PDA

View Full Version : Windows XP error at startup


matrixsolutionctc
Mar 14, 2008, 10:30 AM
When we start windows xp, it shows a error


C:\WINDOWS\system32\WinSit.exe
Windows cannot find 'C:\WINDOWS\system32\WinSit.exe'.
Make sure you typed the name correctly, and then try again.
To search for a file, click the Start button, and then click Search.


Kindly guide us about this

Thank's Regard's
Ajay

biggsie
Mar 14, 2008, 10:37 AM
You should not have that file trying to run at start-up!!

WinSit.exe is part of a Worm named 'W32/VB-DXN' as far a I know it is spread via Yahoo instant messenger, it installs itself to various locations on the host computer you should check the following locations on your machine and remove any of the lsited files:-

C:\WINDOWS\Help\Other.exe
C:\WINDOWS\inf\Other.exe
C:\WINDOWS\dc.exe
C:\WINDOWS\sviq.exe
C:\WINDOWS\SYSTEM\Fun.exe
C:\WINDOWS\SYSTEM\WinSit.exe
C:\WINDOWS\config\Win.exe

It also creates the registry entries:-

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows
Run
<System>\config\Win.exe

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Dc2k5
<Windows>\SVIQ.EXE

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Fun
<System>\Fun.exe

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Dc
<Windows>\dc.exe

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows
Load
<Windows>\inf\Other.exe

The following registry entry is changed to run WinSit.exe on startup:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Shell
Explorer.exe <System>\WinSit.exe

You should remove any of these occurrences that you find. Its also worth doing an online virus scan:-

Trend Micro HouseCall - Free Online Virus and Spyware Scan - Trend Micro USA (http://housecall.trendmicro.com/)