"Wininit EXE is a core process that is present in each Vista session. Wininit EXE's job is to start some of the main Vista background services (programs) like Service Central Manager (SCM), the Local Security Authority Subsystem (LSASS) and the Local Session Manager (LSM.EXE). Wininit EXE is a critical Windows Vista background program that should never be stopped through the Vista Task Manager system."
This would indicate to me that it loads before Norton and therefore not logged unless it is required after Norton loads.
Guess what I'm thinking is that wininit.exe must be running when I start up my computer even if it does not show up in the firewall logs
Because if lsass.exe is started by wininit.exe right? And isn't lsass.exe partly responsible for the different accounts one has on their computer? Like I have an admin account and a user account. So isn't the logging into one of these accounts handles by lsass.exe? And I'm able to log into both of these accounts, so wouldn't that mean wininit.exe is working despite not showing in the firewall logs?