Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Start up using Autorun...want to make sure...


  • Please log in to reply
4 replies to this topic

#1 sckasf

sckasf

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:04:31 PM

Posted 21 January 2009 - 04:18 PM

I have read the extremely helpful tutorials and just would like someones blessing on the 2nd entry i found that looks to be malicious.

I have attached the screenshot of the entry.

When I search for Userinit logon Application i get:
http://www.bleepingcomputer.com/startups/u....exe-20054.html


I'm 99% sure that i must uncheck it. Also, just wanted to make sure I need to be unchecking in Safe mode right? or do uncheck in regular mode and then once identified then go into safe mode?

Thank you guys and gals! You are so wonderful!

Attached Files



BC AdBot (Login to Remove)

 


#2 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,579 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:31 AM

Posted 21 January 2009 - 06:10 PM

Where on your hard drive is userinit.exe located?
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#3 sckasf

sckasf
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:04:31 PM

Posted 22 January 2009 - 01:38 PM

Hello and thanks for the reply!

The first column is as follows: C:\WINDOWS\system32\userinit.exe
Second colomn: Userinit Logon Application
Image Path: c:\windows/system32\userinit.exe

hopefully that helps.

#4 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,579 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:31 AM

Posted 22 January 2009 - 04:18 PM

That looks like a legitimate file to me.

The location of the file is just as important as the name.

The Startup List flags it as an undesirable file if it is in following location:

C:\WINDOWS\userinit.exe

Whereas yours is located here:

C:\WINDOWS\system32\userinit.exe
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#5 sckasf

sckasf
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Local time:04:31 PM

Posted 25 January 2009 - 04:44 PM

Great! Thanks a million!!! Leaving it on there




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users