The program WINLOGON.SYS is used for hidden penetration into PC and its remote administration.
UnHackMe is recommended as a reliable program for solving the problem with WINLOGON.SYS.
Download for free: http://www.unhackme.com
Malware Analysis of WINLOGON.SYS
Full path on a computer: %APPDATA%\WINDOWSGENUINE\UPDATE\WIN\WINLOGON.SYS
Detected by UnHackMe:
WINLOGON.SYS
Default location: %APPDATA%\WINDOWSGENUINE\UPDATE\WIN\WINLOGON.SYS
Removal Results: Success
Number of reboot: 1
WINLOGON.SYS is known as:
Backdoor.Nuclearat
How to quickly detect WINLOGON.SYS presence?
![]( "Files")
Files:
Files:- %APPDATA%\WINDOWSGENUINE\UPDATE\WIN\WINLOGON.SYS
- %APPDATA%\WINDOWSGENUINE\UPDATE\WIN\WINLOGON.EXE
- %SYSTEMDRIVE%\~TMP5972.TMP