What is winlogon.exe and how to remove it ?

Hi all,

In the Windows task manager I have a process called "winlogon.exe".
It is reluctant and no way to access its location!
There is no information available from all the right-click options!
There is no information in the Username Column nor in the Command Line! Only the Process name as "winlogon.exe" !
When I right-click to look up for its location, nothing happens! There is no location path!
When I righ(click to end the process I have a message:
The operation could not be completed. Access is denied" !
When I right-click > "Property", nothing happens neither!
None of the right-clcik menu is available except "end process" which is impossible too!
So, is this process safe or a malware?
How to kill it or remove it?
How to know where is it located?

Please advise!

Thank you

I found contradictory information:
1) winlogon.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system

2) winlogon.exe should not be disabled, required for essential applications to work properly. It is highly recommended that you run a FREE performance scan to automatically optimize memory, CPU and Internet settings.

So, what is the truth ?

winlogon.exe is a vital part of the system you cannot remove it. Terminating it as well will blue screen the computer.

Jeez! Don't delete it...........! If you suspect malware has tampered with it, just scan as normal.

Thanks guys, but if so, why I can't locate it when I right-click?
Also, there is no info available from "properties" ?

If it is safe, why the right-click menus are unavailable?

Its absolutely integral to your system - leave it alone!

As stated, if you suspect malware, scan as normal with your chosen AV software. Don't go trying to locate and delete files manually, or it will end in tears.

Because you don't have Task Manager running with administrative privileges. (i.e. click the "Show processes from all users" button)

For all other processes, I can access their location or their properties from the right-click, but for "winlogon.exe", it is impossible! Why?

logicearth said:

Because you don't have Task Manager running with administrative privileges. (i.e. click the "Show processes from all users" button)

Click to expand...

Yeah, it's true! Indeed, in this case I can access its location (System32) and Properties (Company Microsoft...). This is reassuring!

Thanks guys.