What does the winlogon.exe file do?
The winlogon.exe process is also known as Windows Logon Application or, as the case may be, Windows NT Logon Application and is a part of Microsoft Windows Operating System or, as the case may be, Betriebssystem Microsoft Windows. This software is produced by Microsoft (www.microsoft.com) or, as the case may be, NVIDIA (www.nvidia.com) (Version 42722636448, 53732746459). An obsolete or defective version of winlogon.exe can cause problems for your computer that can range from slowness to error messages such as these:
- Windows Logon Application has stopped working. Windows is checking for a solution to the problem... (Windows 10, 8, 7)
- Windows Logon Application has stopped working. A problem caused the program to stop working correctly. Windows will close the program and notify you if a solution is available. (Windows 10, 8, 7)
- winlogon.exe has encountered a problem and needs to close. (Windows XP)
- Access violation at address FFFFFFFF in module winlogon.exe. Read of address 00000000.
Free PC Check
Scan your computer today at no charge with the Windows Repair Tool. This tool helps repair Windows and helps it run faster.
What you should know about winlogon.exe Windows Logon Application
winlogon.exe is a Windows system file. Winlogon.exe is found in the C:\Windows\System32 directory.
Frequently occurring are file sizes such as 507,904 bytes (41% of all these files), 502,272 bytes as well as 34 other variants.
The application does not have a visible window, and does not appear on the taskbar. The original file was created by Microsoft. The file itself can therefore be considered trustworthy. Winlogon.exe is capable of record keystrokes, Change the behavior of other applications as well as track other applications. For this reason, 16% of all experts consider this file to be a possible threat. The probability that it can cause harm is high.
winlogon.exe is a system file used by Microsoft Windows, and appears in Windows Task Manager as a process named "Windows Logon Application." However, some viruses or Trojans use the same file name in order to remain undetected (e.g. Trojan.Generic.5047992 (recognized by BitDefender), as well as Mal/Generic-L (recognized by Sophos)).
To be really safe, you should scan your computer with two different anti-virus engines. You can use a free Anti-Malware scanner for this purpose.
Objectionable files with the same file name have the following characteristics:
- A winlogon.exe file has a 68% certainty of being dangerous if it is found in a subdirectory of "C:\Users\USERNAME". In this case, the file size is usually 163,866 bytes (9% of all these files), 88,576 bytes as well as 9 other variants. The winlogon file is not part of the Windows operating system. Windows starts the process each time that the computer boots up (Registry: Run, MACHINE\Run, DEFAULT\Run, User Shell Folders). It does not supply any version information or other description. This particular software does not appear as a visible window, but only in Task Manager. Winlogon.exe is capable of supervise programs as well as log keyboard entries.
- A winlogon.exe file has a 81% certainty of being dangerous if it is found in the C:\Windows directory. In this case, the file size is usually 93,475 bytes (16% of all these files), 202,134 bytes as well as 4 other variants. This file contains no information about the producer or the version. It is no part of Microsoft Windows. It is interesting to note that the file is placed in the Windows folder, even though it is not part of the operating system. The program executes in the background, and can only be terminated using Windows Task Manager. When Windows starts, this process is automatically started at the same time (Registry: Run, MACHINE\Run, DEFAULT\Run, User Shell Folders). Winlogon.exe is capable of transmit information from computer to the Internet, record keystrokes as well as supervise programs.
- A winlogon.exe file has a 36% certainty of being dangerous if it is found in a subdirectory of C:\Windows\System32. In this case, the file size is usually 330,240 bytes (25% of all these files), 291,074 bytes, 4,106,341 bytes or, as the case may be, 296,448 bytes.
- A winlogon.exe file has a 70% certainty of being dangerous if it is found in the "C:\Program Files" directory. In this case, the file size is usually 45,056 bytes (33% of all these files), 17,920 bytes or, as the case may be, 274,432 bytes.
- A winlogon.exe file has a 59% certainty of being dangerous if it is found in a subdirectory of "C:\Program Files". In this case, the file size is usually 57,344 bytes.
- A winlogon.exe file has a 39% certainty of being dangerous if it is found in a subdirectory of C:\. In this case, the file size is usually 51,712 bytes (50% of all these files) or, as the case may be, 925,872 bytes.
- A winlogon.exe file has a 73% certainty of being dangerous if it is found in a subdirectory of C:\Windows. In this case, the file size is usually 434,187 bytes (50% of all these files) or, as the case may be, 1,185,271 bytes.
- A winlogon.exe file has a 48% certainty of being dangerous if it is found in the Windows Temp directory. In this case, the file size is usually 16,896 bytes.
If you see this file on your hard drive or in Windows Task Manager, please make sure that it is not a malicious variant. It's a fact that many trojans try to cloak their true identity by calling themselves winlogon.exe. With the above information or by using tools like Security Task Manager you can determine if, in your case, the file is an undesirable variant.
What do other computer users say about winlogon?
|The Windows Logon Process is responsible for managing user logon and logoff, and checks the Windows XP activation code. Must be in system32 folder! (further information...) |
|il permet d'ouvrir et fermer les sessions windows it permit to open and close session of windows |
|Can be dangerous and can cause application error cx0005's. It hogs the index.dat file in windows and creates \??\C:\Windows\system32\winlogon.exe in Shared Access. It maybe a virus. (further information...) |
Summary: 93 users judge winlogon.exe to be an essential file that should not be touched. 12 users consider it harmless. However, 27 users consider this to be a suspicious process and would like to get rid of it. For this reason, 100 users have already deleted winlogon.exe. source: file.net
How to uninstall the program or Betriebssystem Microsoft Windows
To remove Windows Logon Application from your computer, please follow the manual instructions below or use an automatic uninstaller product.
- Click the Windows Start Button. You find it in the lower left corner of the taskbar.
- Type the word uninstall.
- Click Add or remove programs.
- Now locate the program or Betriebssystem Microsoft Windows in the list of displayed applications.
- Click the program, and then click Uninstall.
How to tell if winlogon.exe (Windows Logon Application) was uninstalled cleanly
After uninstalling, restart your computer. Then start Windows Explorer and see if there is still a folder with the name of the software under C:\Program Files. Be sure to check the Registry as well for remnants of Windows Logon Application. To do this, start "Regedit", then look under "HKEY_LOCAL_MACHINE" > "Software" for Windows Logon Application or the name of the producer. Always keep in mind that only a computer professional should ever directly delete entries in the Windows Registry.
What to do if a program does not uninstall
The easiest way to remove any kind of software cleanly and accurately is to use an uninstaller tool. Because the uninstaller automatically creates a backup, there is no risk of anything going wrong.
Last but not least
If Windows not working quite right for you, or if startup is taking a long time, or winlogon.exe is causing problems for you, a good Windows diagnostic tool may very well help. This is especially effective when it comes to older computers that have accumulated vast quantities of "garbage data" as the result of many software installs and uninstalls.