Prev: Sorry, Folks - TWO Misattributions In Hundreds Of Posts....
Next: DNS cache poisoning
From: Peter Foldes on 21 Jun 2010 13:51
Crossposted to the alt.comp.virus

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.
http://www.microsoft.com/protect

"Roger & Kath" <roger-kath(a)tiscali.co.uk> wrote in message
news:hvo82v$9tt$1(a)speranza.aioe.org...
> Hi guys
>
> When I run AVG Free it throws up this result
>
> File:-
> "C:\WINDOWS\system32\userinit.exe";
> Infection:-
> "Trojan horse Hiloti.AU"
> Result:-
> "Object is white-listed (critical/system file that should not be removed)"
>
> I've never heard of "Object is white-listed "
> AVG doesn't remove it lioke it does the other things it finds.
>
> Any advice on what to do about this?
>
> Running Windows WP plus the service packs etc
>
> Roger C
>

From: David H. Lipman on 21 Jun 2010 14:45
From: "Peter Foldes" <maci252211(a)hotmail.com>

>> When I run AVG Free it throws up this result

>> File:-
>> "C:\WINDOWS\system32\userinit.exe";
>> Infection:-
>> "Trojan horse Hiloti.AU"
>> Result:-
>> "Object is white-listed (critical/system file that should not be removed)"

>> I've never heard of "Object is white-listed "
>> AVG doesn't remove it lioke it does the other things it finds.

>> Any advice on what to do about this?

>> Running Windows WP plus the service packs etc

>> Roger C

I'm wondering if it is a detection on "Userinit.exe" set in
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit or if the entry..

which should be...
Userinit = C:\WINDOWS\system32\userinit.exe,

is...
Userinit = C:\WINDOWS\system32\userinit.exe, malware_file




--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


From: Aardvark on 21 Jun 2010 14:53
On Mon, 21 Jun 2010 13:51:50 -0400, Peter Foldes wrote:

> Crossposted to the alt.comp.virus

What's that, your sig file, you top-posting fuckwit?



--
I'm Josef Fritzl, and No Windows was my idea.
From: FromTheRafters on 21 Jun 2010 21:54
:oD
--

"Aardvark" <aardvark(a)youllnever.know> wrote in message
news:tyOTn.1329$k15.905(a)hurricane...
> On Mon, 21 Jun 2010 13:51:50 -0400, Peter Foldes wrote:
>
>> Crossposted to the alt.comp.virus
>
> What's that, your sig file, you top-posting fuckwit?
>
>
>
> --
> I'm Josef Fritzl, and No Windows was my idea.


 | 
Pages: 1
Prev: Sorry, Folks - TWO Misattributions In Hundreds Of Posts....
Next: DNS cache poisoning