Ok... Never have I seen it in the process manager. I'm really suspicicous as my net is lagged like hell :/
You may want to take a look here: http://www.liutilities.com/products/wintaskspro/processlibrary/winlogon/ What security are you using? Cheers
Lots of windows process can become infected with worms and other nasties and so it is always a good idea to have some decent security protection. Jimbob
The properties of winlogon.exe should look something like the pic below. Its MD5 in XP SP2 should be 01C3346C241652F43AED8E2149881BFE. Here's some interesting reading on the subject: Advanced hiding techniques: The mystery of the trojaned Winlogon.exe. Nick