jhill Posted March 3, 2010 ID:209082 Share Posted March 3, 2010 Today Malwarebytes keeps identifying the following file as infected (from the log):Registry Data Items Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.PWS) -> Data: c:\windows\system32\userinit.exe -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.PWS) -> Data: system32\userinit.exe -> Quarantined and deleted successfully.Each time I have removed it, and it comes back. I uploaded the userinit.exe file to kaspersky online virus test which passed it, and my antivira software says it is a clean file.Is this a false positive or do I need to do something else?thanks. Link to post Share on other sites More sharing options...
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!Register a new account
Already have an account? Sign in here.Sign In Now