dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
952

noodles1
@24.190.85.x

noodles1

Anon

the ol family pc

leave for about 2 weeks, come back, see this in task manager

anyone see logonui.exe?
oh my i wonder what it could be

norwegian
Premium Member
join:2005-02-15
Outback

1 recommendation

norwegian

Premium Member

If it is the legit version is is called Windows User Interface.
Disable it and the computer will stop functioning.

Use a couple of malware and anti virus scanners if you are concerned over recent events and you see other behavior like ads popping up.
Expand your moderator at work

rfhar
The World Sport, Played In Every Country
Premium Member
join:2001-03-26
Buicktown,Mi

rfhar to noodles1

Premium Member

to noodles1

Re: the ol family pc

A little info.
»www.file.net/process/log ··· exe.html
Expand your moderator at work
redwolfe_98
Premium Member
join:2001-06-11

1 edit

redwolfe_98 to noodles1

Premium Member

to noodles1

Re: the ol family pc

there is a program called "system explorer" that you could use, to identify files with:

»systemexplorer.net/

here is some information from systemexplorer.net's database:

»systemexplorer.net/searc ··· onui.exe

there are some posts in dslreports' "software" forum, announcing updates for the "system explorer" program, in case you are interested.. here is one example:

»[Updated] Free - System Explorer 5.9.1

note that there are two versions..one is an "installer" version and one is a "portable" version.. you might want to use the "portable version", which doesn't require an "install".. either way, you shouldn't have any problems with the program..
tdumaine
Premium Member
join:2004-03-14
Seattle, WA

1 recommendation

tdumaine to noodles1

Premium Member

to noodles1
Lets not just troll and say "google it" or be snarky. I wont name the 2 people responding as such

therube
join:2004-11-11
Randallstown, MD

therube

Member

Agreed.

Better to say something like;

right-click the file | Properties.
where is the file located?

If in C:/Windows/System32/ then it is legitimate to have that filename in that location & is probably not malware.

siljaline
I'm lovin' that double wide
Premium Member
join:2002-10-12
Montreal, QC

siljaline to noodles1

Premium Member

to noodles1
Perhaps the Cleanup Team can help.

»Security Cleanup FAQ »Mandatory Steps Before Requesting Assistance

therube
join:2004-11-11
Randallstown, MD

therube

Member

There is likely no issue here, so nothing to clean up.

If the OP posted a hash of that file, others could compare against that.

siljaline
I'm lovin' that double wide
Premium Member
join:2002-10-12
Montreal, QC

siljaline

Premium Member

said by therube:

There is likely no issue here, so nothing to clean up.

~ Just saying
Mele20
Premium Member
join:2001-06-05
Hilo, HI

Mele20 to norwegian

Premium Member

to norwegian
said by norwegian:

If it is the legit version is is called Windows User Interface.
Disable it and the computer will stop functioning.

It's not in my Task Manager and never has been. I don't login, I bypass login on boot. So, not everyone has that process running in Task Manager.

norwegian
Premium Member
join:2005-02-15
Outback

1 edit

norwegian

Premium Member

Fair enough Mele, if you don't use fast user switching, nor the standard logon screen it may not need to run for you on setting up the user you are going to use.

It is a legit file if in the correct place.

We are awaiting the OP to provide more details, such as where is it located etc.
Just because it is running and the OP doesn't know what google does, then we need more info to help them.
Frodo
join:2006-05-05

Frodo to noodles1

Member

to noodles1
I think we need the OS version. I'm not finding this file on my Win7-64. According to the discussion here LoginUI.exe is only on XP.

I tried switch user and still didn't see it on my Win7.
BlitzenZeus
Burnt Out Cynic
Premium Member
join:2000-01-13

BlitzenZeus

Premium Member

I'll first point out they asked a question that google can answer, and haven't come back so far.

Next yes it's on Win 7, and is part of the many Windows NT versions.

Frodo
join:2006-05-05

1 edit

Frodo to noodles1

Member

to noodles1
Thanks for that info. Seems my problem was, I used a 32 bit utility (which) to see if it was on the system, and it went to C:\Windows\SysWOW64 to look for the file. Time to upgrade that utility.

edit: fixed the issue
for command line utilities, the path includes "set path=%path%;%windir%\Sysnative"
Which command now shows:
c:\>which logonui
1.  C:\windows\Sysnative\logonui.exe
 
Mele20
Premium Member
join:2001-06-05
Hilo, HI

Mele20 to norwegian

Premium Member

to norwegian
On my Vista Ultimate virtual machine, I set it up with login so I had to type my password each time, etc. I remember seeing the file in that Windows Task Manager.

Yes, it could be malicious if located outside Windows/system32.

therube
join:2004-11-11
Randallstown, MD

therube to Frodo

Member

to Frodo
quote:
I'm not finding this file on my Win7-64. According to the discussion here LoginUI.exe
Wrong filename, spelling, in this case.