Winnit.exe versus Wininit.exe

Some security update for tonight. Many people are reporting about a Windows alert saying Winnit.exe could not be started. Be careful since apparently this is an unwanted file on your PC. Also beware of fake antivirus softwares who are claiming to be able to remove that.

Here are the details: Winnit.exe is the fake file while Wininit.exe is the real Windows file you should not remove. However after some searching I noticed that there are some fake antivirus softwares on the net who are claiming that Wininit.exe (the good one) is to be removed with their software only. BEWARE!

To know if you are infected just search for winnit.exe – Normally it should be found in the System 32 folder of your Windows installation. Below are some information provided about this issue:

Name: Microsoft Update 32
Filename: winnit.exe
Description: Added by the W32/Rbot-AOM worm. This infection, when started, connects to an IRC server where it sits on a channel awaiting commands.
File Location: %System%
Startup Type: This startup entry is started automatically from a Run, RunOnce, RunServices, or RunServicesOnce entry in the registry.

The most important of all is to stay away of those fake softwares claiming to be able to get rid of this magically. Trust your antivirus rather than going for some weird name and unknown antivirus. I’ll let you know more as soon as more information about this is available as for now I can’t seem to get more.