Process Information

Process File: winlogon.exe
Process Name: Microsoft Windows Logon Process

Author: Microsoft Corp.
Part Of: Microsoft Windows Operating System

Description:
winlogon.exe process runs in the background. It's a part of the Windows Login subsystem. Winlogon is necessary for user authorization and checks the Windows XP activation code.

WinLogon.exe is a process belonging to the Windows login manager. It handles the login and logout procedures on your system.
The window which pops up and prompts you for your username and password, or which allows you to logoff or shutdown, is the WINLOGON process.

This program is important for the stable and secure running of your computer and should not be terminated.

Note: winlogon.exe could also be a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. It could also be a registered security risk and should be removed immediately.

Determining whether this process is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.
The winlogon.exe file is located in the C:\Windows\System32 folder or C:\WinNT\System32 folder. In other cases, winlogon.exe is a virus, spyware, trojan or worm!

If you have Windows NT4/2000/XP/2003 and the full path for this task is C:\WinNT\Winlogon.exe or C:\Windows\Winlogon.exe, then you may have the W32.Netsky.C@mm virus, or a newer virus. If you have Windows 95/98/ME then you definitely have either the above virus or a newer virus.


Recommendation for winlogon.exe:
Winlogon.exe is an integral part of the operating system.
Should not be disabled, required for essential applications to work properly.

Summary account

System Process: Yes
Application: No
Background Process: Yes
Uses Network: No
Uses Internet: No