1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

winlogon.exe

Discussion in 'Windows XP' started by yankee1620, 2007/07/11.

  1. 2007/07/11
    yankee1620

    yankee1620 Inactive Thread Starter

    Joined:
    2002/01/07
    Messages:
    272
    Likes Received:
    0
    Is there any legitimate reason that winlogon.exe would be trying to access the internet?
    Virus scan is negative....
    Not knowing that it could be a trojan I allowed it before I looked it up on google and then I got nervous.

    Thanks:eek:
     
    yankee1620,
    #1
  2. 2007/07/11
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Where are all instances of winlogon.exe installed? - the only locations should be ....

    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\dllcache\winlogon.exe
     
    PeteC,
    #2


  3. to hide this advert.

  4. 2007/07/11
    yankee1620

    yankee1620 Inactive Thread Starter

    Joined:
    2002/01/07
    Messages:
    272
    Likes Received:
    0
    It appears to only be installed at C:\WINDOWS\system32\winlogon.exe

    I know it a necessary application but don't know why it would be trying to connect to the internet. It was trying to connect to 68.87.77.226. Out of curiosity I tried to connect to that but it kept timing out....
     
    yankee1620,
    #3
  5. 2007/07/11
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    I think you're OK .....

    68.87.77.226 is Comcast -are you with them?

    Whois Record
    OrgName: Comcast Cable Communications, Inc.
    OrgID: CMCS
    Address: 1800 Bishops Gate Blvd
    City: Mt Laurel
    StateProv: NJ
    PostalCode: 08054
    Country: US

    If you are still concerned I will move this over to the Removing Spyware & Viruses forum for comment.
     
    PeteC,
    #4
  6. 2007/07/11
    yankee1620

    yankee1620 Inactive Thread Starter

    Joined:
    2002/01/07
    Messages:
    272
    Likes Received:
    0
    Thank you so much...I am much relieved! Yes, Comcast is my ISP.
    I scan for viruses every day and I also run Spybot and AdAware and everything comes up negative except for the usual tracking cookies...I delete them but, of course every time I go to a website they are right back again...

    Thanks!!!!!:D
     
    yankee1620,
    #5
  7. 2007/07/11
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    re tracking cookies:

    Open Internet Options > Privacy Tab > Advanced button > put a check next to "Override automatic cookie handling; First-party cookies: Accept; Third-party cookies: Block.

    This will greatly reduce the amount of tracking cookies you get, even though they are quite harmless...now...but who knows what Big Brother will do later w/ all the data it collects!
     
    TonyT,
    #6
  8. 2007/07/12
    yankee1620

    yankee1620 Inactive Thread Starter

    Joined:
    2002/01/07
    Messages:
    272
    Likes Received:
    0
    Thanks, Tony...but the only time I use IE is when I am forced to....like for Windows Update. But I will do as you suggest anyway. I just don't care for IE as a browser...
     
    yankee1620,
    #7
  9. 2007/07/12
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    If you use Firefox you can block cookies too, by manually entering sites or by copy+paste a list of blocked sites. FF stores these values in a file located at:
    Documents & Settings/Username/Application Data/Mozilla/Firefox/Profiles/xxxxxxxx.default/hostperm.1

    When you add sites manually via FF/Tools/Options/Privacy tab/Cookies/Exceptions button, FF writes the blocked site to this hostperm.1 file. It can take a looooooong time to manually add a list of sites!

    I have a copy of a hostperm.1 file here that you can use to replace your existing hostperm.1 file. Feel free to grab it & use it. The sites are known tracking cookie sites as well as sites known to have spyware and malware.

    HOSTPERM.ZIP

    btw, you can also install Spyware Blaster, which can add a few thousand sites to the hostperm.1 file.
     
    TonyT,
    #8

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...