Why is winlogon.exe written so much data?

Similar Questions

• Why system32\svchost.exe using too much memory

  My computer freezes several times a day.  I have to wait several minutes to get it working again.  When it starts up, it shows a window saying c:\windows\system32\svchost.exe uses a lot of memory.  What is the cause for this?

  Hi Cyndy62,

  1. When did you start to question?

  2 did you a recent software or changes to the material on the computer?

  3. This occurs when you use a specific application or all applications?

  Step 1:

  You can check in safe mode and check if it uses the same energy...

  Start your computer in safe mode

  Step 2:

  If you are not faced with the question in safe mode, then you can try to perform a clean boot and see if it helps.

  A clean boot to check if startup item or services to third-party application is causing this issue.

  You can read the following article to put the computer in a clean boot:

  How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7

  After the troubleshooting steps, please refer to clean the boot link to put the computer to normal startup mode.

  You can also read the following article and see if it helps.

  Optimize the performance of Microsoft Windows Vista

  How to troubleshoot performance issues in Windows Vista

  Hope this information is useful.

• index.dat locked by winlogon.exe preventing roaming profiles to be completely unloaded on client PCs

  Greetings,

  I posted this thread in the server instances earlier because it's over my whole environment that this occurs, but since someone there told me to post it here, here goes:

  We have a problem with the index.dat (*) of locked files by the winlogon.exe process preventing the profiles on the computer to be completely empty when you connect to the wide. Most of the time, after that the user is disconnected, we cannot not even manually delete this file until a few minutes after the disconnection. For example, a script to automatically delete these files during log off is unfortunately useless.

  I searched on the internet and saw a lot of people with this or similar problems, but either there was no response or did not have solutions for our environment.

  The problem occurs on all the BONES in our environment (Windows 2000, Windows XP, Windows 7) and all versions of IE (IE 6, IE 7 and IE 8).

  We tried the following:

  -Create a profile completely (and of course delete all the computer itself)
  -Disable the anti-virus
  -Using the latest version of UPHClean
  -Specifically exclude folders from roaming profiles (even though they are by default excluded)

  index.dat (*) is located in the following folders:
  -%USERPROFILE%\Cookies
  -%USERPROFILE%\Local Settings\History\History.IE5\
  -%USERPROFILE%\Local Settings\Temporary Internet Files\Content.IE5\

  Kind regards

  Bram

  Hi Bram,

  I found your thread in the TechNet forums where you have been redirected here. Unfortunately, I'm really ill-equipped to help you with your problem. Microsoft Answers for consumer level support and clearly your question far exceeds our support.

  What I recommend doing is posting in the Windows 7 Misc on TechNet forums:
  http://social.technet.Microsoft.com/forums/en/w7itprogeneral/threads

  Members there is really to understand the functioning of Windows in a business environment and should have no problem to help you. I would like to apologize for the race around the forum to forum you meet to do as I know it can be frustrating.

  I'm sorry I can't do more to help you!

  Cody C
  Microsoft Answers Support Engineer
  Visit our Microsoft answers feedback Forum and let us know what you think.

• Equium P300-16 t winlogon.exe error - badimage

  Hello

  I encounter an error that my Equium P300-16 t starts to windows Vista.

  This is what happens...

  Winlogon.exe - BadImage
  C:\windows\system32\KBDUK. DLL is not designed to run on windows or it contains an error. Try to reinstall with original media or contacting... blah blah blah.

  It began to appear after I tried to uninstall my Norton antivirus has expired. And it seems that the result of this error is that I can not connect detect wireless networks. so no internet! the age of darkness here I come.

  I don't know who this KBDUK file is so I am worried to take it off.
  I tried to restore to before I made changes but its made no difference - I broke it.

  Any help would be much appreciated.

  Thank you

  Dave

  Hello

  Maybe this KBDUK. DLL file is a virus or has something to do with your old Nero

  If you Norton from your system you must also run the Norton removal tool that you can download from the homepage of Symantec. It removes all the files of Norton products.
  Check this box!

  If it doesn t work I would try a system restore to an earlier point. After that you can try to delete Norton again.

• Re: Cannot connect - how can I fix the error "Bad Winlogon.exe - Image"?

  Last night, my laptop did something weird. The screen is blue and it has conducted an audit. The audit was in three parts (that's all I remember) once this is done, my laptop back running and it worked very well.

  Later that morning, he crashed and restarted, but when it comes to where he usually displays user logons, it came with an error message. The title was winlogon.exe - bad image
  and the message describes how the file is incorrect.

  Now, my laptop won't let connect me. How can I fix it?

  It seems that the file system was corrupted unfortunately he touched one of the important files needed for windows to boot.

  You will need a bootable CD to repair the problem for that I recommend Microsoft Diagnostics and Recovery Toolset, you can download from http://www.microsoft.com/downloads/details.aspx?familyid=5D600369-0554-4595-8AB4-C34B2860E087&displaylang=en

  Run the Setup program, go to the installation folder and burn "erd50.iso" as an image (not a data CD) file using software such as Nero.
  Then you need to boot from the CD I do not know how it comes to your laptop so check the manual or change the boot order in BIOS whether it is the method as start the recovery disc.

  When the software is loaded will ask that the Windows installation you want to repair if no disc i.e. C: is offered in the drop-down list, then you may need to change the BIOS setting regarding the AHCI mode, compatible and under tension when you are finished.
  If drive C is visible then the hard drive is accessible, however, you must select "does not fix an installation of Windows." and click OK.

  Click Start, then select "Command prompt", you will get a black box with white text.

  type the following command and enter: chkdsk c: /f /r

  This command will perform a full scan of your hard disk and correct any errors, he can find that could take up to 45 minutes depending on the size of your disk.
  When he finished closing and restart your laptop without the CD in the drive, if you have changed the AHCI mode in the BIOS then change back.

  If Windows still doesn't boot then boot from the CD again and restart "Command Prompt".

  type the following command and enter:

  c:
  cd\windows\system32

  If entered correctly your screen should display: C:\Windows\system32 >

  type the following command and enter: (Note: the point is necessary and not a typo)

  Copy dllcache\winlogon.exe. /y

  If all goes well you should see a message: 1 file (s) copied.

  Stop the laptop restore all the BIOS settings and hopefully Windows will boot again normally. :)

  Richard S.

• Help! atieclxx.exe winlogon.exe and csrss.exe running with no description?

  Help, recently I realized that this three processes are running on my task manager process list. > aticlxx.exe and csrss.exe, winlogon.exe< they="" have="" no="" username,="" commandline,="" and="" no="" description,="" i="" cannot="" end="" any="" of="" them="" myself,="" i="" suspect="" its="" a="" malware.="" help="" is="" needed="" and="" tell="" me="" if="" it="" is="" suppose="" to="" be="" running="" at="" all,="" if="" yes="" why="" are="" there="" no="" description.="" i="" have="" trend="" micro="" titanium="" security="" running="" which="" i="" disabled="" before="" the="" dds="" scan="" below.="" i="" have="" used="" malware="" bytes="" to="" scan="" but="" nothing="" is="" detected.="" help="" of="" comfort="" is="" greatly="" needed="" as="" i="" want="" to="" know="" if="" its="" reallly="" a="" malware="" or="" just="" my="" mind="" having="" a="" false="">

  I noticed that my internet is slow with very high ping, my laptop is starting to become slower, although it is a new on
  Core i5 2.5 ghz ram 4 GB ddr3

  I ran norton 360, but nothing came out, and they are still running, I got my laptop, hard drive formatted and reinstalled windows, but they are still there

  When I start window in safe mode I find csrss.exe and winlogon.exe with description, but under normal conditions, that they are not

  pls help me :(

  Try "show processes from all users".

  Or run Process Explorer with 'show details for all processes"selected on the file menu.

  http://TechNet.Microsoft.com/en-us/Sysinternals/bb896653

• Explorer.exe and svchost.exe using too much memory

  I have disabled the automatic updates after the last round of updates, and now, all of a sudden, explorer.exe and svchost.exe use too much memory... enough to interfere with other programs, I try to use.

  Help?

  Windows XP Professional - Svc Pack 3 processor: Intel (r) Pentium (r) D CPU 2.80GHz CPU speed: 2.73 GHz memory: 512 MB

  Why you turn off automatic updates?

  There are between the two options. I just set it to notify. When it is practical, I go to the Microsoft Update slte and use the custom (not Express) option. This gives the user full control of the update of trial.

  You will have a better idea of the cause of the problem using Process Explorer.

  Download Process Explorer.
  For more information about Process Explorer, see here:
  http://www.Microsoft.com/technet/sysinternals/SystemInformation/ProcessExplorer.mspx

  With svchost.exe provide us a list of services using the process. There are number of processes that are using svchost.exe, so we need to know that we provide more targeted assistance. Right click on the process, click on properties and look at the Services tab.

  Solution Explorer. exe has a number of subprocesses. Select the sub-process, click Properties and check the Services tab.

  Have you recently changed all types of starting any service. This often leads to the problem. Users often disable a reflection of service to speed up the system performance. In practice what is done is of one or several programs to malfunction.

  Hope this helps, Gerry Cornell

  Hello

  I inadvertly solves the problem by changing my default from iTunes media player to Media Player.

  Hope this helps someone else!

  Thanks for the link to Process Explorer :)

  Windows XP Professional - Svc Pack 3 processor: Intel (r) Pentium (r) D CPU 2.80GHz CPU speed: 2.73 GHz memory: 512 MB

• Winlogon.exe has encountered a problem and had to close. __

  The following problem occurs on the computer of my husband who runs Windows XP Home Edition with Internet Explorer 7.

  Problem: at any time, whether on the web or not, restart the computer on his own repeatively.

  This error occurred on 21/11/10 to 9:1701 h.  Please tell this problem to Microsoft.  We have created an error report that you can send to us.  We will treat this report as confidential and anonymous.  To see only the data that the error report contains click here.
  Error signature
  szAppName: winlogon.exe szAppVer: 0.0.0.0 szModName: unknown
  szModVer: 0.0.0.0 offset: 0192ffb0

  Hi little09red,

  Do you remember any changes made on your computer before the show?

  Follow the methods below:

  Method 1:

  Scan System File checker on your computer, you can check the link for the steps below: Description of Windows XP and Windows Server 2003 System File Checker (Sfc.exe): http://support.microsoft.com/kb/310747

  Method 2:

  a. Insert the Windows XP CD-ROM in the CD-ROM drive and restart the computer. Follow the instructions to start the computer from the CD-ROM drive.

  b. when the Welcome to Setup screen appears, press R to start the Recovery Console.

  c. If you have a computer dual-boot or multiboot, select the installation that you want to access from the Recovery Console.

  d. When prompted to do so, type the administrator password and press ENTER. If the administrator password is blank, press ENTER.

  e. type the following command: copy d:\i386\winlogon.ex_ c:\windows\system32\winlogon.exe

  Come in

  With regard to:

  Samhrutha G S - Microsoft technical support.

  Visit our Microsoft answers feedback Forum and let us know what you think.

• Error starting Winlogon.exe & saveboot.exe

  Hi there I'm having a problem starting with a laptop running windows xp pro.

  The problem is that winlogon.exe crashes whenever I try to start windows. (even in safe mode)

  the winlogon error is: "the instruction at"0x5ad862ca"referenced memory at"0x018a8000". The requested data was not stored in the memory due to an error of e state / of "0xc0000009c". ""Click ok to complete the program or on Cancel to debug the program.

  However, I found that if I do not press 'ok' or 'Cancel' I'm able to start with the screen on.

  Brilli.B,
  Make sure that you have tried the options listed in this thread: XP without boot troubleshooting.

  You can also run the memory diagnostic tool to test your RAM.

  Mike - Engineer Support Microsoft Answers
  Visit our Microsoft answers feedback Forum and let us know what you think.

• Computer Dell laptop/windows xp, got virus.tried to fix. BAD IDEA. ERROR: DLL msgina.dll UI winlogon.exe - bad image.logon failed to load.

  Computer Dell laptop of my husband has a virus that wants you to install a fake security program. I tried to fix it. OOPS. I tried to choose an earlier date to restore your computer to and I got zapped, crashed and burned. Error is now: winlogon.exe - bad image then the msgina.dll login user interface DLL failed to load, contact admin to replace the dll or restore the original dll. I don't have a boot cd. Is there a way of "back door" to get his computer works again?

  As you know now, do a restore of the system on a severely infected machine is not a good thing. Better to save the data and do a clean installation of Windows. You can try to do it yourself, but based on your post, which I would not recommend it. I don't mean to hurt your feelings, just to be practical. It would be better to take the machine to a competent local tech (not a type of BigComputerStore/GeekSquad of the place).

  If you really want to try it yourself, here's what you need to do:

  1. start the computer with Linux Livecd such as Knoppix. You are using Linux, copy the data files on an external hard drive.
  2. install Windows using the XP Dell installation CD.
  3. install all the drivers for Dell. Use the Dell Resource CD or get the drivers from the Dell advance website.
  4. switch to XP Service Pack 3 and do all the Windows updates.
  5. install a good antivirus - NOD32 (commercial), Avast or Avira (both have free versions).
  6. install all other desired programs, updated if necessary (especially if you have MS Office).
  7. analyze data saved with the antivirus before you copy it to the new clean install. MS - MVP - Elephant Boy computers - don't panic!

• Winlogon.exe.MUI file system or malware?

  In the previous post the discussion was the performance permanently winlogon.exe.

  I'm deeper, found a " " "winlogon.exe.mui" file in system32\ subfolder... and some members of the community wrote this is a malware, > .
  "winlogon.exe.mui is known as malware, installed by a rogue anti-spyware/AV program.
  
  
  But unforunately I have not yet replied to explain or confirm its 100% true.
  I is not got a lot of software, I have just the standard + a couple of soft professional, they are harmful to you. Also the driver software came with the computer, but also not much and I didn't install all his tricks for further assistance. Thus, none of the additional applications or speedupmypc etc.
  If I it scan with avira and the Malwarebytes mentioned above, they find nothing.
  Would appreciate any help

  Thanx.

  Hello

  The winlogon.exe.mui is a legitimate system file. You will see thousands of these files on the system.

  Explanation:

  Unlike previous versions of Windows, the code of the binary files that are used to build Windows 7 are neutral language. This means that at least one Language Pack must be installed which sets the Basic language for this version of Windows 7. The basic language could not be uninstalled.

  These. MUI files are the language pack files.

  The following article explains how this works.

  In Windows 7 Language Packs:

  http://msdn.Microsoft.com/en-us/goglobal/ee461121

  As long as you have used your antivirus program to scan the file, it should be OK.

  Concerning

• Winlogon.exe chewing up 50% of my CPU... ?? (100% of 1 core)

  I see a lot of complaints about it online, but I have not found one answer to the problem.

  I'm running Windows 7 Ultimate x 64 I got from the network of developers Microsoft TechNet.  At least once a day, winlogon.exe starts chewing my CPU.  He sticks almost 50% (100% of one of my cores of the processor in this computer to dual-core) and completely disrupts my ability to get work done on this machine.

  Again, I see all sorts of complaints about it online, but I have not met one possible solution to the problem.

  If I kill winlogon.exe in the Task Manager, it comes right away, but eventually it stops.  A restart is sometimes useful, but sometimes it starts up again just after my reboot.  I've never been able to find any rhyme or reason to why / when that starts to happen.

  It drives me crazy and I really could use some information about the resolution of this problem.  Any info would be greatly appreciated. Thank you!

  Try changing the port number. Here's how: http://support.microsoft.com/kb/306759

• Infected computer - unable to end csrss.exe and winlogon.exe in the Task Manager

  original title: Trojan horses and worms: _

  in my pc win 7 when I run the task mngr I see to the process without all the properties and descriptions and I cannot put an end to these processes, how do I know that they are infected, the processes are 1: csrss.exe 2:winlogon.exe
                                                  

  Hello

  Those who are part of Windows and should be in the process. Normally they are not a problem unless you
  have an infection that affects them.

  =======================

  If you need search malware here's my recommendations - they will allow you to
  scrutiny and the withdrawal without ending up with a load of spyware programs running
  resident who can cause as many questions as the malware and may be more difficult to detect as the
  cause.

  No one program cannot be used to detect and remove any malware. Added that often easy
  to detect malicious software often comes with a much harder to detect and remove the payload. Then
  its best to be thorough than paying the high price later now too. Check with them to one
  extreme overkill point and then run the cleaning only when you are sure that the system is clean.

  It can be made repeatedly in Mode safe - F8 tap that you start, however, you must also run
  the regular windows when you can.

  Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone.
  (If Rootkits run UnHackMe)

  Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

  Malwarebytes - free
  http://www.Malwarebytes.org/

  Run the malware removal tool from Microsoft

  Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

  You should get this tool and its updates via Windows updates - if necessary, you can
  Download it here.

  Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
  (Then run MRT as shown above.)

  Microsoft Malicious - 32-bit removal tool
  http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

  Microsoft Malicious removal tool - 64 bit
  http://www.Microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495e-94E7-6349F4EFFC74&displaylang=en

  also install Prevx to be sure that it is all gone.

  Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

  Prevx - Home - free - small, fast, exceptional CLOUD protection, working with others
  security programs. It is a single scanner, VERY EFFICIENT, if it finds something to come back
  here or use Google to see how to remove.
  http://www.prevx.com/   <-->
  http://info.prevx.com/downloadcsi.asp  <-->

  Choice of PCmag editor - Prevx-
  http://www.PCMag.com/Article2/0, 2817,2346862,00.asp

  Try the demo version of Hitman Pro:

  Hitman Pro is a second scanner reviews, designed to save your computer from malicious software
  (viruses, Trojans, rootkits, etc.). who infected your computer despite safe
  what you have done (such as antivirus, firewall, etc.).
  http://www.SurfRight.nl/en/hitmanpro

  --------------------------------------------------------

  If necessary here are some free online scanners to help the

  http://www.eset.com/onlinescan/

  New Vista and Windows 7 version
  http://OneCare.live.com/site/en-us/Center/whatsnew.htm

  Original version
  http://OneCare.live.com/site/en-us/default.htm

  http://www.Kaspersky.com/virusscanner

  Other tests free online
  http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1

  --------------------------------------------------------

  After the removal of malicious programs:

  Also follow these steps for the General corruption of cleaning and repair/replace damaged/missing
  system files.

  Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN

  Enter this at the command prompt - sfc/scannow

  How to fix the system files of Windows 7 with the System File Checker
  http://www.SevenForums.com/tutorials/1538-SFC-SCANNOW-Command-System-File-Checker.html

  How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
  generates in Windows Vista cbs.log
  http://support.Microsoft.com/kb/928228

  Also run CheckDisk, so we cannot exclude as much as possible of the corruption.

  How to run check disk in Windows 7
  http://www.SevenForums.com/tutorials/433-disk-check.html

  -----------------------------------------------------------------------

  If we find Rootkits use this thread and other suggestions. (Run UnHackMe)

  http://social.answers.Microsoft.com/forums/en-us/InternetExplorer/thread/a8f665f0-C793-441A-a5b9-54b7e1e7a5a4/

  ======================================

  If necessary AFTER THAT you are sure that the machine is clean of any malware.

  How to do a repair installation to repair Windows 7
  http://www.SevenForums.com/tutorials/3413-repair-install.html

  I hope this helps.

  Rob Brown - MS MVP - Windows Desktop Experience: Bike - Mark Twain said it right.

• Csrss.exe & winlogon.exe shown in 'process' of the Task Manager with no user name or from a cache. How can I remove or put an end to this process?

  Csrss.exe is a knowledge trojen or spyware to invade the PC security

  Hi Albert,

  Csrss.exe, this is the part of the user mode of the subsystem Win32 (Win32.sys being the kernel-mode portion). CSRSS means client/server run-time Subsystem and is an essential subsystem that must run continuously. CSRSS is responsible for console windows, creating or deleting threads, and some parts of the 16-bit virtual MS-DOS environment.

  Winlogon.exe is the part of Windows Login subsystem. This process is responsible for managing the security key sequence (by pressing Ctrl + Alt + Delete before you see the logon box), loading of user profiles, the locking system when a screensaver is running and check the activation key for the operating system.

  I suggest you to run the Microsoft Safety Scanner and check if there is no virus.

  Microsoft Safety Scanner: http://www.microsoft.com/security/scanner/en-us/default.aspx

  Note: The Microsoft Safety Scanner ends 10 days after being downloaded. To restart a scan with the latest definitions of anti-malware, download and run the Microsoft Safety Scanner again. The data files that are infected can be cleaned by removing the file completely, which means that there is a risk of data loss.

  Let us know the status of the issue.

• Explorer.exe uses too much CPU

  My explorer.exe uses too much CPU (almost 100%). Then an error message appears-

  Microsoft Visual C++ Runtime Library

  This application has requested the execution to terminate in an unusual way.

  For more information, contact the application support team.
  If I click on OK, or simply close the dialog box explorer.exe ends and restarts. After awhile, it starts to use full CPU again, and the same dialog box appears again. I have installed new software and tried almost every other way, this forum as restart explorer.exe etc...
  Help, please

  Hello Rahul,

  Thanks for posting your question in the Microsoft Community forum.

  I understand that explorer.exe is using too many CPU resources. I'll help you with this problem.

  1. What is the brand and model of the computer?

  2. what security software is installed?

  3. don't you make changes to the computer before the show?

  To resolve this issue, let us try these methods:

  Method 1.

  Advanced startup options (including safe mode): http://windows.microsoft.com/en-US/windows7/Advanced-startup-options-including-safe-mode

  Run a full scan of the computer with the Microsoft Safety Scanner to make sure that the computer is virus-free.

  Microsoft safety scanner: http://www.microsoft.com/security/scanner/en-us/default.aspx

  Warning of Security Scanner: there could be a loss of data while performing an analysis using the Microsoft safety scanner to eliminate viruses as appropriate.

  Method 2.

  You can run the system maintenance Troubleshooter and check.

  Open the troubleshooting of System Maintenance Utility: http://windows.microsoft.com/en-us/windows7/open-the-system-maintenance-troubleshooter

  See these articles for more information.

  Ways to improve your computer's performance: http://windows.microsoft.com/en-us/windows7/ways-to-improve-your-computers-performance

  Optimize Windows 7 for better performance: http://windows.microsoft.com/en-us/windows7/optimize-windows-7-for-better-performance

  Warning of Security Scanner: there could be a loss of data while performing an analysis using the Microsoft safety scanner to eliminate viruses as appropriate.

  Important: while performing the check disk on the hard disk, if bad sectors can be found, then check disk will try to repair this sector. All the data available in this area may be lost.

  For any question related to Windows, please do not hesitate to contact us and we will be happy to help you.