How to Remove the winlogon.exe virus from PC

What is winlogon.exe?

winlogon.exe is a legitimate process file popularly known as Windows NT Logon Application. It is associated with Windows Operating System developed by Microsoft Corporation. It is located in C:\Windows\System32 by default. Malware programmers create files with virus scripts and name them after winlogon.exe with an intention to spread virus on the internet.

Affected Platform: Windows OS

How to check if your computer is infected with winlogon.exe malware?

Keep an eye for the following symptoms to see if your PC is infected with winlogon.exe malware:

Internet connection fluctuates
winlogon.exe takes too much CPU space
PC slows down significantly
Browser automatically redirects to some irrelevant websites
Unsolicited ads and popups starts appearing
Screen freezes constantly

Take the following steps to diagnose your PC for possible winlogon.exe malware attack:

Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.

Step 2: If you notice the file located outside C:\Windows\System32, then you should run an antivirus scan to get rid of the malware.

How to remove winlogon.exe malware from system using Comodo Virus Protection Software?

Step 1: Download the award-winning Free Antivirus.

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.

Step 3: After network detection is complete, press “Close” button for a scan window.

Step 4: Restart your PC.

Step 5: It will take some time for the Comodo Internet Security to update the Virus Protection Software.

Step 6: Proceed with a quick scan that automatically begins after the update.

Step 7: If threats are found during the scanning, you will be prompted with an alert screen.

Step 8: Comodo Antivirus Software will remove the winlogon.exe virus including all other malwares from your computer.

Windows OS PC Security Softwares:

Related Resources:

Malware Entries

First Seen: 12 January 2012 at 12:22 am

No.	Company	File Type	SHA1	MD5	Malware Name	Digitally Signed	File Version	Product Version	Submitted From	Malware Behavior
1	Корпорация Майкрософт	Executable	cdb4fa7887802747 cb23791f1f0b86e2 7a180df2	7393ebcc085c5d42 d0c2966995a39702	Virus.Win32. Virut.Ce	No	5.1.2600.5 512 (xpsp.0804 13-2113)	5.1.2600.5 512	Russian Federation	N/A
2	Microsoft Corporation	Executable	85a61a42854a22c0 dd6ea50f5bb7380a 12f5a336	ebea3283c6e59b34 7cadff9acc0702d6	Virus.Win32. Sality.gen	No	5.1.2600.5 788 (xpsp_sp3_ qfe.090402 -1315)	5.1.2600.5 788	156.198.246.197/32	N/A
3	Корпорация Майкрософт	Executable	2737420da8ce832e 402e5aac9c376b8a 653bd952	11d214719bf752ad 78a283e9be916a8d	Virus.Win32. Virut.Ce	No	5.1.2600.5 512 (xpsp.0804 13-2113)	5.1.2600.5 512	Russian Federation	N/A
4	N/A	Executable	93f220aca123096f b1990c4759dda22f 524e2ef6	80dc313b542375c9 e30e81092550095e	Unclassified Malware	No	N/A	N/A	United States	N/A
5	Microsoft Corporation	Executable	7fb420196910be9e 9c8aa223a3836126 7abf51e8	232d72792946b70d 4ec9d80bc9587f4e	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2113)	5.1.2600.5 512	Egypt	N/A
6	N/A	Executable	07cad10460730063 2c2f97f889c65333 47682fff	85d7a7ee3126184b 27bf2f41b3530ca0	Unclassified Malware	No	1.00	1.00	United States	N/A
7	N/A	Executable	68addae7d4d34776 612554c71c93e05b 0f945414	eef55ca9d552185c f61cd3d64edc2241	Backdoor.MSI L.Bladabindi .A	No	N/A	N/A	United States	N/A
8	VTYJQXnOOdTWOnQu	Executable	a748d87afb5430de feccdb98868332ff d581de5c	a5314d108f984b3b 1e7811e0d3496fba	TrojWare.MSI L.Agent.GA	No	6.9.6.7	6.9.6.7	United States	N/A
9	N/A	Executable	c8d192173c9e0872 ff16af5a8c010ee0 74ce4c63	922746a714871f96 2dd5f62f42e65d46	Unclassified Malware	No	73.0.0.0	73.0.0.0	United States	N/A
10	N/A	Executable	7a578c07a34f80a6 e277883bd012f4f0 40d7c74b	34607f0b4f4eb667 bec648d9d52fe6ec	Unclassified Malware	No	1.0.0.0	1.0.0.0	United States	N/A
11	WRWUYKCAJ	Executable	17c7a96b2ba884ef f2c13fb9eb954c25 427a57eb	43adb71b885ee51c 5df12c89b1c46de0	Unclassified Malware	No	29.12.0014	29.12.0014	India	N/A
12	Microsoft Corporation	Executable	02591c11b29ff359 6e9a80b0fdbcfec0 b5058927	e75350a73031e9ef 593fff474feaac13	Virus.Win32. Sality.gen	No	5.1.2600.5 512 (xpsp.0804 13-2113)	5.1.2600.5 512	197.39.234.251/32	N/A
13	N/A	Executable	798ea6ca30996ebf 95cedd45576d831f 9c119acd	39a62e85370b2df3 611e49e45cdc38cb	Unclassified Malware	No	N/A	N/A	United States	N/A
14	Microsoft Corporation	Executable	ccbe742e0aedcfed f22848bb1aa3a753 0eba8e87	cd18c66437d01d33 97bfe04ba4a927b9	Unclassified Malware	No	5.1.2600.5 512 (xpsp.0804 13-2113)	5.1.2600.5 512	Indonesia	N/A
15	N/A	Executable	2600dbf085db5d26 e19b8238452ab9f9 d309df56	3938ee7f0050c452 75cf3800e2457b38	Unclassified Malware	Yes	N/A	N/A	United States	N/A
16	NDBrain	Executable	c2ca950a73ecb2fe 47848968b4dcbbd6 08afb9c9	2fbea9fd42c98c08 2d71fd34e47c8640	Unclassified Malware	Yes	1.00	1.00	10.108.55.52/32	N/A
17	N/A	Executable	d5d63331e8b118ac ede2cad9e3618e64 c3bd8e28	b3000834ad97ab35 ae29b881a92b4495	TrojWare.Win 32.Ransom.Er gop.A	No	N/A	N/A	United States	N/A
18	Microsoft Corporation	Executable	4108350152fe9894 c10fdffa05eac086 5921f7e1	68b22fe194b0cbf9 282214e2cc6fdf29	Virus.Win32. Sality.gen	No	5.1.2600.5 512 (xpsp.0804 13-2113)	5.1.2600.5 512	156.220.187.82/32	N/A
19	N/A	Executable	334f047803c5ed0e 3cfe675981c1b63f a4bfc595	5f571a82ae950e01 ed18bb0ef9d58e03	Worm.Win32.A mtar.JRAP	No	1.1.09.04	1.1.09.04	India	N/A
20	Microsoft Corporation	Executable	b4e0513c27bdf3a5 138f60124620c4a7 07e3ae64	d755cfc84016f499 a3cb445fa50656b1	Virus.Win32. Virut.CE	No	5.1.2600.5 788 (xpsp_sp3_ qfe.090402 -1315)	5.1.2600.5 788	Egypt	N/A
21	null	Executable	b292f9dfa6db88ac 1302e56fc61b6695 5db84e09	addcbe4225f6a200 f48e9b2c8e606b8d	ApplicUnwnt	No	2.4.2	2.4.2	United States	N/A
22	N/A	Executable	4b6947f31f5df36f 94f88bcb0c105885 3acb8a2f	2826f34f3d34cf18 78f029014f7c406d	ApplicUnwnt	No	N/A	N/A	United States	N/A
23	Playkey software	Executable	0c3dd08d7a1c08f4 3d4d01c843d50d8f 52bb1938	32c33dc01b488180 7afc560ed06d2857	Unclassified Malware	No	1.4.1.6203 9-f276628	1.4.1.6203 9-f276628 Release (playkey@S ERVERAGENT ON	United States	N/A
24	N/A	Executable	6062383e0b1efc08 7e903874864d8a33 3befb433	4aa41a1e4f3ff96f 4a5df83f732e2ec8	Unclassified Malware	No	N/A	N/A	United States	N/A
25	Microsoft Corporation	Executable	d8bbdbf3b0df3ce1 6d2eef0af88818aa 83a937ce	70a50891b9dfa8b4 80aa8bd42ff5796e	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2113)	5.1.2600.5 512	United States	N/A
26	Microsoft Corporation	Executable	975acfe5403bcbde 61dd1f5be9dc9b16 2530bd0e	f0930b2e3c551c6c a0eed5de9e67ab1d	TrojWare.Win 32.Patched.K SU	No	6.1.7601.1 7514 (win7sp1_r tm.101119- 1850)	6.1.7601.1 7514	Venezuela	N/A
27	N/A	Executable	9abf42053f370dbd 1d389e2ba5475e79 cd7920bf	b676cec7c3dcbb2c 53aeb92690013dd0	Unclassified Malware	No	1.0.0.0	1.0.0.0	United States	N/A
28	Microsoft Corporation	Executable	dcfc520cd582b0e2 57a3a50074fa966d 0a110a85	cc5161911ec89e27 13d3b220878f7981	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2113)	5.1.2600.5 512	Egypt	N/A

1 2 3...7

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Safe Entries

First Seen: 08 August 2009 at 6:51 pm

No.	Company	File Type	SHA1	MD5	Digitally Signed	File Version	Product Version	Submitted From
1	N/A	Executable	b359eb112dd0ee08 ad76555583fd244c c13310ec	fffb5a35052b2aaa e22d5e9f7642a69c	No	N/A	N/A	United States
2	kthday@nate.com	Executable	4852f8bf9101e70b 0d11bddb97059d47 405e2335	b5880e129ddcebc0 b7e4c13682c45fcf	No	2.0.1.4	2.0.1.4	United States
3	Microsoft Corporation	Executable	79d76ab88cda9a3c 608ebf5e3d508a85 702b324d	54b5905ed8032bf1 1572640df60f7eda	No	4.00	4.00	United States
4	Microsoft Corporation	Executable	9d9e8c4f35b0b5d6 077d71eb279bb319 5c71979b	87a00ed70fec36d0 dd968e5058c29aa1	No	6.1.7600.1 6447 (win7_gdr. 091027-150 3)	6.1.7600.1 6447	United States
5	ReactOS Development Team	Executable	b51c654a8e392ece e399a7261ac662c6 5aaf9ef4	d132674c7832b41d ed7f3d6933448815	No	0.4.7	0.4.7	Romania
6	Microsoft Corporation	Executable	2e2f86c0fbb19e7d b1b7c6cd9f45934a 567134e9	7c94fda3809015b8 f2208d2e1c221f17	No	6.3.9600.1 6384 (winblue_r tm.130821- 1623)	6.3.9600.1 6384	10.100.19.19/32
7	ReactOS Development Team	Executable	b51c654a8e392ece e399a7261ac662c6 5aaf9ef4	d132674c7832b41d ed7f3d6933448815	No	0.4.7	0.4.7	10.108.51.194/32
8	Microsoft Corporation	Executable	61841492bd0f44e2 be52473cb84c2698 e0fbe71e	ff1652ec66dcb7e6 ab4d29f01cc24364	No	5.1.2600.2 149 (xpsp_sp2_ rc2.040610 -1520)	5.1.2600.2 149	United States
9	Microsoft Corporation	Executable	344a9fe7b9c6f3cb 24923e6aa50aa5f2 e4267ad4	1562571d6b154109 8e677c3bb78709a0	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	United States
10	Microsoft Corporation	Executable	2d7d1dd2e339334b dfea49d9e271ae36 094eb6ee	8ec6a4ab12b8f375 9e21f8e3a388f2cf	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	United States
11	Zehm & Associates	Executable	f49bddf0303fcd48 8c3534cf134d00d7 31e205af	483421fb3da24e88 ae3b3337967cf4a4	No	1.56.0.0	1.56.0.0	United States
12	Microsoft Corporation	Executable	c6a7e4207b81f57d 86fe5a8df8a22a82 392403b9	8014ea1627d97163 f060fea7fdb390ec	No	5.1.2600.5 512 (xpsp.0804 13-2113)	5.1.2600.5 512	United States
13	Microsoft Corporation	Executable	2e2f86c0fbb19e7d b1b7c6cd9f45934a 567134e9	7c94fda3809015b8 f2208d2e1c221f17	No	6.3.9600.1 6384 (winblue_r tm.130821- 1623)	6.3.9600.1 6384	Romania
14	Microsoft Corporation	Executable	4c67de4828cd20af fcdf59f3b519a849 a5f5979a	6d78c376803e8f42 dd6e06dc76bbe3a7	No	5.1.2600.5 512 (xpsp.0804 13-2113)	5.1.2600.5 512	10.108.51.235/32

1 2 3 4

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Malware Search Engine

How to Remove “winlogon.exe”

What is winlogon.exe?

How to check if your computer is infected with winlogon.exe malware?