What is the "winlogon.exe" ? Variant 17922

Our database contains 3174 different files for filename winlogon.exe but this page contains information about single file with specific attributes. If you want to see general information about the winlogon.exe then visit General Information Page . You can also check most distributed file variants with name winlogon.exe. This file belongs to product Betriebssystem Microsoft® Windows® and was developed by company Microsoft Corporation. This file has description Windows NT-Anmeldung. Agregate rating is 1(1) stars - based on 1 reviews.This is executable file. You can find it running in Task Manager as the process winlogon.exe.

Product:: Betriebssystem Microsoft® Windows®
Company:: Microsoft Corporation
Description:: Windows NT-Anmeldung
Version:: 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
MD5:: 33aa1f31de9099bb306f4195fec61421
SHA1:: d2ab9de934836f43628db8e17ec0c9f4a9c6c3d2
SHA256:: 6f643ffaa59510faa83ad1c17076fade7a52825138d8bb4fd2ffb888e8bdaf1e
Size:: 507392
Directory:: C:\Windows\System32
Operating System:: Windows XP
Occurence:: Low

Is the Process "winlogon.exe" Safe or Threat ?

Loading Graph

100% of reviewed files are marked as Threat .

Our final rating for this file is Threat. Final rating is based on file reviews, discovered date, users occurence and antivirus scan results.

96% of reviewed files with different MD5 are marked as Safe .

68% of reviewed files with different MD5 located in different directory are marked as Safe .
32% of reviewed files with different MD5 located in different directory are marked as Threat .

User Reviews of the "winlogon.exe"

Add Own Review

THREATrating from user MikeOne (Variant: 17922)
In this MD5 version, this file was marked by most antiviruses as WPACracked.Winlogon.B virus. Remove it from Your computer. Scan is recommended. Check the MD5 hash and file location, there can more files with this name.

Reviews of all winlogon.exe variants

Reviews for different files with filename "C:\Windows\System32\winlogon.exe"

SAFErating from user Yo for file C:\Windows\System32\winlogon.exe (Variant: 41881675)
Safe as long as it is part of System32
SAFErating from user ben for file C:\Windows\System32\winlogon.exe (Variant: 41170491)
ok
SAFErating from user Ben for file C:\Windows\System32\winlogon.exe (Variant: 41170491)
ok
SAFErating from user roofjunkie for file C:\Windows\System32\winlogon.exe (Variant: 40502443)
OK
THREATrating from user Stiv for file C:\Windows\System32\winlogon.exe
SAFErating from user street for file C:\Windows\System32\winlogon.exe
SAFErating from user Bert for file C:\Windows\System32\winlogon.exe
SAFErating from user noviczky for file C:\Windows\System32\winlogon.exe
SAFErating from user MikeOne for file C:\Windows\System32\winlogon.exe (Variant: 24851054)
winlogon.exe is a core process from Windows login manager. It handles both login and logout procedures on Windows system. This program is critically important for running of Windows system. Some antiviruses may mark it as a virus. Also as a key process for MS Windows, it can be a target for many viruses. Scan is recommended. Check the MD5 version and directory, it should be located in the %SYSDIR%
SAFErating from user 3hlav for file C:\Windows\System32\winlogon.exe
SAFErating from user Mikel for file C:\Windows\System32\winlogon.exe
SAFErating from user Олег Разин for file C:\Windows\System32\winlogon.exe
SAFErating from user MikeOne for file C:\Windows\System32\winlogon.exe (Variant: 19528110)
winlogon.exe is a core process from Windows login manager. It handles both login and logout procedures on Windows system. This program is critically important for running of Windows system. Some antiviruses may mark it as a virus. Also as a key process for MS Windows, it can be a target for many viruses. Scan is recommended. Check the MD5 version and directory, it should be located in the %SYSDIR%
"Winlogon is the component of Microsoft Windows operating systems that is responsible for handling the secure attention sequence, loading the user profile on logon, and optionally locking the computer when a screensaver is running (requiring another authentication step)." - see more on http://en.wikipedia.org/wiki/Winlogon.exe