This post https://forums.clamwin.com/viewtopic.php?t=2720 https://forums.clamwin.com/viewtopic.php?t=2720
Clamwin is reporting (and quarantining or removing, depending on your clamwin settings) false positives for W32.Virut-82 on a legitimate windows sytem file, userinit.exe located in your windows\system32 directory. You will need to boot into Windows recovery mode and restore the file from your original XP SP2 or SP3 disk:
Quote: |
1. Insert the original Windows XP CD and reboot your computer. You may need to configure your computer to boot from the CD-ROM drive.
2. When the Windows XP Setup has started, press "R" to repiar the Windows XP installation and then press ENTER
3. Select the Windows installation to repair (generally this is C:\Windows) by typing its number and then pressing ENTER
4. Type the Administrator password and press ENTER
5. Type the following commands:
D: <enter>
cd i386 <enter>
expand userinit.ex_ C:\windows\system32 <enter>
exit <enter>
and allow your system to reboot into your windows installation
Notes: If your CD-ROM drive has a different letter, other than "D:" above, assigned to it, enter "X:" instead above, where X is the appropriate drive letter. Also, if your Windows installation is located on a drive other than "C:", change that respectively above as well.
After entering "expand userinit.ex_ c:\windows\system32| you should see the text "1 file(s) copied", in which the case the file has been written back to the system32 directory correctly. |