I keep getting a "winstat.exe" error message...

[Guest]

....which causes information to be lost, including my msn display pictures. I
have spent enough time restoring these things and I would like to know how to
fix the problem.

 

[Wesley Vogel]

winstat.exe is related to trojan Kodorian Trojan
http://www.2-spyware.com/file-winstat-exe.html

Kodorian Trojan manual removal:
Kill processes:
winstat.exe, kodorjan.exe, server.exe

Delete files:
manasi.yok, winstat.exe, kodorjan.exe, server.exe

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

Waht is the best way to get rid of this winstat? I am not sure were I go to
delete.

 

[Wesley Vogel]

Backdoor.Win32.Kodorian (Kaspersky Lab) is also known as: Backdoor.Kodorian
(Kaspersky Lab), Backdoor.Trojan.Client (Symantec), BackDoor.Kodorjan
(Doctor Web), Troj/Kodoria-A (Sophos), Backdoor:Win32/Kodorian.A (RAV),
Win32:Trojan-gen. (ALWIL), BackDoor.Kodorian.A (Grisoft), Backdoor
Program.LC (Panda), Win32/Kodorian.A (Eset)

Manual Removal: Follow these steps to remove KODorjan from your machine.
Begin by backing up your registry and your system, and/or setting a Restore
Point, to prevent trouble if you make a mistake.

Stop Running Processes:
Kill these running processes with Task Manager:
winstat.exe
kodorjan.exe
server.exe

Remove Files:
Remove these files (if present) with Windows Explorer:
c:\manasi.yok
c:\winstat.exe
kodorjan.exe
okursanÿyiedersinokumazsanÿyibokyersin.txt
server.exe

KODorjan
http://antispyware.stompsoft.com/k/kodorjan.asp

PestPatrol detects this. You may want to consider PestPatrol if you aren'r
comfortable removing things.

PestPatrol
http://store.ca.com/dr/v2/ec_Main.E...UR=840&CID=182827&DSP=&PGRP=0&CACHE_ID=182827


--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In