows XP activation checks. Comonly it is stored in the %System32% windows directory. In this MD5 version it is malware marked by most antiviruses as a Trojan.Win32.Antavmu.

    (id: 6743)
  • THREATrating from user for file %TEMP%\Local Settings\Application Data\winlogon.exe

    MikeOne photo

    In this MD5 version, this file was marked by most antiviruses as Email-Worm.Win32.Brontok virus. Remove it from Your computer. Scan is recommended. Check the MD5 hash and file location, there can more files with this name.

    (id: 12456)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    MikeOne photo

    winlogon.exe is a core process from Windows login manager. It handles both login and logout procedures on Windows system. This program is critically important for running of Windows system. Some antiviruses may mark it as a virus. Also as a key process for MS Windows, it can be a target for many viruses. Scan is recommended. Check the MD5 version and directory, it should be located in the %SYSDIR%
    "Winlogon is the component of Microsoft Windows operating systems that is responsible for handling the secure attention sequence, loading the user profile on logon, and optionally locking the computer when a screensaver is running (requiring another authentication step)." - see more on http://en.wikipedia.org/wiki/Winlogon.exe

    (id: 19528110)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    (id: 675033)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    (id: 675033)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    (id: 675033)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    Littlebits photo

    Windows Logon Application

    (id: 676254)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    (id: 676254)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    MikeOne photo

    winlogon.exe is a core process from Windows login manager. It handles both login and logout procedures on Windows system. This program is critically important for running of Windows system. Some antiviruses may mark it as a virus. Also as a key process for MS Windows, it can be a target for many viruses. Scan is recommended. Check the MD5 version and directory, it should be located in the %SYSDIR%

    (id: 15565645)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    (id: 15565645)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    (id: 506853)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    (id: 25)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    (id: 181476)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    (id: 1359275)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    (id: 558872)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    (id: 594962)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    (id: 1367309)
  • THREATrating from user for file %TEMP%\winlogon.exe

    MikeOne photo

    In this MD5 version, this file was marked by most antiviruses as Trojan.Generic.3854898 virus. Remove it from Your computer. Scan is recommended. Check the MD5 hash and file location, there can more files with this name.

    (id: 82284)
  • THREATrating from user for file %TEMP%\winlogon.exe

    MikeOne photo

    In this MD5 version, this file was marked by most antiviruses as Trojan.Win32.Jorik virus. Remove it from Your computer. Scan is recommended. Check the MD5 hash and file location, there can more files with this name.

    (id: 309544)
  • THREATrating from user for file %APPDATA%\Microsoft\Windows\Templates\O63636Z\winlogon.exe

    MikeOne photo

    winlogon.exe is a core process from Windows login manager. It handles both login and logout procedures on Windows system. This program is critically important for running of Windows system. Some antiviruses may mark it as a virus. Also as a key process for MS Windows, it can be a target for many viruses. Scan is recommended. Check the MD5 version and directory, it should be located in the %SYSDIR%
    In this version the file is not signed or marked as a Windows file. Scan is recommended.

    (id: 19462057)
  • THREATrating from user for file %USERPROFILE%\058527563614\winlogon.exe

    MikeOne photo

    winlogon.exe is a core process from Windows login manager. It handles both login and logout procedures on Windows system. This program is critically important for running of Windows system. Some antiviruses may mark it as a virus. Also as a key process for MS Windows, it can be a target for many viruses. Scan is recommended. Check the MD5 version and directory, it should be located in the %SYSDIR%
    In this MD5 version the file is infected by a Trojan virus.

    (id: 19401617)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    Admin photo

    Windows Logon Application

    (id: 502180)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    Admin photo

    Windows 8 Logon component

    (id: 12228908)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    D.S.Denton photo

    With this MD5-hash this file is Windows XP SP3 Logon Process, patched decoration program "ResPatch" style - "Black-Dark" version - 3.12.2008

    (id: 2151357)
  • THREATrating from user for file C:\Windows\System32\winlogon.exe

    MikeOne photo

    In this MD5 version, this file was marked by most antiviruses as WPACracked.Winlogon.B virus. Remove it from Your computer. Scan is recommended. Check the MD5 hash and file location, there can more files with this name.

    (id: 17922)
  • SAFErating from user for file C:\Windows\System32\winlogon.exe

    MikeOne photo

    winlogon.exe is a core process from Windows login manager. It handles both login and logout procedures on Windows system. This program is critically important for running of Windows system. Some antiviruses may mark it as a virus. Also as a key process for MS Windows, it can be a target for many viruses. Scan is recommended. Check the MD5 version and directory, it should be located in the %SYSDIR%

    (id: 14286)