Winlogon.exe is the common process running in almost every machine running Windows. So here are the details on this process.

What is winlogon.exe and why is it running?

As suggested by the name of the process, this is a process that is related to the Windows Login Manager. Winlogon.exe handles all the login and logout procedures on the system. Being the part of the Windows Login subsystem, it is executed in the background and is located in the folder C:\Windows\System32.

The process is running because it is necessary for user authorization and checks the Windows XP activation code. The process is required for the proper running of the system and therefore should not be terminated.

However, there is also a virus registered as the same name as this winlogon.exe.

Extra Info

Author: Microsoft
Threat Rating: 0/5