How to see if winlogon.exe is a virus or not

I read on the internet many places but i still can not understand it. I get this from NOD32 2.7

Virus Warning

c:\windows\winlogon.exe - probably unknown NewHeur_PE virus
C:\WINDOWS\winlogon.exe - probably unknown NewHeur_PE virus

To answer the question myself i download Spy Bot Search and Destroy and that program said it was a Virus so now everything is ok.

 

In most cases the viruses in system32 folder and they are hidden exe files
Try to use HiJackThis tool to detect all applications and the registry records

 

Or just get something real for virus protection, instead of NOD32. I'm verry happy with Windows Live OneCare.

 

well if you have norton... you should be able to delete it right off your computer.

 

Here you go mate hope this helps.

http://www.liutilities.com/products/wintaskspro/processlibrary/winlogon/

Its not a virus:
Author: Microsoft Corp.
Part Of: Microsoft Windows Operating System
Security Risk (0-5): 0
Spyware: No
Virus: No
Trojan: No
System Process: Yes
Background Process: Yes
Uses Network: No
Hardware Related: No

Enjoy

- Prilep

 

It was a virus it was not located in the right folder. But yes i saw the same thing and i start asking in the forum. It takes the same name as the real file and place it self almost at the same place. Tricky bugger!

 

So it was a virus?? Thats weird


- Prilep

 

If you see TWO Winlogon.exe's in the Task manager then you have a virus. At least thats how I detect it, also regularly keep checking your System Configuration Utility and look inside the startup tab, if you see anything suspicious there, then you have a virus.

IT