wstats32.exe = suspect file

[Guest]

On 3.9.04, Colin Watters helped me find and remove a
Trojan called Backdoor.IRC.Loonbot. The infecting file
was wstat32.exe which is described by Symantec. After
opening some archives, I began having similar problems at
logon: "Error 384. A valid datalink was not found".
After searching, I did not find wstat32.exe, but found
wstats32.exe. After removing it from startup (using
msconfig), the error 384 message did not appear at
startup. Can I delete this safely? Can someone give
advice about how to proceed? Thanks for any help.

 

[Malke]

On 3.9.04, Colin Watters helped me find and remove a
Trojan called Backdoor.IRC.Loonbot. The infecting file
was wstat32.exe which is described by Symantec. After
opening some archives, I began having similar problems at
logon: "Error 384. A valid datalink was not found".
After searching, I did not find wstat32.exe, but found
wstats32.exe. After removing it from startup (using
msconfig), the error 384 message did not appear at
startup. Can I delete this safely? Can someone give
advice about how to proceed? Thanks for any help.

I'm glad you got it fixed. Yes, you can delete the wstats32.exe safely.
Many trojans will rename themselves to avoid detection.

Malke

 

[DJ]

Thank you Malke! -DJ

-----Original Message-----


I'm glad you got it fixed. Yes, you can delete the wstats32.exe safely.
Many trojans will rename themselves to avoid detection.

Malke
--
MS-MVP Windows User/Shell
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic"
.

 

[Malke]

Thank you Malke! -DJ

You're completely welcome.

Malke

 

[Li'l Roberto]

On 3.9.04, Colin Watters helped me find and remove a
Trojan called Backdoor.IRC.Loonbot. The infecting file
was wstat32.exe which is described by Symantec. After
opening some archives, I began having similar problems at
logon: "Error 384. A valid datalink was not found".
After searching, I did not find wstat32.exe, but found
wstats32.exe. After removing it from startup (using
msconfig), the error 384 message did not appear at
startup. Can I delete this safely? Can someone give
advice about how to proceed? Thanks for any help.

You can just rename the file and see if anything breaks, if not
delete it .

rgds
Li'l Roberto