Dirkpitt289
New Member
Error at start up reads: Windows can't find C:\windows\userint32.exe
Make sure you typed the name correctly, then try again.
Any thoughts?
Make sure you typed the name correctly, then try again.
Any thoughts?
Have you seen this error?
- Thread starter Dirkpitt289
- Start date
You could have a worm on your system there. One advice is to use the task manager or press the ctrl-alt-delete combination of keys to bring up the task manager. Once you have that open highlight the userinit32.exe and click the end process button. If you already have HiJack This downloaded and installed here's one method to root it out. When running HT remove these two entires.
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\userint32.exe
O4 - HKLM\..\Run: [Windows Service Manager] C:\WINDOWS\userint32.exe
Then go into the Windows directory and delete the userint32.exe itself and turn off the system restore. That will delete all restore points to avoid reinfecting your system. If you don't have an antivirus program installed there's a few free programs like AVG 7.1 and Avast to try out. You can also run an online scan at sites like Panda's or Housecall at Trend Micro found at http://www.trendmicro.com/hc_intro/default.asp
For AVG 7.1 go to http://free.grisoft.com/doc/2/lng/us/tpl/v5
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\userint32.exe
O4 - HKLM\..\Run: [Windows Service Manager] C:\WINDOWS\userint32.exe
Then go into the Windows directory and delete the userint32.exe itself and turn off the system restore. That will delete all restore points to avoid reinfecting your system. If you don't have an antivirus program installed there's a few free programs like AVG 7.1 and Avast to try out. You can also run an online scan at sites like Panda's or Housecall at Trend Micro found at http://www.trendmicro.com/hc_intro/default.asp
For AVG 7.1 go to http://free.grisoft.com/doc/2/lng/us/tpl/v5
Here's the Panda software link for the free scan there. http://www.pandasoftware.com/products/activescan.htm
Another place is the WindowSecurity.com site for a free trojan scan seen at http://www.windowsecurity.com/trojanscan/
Another place is the WindowSecurity.com site for a free trojan scan seen at http://www.windowsecurity.com/trojanscan/
This means that you used to have a trojan on your system but it has been deleted. However, the entry is still there for it to load on startup. Use HJT to delete the startup entry or manually edit your registry by using the find feature to locate it.
Once a full scan of the system is performed you can always use a free registry cleaner to remove any invalid entries found. A good one for that is called RegCleaner is free to download from http://www.majorgeeks.com/RegCleaner_d460.html