"F2 userinit" cannot be shifted

chunter

Hijackthis is telling me I've a rootkit, I just cant shift. (XP)

Combofix is picking it up as a rootkit & deleting it, but it's back next time you boot machine.
Gmer I think can see it too, but can't do anything because it is throwing it up as a module with no name.

Avira and Malwarebytes have had a go. So has super-antispyware.

Tried replacing the userinit file itself with a i386 backup. Makes no difference.

I think ZoneAlarm is stopping it from sending stuff out.

don't really want to reformat
what about an xp repair. anybody reckon that'll shift it. I have my doubts

talk2alex

I tried all the above for a rootkit I had. None of them even recognised it.

Try the 30 day free version of Hitman Pro 3.5 as that's the only one that shifted mine. And if that doesn't work, xp repair might work. But probably not....

fwor

If you do a repair install, try a fixmbr as well, because it's not unknown for a virus to exploit the MBR to re-install itself every time you reboot.