userinit.exe (Win32/Satiloler.A)

PC Pitstop Analysis

userinit.exe - According to CA:

Win32/Satiloler.A is a backdoor trojan that allows an attacker to collect information from a user's system.

Recommendation

userinit.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

userinit.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.

Identification

The file name alone identifies this program.

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. userinit.exe (Win32/Satiloler.A) has been seen on 0.00% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested.

PCs running this program did not have a high average CPU load during testing, which indicates it does not consume a great deal of CPU time on most systems.

Vendor or Distributor's Web Site

http://search.ca.com/search/ca?style=en&search_button=Search&qt=userinit.exe&col=

Detailed Description and/or Removal Instructions

http://www.ca.com/securityadvisor/virusinfo/virus.aspx?id=58501

Match #2

userinit.exe (userinit.exe)

PC Pitstop Analysis

userinit.exe - This is a key process to the Windows operating system. It manages the different start up sequences on boot-up. It establishes network connections and the Windows shell. Userinit.exe is important to the stable and secure operation of your computer and should not be terminated. The correct filepath is C:\Windows\System32\Userinit.exe,. Note the comma at the end of the file path is required. Please note that userinit.exe is also listed as a trojan. This threat can go under as many as 10 different file names. It has been classified as Haxdoor.Fam, Win32.Bagle.M@mm, and Worm.Win32.Feebs.df

Recommendation

userinit.exe is an essential part of Windows and required for Windows to work properly. It should never be disabled.

userinit.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.

Identification

In addition to the file name, userinit.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:	Microsoft
Product contains:	Microsoft

To view version information with Windows Explorer, right-click the file and click Properties, Version.

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. userinit.exe (userinit.exe) has been seen on 0.08% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested.

PCs running this program did not have a high average CPU load during testing, which indicates it does not consume a great deal of CPU time on most systems.

Detailed Description and/or Removal Instructions

http://support.microsoft.com/kb/892893

Important note: A file name alone may not be enough for positive identification. PC Pitstop's full tests and spyware scan use information such as the company name, product name, or install directory. If you are unable to identify a file, ask about it in our forums after running our full tests.