Userinit.exe

Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Important Announcement: The winners of the BC Million Post contest have been announced. You can read who the winners are at this post.

- BleepingComputer Management

BleepingComputer.com > Bleeping Computer Applications and Guides > Windows Startup Programs Database

Userinit.exe

Options

KenH View Member Profile	Dec 31 2005, 04:26 PM Post #1
New Member Group: Members Posts: 2 Joined: 31-December 05 Member No.: 47,702	I used autoruns and the first entry listed is: AUTORUN ENTRY: C:\WINDOWS\system32\userinit.exe DESCRIPTION: Userinit Logon Application PUBLISHER: (Verified) Microsoft Windows Publisher IMAGE PATH: c:\windows\system32\userinit.exe I found this in the startup database: This is an undesirable program. This file has been identified as a program that is undesirable to have running on your computer. This consists of programs that are misleading, harmful, or undesirable. If the description states that it is a piece of malware, you should immediately run an antivirus and antispyware program. If that does not help, feel free to ask us for assistance in the forums. Name: 1qaw3edr5 Filename: userinit.exe Command: C:\WINDOWS\system32\userinit.exe Description: Added by the Troj/Kbroy-B keylogging Trojan. File Location: %System% Startup Type: This startup entry is started automatically from a Run, RunOnce, RunServices, or RunServicesOnce entry in the registry. HijackThis Category: O4 Entry Is this the same program even though the descriptions are different and is from (verified) Microsoft Windows Publisher? I want to check before I delete it. Thank you.

Grinler View Member Profile	Dec 31 2005, 05:31 PM Post #2
Bleep Bleep! Group: Admin Posts: 29,367 Joined: 24-January 04 From: USA Member No.: 3	That is a legit file. Generally when its verified as microsoft's is legit. This entry is also started from a different location in the registry as its supposed to. -------------------- Lawrence

KenH View Member Profile	Dec 31 2005, 06:16 PM Post #3
New Member Group: Members Posts: 2 Joined: 31-December 05 Member No.: 47,702	OK, Thank you Ken

« Next Oldest · Windows Startup Programs Database · Next Newest »

1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)

0 Members:

Display Mode: Standard · Switch to: Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum

Lo-Fi Version

Time is now: 22nd November 2008 - 08:42 AM

Advertise \| About Us \| Terms of Use \| Privacy Policy \| Contact Us \| Site Map \| Chat \| Tutorials \| Uninstall List
Discussion Forums \| The Computer Glossary \| Resources \| RSS Feeds \| Startups \| The File Database \| Malware Removal Guides