Help with WININITLOG.EXE

dwbears · 06-24-2007, 05:25 AM

Does anyone know anything about this? Everytime I shut down my system I get an error message involving this file. It lives in C:\WINDOWS\Prefetch and I'm curious what it is for. Can I just delete it? Where did it come from? Is it part of the OS that I need?

There are a lot of .exe files located in the Prefetch folder and that is where the file is located listed like this: WININITLOG.EXE-0836AD4C.pf

Any ideas?

Thanks,
DWB

chauffeur2 · 06-24-2007, 05:52 AM

G'day DWB, Welcome to TSF!

My research comes up with the fact that this WININITLOG.EXE is a Keylogger malware intrusion on your computer.

To 'cure' this issue, please go here (click on the coloured link); read the instructions very carefully; then post your HiJackThis Log here.

Once you have posted your HJT Log, please be patient for one of the HJT analysts to answer your thread, as they are generally very busy.

Good luck with it.

Kind Regards,

dwbears · 06-26-2007, 01:09 AM

Thanks for the help Dave. I tried going through the steps and only made it to step 2 using Panda to scan my computer. It gets about a fourth the way through the scan, finds 43 spyware and then closes all my browser windows without finishing the scan. I tried running the scan three different times and each time is shut down when scanning a file ending in NetworkService\ntuser.ini. Since the scan doesn't finish I don't have anything to post to the HJT log.
Any suggestions on how I should proceed from here?

**koala** · 06-26-2007, 07:04 AM

Leave the Panda scan if it's not working, and continue with the 5 steps. Post as many of the requested logs as possible.

06-24-2007, 05:25 AM	#1 (permalink)
dwbears Registered User Join Date: May 2007 Posts: 11 OS: Win XP Pro	Help with WININITLOG.EXE Does anyone know anything about this? Everytime I shut down my system I get an error message involving this file. It lives in C:\WINDOWS\Prefetch and I'm curious what it is for. Can I just delete it? Where did it come from? Is it part of the OS that I need? There are a lot of .exe files located in the Prefetch folder and that is where the file is located listed like this: WININITLOG.EXE-0836AD4C.pf Any ideas? Thanks, DWB

06-24-2007, 05:52 AM	#2 (permalink)
chauffeur2 Manager Emeritus Join Date: Feb 2006 Location: Adelaide, South Australia Posts: 10,180 OS: Xp Sp3 with all updates + Vista™ Ultimate SP1. My System	Re: Help with WININITLOG.EXE G'day DWB, Welcome to TSF! My research comes up with the fact that this WININITLOG.EXE is a Keylogger malware intrusion on your computer. To 'cure' this issue, please go here (click on the coloured link); read the instructions very carefully; then post your HiJackThis Log here. Once you have posted your HJT Log, please be patient for one of the HJT analysts to answer your thread, as they are generally very busy. Good luck with it. Kind Regards, __________________ Dave T. Submit New Articles If it works, Don't fix it! Especially if Bill Gates had anything to do with it!!

06-26-2007, 01:09 AM	#3 (permalink)
dwbears Registered User Join Date: May 2007 Posts: 11 OS: Win XP Pro	Re: Help with WININITLOG.EXE Thanks for the help Dave. I tried going through the steps and only made it to step 2 using Panda to scan my computer. It gets about a fourth the way through the scan, finds 43 spyware and then closes all my browser windows without finishing the scan. I tried running the scan three different times and each time is shut down when scanning a file ending in NetworkService\ntuser.ini. Since the scan doesn't finish I don't have anything to post to the HJT log. Any suggestions on how I should proceed from here?

06-26-2007, 07:04 AM	#4 (permalink)
koala Moderator Hardware Team Join Date: Mar 2005 Location: UK Posts: 12,394 OS: XP/7/Ubuntu My System	Re: Help with WININITLOG.EXE Leave the Panda scan if it's not working, and continue with the 5 steps. Post as many of the requested logs as possible. __________________ New members: Subscribe to your thread (Thread Tools) to receive an instant email notification when you get a reply. TSF Folding@Home Team 85015 - details here