How to remove winiogon.exe

Last Updated on Thursday, 07 February 2013 15:56 Sunday, 31 May 2009 12:09

Harmful - EXE

The file name winIogon.exe has a capital (i) in it in instead of a small L. It is a virus file name that tries to look like winLogon.exe which is (Windows NT Logon Application) in Microsoft windows.

To find out more about WinLogon.exe, please follow this link

The name winiogon.exe is found in several computer viruses in Microsoft windows. Their analysis reports are given below. Where capital i (I) is used, it looks exactly like winLogon.exe (winlogon.exe). You will be able to differentiate them only in certain fonts, or if you use the windows search, the computer will find it out for you.

Found files: view
C:\winnt\system32\Lavan\winIogon.exe

Found files: view
C:\WINNT\system32\os\winIogon.exe

Found files: view
C:\windows\system32\winIogon.exe

Found files: view
%UserProfile%\winIogon.exe
(You can also find file size, md5, sha-1 info on the above links) 

 (Full path for the short folder names)

There may be more files created by these virus programs. You can find them out. First locate and note down the "date of creation" of winiogon.exe  and after that, search the hard disk for other files created on that date or onward. See image.

Necessary steps to remove these virus programs

• To remove processes created by the virus program from the Task Manager.
• To search and delete files created by the virus program from the hard disk. Enable to view "hidden files and folders" before you search. Otherwise files created by the virus program inside the hidden folders will not be found.
• To remove obsolete registry keys using CCleaner.