[katabby]

I just checked a link from pcmag.com for a site called processlibrary.com which seems harmless enough. their process scan shows wininit.exe as a variant of the wolf-16? trojan. what gets me is that further info links to a site that wants to sell you registryboost 2.0.
Now I'm not going to buy a registry cleaner based on what I think are scare tactics. I thought wininit.exe is a legitimate windows startup process.
Whats the real scoop on this?
thanks

[JohnWill]

WININIT.EXE appears nowhere in my XP installation. Microsoft appear to think it's a virus as well: http://support.microsoft.com/kb/299332

Other references: http://www.auditmypc.com/process/wininit.asp

It is indeed malware.

Now, you don't need that registry cleaner to fix this, so that's not something I'd rush out and buy!

[katabby]

http://attachments.techguy.org/attac...1&d=1188228855

[katabby]

don't know if thats the right way to add a screen print but it works.
i read the links you posted last night before I posted here, but this sure looks legit to me.
by the way, I'm using Vista Home Premium

[katabby]

microsofts one care live, trend micro's housecall, and ca's e-z trust all show a clean system. superantispyware found a lot of tracking cookies that spybot s&d didn't find.
I'm not convinced it's malware.
It would be interesting if other vista users went to www.processlibrary.com and see what processes it finds running.the link above for the pc audit is the one trying to sell registrybooster.

[Frank4d]

The screenshot in post #3 indicates the OS is Vista, and several searches indicate Vista runs wininit.exe at startup (see about 1/2 way down here: http://www.microsoft.com/technet/tec...l/default.aspx under "Startup Processes"). My guess it is safe.

[katabby]

Thank you
The links from JohnWill, which I found before posting here, make it seem like it is malware.
Sure can get confusing around here.