Vista - wininit.exe

Was looking thru all the running processes on my system, found this. Am
reading that it is a virus, is this true? Am running Trend Micro PC-cillin
Internet Security 14, and it reports no problems. Is this something I need to
remove and if so how?

Hi,

What you are reading about is the Bymer virus, however that does not mean
you are infected. One of the factors of this particular bug is that it
arrives as a wininit.exe file, however there is also a legitimate
wininit.exe file. In earlier Win OS's, the legit one is found in the
\Windows directory, but in Vista this file is in the \Windows\System32
directory - which happens to be exactly where the trojan likes to place it
self. Fortunately, with system file protection in place it cannot overwrite
the existing file without your permission (you know, those annoying nag
screens - they actually do have a purpose). Trust Trend, as I doubt that the
one you have is a virus. If you right click the file and check properties,
it should be 121,344 bytes in size and should show as being from the
Microsoft Corporation.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Windows help - www.rickrogers.org

"msmarti58" <msmarti58@discussions.microsoft.com> wrote in message
news:2385AF66-48CA-4E5C-8A92-7673A72AB84D@microsoft.com...
> Was looking thru all the running processes on my system, found this. Am
> reading that it is a virus, is this true? Am running Trend Micro PC-cillin
> Internet Security 14, and it reports no problems. Is this something I need
> to
> remove and if so how?
>

Look at this

http://support.microsoft.com/?scid=kb;en-us;299332

"msmarti58" <msmarti58@discussions.microsoft.com> wrote in message
news:2385AF66-48CA-4E5C-8A92-7673A72AB84D@microsoft.com...
> Was looking thru all the running processes on my system, found this. Am
> reading that it is a virus, is this true? Am running Trend Micro PC-cillin
> Internet Security 14, and it reports no problems. Is this something I need
to
> remove and if so how?
>