Wassup Jose Weblog nonsense at its best!

UserInit.exe Is False Positive

We interrupt your regularly scheduled show to publish this public service announcement. If you're using ClamWin on an XP SP3 machine, it will report that userinit.exe is infected with the W32.Virut-82 virus. Per the ClamWin forum and other sources, it is a FALSE positive.

Just to make TRIPLE sure, I scanned the entire machine with two Enterprise level anti-virus scanners and neither reported a virus. Damn you ClamWin! I am just glad that I do not have a pesky virus. This concludes the public service announcement. Later!

Scan Started Tue Feb 16 13:38:56 2010
-------------------------------------------------------------------------------
C:\WINDOWS\source\i386\USERINIT.EX_: W32.Virut-82 FOUND
C:\WINDOWS\system32\dllcache\userinit.exe: W32.Virut-82 FOUND
C:\WINDOWS\system32\userinit.exe: W32.Virut-82 FOUND

----------- SCAN SUMMARY -----------
Known viruses: 712841
Engine version: 0.95.2
Scanned directories: 29519
Scanned files: 144649
Infected files: 3

Data scanned: 23230.71 MB
Data read: 25386.52 MB (ratio 0.92:1)
Time: 6302.406 sec (105 m 2 s)
--------------------------------------
Completed
--------------------------------------