The error message you received is common among avast! users. When doing a Google Search for Avast C:\Windows\winstart.bat file is offline
, it appears that avast is the only security vendor providing that message and has been doing so for several years.Winstart.bat
is a batch File
(text file) which contains commands that can be used to run other processes or tasks when you execute it and is usually located in the C:\Windows folder. Winstart.bat was used on older Windows Operating Systems like Windows 95, 98 and ME and was executed every time Windows starts just like AUTOEXEC.BAT as described here
. Winstart.bat was also used to load memory-resident utilities in Windows applications in order to run DOS applications under Microsoft Windows version 3.00 as described in Microsoft Article ID: 69186
but in could be misused for malicious purposes.
This file can be opened in Notepad for inspection of its contents by right-clicking on it and choosing edit...and any text line can be suspended by typing REM followed by a space in front of the line. I have read the file is sometimes used to speed up the boot process so its not required and can be removed. However, if left on the machine, some anti-virus programs may detect it as the file is not able to be scanned properly.Virus Total report on winstart.bat
as of 2010.04.30 <- no anti-virus vendor detected it as a threat to include avast.
The fact that the file is unavailable doe not mean it is malware, as the above analysis appears to confirm. Usually when a computer is infected with malware there will be indications (signs of infection
) something is wrong.
You can resubmit the file for a more current analysis. Go to one of the following online services that analyzes suspicious files:
--In the "File to Scan
" (Upload or Submit) box, browse to the location of the file(s) in question and submit (upload) it for scanning/analysis. If you get a message saying "File has already been analyzed
", click Reanalyze
or Scan again
Note: When searching for malware removal assistance on the Internet, it is not unusual to find numerous hits from untrustworthy and scam sites which mis-classify detections or provide misleading information
. This is deliberately done more as a scam
to entice folks into buying an advertised fix or removal tool. In some cases if the fix is a free download, users may be enticed to download a malicious file or be redirected to a malicious web site.