userinit.exe. net and the MUI File ????

[Mr Bean]

I have a Query, on the files userinit..exe. net and the MUI File by the same name... every time I scan

the system get a warning its crook! when scanning...

 

reading up on it there are ones saying get rid of it others say its needed

 

whats the members option on them .if I rid them ..whats the possible damage?

to the booting process if any??

 

also is the size right..or wrong?

could some of you check the size of your files and size post it please...

window 7 .ultimate..sr-pack1 (sys 32)

 

thank you in advance..

Mr bean

[Toppack]

This is the 'userinit' files found on a W-7-Pro system:

(if you need a different resolution size pic, let me know)

(I had to make it that size to show complete path for some of them)

See pic:

[Mr Bean]

thank you could yo make it bigger please

 

the old eyes got problems making it out..I think thy look smaller

then my one...

 

looking from what I can see how come you got 7 of them?

 

and if my are crook where would one get the right size ones...

and what size should thy be in the first place.?

I sorry if this reads wrong have trouble reading the print..

 

and what if I rid them? of the system you know if it will bugger it up?

 

Mr Bean

 

oh if you need a small program that is perfect for Resizing for the forum.

grab hold of fast Image Resizer

[Toppack]

I'm not sure why there are many files with that name???

As you can tell be the dates, they have all been there a Long time.

 

Here's 2 more tries, 1 at lower res and 1 at higher res.

Hopefully one of them will be more readable.

[Mr Bean]

thank you the 2nd one is perfect....

yeh see you got 8 of them?

 

but smaller then my one...my one is 47kb ..and its a brand new install

if its wrong size was quick to get whacked.uh?

one answer I been reading as follows

 

 

It is an essential part of Windows OS and is safe to leave it alone unless it is hooked in the registry to run extra files which are trojans. It can hooked in the registry to run gpmiabp.exe which executes a trojan horse Win32.Qoologic. If you see in the Security Task Manager Userinit.exe,gpmiabp.exe or something added to the Userinit.exe then it is hooked through the registry to run malicious files.

my Trojan remover Keeps popping up and blasting the file...

so now

 

I want to know what happens if I rid it..

will the booting to win7 fial?

i do not want to reinstall it over..its only 7 hours old..

Mr Bean

[Toppack]

It appears that the last one in list is a temporary one,

related to IObit forum.

(the one with no size or date showing and has 'net' after it)

Maybe that is the one in question?

[Mr Bean]

yes I see that ..now what to Do brake it or leave it.....

 

I could remove it and try to boot see what happens ,if it brakes then copy it back using Linux...

should be ok you think?

any how how come ya got so many in the system 32..

 

Mmm ok tell you what I remove them both copy past to my stick...

then reboot?

and hope ?? ya think...

 

Mr Bean

[Toppack]

I think I would leave it and see if it goes away after reboot.

I think it's temporary, while connected to IObit?

[Mr Bean]

now here is a thing...i removed the file ok

then shut the system down rebooted and staring at a black screen!

 

then booted to Linux copy past it back and we are OK again!

my Os has only the one file even tho I am longed on here?

just browsing the 32 files cant see any other?

so conclusion one needs it to see the system...

but how big its supposed to be seem my ask ....

and how come ya got so many?

 

??????????

I think I would leave it and see if it goes away after reboot.

I think it's temporary, while connected to IObit?

ok if that's the case ya close the browser reboot take a gander and look if its gone..

 

 

 

Mr Bean

[Toppack]

My guess is that some of them are for 32bit W-7,

some are for 64bit W-7

and some were created by and for the AMD Motherboard software.

 

Yes mine went away after closing Internet-Browser.

No need for reboot.

[enoskype]

Hi Mr Bean,

 

Please find the properties of userinit.exe in my Windows 7 Pro x32 on the attached image.

 

Please check if yours is legitimate. The size of your file seems to be not corrrect.

 

http://forums.iobit.com/images/icons/icon4.gif Your OS will not boot if you delete it.

 

Please see THIS thread and also This post.

 

In case you need userinit.exe (ver:6.1.7601.17514 date: 20.11.2010) for Windows 7 x32, it is also attached as a rar file.

 

Cheers.

userinit_W7x32.rar

[Toppack]

Enoskype,

It's the temporary 'userinit.exe' that shows up while connected to IObit,

is the question?

Why is it there and what is it used for?

I do not think it is harmful, but I'm curious, sinse I do not know what all those userinit.exe files Do.

I'll try to find some info online, later.

 

At least, That's what I'm wondering about.

[Mr Bean]

yes there seems a difference in my one and your one?

 

yet the Trojan says its clear? (scanner)

you think i should try to extract the file from the install CD?

if that's possible?

or could you send me your one zipped up on the forum>

and I copy past that to the 32system and reboot it...

it may be crook the one I posses and do not want to reinstall the whole thing just for this tiny file.

Thank you my friend.

 

Mr Bean

 

ah thanks so very much!

just saw it...

 

I copy it now and reboot...Ya a darling save me so much work....!!!

[enoskype]

Hi Toppack,

 

It is there because the search is done when connected to internet and the web page includes it.

 

It is the header of the thread.

 

I have edited the header, deleting the original extra dot after userinit (before exe), now if you search you will see the difference between your first screenshot and if you take one NOW. :lol:

 

Take a screenshot when not connected to net and you will see that it is not there.

 

Cheers.:grin:

[enoskype]

Mr Bean,

 

I am wondering what happened after you have booted with the new file.

 

I also wonder why your original file was larger in size.

 

Searching userinit.exe in the computer may reveal the original file such as @

 

C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116

 

Cheers.

[Toppack]

It is there because the web page includes it.

 

Yes I know, but what is the web-page using that .exe file for?

Does it collect User Information from the computer or from the IObit server?

Or something 'Completely different'? :wink:

 

When unknown .exe files are temporarily loaded to my computers I tend to worry. :shock:

Which is the Same worry Mr.Bean is having.

[enoskype]

Yes I know, but what is the web-page using that .exe file for?

Does it collect User Information from the computer or from the IObit server?

Or something 'Completely different'? :wink:

 

When unknown .exe files are temporarily loaded to my computers I tend to worry. :shock:

Which is the Same worry Mr.Bean is having.

It is written in the html file (web page) and the PC finds it, as the web page file is in the temporary files.

 

It is the text of the web file and nothing to do with the executable userinit.exe.

 

You can check it yourself going to a different thread and searching for a word on the title of the thread.

 

Check your attached image, you will notice that userinit..exe with 2 dots (..) which was originally in the title and I have edited later to userinit.exe

 

Cheers.

[Toppack]

It is the text of the web file and nothing to do with the executable userinit.exe.

 

Oh Sure, You only needed to put it in Bold letters for me to Understand. :roll: :lol:

Thanks

[Mr Bean]

first of all thanks so very Munch

never stop learning....

now the reason my asking , came about when scanning..

got a big red warning of the file is crook..

that started me to ask and search for a answer as to why..

I did not even know what it was or why its there..

now I certainly do...need this or no windows...to be seen...

such a tiny file can stop windows! is amazing...

your file works perfect that is now on disk ..to be sure,in case my one is infected..

even if it the same size and on disk...

 

boooting buitefulll!!!

Mr Bean

 

ah the penny dropped

 

I had windows 8 on the drive silly me and installed win 7 back to it

ya think it may be the reason???

 

the difference...of the restore one..or maybe not...as the OS is still on the drive under old OS folder,

i do not know but could be the answer i shall take a gander and check this

 

I still cannot understand why you fellers got so many on the system32...and how come I do not get the temp thing like toppak

is that because I block logging any sites in my filters,and not see it ...

as the drive is locked from the net...

any thing writing to them..(logging) then also how come the net accesses that part of the system???

 

what it doing there.and not on a temp directory..on c:\

 

 

and what is this? MUI File

[enoskype]

Hi Mr Bean,

 

Try taking a screenshot after searching in Start=>Search=> "For Files or Folders..." only typing userinit when this web page is open in your browser and connected to internet click computer and see if you have more of the names on the search page. (Please wait for search to finish.)

 

Cheers.

[Mr Bean]

This what you Mean

my browser is open at the same time...

 

I got to get Some sleep Now before I drop !

I shall follow this further To Morrow...Emmm To day!----- haaa

Mr Bean

 

EDIT:

Please click on Computer under Search again in: on the search page and wait for it to finish the search.

[Mr Bean]

here you are still only sees 1 in the sys 32 directory

the file I got from you is the exact size as my installed one..

on disk and properties bar the date is a bit different..the file that loads on toppak

sys32 is not to be found on my one

so toppak are you looking in the directory while on line? I think that be the case..

as you captured it. i do not see one on my pc..probability is the way its set to block..

and No I would not expose the drive to the net!

I still wonder tho why you and others have so many on the same system and the vary of the operating sys on that system ,you think 64 bit got nothing to do on 32 bit.(different operating Os ) and I having just the one file is fine...to run every thing.

a spy thing? Malaware thing? I do not know,why one needs so many and what is a site doing in the system32, directory in the first place..I can not answer.

my understanding is you need to log on the unit.(PC)

.but not the router or the net any where any reason..

I took a look at windows log on(in) that is blocked At the router. and

ex plane's the files not being there from the outside.on the drive I would suggest..

as its not reachable to or from the net(drive)

 

 

Mr Bean

[enoskype]

Mr Bean,

 

Please read my EDIT: in you previous post #21 .

 

I think I couldn't explain it.

 

To see all possible file locations, you have to search the whole Computer not only System 32 folder.

 

On the other hand, you have to open this same thread (userinit.exe. net and the MUI File ???? ) not the main forum page.

 

Please see posts #17 and #18 for the argument you are doing for Toppack's case.

 

Cheers.

[Mr Bean]

How Zat! the penny dropped

this is what you are asking for ??

Also LOGGED IN TO THE FORUM...as I searched..

thank you for your understanding I am a bit slow Now days..

Mr Bean

[enoskype]

Mr Bean, http://forums.iobit.com/images/icons/icon14.gif

 

Cheers.