9 November 2007
winlogin.exe
If you find winlogin.exe in your system, you may have been infected with RANDEX.E virus. It is an IRC Trojan horse that gives remote access to your computer using IRC.
winlogin.exe is located in C:\Windows\System32. Known file sizes on Windows XP are 20992 bytes (17% of all occurrence), 384408 bytes, 385024 bytes, 203209 bytes, 2023424 bytes, 26802 bytes, 81920 bytes, 131072 bytes, 53760 bytes, 202397 bytes, 266240 bytes, 107008 bytes, 201881 bytes. This process is harmful and must be terminated upon detection.
winlogin.exe at liutilities.com
winlogin.exe at bleepingcomputer.com