Winstat.exe, WinStatKeep.exe

Hi

I read that the above are related to some sort of Hijack.

I have followed the Getting Prepared: Steps to be sure your system is ready to be scanned.

Various files needed fixing or deleting but I'm still getting the error messages on login (seem to be related to Outlook Express?) - Windows XP - only on one user account, not the other one which has no problems at all.

Please help - I don't know what to do next.

Thanks

Liz

 

Welcome

What type of error message are you getting. If you have downloaded all of the prgrams then try to follow the tutorial if you can.

This site has alot of good tools for cleaning up your computer. It's very important that the first thing you do is the following:

First, please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal.
If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.

NOTE: In order to resolve the issues you are having it is very important that you at least try to perform all the steps as outlined. If you have any difficulty please post back letting us know what steps you have completed, what you found while doing the scans if anything and details about any problems you have encountered in completing the steps. The more details you can provide the better.

Try this... you may find it's all you need. If not post your results and I am sure one of the PROS can help you. These guys are quite busy, as you can see by the number of posts, so hang in there. Good Luck!!

 

Hi Lizc,

Look in Program Files for a Windows AdStatus Folder and remove it, if found. Also, make note of other suspicious folders.

You may have additional issues as well - After running the Cleanup Tutorial TheOldThug linked above, please send us a HijackThis Log. Please be sure to follow the instructions below:

Note that your HijackThis should be up-to-date (v1.99) and MUST be extracted to its own safe folder – C:\Program Files\HijackThis!
Should you need a Fresh Download of HJT, get it HERE: HijackThis v1.99

Also note that, before you scan, you MUST close all running programs including your web browser, e-mail and items in the system tray.

Please save your HJT Log as a .txt File and attach it via the "Manage Attachments" tool in the Additional Options section when you post.

It would probably be a good idea to include logs for each user account. Necessary, even.

I’ve been busy with work and other obligations these days, but somebody will try to take a look when they get a chance.

PP

 

Hi guys

Many thanks for your help. Having removed Windows AdStatus, and running all those tools yesterday, my PC is going quicker than ever before!!!

One last question though, is there any way to prevent Windows AdStatus installing itself in the future?

Thanks again

Liz

 

Hi Liz,

You should probably send us a HJT Log to doublecheck - Just to be safe!

Also, have a peek at Chaslang's Suggestions!
They should address all your Malware Prevention needs.

PP