PDA

View Full Version : winlogon.exe

AsH432
February 3rd, 2005, 05:36 PM
Ok...

Never have I seen it in the process manager. I'm really suspicicous as my net is lagged like hell :/
Blackspear
February 3rd, 2005, 05:51 PM
{QUOTE-> Ok...

Never have I seen it in the process manager. I'm really suspicicous as my net is lagged like hell :/ <-QUOTE}You may want to take a look here:

http://www.liutilities.com/products/wintaskspro/processlibrary/winlogon/

What security are you using?

Cheers ;D
Jimbob1989
February 4th, 2005, 01:55 PM
Lots of windows process can become infected with worms and other nasties and so it is always a good idea to have some decent security protection.

Jimbob
nick s
February 4th, 2005, 02:34 PM
The properties of winlogon.exe should look something like the pic below. Its MD5 in XP SP2 should be 01C3346C241652F43AED8E2149881BFE. Here's some interesting reading on the subject: Advanced hiding techniques: The mystery of the trojaned Winlogon.exe (http://blogs.msdn.com/robert_hensing/archive/2005/01/17/354471.aspx).

Nick
nadirah
February 7th, 2005, 05:19 AM
Some nasties hijack legitimate windows processes in order to make things more tougher.