winver.exe is an applet that resides in Windows/System32. As is stated above, it can be called by a Registry entry. You might also check to see if it is in the Services section of MSCONFIG. For a quick test, you could rename the file to WINVER.OLD and then run a reboot and see what happens.