I am using Trojan Remover and my 'USERINIT.EXE' cannot be restored by the application. Trojan Remover is telling me that.. __________________________________________________________________ "An essential Windows file, USERINIT.EXE, has been replaced or virally patched by malware. TR cannot locate a good copy of this file to restore." The file cannot be renamed/removed without a good copy available, because then the system would not be able to start correctly. YOU MUST MANUALLY RESTORE A GOOD COPY OF THE USERINIT.EXE FILE. __________________________________________________________________ Your help is greatly appreciated. OS: Windows 7rc x86 3.6 GHz dual prescott 1024 MB RAM

The real file is located in \Windows\System32, is 25.5KB in size and is dated 22/04/2009 at 06:19 If yours is different, it is as you said, corrupted. There is another version in \Windows\winsxs\x86_microsoft-windows-userinit_31bflong name.. which you can copy. If you cannot boot the machine, boot from the Windows DVD > Repair > Command Prompt and copy it. However, before doing the copy, have a look at this registry key, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\ and check that Userinit in the right pane contains just one entry, i.e. C:\Windows\System32\Userinit.exe, (note the comma at the end). If it contains other entries, or uses a different location, remove them and make it look like the entry above.