More than one possible match was found; all matches are listed below.
Match #1
winlogon.exe (WinLogon trojan)
PC Pitstop Analysis
winlogon.exe file name used by the WinLogon trojan has the same name as a legitimate Microsoft file. However, the trojan can be identified by these traits: it does not contain vendor/product information saying it is from Microsoft; it is installed in a directory other than Windows system32; it is always running and often uses large amounts of memory and cpu time. If the file information does not show the vendor being Microsoft, then this is most likely the WinLogon trojan.
Recommendation
winlogon.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.
winlogon.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.
Identification
The file name alone identifies this program.
PC Pitstop Database Comparisons
Every week, we update our information about the running programs identified during
the previous week's testing.
winlogon.exe (WinLogon trojan) has been seen on 0.03% of systems tested at PC Pitstop.
As a point of comparison, it is rare for a particular malicious program (virus or spyware)
to be seen on more than one or two percent of all systems tested.
PCs running this program did not have a high average CPU load during testing,
which indicates it does not consume a great deal of CPU time on most systems.
Detailed Description and/or Removal Instructions
http://www.pestpatrol.com/pestinfo/w/winlogonexe.asp
Match #2
winlogon.exe (Legitimate WinLogon)
PC Pitstop Analysis
winlogon.exe - This program initializes some functions of Windows each time a user logs in. Usually it should not appear in running programs because it completes its work in less than a minute. If it is still running then there may be some type of configuration problem with your system. See the detailed description for troubleshooting information.
Recommendation
winlogon.exe is a user invoked program and a normal part of PC operations. No action required.
winlogon.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.
Identification
In addition to the file name, winlogon.exe, the following version information is used to identify the file.
If the file does not match this information, it may be a different file. To ensure the file is absolutely correct,
run a free and comprehensive scan.
| Vendor contains: | Microsoft |
|---|
| Product contains: | Windows |
|---|
| File name contains: | \system32 |
|---|
To view version information with Windows Explorer, right-click the file and click Properties, Version.
PC Pitstop Database Comparisons
Every week, we update our information about the running programs identified during
the previous week's testing.
winlogon.exe (Legitimate WinLogon) has been seen on 63.74% of systems tested at PC Pitstop.
As a point of comparison, it is rare for a particular malicious program (virus or spyware)
to be seen on more than one or two percent of all systems tested.
PCs running this program did not have a high average CPU load during testing,
which indicates it does not consume a great deal of CPU time on most systems.
Detailed Description and/or Removal Instructions
http://www.google.com/search?q=winlogon+site%3Asupport.microsoft.com
Important note:
A file name alone may not be enough for positive identification.
PC Pitstop's
full tests and
spyware scan
use information such as the company name, product name, or install directory.
If you are unable to identify a file, ask about it in our
forums after running our full tests.
