Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.



  • Please log in to reply
2 replies to this topic

#1 moonus


  • Members
  • 1 posts
  • Local time:08:46 PM

Posted 22 April 2011 - 07:50 PM

I'm a new member so hello to you all. When I run my Anti virus scan, every time i'm told that
C:\WINDOWS\winstart.bat is offline. Could anyone tell me what this means and does it need sorting out.

Edited by Orange Blossom, 27 April 2011 - 04:57 PM.
Moving to AV forum. ~ OB

BC AdBot (Login to Remove)


#2 Orange Blossom

Orange Blossom

    OBleepin Investigator

  • Moderator
  • 37,012 posts
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:03:46 PM

Posted 27 April 2011 - 04:56 PM

Which anti-virus program are you running?

Orange Blossom :cherry:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

#3 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 51,773 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:46 PM

Posted 28 April 2011 - 07:55 AM

The message you received is common among avast! users. Are you experiencing any other symptoms or signs of malware infection?

Winstart.bat is a batch File which was used on older Windows Operating Systems like Windows 95, 98 and ME. The file is usually located in the C:\Windows folder and is executed every time Windows starts just like AUTOEXEC.BAT as described here. Winstart.bat was also used to load memory-resident utilities in Windows applications in order to run DOS applications under Microsoft Windows version 3.00 as described in Microsoft Article ID: 69186. This file can be opened in Notepad for inspection of its contents and any text line can be suspended by typing REM followed by a space in front of the line.

However, I have found winstart.bat in many logs generated by security and investigative tools. In some (but not all) cases it is a hidden file related to malware and protected by a rootkit. These are some examples when it is found to be malicious:In other cases the file is installed to speed up the boot process so its not required and can be removed. However, if left on the machine, some anti-virus programs may detect it as the file is not able to be scanned properly.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users