Winlogin.exe is created by a virus. It's possible that your antivirus
program has already removed the threat but did not clean up other remnants
that need to be removed manually. Symantec has references to two viruses
known to create the winlogin.exe file:
MVP Doug Knox has created a small program that can detect all mention of
Winlogin in the system. It will list each occurrence and offer you the
choice to remove it. Since the file is typically created by a virus and not
needed for Windows to run, all instances should be safe to remove:
