Winlogon.exe chewing up 50% of my CPU... ?? (100% of 1 core)

Similar Questions

• memory leak Winlogon.exe and high CPU usage

  I use Windows XP SP3. I'm leaking memory in winlogon.exe (about 5 M/hour). In addition, the CPU usage spikes to 50% of all 6 seconds. The file is properly signed so probably not a virus.

  This problem started after the application of last weeks patches.

  I seriously doubt that winlogon has a memory leak or people around the world would be screaming about it... and they are not.

  If this is what a thing look like, then you have another problem - probably a malware infection, or what you are currently using antivirus/antimalware protection is afflicted.

  Looking at previous answers, I would say that McAfee is afflicted, and it is already a well know that McAfee is a memory and CPU hog and you may want to consider replacing with something of less intrusive as Microsoft Security Essentials (do you use McAfee?).

  Since the Microsoft Answers forum does not have any kind of information system request when a new question is asked, we know absolutely nothing about your system.  Not knowing the basic information a problem prolongs the frustration and the agony of these issues.

  Thank you MS Answers, allowing the resolution of simple problems as frustrating and a lot of time as possible.

  Provide information on your system, the better you can:

  What is your system brand and model?

  What is your Version of XP and the Service Pack?

  What is your Internet browser and version?

  Describe your current antivirus and software anti malware situation: McAfee, Symantec, Norton, Spybot, AVG, Avira!, MSE, Panda, Trend Micro, CA, Defender, ZoneAlarm, PC Tools, Comodo, etc..

  What do you see (exactly) that you don't think you should see, and when you see it?

  If the system works, what do you think might have changed since the last time it did not work properly?

  No matter what you use for malware protection, follow these steps:

  Download, install, update and do a full scan with these free malware detection programs at:

  Malwarebytes (MMFA): http://malwarebytes.org/

  SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

  They can be uninstalled later if you wish.

  The scans by operating clean, restart and fix any problems.

• Infect winlogon.exe, explorer.exe virus and virus Hosts-DNS

  Hi guys,.

  A laptop computer, that I'm not using has recently been infected with a virus from winlogon.exe and explorer.exe and one DNS host virus.
  I tried to use avast: edition free, malwarebytes and spybot search and destroy.
  And as a last resort, I used Norton Power Eraser...

  The problem is not cleaner Antivirus or antispyware can eliminate this type of virus.
  And not boot into safe mode and try to remove it from there do not remove viruses at all.
  I took this laptop a laptop technician where he took out the hard drive and scanned for viruses, but when I came back the virus or on it.

  What can I do to remove these viruses, since it has severely reduced performance on my pc and the virus's keep redirect my Web pages, I will be using internet explore?
  I think that the virus has embedded themselves inside the windows operating system.

  Thank you
  Brent

  Hi mate

  Usually the explorer.exe, winlogon.exe are running Microsoft files and these files belongs to the Windows operating system and must be placed in the folder C:\Windows\System32.
  If it a case then these are not viruses.

  However, you can try the Antivirus application free Avira Antivirus software.
  Google for it you can download it for free.
  Scan the system and check again.

  As a last option, I recommend reinstalling the system using the Toshiba recovery disc!
  That would erase everything from the HARD drive.

• Equium P300-16 t winlogon.exe error - badimage

  Hello

  I encounter an error that my Equium P300-16 t starts to windows Vista.

  This is what happens...

  Winlogon.exe - BadImage
  C:\windows\system32\KBDUK. DLL is not designed to run on windows or it contains an error. Try to reinstall with original media or contacting... blah blah blah.

  It began to appear after I tried to uninstall my Norton antivirus has expired. And it seems that the result of this error is that I can not connect detect wireless networks. so no internet! the age of darkness here I come.

  I don't know who this KBDUK file is so I am worried to take it off.
  I tried to restore to before I made changes but its made no difference - I broke it.

  Any help would be much appreciated.

  Thank you

  Dave

  Hello

  Maybe this KBDUK. DLL file is a virus or has something to do with your old Nero

  If you Norton from your system you must also run the Norton removal tool that you can download from the homepage of Symantec. It removes all the files of Norton products.
  Check this box!

  If it doesn t work I would try a system restore to an earlier point. After that you can try to delete Norton again.

• Re: Cannot connect - how can I fix the error "Bad Winlogon.exe - Image"?

  Last night, my laptop did something weird. The screen is blue and it has conducted an audit. The audit was in three parts (that's all I remember) once this is done, my laptop back running and it worked very well.

  Later that morning, he crashed and restarted, but when it comes to where he usually displays user logons, it came with an error message. The title was winlogon.exe - bad image
  and the message describes how the file is incorrect.

  Now, my laptop won't let connect me. How can I fix it?

  It seems that the file system was corrupted unfortunately he touched one of the important files needed for windows to boot.

  You will need a bootable CD to repair the problem for that I recommend Microsoft Diagnostics and Recovery Toolset, you can download from http://www.microsoft.com/downloads/details.aspx?familyid=5D600369-0554-4595-8AB4-C34B2860E087&displaylang=en

  Run the Setup program, go to the installation folder and burn "erd50.iso" as an image (not a data CD) file using software such as Nero.
  Then you need to boot from the CD I do not know how it comes to your laptop so check the manual or change the boot order in BIOS whether it is the method as start the recovery disc.

  When the software is loaded will ask that the Windows installation you want to repair if no disc i.e. C: is offered in the drop-down list, then you may need to change the BIOS setting regarding the AHCI mode, compatible and under tension when you are finished.
  If drive C is visible then the hard drive is accessible, however, you must select "does not fix an installation of Windows." and click OK.

  Click Start, then select "Command prompt", you will get a black box with white text.

  type the following command and enter: chkdsk c: /f /r

  This command will perform a full scan of your hard disk and correct any errors, he can find that could take up to 45 minutes depending on the size of your disk.
  When he finished closing and restart your laptop without the CD in the drive, if you have changed the AHCI mode in the BIOS then change back.

  If Windows still doesn't boot then boot from the CD again and restart "Command Prompt".

  type the following command and enter:

  c:
  cd\windows\system32

  If entered correctly your screen should display: C:\Windows\system32 >

  type the following command and enter: (Note: the point is necessary and not a typo)

  Copy dllcache\winlogon.exe. /y

  If all goes well you should see a message: 1 file (s) copied.

  Stop the laptop restore all the BIOS settings and hopefully Windows will boot again normally. :)

  Richard S.

• Help! atieclxx.exe winlogon.exe and csrss.exe running with no description?

  Help, recently I realized that this three processes are running on my task manager process list. > aticlxx.exe and csrss.exe, winlogon.exe< they="" have="" no="" username,="" commandline,="" and="" no="" description,="" i="" cannot="" end="" any="" of="" them="" myself,="" i="" suspect="" its="" a="" malware.="" help="" is="" needed="" and="" tell="" me="" if="" it="" is="" suppose="" to="" be="" running="" at="" all,="" if="" yes="" why="" are="" there="" no="" description.="" i="" have="" trend="" micro="" titanium="" security="" running="" which="" i="" disabled="" before="" the="" dds="" scan="" below.="" i="" have="" used="" malware="" bytes="" to="" scan="" but="" nothing="" is="" detected.="" help="" of="" comfort="" is="" greatly="" needed="" as="" i="" want="" to="" know="" if="" its="" reallly="" a="" malware="" or="" just="" my="" mind="" having="" a="" false="">

  I noticed that my internet is slow with very high ping, my laptop is starting to become slower, although it is a new on
  Core i5 2.5 ghz ram 4 GB ddr3

  I ran norton 360, but nothing came out, and they are still running, I got my laptop, hard drive formatted and reinstalled windows, but they are still there

  When I start window in safe mode I find csrss.exe and winlogon.exe with description, but under normal conditions, that they are not

  pls help me :(

  Try "show processes from all users".

  Or run Process Explorer with 'show details for all processes"selected on the file menu.

  http://TechNet.Microsoft.com/en-us/Sysinternals/bb896653

• Winlogon.exe guard popping up saying 'No disc' there is no disk in the drive. Insert a disc into drive K

  Winlogon.exe guard popping up saying 'No disc' there is no disk in the drive. Insert a disc into drive K. I won't record anything. It keeps popping up when I want to stop and he let me close. And it won't go away. I tried the Task Manager, and who is unable to complete the task. I went to his file and tried to delete, but it's not going to get out me of my PC

  Hello

  1. what version of operating system you are using?
  2. did you of recent changes on your system prior to this problem?
  3. when, exactly, you get this error message?

  You can try the steps mentioned below and check if it helps to solve the problem.

  Method 1: Scan your computer anti-virus using the Microsoft Safety Scanner.

  Microsoft safety scanner will help us to get rid of software viruses, spyware and other malicious software.

  The Microsoft Security Scanner is a downloadable security tool for free which allows analysis at the application and helps remove viruses, spyware and other malware. It works with your current antivirus software.

  http://www.Microsoft.com/security/scanner/en-us/default.aspx

  Note: The Microsoft Safety Scanner ends 10 days after being downloaded. To restart a scan with the latest definitions of anti-malware, download and run the Microsoft Safety Scanner again.

  Warning: If you run the antivirus program that is infected by the virus scan will get deleted. Therefore, reinstall the program. Also, if files and folders are affected by the virus, while they might even get deleted.

  Method 2: Try to boot in safe mode and check if the same problem occurs.

  http://Windows.Microsoft.com/en-us/Windows7/start-your-computer-in-safe-mode

   

  Method 3: If the problem does not exist in Mode without failure, then try to put your computer in a clean boot state.

  By setting your boot system minimum state helps determine if third-party applications or startup items are causing the problem.

   

  How to troubleshoot a problem by performing a clean boot in Windows Vista or Windows 7:
  http://support.Microsoft.com/kb/929135

  Note: After the boot minimum troubleshooting step, follow step 7 in the link provided to return the computer to a Normal startup mode.

  Hope this information is useful.

• If I kill Winlogon.exe in an attempt to restart or stop a device could cause corupted becaome the operating system

  I was told that if I had to kill the Winlogon.exe in an attempt to restart or stop a device could cause the operating system to become corupted.

  I'm uaing a feature of windows 2000.

  Hello

  1. How did you kill? via the Task Manager?
  2. do you use the Windows 2000 operating system?

  The process "winlogon.exe" runs in the background. Winlogon is a part of the Windows login subsystem and is necessary for the user authorization and activation of Windows controls.

  Murder winlogon.exe can make your computer unable to open a session, but I doubt it would have damaged the operating system. It is necessary that you let Microsoft Programs and services run without interruption for the proper functioning of your computer.

  Note: The winlogon.exe file is located in the folder C:\Windows\System32. In other cases, winlogon.exe is a virus, spyware, Trojan or worm.

• Infected Winlogon.exe and explorer.exe accidentally deleted on XP Pro PC - need help from recovery console

  Hello

  Windows XP Pro SP3 Dell Optiplex and been infected by Trojan in winlogon exe files and Explorer. AVG asked me if I wanted to force deletion and I foolishly agreed. Now, I get the BSOD and the message 'Windows logon done unexpectedly '.   It is a work PC and the CD only we have is the Dell CD to re - install and I know that I need as the first step recovery console. I don't know if the recovery console is on it, and then I need help for the uncomprressed explorer.ex_ and winlogon.ex_ and in their right place.

  I'm not a total newbie, but it's been some time that I used the recovery console.

  Help?  Thanks in advance and greetings to all

  Morey

  Try to be more specific with the error messages you see, so it does not guess or try things.

  Here is an example of a popular error message that sounds like yours (maybe):

  STOP: c000021a {fatal system error}
  The Windows logon process ended unexpectedly with the status of 0xc0000034 (0 x 0000000 0000000 x 0).
  The system has been shut down.

  What exactly tell your message?

  There should be copies of XP system files backup all critical already on your hard drive in the windows\system32\dllcache folder (it is this case), you may not need any expansion.

  I would like to see the exact error message, make a CD bootable Recovery Console, run chkdsk/r even if he doesn't find anything to do and then see the replacement of missing persons or suspicious files, either by copying it in the backup copies of replacement of the recovery, or from another CD Console, you can do if the Recovery Console gives you a hard time (first do the CD Recovery Console).

  First of all, you need to start on something...

  You can do a restore bootable XP CD as follows:

  If you have no XP bootable media (or aren't sure you have) create a bootable XP Recovery CD of Console and do not forget.

  This is not the same as recovery disks that may have come to a store to purchase the system.

  You can make a bootable Recovery Console CD by downloading an ISO file and burn it to a CD.

  The ISO bootable image file you need to download is called:

  xp_rec_con. ISO

  Download the ISO from here:

  http://www.mediafire.com/?ueyyzfymmig

  Use a new CD and this simple and free program to burn your ISO file and create your bootable CD:

  http://www.ImgBurn.com/

  Here are some instructions for ImgBurn:

  http://Forum.ImgBurn.com/index.php?showtopic=61

  It would be a good idea to test your bootable CD on a computer running.

  You may need to adjust the computer BIOS settings to use the CD-ROM drive as the first device to boot instead of the hard drive.  These adjustments are made before Windows tries to load.  If you miss it, you will need to restart the system again.

  When you start on the CD, follow the instructions:

  Press any key to boot from CD...

  Installing Windows... going to pronounce.

  Press 'R' to enter the Recovery Console.

  Select the installation that you want to access (usually 1: C:\WINDOWS)

  You may be asked to enter the password (usually empty).

  You should be in the folder C:\WINDOWS.  It's the same as the

  C:\Windows folder that you see in Solution Explorer.

  The Recovery Console allows base as file commands: copy, rename, replace, delete, chkdsk, fixboot, fixmbr, cd, etc.

  For a list of the commands in the Recovery Console, type help at the command prompt.

  Start by checking the integrity of your file system by using the chkdsk command.

  In the command prompt window, run the chkdsk command on the drive where Windows is installed to try to fix any problems on the afflicted player.

  Running chkdsk is fine, even if he finds no problem.  It won't hurt anything to run it.

  Assuming your boot drive is C, run the following command:

  CHKDSK C: /r

  Let chkdsk finish to correct the problems, he could find.  It may take a long time for chkdsk complete or they seem to be "stuck".  Be patient.  If the HARD drive led blinks always, chkdsk is something.  Keep an eye on the amount of the percentage to be sure that it is still making progress.  It may even seem to go back sometime.

  You must run chkdsk/r again until it finds no error to correct.

  Do, or do not. There is no test.

  I decided to implement the points for a new puppy instead of a pony!

• AppleMobileDeviceService.exe always takes 50% of the CPU usage.

  Original title: year App called AppleMobileDeviceService.exe constantly takes 50% of the CPU usage.  I'm not using iTunes.  Said Apple iI should ask Microsoft.  I use oper AX. sys.

  An App called AppleMobileDeviceService.exe constantly takes 50% of the CPU usage.  I am not connected to iTunes and my iPod is connected to my PC when this .exe runs with 50% usage.    Apple suggested that contact Microsoft.  I use oper AX. sys. Apple has suggested to contact Microsoft.

  Hi Armycyrus,

  Have you done a recent software or hardware changes to the system?

  Method 1:

  If iTunes is installed on the system, you can try to uninstall and reinstall the same and check if it helps:

  For more information, see the article:

  Remove and reinstall iTunes, QuickTime, and other software components for Windows XP

  Method 2:

  It seems to reset Winsock has solved the problem:

  For more information, see the Apple support links:

  HT3204 Apple Device Support hogging CPU, impossible to download podcasts

  Apple on Windows software: can see the performance problems and virgins iTunes Store

  Alternatively, you can try to reset Winsock and check if it helps:

  How to determine and to recover from Winsock2 corruption in Windows Server 2003, Windows XP and Windows Vista

  Important: The foregoing contains as follows to change the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs.

  For more information about how to back up and restore the registry, follow the steps from the link below:

  How to back up and restore the registry in Windows XP

• lack of winlogon.exe (or dll) in c:\windows\system32

  while eliminating some malware, I deleted the file 'winlogon.exe or winlogon.dll' dir 'c:\windows\system32 '.  of course now I can't connect to windows at all; the boots of the machine to the windows logon screen, click on admin account or user, flash wallpaper, then back to the logon screen.  This happens no matter which mode (safe mode, safe mode with command prompt, normal) I try to start in.  How to restore the winlogon file in the folder "c:\windows\system32"?  Thanks for your help.  Chris

  Since this question I've tired using the Repair Console to extend winlogon.exe in the system32 dir. could not expand the file.  but, I was able to access and read what files are in the directory c:\windows\system32 on the machine and found that the if the dir winlogon.exe.  but I'm still not able to go beyond the login screen; I start on the windows logon screen, click account admin or user, there is a flash of the wallpaper, then back to the logon screen.  Thanks again, Chris

  Never mind.
  I tried the repair console, does not
  I tried to repair, does not
  I tried to reinstall without format, does not
  so I just wiped the drive and do a fresh install.

• Error message: Winlogon.Exe could not locate the item. This Application did not start because Comctl32.Dll was not found.

  Update of security hung up during installation. I waited 12 hours for the update complete and nothing happened. Whe I reboot XP P4 syster, I get the Message from messageError: Winlogon.Exe could not locate component. This Application did not start because Comctl32.Dll was not found.

  Re-installed SP3... Installed hard drive then... cloned old drive and new drive... After several updates, it seems to do very well. Tried several programs/operations and seems normal. One day turned but didn't have to build another system or this one back up.  Thanks for the idea.     F

• Why is winlogon.exe written so much data?

  Windows XP with Service Pack 3.

  If I'm checking winlogon.exe on the Task Manager, the bytes to write I/O is always increasing and gets order of 100 francs of MB or more.

  What he writes to and where?

  Is this behavior is legitimate?

  Hello

  1 how long have you been faced with this problem?
  2. don't you make changes on the computer before this problem?

  The process "winlogon.exe" runs in the background. Winlogon is a part of the Windows login subsystem and is necessary for the user authorization and activation of Windows controls.

  The winlogon.exe file is located in the C:\Windows\System32 folder. In other cases, winlogon.exe is a virus, spyware, Trojan or worm.

  Step 1: Check for the issue in the clean boot state.

  From your computer by using a minimal set of drivers and startup programs so that you can determine if a background program is interfering with your game or program. This type of boot is known as a "clean boot".

  Reference:
  How to configure Windows XP to start in a "clean boot" State
  http://support.Microsoft.com/kb/310353

  When you are finished troubleshooting, follow these steps to reset the computer to start as usual:

  1. click on start and then click Run.
  2. type msconfig and click OK.

  The System Configuration Utility dialog box appears.

  3. click on the tab general, click Normal Startup - load all services and device drivers and then click OK.
  4. When prompted, click on restart to restart the computer.

  Step 2: Also, viruses or malware scan and check.
  http://www.Microsoft.com/security/scanner/en-us/default.aspx
  http://www.Microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356

• index.dat locked by winlogon.exe preventing roaming profiles to be completely unloaded on client PCs

  Greetings,

  I posted this thread in the server instances earlier because it's over my whole environment that this occurs, but since someone there told me to post it here, here goes:

  We have a problem with the index.dat (*) of locked files by the winlogon.exe process preventing the profiles on the computer to be completely empty when you connect to the wide. Most of the time, after that the user is disconnected, we cannot not even manually delete this file until a few minutes after the disconnection. For example, a script to automatically delete these files during log off is unfortunately useless.

  I searched on the internet and saw a lot of people with this or similar problems, but either there was no response or did not have solutions for our environment.

  The problem occurs on all the BONES in our environment (Windows 2000, Windows XP, Windows 7) and all versions of IE (IE 6, IE 7 and IE 8).

  We tried the following:

  -Create a profile completely (and of course delete all the computer itself)
  -Disable the anti-virus
  -Using the latest version of UPHClean
  -Specifically exclude folders from roaming profiles (even though they are by default excluded)

  index.dat (*) is located in the following folders:
  -%USERPROFILE%\Cookies
  -%USERPROFILE%\Local Settings\History\History.IE5\
  -%USERPROFILE%\Local Settings\Temporary Internet Files\Content.IE5\

  Kind regards

  Bram

  Hi Bram,

  I found your thread in the TechNet forums where you have been redirected here. Unfortunately, I'm really ill-equipped to help you with your problem. Microsoft Answers for consumer level support and clearly your question far exceeds our support.

  What I recommend doing is posting in the Windows 7 Misc on TechNet forums:
  http://social.technet.Microsoft.com/forums/en/w7itprogeneral/threads

  Members there is really to understand the functioning of Windows in a business environment and should have no problem to help you. I would like to apologize for the race around the forum to forum you meet to do as I know it can be frustrating.

  I'm sorry I can't do more to help you!

  Cody C
  Microsoft Answers Support Engineer
  Visit our Microsoft answers feedback Forum and let us know what you think.

• Winlogon.exe has encountered a problem and had to close. __

  The following problem occurs on the computer of my husband who runs Windows XP Home Edition with Internet Explorer 7.

  Problem: at any time, whether on the web or not, restart the computer on his own repeatively.

  This error occurred on 21/11/10 to 9:1701 h.  Please tell this problem to Microsoft.  We have created an error report that you can send to us.  We will treat this report as confidential and anonymous.  To see only the data that the error report contains click here.
  Error signature
  szAppName: winlogon.exe szAppVer: 0.0.0.0 szModName: unknown
  szModVer: 0.0.0.0 offset: 0192ffb0

  Hi little09red,

  Do you remember any changes made on your computer before the show?

  Follow the methods below:

  Method 1:

  Scan System File checker on your computer, you can check the link for the steps below: Description of Windows XP and Windows Server 2003 System File Checker (Sfc.exe): http://support.microsoft.com/kb/310747

  Method 2:

  a. Insert the Windows XP CD-ROM in the CD-ROM drive and restart the computer. Follow the instructions to start the computer from the CD-ROM drive.

  b. when the Welcome to Setup screen appears, press R to start the Recovery Console.

  c. If you have a computer dual-boot or multiboot, select the installation that you want to access from the Recovery Console.

  d. When prompted to do so, type the administrator password and press ENTER. If the administrator password is blank, press ENTER.

  e. type the following command: copy d:\i386\winlogon.ex_ c:\windows\system32\winlogon.exe

  Come in

  With regard to:

  Samhrutha G S - Microsoft technical support.

  Visit our Microsoft answers feedback Forum and let us know what you think.