Virus logoff: Who are you?

This is a virus that makes your system log off when you loging in. You can’t log in to your system and all of your work must be stop.

How to remove it?

When it attack your system, it will create a file userinit.exe in C:\Windows\system32\ and it’s auto run when windows started.

Step 1:

Insert boot CD (Hiren Boot, Windows XP, Ubuntu or some things like that) and boot from CD.

Step 2:

In the DOS mode, type:

cd c:\windows\system32\

cp userinit.exe virus.exe

In the Ubuntu: you have 2 choice:

1. In the command line, type: mv \media\{name of your windows partition}\system32\userinit.exe \media\{name of your windows partition}\system32\virus.exe

2. In the Gnome or KDE mode, use file manager and rename/move file userinit.exe to another folder.

After that, reboot the system and remove file virus.exe

Step 3:

Log in to your system and use anti-virus program to scan your system.