Ask Me Help Desk

Ask Me Help Desk (https://www.askmehelpdesk.com/forum.php)
-   Windows (https://www.askmehelpdesk.com/forumdisplay.php?f=237)
-   -   Windows XP error at startup (https://www.askmehelpdesk.com/showthread.php?t=194585)

  • Mar 14, 2008, 10:30 AM
    matrixsolutionctc
    Windows xp error
    When we start windows xp, it shows a error


    C:\WINDOWS\system32\WinSit.exe
    Windows cannot find 'C:\WINDOWS\system32\WinSit.exe'.
    Make sure you typed the name correctly, and then try again.
    To search for a file, click the Start button, and then click Search.


    Kindly guide us about this

    Thank's Regard's
    Ajay
  • Mar 14, 2008, 10:37 AM
    biggsie
    You should not have that file trying to run at start-up!!

    WinSit.exe is part of a Worm named 'W32/VB-DXN' as far a I know it is spread via Yahoo instant messenger, it installs itself to various locations on the host computer you should check the following locations on your machine and remove any of the lsited files:-

    C:\WINDOWS\Help\Other.exe
    C:\WINDOWS\inf\Other.exe
    C:\WINDOWS\dc.exe
    C:\WINDOWS\sviq.exe
    C:\WINDOWS\SYSTEM\Fun.exe
    C:\WINDOWS\SYSTEM\WinSit.exe
    C:\WINDOWS\config\Win.exe

    It also creates the registry entries:-

    HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows
    Run
    <System>\config\Win.exe

    HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    Dc2k5
    <Windows>\SVIQ.EXE

    HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    Fun
    <System>\Fun.exe

    HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    Dc
    <Windows>\dc.exe

    HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows
    Load
    <Windows>\inf\Other.exe

    The following registry entry is changed to run WinSit.exe on startup:

    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
    Shell
    Explorer.exe <System>\WinSit.exe

    You should remove any of these occurrences that you find. Its also worth doing an online virus scan:-

    Trend Micro HouseCall - Free Online Virus and Spyware Scan - Trend Micro USA

  • All times are GMT -7. The time now is 10:21 AM.