winlogon.exe a virus?

[petmann]

I've heard alot of different things about the file "winlogon.exe". Some people say it should be left alone, others say it's some kind of keylogger if there's multiple. I have 2, and kinda scared of it being a virus. Any help would be good!

 

[snowctrl]

Well what antivirus / antimalware r u running?

 

[USAFRet]

winlogon.exe is the login/logout process of Windows. Absolutely normal.

However....a virus can masquerade as that file, and do its nastiness.
Have you done any deep virus/malware scans, preferably from a AV boot disk?

 

[petmann]

I'm using Avira free antivirus. Have scanned my pc alot of times with it, and that only gives me a warining about a file that won't open :/

 

[USAFRet]

Go here, download and create a boot CD. http://support.kaspersky.com/us/viruses/rescuedisk/
Boot from that and scan. see what it says.

Often, a nasty virus will disable the part of the AV that would detect it. So your AV seems to be reporting nothing, but in fact the virus is telling it to report nothing.

However....winlogon.exe is a perfectly normal, expected file and process. 'Some people' are often quite wrong.