What is the "winlogon.exe" process on Windows 8? Is the "winlogon.exe" process a virus? Can I terminate the "winlogon.exe" process?

"winlogon.exe - Windows Logon Application" process is responsible for handling the secure attention sequence, loading the user profile on logon, and optionally locking the computer when a screensaver is running.

On the Processes tab of "Task Manager", "winlogon.exe" process may be listed as:

Image Name    PID  User Name   Memory  Description

winlogon.exe  544  SYSTEM      616 K   Windows Logon Application

Additional information about "winlogon.exe" process:

Command line:
   \Windows\System32\winlogon.exe
   
Started by: Boot program

Files used:
   C:\Windows\System32

Registry keys: None

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
HKLM\SYSTEM\ControlSet001\Control\NetworkProvider\HwOrder
HKLM\SYSTEM\ControlSet001\Control\Nls\Language Groups
HKLM\SYSTEM\ControlSet001\Control\Nls\Locale
HKLM\SYSTEM\ControlSet001\Control\Nls\Locale\Alternate Sorts
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\Session Manager
HKLM\SYSTEM\ControlSet001\Control\Winlogon\Notifications\Components\GPClient
HKLM\SYSTEM\ControlSet001\Control\Winlogon\Notifications\Components\Profiles
HKLM\SYSTEM\ControlSet001\Control\Winlogon\Notifications\Components\Sens
HKLM\SYSTEM\ControlSet001\Control\Winlogon\Notifications\Components\SessionEnv
HKLM\SYSTEM\ControlSet001\Control\Winlogon\Notifications\Components\TermSrv
HKU\.DEFAULT\Control Panel\International
HKU\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion

"winlogon.exe" process is not a virus. You should not terminate "winlogon.exe" process.

⇒ "services.exe" Process on Windows 8

⇐ "wininit.exe" Process on Windows 8

⇑ System Processes on Windows 8

⇑⇑ Windows 8 Processes Tutorials