|
winlogon.exe (5.1.2600.1106)
Bevat in software |
Naam: | Windows XP Home Edition, Deutsch |
Vergunning: | commercieel |
De verbinding van de informatie: | http://www.microsoft.com/windowsxp/ |
De details van het dossier |
De weg van het dossier: | C:\WINDOWS\system32 \ winlogon.exe |
De datum van het dossier: | 2002-08-29 14:00:00 |
Versie: | 5.1.2600.1106 |
De grootte van het dossier: | 521.728 bytes |
De knoeiboel van de controlesom en van het dossier |
CRC32: | EFFDF5E1 |
MD5: | 6168 96B7 0828 6DA9 8D6A 0992 93F1 81D7 |
SHA1: | 3185 27E4 C475 E203 B220 2C43 7482 EACC C542 0195 |
Het middelinformatie van de versie |
Firmanaam: | Microsoft Corporation |
De beschrijving van het dossier: | Windows NT-Anmeldung |
Het werkende systeem van het dossier: | Windows NT, Windows 2000, Windows XP, Windows 2003 |
Het type van dossier: | Application |
De versie van het dossier: | 5.1.2600.1106 |
Interne naam: | winlogon |
Wettelijk auteursrecht: | © Microsoft Corporation. Alle Rechte vorbehalten. |
Originele filename: | WINLOGON.EXE |
De naam van het product: | Betriebssystem Microsoft® Windows® |
De versie van het product: | 5.1.2600.1106 |
winlogon.exe werd gevonden in de volgende rapporten:
|
W32.Neveg.A@mm |
Technische details ...Copies itself as %Windir%systemwinlogon.exe. Note: %Windir% is a variable... ...".Prog" = "%Windir%systemwinlogon.exe" "BuildLab" = "%Windir%systemwinlogon.exe"... ..."ccApps" = "%Windir%systemwinlogon.exe" "FriendlyTypeName"... ..."Microsoft Visual SourceSafe"= "%Windir%systemwinlogon.exe" "RegDone" = "%Windir%systemwinlogon.exe"... ..."TEXTCONV" = "%Windir%systemwinlogon.exe" "WMAudio" = "%Windir%systemwinlogon.exe"... De instructies van de verwijdering ...".Prog" = "%Windir%systemwinlogon.exe" "BuildLab" = "%Windir%systemwinlogon.exe"... ..."ccApps" = "%Windir%systemwinlogon.exe" "FriendlyTypeName"... ..."Microsoft Visual SourceSafe"= "%Windir%systemwinlogon.exe" "RegDone" = "%Windir%systemwinlogon.exe"... ..."TEXTCONV" = "%Windir%systemwinlogon.exe" "WMAudio" = "%Windir%systemwinlogon.exe"... Bron: http://securityresponse.symantec.com/avcenter/venc/data/w32.neveg.a@mm.html |
Backdoor.Graybird |
Technische details ...%System%Svch0st.exe %System%Winlogon.exe %System%Explorer.exe... ..."winlogon"="%System%Winlogon.exe" "system"="%System%Explorer.exe"... De instructies van de verwijdering ..."winlogon"="%System%Winlogon.exe" "system"="%System%Explorer.exe"... Bron: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.graybird.html |
W32.Marol@mm |
Technische details ...itself as the following files: %Windir%Winlogon.exe %Windir%Marisol.exe... ..."Apnt" = "%Windir%winlogon.exe" "WorksCache" = "%Windir% empWkCVX.exe"... De instructies van de verwijdering ..."Apnt" = "%Windir%winlogon.exe" "WorksCache" = "%Windir% empWkCVX.exe"... Bron: http://securityresponse.symantec.com/avcenter/venc/data/w32.marol@mm.html |
Backdoor.Trodal |
Technische details ...Copies itself to %Windir%Winlogon.exe. Note: %Windir% is a variable.... ...Creates the registry value "winlogon"="%windir%winlogon.exe"... ...Sets the file timestamp of %Windir%Winlogon.exe to the same values as the file, %Windir%win.ini.... De instructies van de verwijdering ...right pane, delete the value: "winlogon"="%windir%winlogon.exe"... Bron: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.trodal.html |
Backdoor.Dsklite |
Technische details ...Copies itself as %Windir%Winlogon.exe. NOTE: %Windir% is a variable.... ..."Windows Logon Application"="%Windir%winlogon.exe" to the registry key:... De instructies van de verwijdering ...Scroll through the list and look for winlogon.exe. If you find the file, click... ..."Windows Logon Application"="%Windir%winlogon.exe" Exit the Registry Editor.... Bron: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.dsklite.html |
Trojan.Hazzer |
Technische details ...or: "winlogon"=<path to trojan>... ...L2logon.exe Winlogon.exe Tries to delete C:Msdos.exe.... De instructies van de verwijdering ...or: "winlogon"=<path to trojan>... Bron: http://securityresponse.symantec.com/avcenter/venc/data/trojan.hazzer.html |
Spyware.TrueActive |
Technische details ..._.exe; tamset.exe; sem.dll; winsdoc.dll; winlogon.exe When Spyware.TrueActive is... ...detected as Spyware.TrueActive) %Windir%winlogon.exe (main logger, detected as Spyware.TrueActive)... Bron: http://securityresponse.symantec.com/avcenter/venc/data/spyware.trueactive.html |
Backdoor.Prorat |
Technische details ...%System%Sservice.exe %Windir%Winlogon.exe Notes:... ...HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogon from:... ...May inject a .dll file into the Winlogon process as a thread, which will end the processes of various security products.... De instructies van de verwijdering ...HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogon In the right pane, modify... Bron: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.prorat.html |
Backdoor.Beasty.H |
Technische details ...Systray.exe Winlogon.exe NOTE:... Bron: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.beasty.h.html |
Intruder Alert 3.6 W32_Netsky_D_Worm Policy |
following file to be monitored: #windirwinlogon.exe Last modified on:... ...... Bron: http://securityresponse.symantec.com/avcenter/security/Content/2004.03.01.html |
|
|