Solved

Winlogon process

Posted on 2010-08-19
7
509 Views
Last Modified: 2013-12-04
I seem many instances of Winlogon process running on my system at the same time. I though that gets executed only when I log on to the system. And that should be once. But I see many processes going on. Is it something unusual?
0
Comment
Question by:TheCommunicator
  • 4
  • 2
7 Comments
 
LVL 20

Accepted Solution

by:
Lazarus earned 375 total points
ID: 33479308
Research it, get Process Explorer. http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx It provides more information than Task Manager.
Normally you dont see more than one instance of Winlogon. You should also do a scan for virus. malware and rootkits as a norm to see if ther might be something else going on.
0
 
LVL 20

Assisted Solution

by:Lazarus
Lazarus earned 375 total points
ID: 33479322
BTW, it should the winlgon.exe should be running from: C:\Windows\System32
0
 
LVL 6

Assisted Solution

by:NerdsNow
NerdsNow earned 125 total points
ID: 33479350
It is normal for a single instance of Winlogon to be running continusly if there is several the first thing i would do is to doublecheck to make sure the is no type infection involved
processes.png
0
Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

 

Author Comment

by:TheCommunicator
ID: 33479412
Thanks for info but I downloaded the file from
 http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

and the zip file contains only notepad file and the help file now Exe. i am not sure why.

Secondly, so out of your comments, should I conclude that windows 7 does not have any apparent reason to run the process until and unless that is a virus?
0
 
LVL 20

Assisted Solution

by:Lazarus
Lazarus earned 375 total points
ID: 33479479
Yes, check for Virus infections, more than one instance is not normal. Please look at the zip file you download again it should have 3 files in it. Eula.txt, procexp.chm and procexp.exe

http://download.sysinternals.com/Files/ProcessExplorer.zip
0
 

Author Comment

by:TheCommunicator
ID: 33479921
Thank you very much that helped :)
0
 
LVL 20

Expert Comment

by:Lazarus
ID: 33480151
TheCommunicator, What did you find was the problem if we may ask?
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you try to extract and to view the contents of a Microsoft Update Standalone Package (MSU) for Windows Vista, you cannot extract the files from the MSU. Here we are going to explain how to extract those hotfix details without using any third pa…
By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question