I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free DownloadFully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
The file %WinDir%\LOGIN.EXE is identified as a virus dropper.
The dropper %WinDir%\LOGIN.EXE is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file %WinDir%\LOGIN.EXE loads into the computer memory and tries to connect to the dangerous web site.
Usually the %WinDir%\LOGIN.EXE dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the %WinDir%\LOGIN.EXE process and delete the file %WinDir%\LOGIN.EXE.
%WinDir%\LOGIN.EXE Information and Removal:
LOGIN.EXE is known as: Downloader.Ertfor [Symantec] Trojan-Downloader.Win32.Suurch.csq [Kaspersky Lab] Mal/Behav-038 [Sophos] Trojan.Win32.Agent [Ikarus] packed with FSG [Kaspersky Lab].
MD5 of LOGIN.EXE = 048CE3777F8ED561E9952AFF30A645BA
LOGIN.EXE size is 100252 bytes.
Full path on a computer: %WINDIR%\LOGIN.EXE
Related Files:
%TEMPLATES%\A7UGG541A07H1124VWC0W70VLVT6U71GIP8RF65
%APPDATA%\AKTAA\TELI.EXE
%APPDATA%\CLEANHDM.DLL
%APPDATA%\CLEANHDM.EXE
%APPDATA%\EWOQ\OCYZ.QIE
%TEMP%\TMP19.TMP
%APPDATA%\HSD.EXE
%TEMP%\C.TMP
%WINDIR%\GDI32.EXE
%SYSTEM%\SYSTEM.EXE
%TEMP%\CSRSS.EXE
%TEMP%\DDORA.EXE
%TEMP%\E.EXE
%TEMP%\INSTALL.EXE
%TEMP%\NSD7.TMP\1EUROP.EXE
%TEMP%\NSD7.TMP\6TBP.EXE
%TEMP%\NSD7.TMP\IR.EXE
%TEMP%\NSF3.TMP\IC1.EXE
%TEMP%\NSF3.TMP\PUZZLE QUEST.EXE
%TEMP%\P2HHR.BAT
%TEMP%\PSHHA.EXE
%TEMP%\QWUTU.EXE
%TEMP%\TCOMFPAG.EXE
%TEMP%\TMP14.TMP.DLL
%TEMP%\TMP19.TMP.EXE
%TEMP%\VRLWNUQA8CI8TR3.EXE
%TEMP%\YTTWULHW.EXE
%WINDIR%\LOGIN.EXE
%WINDIR%\SLETREMS.DLL
%WINDIR%\SPOOLSV.EXE
%SYSTEM%\KLX8HZOW.DLL
%WINDIR%\TASKS\DNE.JOB
%WINDIR%\WINLOGON.EXE