Info - winlogon.exe

• The winlogon.exe process works to manage the user’s login and logout activity on system. The window which appears and asks for username and password to perform login and the window which prompts with the options to logout, restart, or shutdown are because of winlogon.exe process.

• winlogon.exe is the Windows NT login manager.

• winlogon.exe location is “%SystemRoot%\System32\” or in simple words “C:\Windows\System32\”.

• If you found more than one winlogon.exe is running in the task manager then one of winlogon.exe is virus. You must check the process location and if its different from the above specified one than you should kill the process and remove that file from its location as well.

• You cannot delete C:\Program Files\Movie Maker\*.* or C:\Program Files\NetMeeting\*.* due to winlogon.exe. if some of these files be deleted, winlogon detects the deleting and restore that files.

• YOU CAN'T ABLE TO END THIS PROCESS FROM TASK MANAGER & ITS PRIORITY LEVEL IS ALSO SET TO VERY HIGH.

************************************************************************************************************************************************************************************************