How to Remove winlogon.exe Virus? | winlogon.exe Malware

What is winlogon.exe?

winlogon.exe is a legitimate process file popularly known as Windows NT Logon Application. It is associated with Windows Operating System developed by Microsoft Corporation. It is located in C:\Windows\System32 by default. Malware programmers create files with virus scripts and name them after winlogon.exe virus with an intention to spread virus on the internet.

Affected Platform: Windows OS

How to check if your computer is infected with winlogon.exe virus?

Keep an eye for the following symptoms to see if your PC is infected with winlogon.exe Virus:

Internet connection fluctuates
winlogon.exe takes too much CPU space
PC slows down significantly
Browser automatically redirects to some irrelevant websites
Unsolicited ads and popups starts appearing
Screen freezes constantly

Take the following steps to diagnose your PC for possible winlogon.exe virus attack:

Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.

Step 2: If you notice the file located outside C:\Windows\System32, then you should run an antivirus scan to get rid of the malware.

How to remove winlogon.exe Virus from system using Comodo Virus Protection Software?

Step 1: Download the award-winning Free Antivirus.

Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.

Step 3: After network detection is complete, press “Close” button for a scan window.

Step 4: Restart your PC.

Step 5: It will take some time for the Comodo Internet Security to update the Virus Protection Software.

Step 6: Proceed with a quick scan that automatically begins after the update.

Step 7: If threats are found during the scanning, you will be prompted with an alert screen.

Step 8: Comodo Antivirus Software will remove the winlogon.exe virus including all other malwares from your computer.

Windows OS PC Security Softwares:

Related Resources:

Website Malware Directory Resources:

Malware Entries

Safe Entries

First Seen: 04 November 2011 at 8:17 am

No.	Company	File Type	SHA1	MD5	Malware Name	Digitally Signed	File Version	Product Version	Submitted From	Malware Behavior
1	N/A	Executable	321057f2c1aa72bc ceedd26fa3f1a275 497aad40	ede072943d7ee3f3 db8101be8d1e605f	Virus.Win32. Sality.gen	No	N/A	N/A	154.237.218.247/32	N/A
2	NULL	Executable	b6a663c8cdc896b9 b1a534e30fdb05fe 72354390	47142e658c3e23b7 9c74a68eac3d3f72	TrojWare.Win 32.Agent.iya kt	No	1.0.1.0	1.0.1.0	10.224.25.177/32	N/A
3	NULL	Executable	eb976cb886b2a214 467bccba0f2d44a6 b00792ca	de85012569ee1d41 bc4119f4d01c0fa3	Unclassified Malware	No	1.00	1.00	Internal Submission	N/A
4	N/A	Executable	4ceb94539fab6fe8 6a19f74bec9e844c ac736697	4915989c241e93c4 e2941c83ceb27c9a	Unclassified Malware	No	N/A	N/A	Internal Submission	N/A
5	Microsoft Corporation	Executable	91c6e8f4136b60f6 30ef757c6e00b07c f498f618	40c0e204fa64dfff 952819a899b5fce0	Virus.Win32. Virut.CE	No	5.1.2600.5 512 (xpsp.0804 13-2113)	5.1.2600.5 512	Turkey	N/A
6	Microsoft Corporation	Executable	a884a99f3319241b 6256f9c9fee49a74 1cb1539d	0f53c19b7d184933 4f52f3518a38a0dd	Virus.Win32. Virut.CE	No	5.1.2600.6 443 (xpsp_sp3_ qfe.130904 -1137)	5.1.2600.6 443	102.41.88.6/32	N/A
7	N/A	Executable	828d8c3eaa3e7e8b 70cae7d0f8e4d47d c32a587e	2ddc8601e5d0b76c 80aa46eef32ec825	TrojWare.Win 32.GameThief .Magania.~NW ABU	No	N/A	N/A	Internal Submission	N/A
8	N/A	Executable	b4b3f27777236a0e 259ca0940290dd98 d823f64b	b2f18ad8cd7a3738 fde601d8f9889699	TrojWare.Win 32.Kryptik.X CY	No	N/A	N/A	Internal Submission	N/A
9	N/A	Executable	016bfabe3e4483e9 c155759a38b67b03 bb6143dd	3a91e6299be406f1 bfc0b75122385038	TrojWare.Win 32.Remex.bfj b	No	N/A	N/A	Russian Federation	N/A
10	Microsoft Corporation	Executable	a5aa0f332d2b0871 c3d12671a95d0f3f b76d3585	ac70e37a21d29c8c b31608166cfed8bb	Virus.Win32. Virut.CE	No	5.1.2600.5 743 (xpsp_sp3_ qfe.090113 -1305)	5.1.2600.5 743	Turkey	N/A
11	Microsoft Corporation	Executable	bb1515a0d9036859 033beef4076855be 49deaaf3	ba9d70180207e35d 88c85814816d7935	Virus.Win32. Parite.gen	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Turkey	N/A
12	N/A	Executable	f951faad4428f3b0 732d4835d2ac61f9 4a18b0e3	9e120f73949f4ebb 58606e90d8c263fb	TrojWare.Win 32.KRotten.~ A	No	N/A	N/A	Belarus	N/A
13	N/A	Executable	2d8e82d650dd575c e4c0d56a740f0c34 2b21c389	066e9d4a618fbb96 1540f4b4c11b550c	Unclassified Malware	No	N/A	N/A	Russian Federation	N/A
14	CyberLink	Executable	5f12df5ee7517081 f4da751b3c15c409 782d7fd9	12712a8669d7e0ea 356223eec78d706e	TrojWare.Win 32.Kryptik.W VD	No	7.0.0.1731	7.0.0.1731	Internal Submission	N/A
15	Корпорация Майкрософт	Executable	7a431d743d55b1e0 cef5e5cf966ecbae 9ea86113	2bbd57a277d05091 22bdf092cfe81d83	TrojWare.Win 32.Remex.bfj b	No	6.00.2900. 5512 (xpsp.0804 13-2105)	6.00.2900. 5512	Russian Federation	N/A
16	N/A	Executable	6fef74bd01edb7bf a669c064f1609cbc 66ff8b7a	aeb064db1525a6fa c58bb364253e8fff	Win32.Neshta .A	No	N/A	N/A	Turkey	N/A
17	XeXE	Executable	6f831ed4db1653ce bad7c977ccfb859a 087057e4	f66a1c332462a414 3ff97688853169d1	Unclassified Malware	No	32.02.0006	32.02.0006	Internal Submission	N/A
18	N/A	Executable	e59f2ee3dbc71abe 32975d0b0d954635 4232ec49	f86c2fb3c00fe61b d8b09a8fdad039bf	TrojWare.Win 32.Agent.agm pu	No	N/A	N/A	10.224.25.177/32	N/A
19	N/A	Executable	1b90f5b0c3c8303d 843fc4cb75bb7cfe ff97cd7f	39c4937951bb1eb2 c9b68258c13e4856	Packed.Win32 .Packer.~GEN	No	N/A	N/A	Philippines	N/A
20	NULL	Executable	06bbaee1afdf25eb d4ceb4f3e2008020 5b4be5d1	9e076cb108d31eac 7afcc4c0c07734fb	TrojWare.MSI L.Agent.GA	No	0.0.0.0	0.0.0.0	Internal Submission	N/A
21	N/A	Executable	447d130753a0de3a a3fbd2a9f8bdd2e8 9c76d690	2f0dd45844e4506a 71f19cd933054d2e	Win32.Neshta .A	No	N/A	N/A	Russian Federation	N/A
22	N/A	Executable	0a543eb984aaff5c 181f408e24dddbbd 2a86318c	ae3a6330721ad8e3 567c1d06a124ca6b	Unclassified Malware	No	N/A	N/A	Internal Submission	N/A
23	ﾼﾍﾆﾏﾋﾐﾬﾊﾖﾋﾚ￑ﾰﾭ¸	Executable	a8ac87adb34d5a85 32b85cba515d310e f38a7659	965db4a5c1254b63 d5722e34932d5a62	Unclassified Malware	No	ￎ￑ￏ� �	ￎ￑ￏ� �	Internal Submission	N/A
24	Microsoft Corporation	Executable	8e8aa8b5d91115af 6c703d52590a3ea8 70914e9d	3e69c0b809b0c812 1b46294082f08676	Virus.Win32. Parite.gen	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Turkey	N/A
25	N/A	Executable	1c774909e19c1b5d d326ed43c5a08547 12ba5fc6	75e919f682ee2a4c e5ce3e0445dfe8f5	Unclassified Malware	No	N/A	N/A	United States	N/A
26	NULL	Executable	029c2daab2e30443 bd888ef39496df2b 0c5ceb72	1a69949620d13ca5 a3cf9d95403a41fb	Unclassified Malware	No	NULL	NULL	Internal Submission	N/A
27	Корпорация Майкрософт	Executable	de870ccaafee4244 4a8df2770b0d5484 c0ebadde	0e7bbe6f1279871d 04b72a87531ca9e0	TrojWare.Win 32.Remex.bfj b	No	5.1.2600.5 512 (xpsp.0804 13-2108)	5.1.2600.5 512	Russian Federation	N/A
28	N/A	Executable	067de2514f4a70a5 f84c1ecf6c2b6a4c 996cdde6	b0b94b38442f6c95 450f8e3eb068cacf	Virus.Win32. Sality.gen	No	1.00	1.00	India	N/A
29	N/A	Executable	1e86f071c910ed97 dbb731f6a3100665 1d3073eb	18d481cd2ab01143 5dd5d65126747425	Unclassified Malware	No	N/A	N/A	Internal Submission	N/A
30	N/A	Executable	2b84b2d72ec4d9d6 74d51527ca3b1c05 b7c6b0b8	07a47fdeba53b5d6 9e2c9ff90fe6702c	Unclassified Malware	No	N/A	N/A	Russian Federation	N/A
31	Microsoft Corporation	Executable	bf3f556656543c70 e04b86e90caf8942 e207560a	5b1ea1fa88c66601 a017106969c3a840	Virus.Win32. Parite.gen	No	5.1.2600.5 512 (xpsp.0804 13-2113)	5.1.2600.5 512	Algeria	N/A
32	Microsoft Corporation	Executable	e20d2cacd6d3c3ed 43f26b25cecee0aa 17be6d4b	73cbb789a4f4a852 c8913e6495e0e5d3	Virus.Win32. Sality.gen	No	2.00.0927. 0	2.00.0927. 0	Ukraine	N/A
33	Microsoft Corporation	Executable	d160b1d7c694726a 930e3d8d024cbafa 812e2442	bd7e77149463033d ba0f00dad0e01ffa	Virus.Win32. Virut.CE	No	6.1.7600.1 6385 (win7_rtm. 090713-125 5)	6.1.7600.1 6385	Indonesia	N/A
34	N/A	Executable	ba97f18f6b821dac f2ba886d5bba9d8e acc2f279	ecc587c8f71c57b3 574b71fe6eed7438	Unclassified Malware	No	N/A	N/A	Russian Federation	N/A
35	N/A	Executable	5feb03df611970f4 c5b2b929f6501827 45b3d082	31316c9e3d31fae1 df3eb3acf44dea7c	TrojWare.Win 32.Ransom.Xo rist.ET	No	N/A	N/A	Argentina	N/A
36	Creative Technology Ltd	Executable	a51b32c081c9580e adae958ad06a52a2 45e1a88b	0d12cdeb88c3caae 203fdbd7d2461aca	TrojWare.Win 32.Kryptik.B MNA	No	2.61.7.4	2.61.0.0	Internal Submission	N/A
37	N/A	Executable	1d0ba1b2269b57b4 2044ef434b0be334 e16b95d0	f2f9ef7486779398 3fcac21552c65967	Win32.Neshta .B	No	N/A	N/A	31.132.208.96/32	N/A
38	quesi	Executable	f18870376126e2f2 66576da0f0629f0d 5d83a7c5	acbb463635bf72ba 70744111c07b1b18	Unclassified Malware	No	66.66.0666	66.66.0666	United States	N/A

Prev 1 2 3...10 Next

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Safe Entries

First Seen: 27 June 2008 at 12:21 pm

No.	Company	File Type	SHA1	MD5	Digitally Signed	File Version	Product Version	Submitted From
1	N/A	Executable	c56b7a5590661954 8193067b52d24b45 aef75c6f	d3af1bda57f41ebf 5bb9c43101e878af	No	N/A	N/A	Internal Submission
2	Microsoft Corporation	Executable	40819a2cedbb846a 173f0989e34163e6 f0f03fa4	4535aa147d595876 fbb714d7b65d053a	No	4.00	4.00	United States
3	Microsoft Corporation	Executable	51882f839215aadc 8bfa3cfb4d78dcf1 555ea32e	44361d919e314893 f2571179994bb356	No	6.1.7600.2 0560 (win7_ldr. 091027-150 3)	6.1.7600.2 0560	10.224.1.116/32
4	Microsoft Corporation	Executable	a66d3ac3b828ceee 4da8b6d92db98b3d d84caf5d	c06ba1f360cef6ab 51f41b3d0d5fe92d	No	6.2.9200.1 6384 (win8_rtm. 120725-124 7)	6.2.9200.1 6384	United States
5	Microsoft Corporation	Executable	981500f7d2477760 c3b46be1331141ce 321f5052	9df09a059a5f4289 3a250837f519f22c	No	5.1.2600.2 9 (xpclnt_qf e.010827-1 803)	5.1.2600.2 9	United States
6	Microsoft Corporation	Executable	ca6f4be9738c17a3 390f11507a4cc6ad 1c7d423b	d670e84f354c4973 f6309c59201a85a5	No	4.00	4.00	United States
7	N/A	Executable	5fa8b210f7d6c1b8 c1a9475d6c432c43 4bf0f5b6	0f60cb7e3865f714 a579fec371ef3aae	No	N/A	N/A	Internal Submission
8	ReFog Software	Executable	87321f18bf7a5b0e 1a254ad40e857c6f 04f4b631	4967f8981164d575 90a69d281d358adb	No	1.4.6.46	1.4.6.46	United States
9	Microsoft Corporation	Executable	a5396141cab8b22d 9d88b28a81408953 7dce366a	01c3346c241652f4 3aed8e2149881bfe	No	5.1.2600.2 180 (xpsp_sp2_ rtm.040803 -2158)	5.1.2600.2 180	Internal Submission
10	N/A	Executable	b359eb112dd0ee08 ad76555583fd244c c13310ec	fffb5a35052b2aaa e22d5e9f7642a69c	No	N/A	N/A	Internal Submission
11	Microsoft Corporation	Executable	eda05960a3af6514 c28f39d024e1b830 26cd9ae0	764c5e496e32e164 49522bf236ebb87d	No	10.0.19041 .1387 (WinBuild. 160101.080 0)	10.0.19041 .1387	Canada
12	N/A	Executable	5da52819a5010932 bcab3c837cf2dbce d4364da7	41403f5845598af3 310bebd2f230bdf7	No	N/A	N/A	Internal Submission

Prev 1 2 3 Next

Display 4 items per page

4 items per page
8 items per page
16 items per page
32 items per page

Malware Search Engine

How to Remove “winlogon.exe”

What is winlogon.exe?

How to check if your computer is infected with winlogon.exe virus?