View Full Version : Windows XP error at startup
matrixsolutionctc
Mar 14, 2008, 10:30 AM
When we start windows xp, it shows a error
C:\WINDOWS\system32\WinSit.exe
Windows cannot find 'C:\WINDOWS\system32\WinSit.exe'.
Make sure you typed the name correctly, and then try again.
To search for a file, click the Start button, and then click Search.
Kindly guide us about this
Thank's Regard's
Ajay
biggsie
Mar 14, 2008, 10:37 AM
You should not have that file trying to run at start-up!!
WinSit.exe is part of a Worm named 'W32/VB-DXN' as far a I know it is spread via Yahoo instant messenger, it installs itself to various locations on the host computer you should check the following locations on your machine and remove any of the lsited files:-
C:\WINDOWS\Help\Other.exe
C:\WINDOWS\inf\Other.exe
C:\WINDOWS\dc.exe
C:\WINDOWS\sviq.exe
C:\WINDOWS\SYSTEM\Fun.exe
C:\WINDOWS\SYSTEM\WinSit.exe
C:\WINDOWS\config\Win.exe
It also creates the registry entries:-
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows
Run
<System>\config\Win.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Dc2k5
<Windows>\SVIQ.EXE
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Fun
<System>\Fun.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Dc
<Windows>\dc.exe
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows
Load
<Windows>\inf\Other.exe
The following registry entry is changed to run WinSit.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Shell
Explorer.exe <System>\WinSit.exe
You should remove any of these occurrences that you find. Its also worth doing an online virus scan:-
Trend Micro HouseCall - Free Online Virus and Spyware Scan - Trend Micro USA (http://housecall.trendmicro.com/)