wininit.exe

G

Guest

Was looking thru all the running processes on my system, found this. Am
reading that it is a virus, is this true? Am running Trend Micro PC-cillin
Internet Security 14, and it reports no problems. Is this something I need to
remove and if so how?
 
R

Rick Rogers

Hi,

What you are reading about is the Bymer virus, however that does not mean
you are infected. One of the factors of this particular bug is that it
arrives as a wininit.exe file, however there is also a legitimate
wininit.exe file. In earlier Win OS's, the legit one is found in the
\Windows directory, but in Vista this file is in the \Windows\System32
directory - which happens to be exactly where the trojan likes to place it
self. Fortunately, with system file protection in place it cannot overwrite
the existing file without your permission (you know, those annoying nag
screens - they actually do have a purpose). Trust Trend, as I doubt that the
one you have is a virus. If you right click the file and check properties,
it should be 121,344 bytes in size and should show as being from the
Microsoft Corporation.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top