What is shstat.exe?

The genuine shstat.exe file is a software component of McAfee VirusScan Enterprise by McAfee.
Shstat.exe is an executable file that runs the VirusShield Statistics, a process that handles program communication between different components of the McAfee AntiVirus. This file is a critical component and should not be directly removed. The McAfee VirusScan Enterprise lets companies manage antivirus software on multiple computers. The enterprise edition consists of a client application installed on all computers on the network, and a server application, responsible for monitoring and updating all client applications. The ePolicy Orchestrator, a unified console that can manages VirusScan controls all client systems. McAfee, Inc. (formerly Network Associates Inc.) is the world's largest company dedicated solely to the development and distribution of security software. It is headquartered in Santa Clara, California, USA. McAfee was founded in 1987 by John McAfee, who later left the company in 1994. Intel bought over McAfee on February 28, 2011 for $7.68 billion.

ShStat stands for VirusShield Statistics

The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the shstat.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.

Click to Run a Free Scan for shstat.exe related errors

Shstat.exe file information

Windows Task Manager with shstat
Shstat.exe process in Windows Task Manager

The process known as VirusScan tray icon or On-access scanner statistics belongs to software McAfee VirusScan Enterprise or VirusScan Enterprise or McAfee AntiSpyware Enterprise by McAfee ( or Network Associates (

Description: Shstat.exe is not essential for Windows and will often cause problems. The file shstat.exe is located in a subfolder of "C:\Program Files" (typically C:\Program Files\Network Associates\VirusScan\). Known file sizes on Windows 10/8/7/XP are 94,208 bytes (23% of all occurrences), 98,304 bytes and 11 more variants. 
There is an icon for this program on the taskbar next to the clock. The shstat.exe file is not a Windows system file. Shstat.exe is able to manipulate other programs. Therefore the technical security rating is 16% dangerous, however you should also read the user reviews.

Uninstalling this variant: You could uninstall McAfee VirusScan Enterprise or McAfee AntiSpyware Enterprise software via Windows Control Panel/Add or Remove Programs (Windows XP) or Programs and Features (Windows 10/8/7).

Recommended: Identify shstat.exe related errors

External information from Paul Collins:

Important: Some malware camouflages itself as shstat.exe, particularly when located in the C:\Windows or C:\Windows\System32 folder. Therefore, you should check the shstat.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

Related Network Associates Virus Scan
  Scorpio0124   (further information)
McAfee Virus Scan background process
  Lee Wilson  
VirusScan related
Anti virus. Network Associates
  Antony Gomez (Manager LRC Cirencester College)  
handles virus and communication error
  Andrew Chilala  
when you start your computer with 1.8 GHz CPU and 1 GB RAM the SHSTAT.exe uses round 50% of your cpu for a duration of almost 3 to 5 minutes. And then it stops using more cpu capacity but keep running.It doesn't harm ur computer but makes it run slow at start. U can just disable it if you want. Cus it is not a cretical object.
  Tabish Sunset  
Prompts for deletion of folders
is McAfee antivirus related service..
  Roberto Sanchez  

Rating chart

Summary: Average user rating of shstat.exe: based on 14 votes with 8 user comments. 7 users think shstat.exe is essential for Windows or an installed application. 3 users think it's neither essential nor dangerous. 2 users suspect danger. 2 users think shstat.exe is dangerous and recommend removing it.

Do you have additional information?
What do you know about shstat.exe:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving shstat issues

A clean and tidy computer is the key requirement for avoiding problems with shstat. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows' 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the shstat.exe process on your computer, the following programs have proven to be helpful: ASecurity Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. BMalwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

shstat.exe [all]