Winlogon.exe

Discussion in 'other security issues & news' started by rawr, Sep 25, 2005.

Thread Status:
Not open for further replies.
  1. rawr

    rawr Registered Member

    Joined:
    Aug 15, 2005
    Posts:
    128
    Location:
    Illinois, U.S.A
    Winlogon.exe keeps asking to connect to a certain IP address. The weird thing about it is that the location of winlogon.exe is in the format of..

    \??\C:\WINDOWS\system32\winlogon.exe

    ..anyone know what the "\??\" is for? I currently am using Filseclab's firewall and have created a rule to block it. Oh, I don't know if it'll help but here's the IP Address and Port # it's trying to connect to..

    IP Address: 69.50.188.51
    Direction: Out
    Protocol: Http

    Thanks in advance..
     
  2. lucian

    lucian Guest

    It's strange. It should be c:/windows/system32/winlogon.exe
    The IP 69.50.188.51 is from a computer located in Concord city if I am not wrong (USA). I think is good you created a rule for not allowing the file to connect to that IP. It happend for me too but the IP was from Australia.

    You should also run few antivirus on your computer. That's all I know.

    Lucian

    www.glasshop.ro
     
  3. Smokey

    Smokey Registered Member

    Joined:
    Apr 1, 2002
    Posts:
    1,513
    Location:
    Annie's Pub
    Take a look here and here, seems you are in trouble...*puppy*
     
  4. rawr

    rawr Registered Member

    Joined:
    Aug 15, 2005
    Posts:
    128
    Location:
    Illinois, U.S.A
    Hhhmmm....wonder how I a trojan got past NOD..first time ever for me. Well since this post is pretty old, I did the ol' format already. :p But thanks for the references to fix it.. :D
     
  5. Smokey

    Smokey Registered Member

    Joined:
    Apr 1, 2002
    Posts:
    1,513
    Location:
    Annie's Pub
    Maybe Eset is reading with us?;)
     
  6. TairikuOkami

    TairikuOkami Registered Member

    Joined:
    Oct 10, 2005
    Posts:
    2,509
    Location:
    Slovakia
Thread Status:
Not open for further replies.