How to Remove Wininit.exe

By Kefa Olang

Wininit.exe is an executable file of the Backdoor.Wollf.16 Trojan. Backdoor.Wollf.16 is a Trojan horse that secretly installs on your computer's server and allows unauthorized access to your computer. It is written in the Microsoft Visual C++ code, and allows its parasites (wininit.exe) to kill running processes, log keystrokes, retrieve system information and remotely execute commands. To completely remove wininit.exe from your computer system, you need to delete all Backdoor.Wollf.16 Trojan files and registry values to ensure your computer remains protected.

Print these directions before proceeding because you will have to restart your computer.

Click the Windows "Start" button. Click "Run" and type "%SystemRoot%\system32\restore\rstrui.exe." Then click "OK." Click "Create a restore point" on the "Welcome to System Restore Page" and select "Next." Type in a name for your restore point and click "Create." Click "Close." This will back up the registry and the system.

Launch your anti-virus program and click the "Update" button to install any new virus or spyware definitions. If you don't have an anti-virus program, download and install AVG Antivirus free (see "Additional Resources," below). Launch your program after it has installed, and click the "Update" button to install all new updates.

Restart your computer and press "F8" repeatedly before you see the Windows logo. This will bring you to the Windows Advanced Start menu.

Scroll down and highlight "Safe Mode." Press "Enter" to log into your computer under Safe Mode.

Launch your anti-virus program and perform a full system scan. Delete all items detected as Backdoor.Wollf.16.

Click the Windows "Start" button and select "Run." Type "regedit" and press "Enter" to open the registry.

Click "HKEY_LOCAL_MACHINE" on the left panel and select "SOFTWARE." Click "Microsoft" and select "Windows" Then, click "CurrentVersion" and choose "RunServices." On the right panel, delete the value "wininit"="%System%\wininit.exe."

Restart your computer normally to complete the removal process.