Winlogon.exe
Process
- Winlogon.exe
- Program
- Windows Logon
- Publisher
- Microsoft Corporation
- Purpose
- Manage user logon and logoff
- Propriety
- Potentially Undesirable
- Perception
- System
- Principle
- Windows Logon could be legitimate Windows OS process. Windows Logon listens for SAS, call GINA for user and authentication, checks session state(logged on/off or suspendend), creates desktop(logon/application(user)/screen-saver), handles time-out operations, and provides support functions for GINA(including network). Secure Attention Sequence (SAS) -sequence of keystrokes for initiating log on/off. (default = Ctrl+Alt+Del) Graphical Identification and Authentication (GINA) - Customizable DLL that authenticates user logon(returns access token), activate userinit.exe, and handle smart card interactions. (access token -user, groups, privileges) CAUTION: Various trojan/worm/spyware overwrite or create a file by this name.
©
ProcessArchive.Com