userinit.exe is a false positive

[Aabheer]

Hi all,

Recently, many computer administrators reflected the computer sign-on system to immediately write off a problem, many types of cases are caused as userinit.exe missing, there may be due to improper anti-virus software settings, resulting in virus-infected userinit.exe file is deleted. userinit.exe general in the system directory, such as Windows XP is C: \ WINDOWS \ SYSTEM32 under, while a key in the registry pointing to this file:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon \ Userinit
Windows XP system, this key is: C: WINDOWSsystem32userinit.exe,
Windows 2000 systems, this key is: C: WINNTsystem32userinit.exe,
The login process, the system will first read the key and the implementation of which point to the program, if this key is some of the virus to modify or userinit.exe file is deleted, Pleas update me about the userinit.exe is a false positive. Thanks in advance.

[Milton.J]

I suggest you to killing is not recommended. Unless your system has a problem. This process does not always end. This is the XP boot from running the program. The dog is using the mount before the procedure to download the virus. All the best.

[Steve123]

Userinit.exe is a key process in Windows operating system. For managing the different boot sequence, for example, establish a network connection and start the Windows shell. Userinit.exe is also possible that hackers disguised Trojans. Userinit.exe normal after system startup program will automatically disappear. If the boot does not disappear after a very long time, there might be Trojan horses, when the virus destroyed or userinit.exe userinit.exe registry key is the virus changes, may appear normal windows system can not log on or enter the login user name, password system immediately after the write-off, once again try to sign, will once again canceled. All the best.

[Shen]

When the userinit.exe replaced by viruses, or the registry HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon key under the userinit the normal C: \ WINDOWS \ system32 \ UserInit.exe been modified, the system will log exception may occur. Showed: win login repeatedly written off, or can not boot into windows desktop, press ctrl alt del, bring up the Task Manager, Task Manager through the start explorer.exe, but you can boot to the desktop. All the best.

[Big Fish]

You reboot into Safe Mode, then open the Registry Editor, Start - Run-REGEDIT
F3 Search USERINIT. EXE you see is not the C: \ WINDOWS \ system32 \ userinit.exe. If not, change the path to re-post from the stubborn Trojan Removal Tool with 360 and 360 checks, no do not get at the problem of the estimate suggests that if further suggest that false positives are not prompted it wants to point the right upper. check and reply.

[Zachary]

It is a robot dog, userinit.exe replaced by the virus, you can then replace back on, in the C: \ WINDOWS \ SYSTEM32 \ DLLCACHE \ ri have the file, copy it to the SYSTEM32 directory on OK, and in the basic drug on is that you visit the infected page, there also may be after reinstalling your other disk also toxic, it may be infected you and looking at the page. check and reply.