Winlogon.exe (Microsoft Windows Logon Process vs Trojan / Virus)

Winlogon.exe is an integrated process Microsoft products in Windows OS and is required for authentication (login / logout) system users or check activation it (the system). Moreover, Winlogon is responsible and protection system the exact delineation Registered users permissions (eg administrator user is full control and ordinary users typically only have access read-only).

Because it is an essential process for Windows, winlogon.exe is the target of many malware that either attaches to it in case of a possible infection or them "borrow" to induce users name in error. Location legitimize this process the system will always C: \Windows\System32. If you find this process to another location on hddOr notice that began to consume more resources abnormally, you should perform a thorough scan of the system because, most likely, it is a virus (worm), trojan or adware.

One of the most famous trojans affecting winlogon.exe process is Vundo (or Virtumondoor MS Juan) Trojan "available" in many ways, so that they cause infections ranging from benign infection to very severe (in which case formatting and reinstalling the system is the only solution). Some of the symptoms of Vundo infection are:

  • advertising popups for fake antivirus
  • screensaver Blue Screen of Death
  • off Windows Automatic Updates
  • off Task Manager, registry Editor si msconfig
  • booting failure in Safe Mode
  • Repeated errors explorer.exe
  • inaccessibility of sites, the majority of security products
  • minimizing the space on hdd
  • overwrite or rename dll-hate
  • registry modification so as to reactivate every restart or boot

Many other trojans or viruses use names similar to that of winlogon.exe, an example being winIogon.exe (I capitalized instead of it), a process often associated with polymorphic virus Win32.Virut (Unfortunately, it can not be removed only by a complete format and reinstall the system), very common and prevalent in recent years. Therefore will recommend you to all updates, especially anti-virus in time, thus maintaining a high security system.

Winlogon.exe (Microsoft Windows Logon Process vs Trojan / Virus)

About the author


Passionate about everything gadget and IT, I write with pleasure on since 2006 and I like to discover with you new things about computers and operating systems macOS, Linux, Windows, iOS and Android.

Leave a Comment