Welcome to the PC Pitstop Process Library. We have an extensive list of the most common processes currently running on PCs. Use this library to inspect the safety of your running processes on a regular basis.

Click here to run our free scan and see if your computer's processes are safe. To find out how to make your computer faster, try running our Free PC Matic Scan.

Search For Processes

Process Name

  

Unknown Unknown
Safe Safe
User Optional User Optional
Unwanted Unwanted
Spyware / Adware Spyware / Adware
Virus Virus


More than one possible match was found; all matches are listed below in order of their prevalence. This only tells you what the file and the correct action might be.

To understand which possibility is actually running on your own system, perform an Overdrive test and then look at the Software|Processes tab.

You may find more information on this process by visiting Process Detail Pages.


Match #1



winlogon.exe (Legitimate WinLogon)

Percentage of recently scanned PC's with this process running: 31.18%
Average CPU use for this program: 0%
Average RAM for this program: 4 MB


In addition to the file name, winlogon.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:Microsoft
Product contains:Windows
File name contains:\system32

To view version information with Windows Explorer, right-click the file and click Properties, Version.



Detailed Description and/or Removal Instructions

http://www.google.com/search?q=winlogon+site%3Asupport.microsoft.com


Win Patrol

winlogon.exe - This program initializes some functions of Windows each time a user logs in. Usually it should not appear in running programs because it completes its work in less than a minute. If it is still running then there may be some type of configuration problem with your system. See the detailed description for troubleshooting information.

winlogon.exe  is a user invoked program and a normal part of PC operations. No action required.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides an easy to understand descriptions of over 15,000 processes and programs.


MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called winlogon.exe, we have detected more than 10 different MD5 hashes. Click on a hash to research the hash in Google.

Program Name MD5 Count
winlogon.exe> 10
MD5 Hashes
# MD5 Size
1 0x4166454e2bcfcc20d1b8a5ac9feab243 504832 bytes
2 0xdb847557f28b6ea1ec14bfbe5b4ff966 314368 bytes
3 0xc2610b6bdbefc053bbdab4f1b965cb24 314880 bytes
4 0xd52005f80e99d3853e5629b8c4b2dc9e 308224 bytes
5 0xc6033ad39b14f015a5144129cc2363e9 313344 bytes
MD5 Hashes
# MD5 Size
6 0x85c0d6bd769aab1b007b21cca9a346c8 177424 bytes
7 0x9f75392b9128a91abafb044ea350baad 308224 bytes
8 0x41cdd395dfbb291baa896deb4b6d8c65 314880 bytes
9 0xd1280608c54100184ea52ed9de88522a 12288 bytes
10 0x91d002284a0e826a92a13bec9e6374f5 162816 bytes

Match #2



winlogon.exe (winlogon.exe)

Percentage of recently scanned PC's with this process running: 0.29%
Average CPU use for this program: 0%
Average RAM for this program: 4 MB


In addition to the file name, winlogon.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:YAfPLzU
Product contains:Système d’exploitation Microsoft® Windows®
File name contains:\Windows\System32\winlogon.exe

To view version information with Windows Explorer, right-click the file and click Properties, Version.




Win Patrol

winlogon.exe -

winlogon.exe  is returning insufficient information about this program.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides an easy to understand descriptions of over 15,000 processes and programs.



Match #3



winlogon.exe (WinLogon trojan)

Percentage of recently scanned PC's with this process running: 0.00%
Average CPU use for this program: 0%
Average RAM for this program: 1 MB


The file name alone identifies this program.



Detailed Description and/or Removal Instructions

http://www.pestpatrol.com/pestinfo/w/winlogonexe.asp


PC Pitstop PC Matic

winlogon.exe file name used by the WinLogon trojan has the same name as a legitimate Microsoft file. However, the trojan can be identified by these traits: it does not contain vendor/product information saying it is from Microsoft; it is installed in a directory other than Windows system32; it is always running and often uses large amounts of memory and cpu time. If the file information does not show the vendor being Microsoft, then this is most likely the WinLogon trojan.

winlogon.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

winlogon.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends PC Matic in these types of situations.


MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called winlogon.exe, we have detected more than 10 different MD5 hashes. Click on a hash to research the hash in Google.

Program Name MD5 Count
winlogon.exe> 10
MD5 Hashes
# MD5 Size
1 0x9f472b33711035a5174f4f7f2ea5398f 42675 bytes
2 0xff5cc85b80cc9ac826e7e54c83fd6e19 43008 bytes
3 0x52953ecb71ee81b90aaee2936d4caa6b 416241 bytes
4 0xb6d86545f6d07c059edfcfbf6e7e2bb1 159744 bytes
5 0x5a1e3b99e00dd5df99cc316ecfff5fb9 41385 bytes
MD5 Hashes
# MD5 Size
6 0x7f1ab5d388af649e2c6ef32bf698edca 42638 bytes
7 0xdbf57eb92b2d11902fc35c9e1fe5b849 20000 bytes
8 0x1218c2020437e80c69878201330afd45 12288 bytes
9 0xa042ec98487ca36544b4281c80a1a4a2 43476 bytes
10 0x834a7ee4425fb9f1eae3092fee886e4c 91136 bytes


Try a free diagnostic now

PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

To find the latest driver for your computer we recommend running our Free Driver Scan.

Find out how to make your computer faster by running our Free Performance Scan.

Tips from the PitCrew

Tips from the Pit Crew

Every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

› Get more tips
› Subscribe to TechTalk

Important Note

A file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory.

If you are unable to identify a file, ask about it in our forums after running our full tests.