PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

Tip from the PitCrew

Each and every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

Furthermore, perhaps the quickest and most straight forward method to detect malware is through a running process analysis.

Process Library

  
PC Pitstop Libraries > Process Library > userinit.exe

More than one possible match was found; all matches are listed below in order of their prevalence. This only tells you what the file and the correct action might be.

To understand which possibility is actually running on your own system, perform an Overdrive test and then look at the Software|Processes tab.

Match #1

userinit.exe (userinit.exe)

Percentage of recently scanned PC's with this process running: 0.01%
Average CPU use for this program: 0%
Average RAM for this program: 3 MB

PC Pitstop Analysis

userinit.exe - This is a key process to the Windows operating system. It manages the different start up sequences on boot-up. It establishes network connections and the Windows shell. Userinit.exe is important to the stable and secure operation of your computer and should not be terminated. The correct filepath is C:\Windows\System32\Userinit.exe,. Note the comma at the end of the file path is required. Please note that userinit.exe is also listed as a trojan. This threat can go under as many as 10 different file names. It has been classified as Haxdoor.Fam, Win32.Bagle.M@mm, and Worm.Win32.Feebs.df

Recommendation

Win Patrol

userinit.exe is an essential part of Windows and required for Windows to work properly. It should never be disabled.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides a easy to understand descriptions of over 15,000 processes and programs.


Identification

In addition to the file name, userinit.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:Microsoft
Product contains:Microsoft

To view version information with Windows Explorer, right-click the file and click Properties, Version.

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. userinit.exe (userinit.exe) has been seen on 0.01% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 3 MB. The average CPU load for this program was 0%.

Detailed Description and/or Removal Instructions

http://support.microsoft.com/kb/892893

Match #2

userinit.exe (Win32/Satiloler.A)

This program has not been seen on any systems tested at PC Pitstop in the past week.

PC Pitstop Analysis

userinit.exe - According to CA:

Win32/Satiloler.A is a backdoor trojan that allows an attacker to collect information from a user's system.

Recommendation

CA AntiVirus

userinit.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

userinit.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.


Identification

The file name alone identifies this program.

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. This program has not been seen on any systems tested at PC Pitstop in the past week.

Vendor or Distributor's Web Site

http://search.ca.com/search/ca?style=en&search_button=Search&qt=userinit.exe&col=

Detailed Description and/or Removal Instructions

http://www.ca.com/securityadvisor/virusinfo/virus.aspx?id=58501

Important note: A file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory. If you are unable to identify a file, ask about it in our forums after running our full tests.