Userinit is normally a value [name] in the Winlogon key, and not a subkey of Winlogon. It's data entry would be C:\Windows\system32\userinit.exe
Could you export and post that Winlogon key please [before you rerun MBAM]?
Last edited by gerbil; Dec 3rd, 2008 at 11:11 pm.
Deep, deep in the woods, but walking about.