How to remove the winstall virus
Most antivirus programs identify winstall.exe as malware, for example TrendMicro identifies it as PAK_Generic.001 or TROJ_RENOS.ALI, and Microsoft identifies it as TrojanDownloader:Win32/Renos or Adware:Win32/PurityScan.dr.
The free file information forum can help you find out how to remove it. If you know more about this file, please leave a comment or a hint for other users.
Click to Run a Free Virus Scan for the winstall.exe malware
Winstall.exe file information
The process known as winstall.exe belongs to software SlimBrowser by unknown.
Description: The file winstall.exe is located in C:\.
Known file sizes on Windows 7/XP are 29,184 bytes (31% of all occurrences), 28,160 bytes and 13 more variants. 
There is an icon for this program on the taskbar next to the clock.
The program has a visible window. There is no file information. The file is not a Windows core file.
Therefore the technical security rating is 34% dangerous, however also read the users reviews.
Recommended: Identify winstall.exe related errors
If winstall.exe is located in a subfolder of "C:\Documents and Settings", the security rating is 61% dangerous. The file size is 122,880 bytes. There is no information about the author of the file. The process starts when Windows starts (see Registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run). The file is not a Windows core file. The program has no visible window. winstall.exe is able to manipulate other programs.
If winstall.exe is located in the folder C:\Windows\System32, the security rating is 80% dangerous. The file size is 122,880 bytes (75% of all occurrences) or 1,267,395 bytes. There is no file information. The program has no visible window. Winstall.exe is an unknown file in the Windows folder. The application is loaded during the Windows boot process (see Registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run). The file is not a Windows core file. winstall.exe is able to manipulate other programs.
If winstall.exe is located in the folder C:\Windows, the security rating is 80% dangerous. The file size is 122,880 bytes.
Important: Some malware camouflages itself as winstall.exe, particularly when located in the c:\windows or c:\windows\system32 folder. Therefore, you should check the winstall.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.
Score
User Comments
Mike
sounddude462
huelli
Winstall scanner
Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan. Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager. SpeedUpMyPC scans, cleans, repairs and optimizes your computer. |
Other processes
ntrtscan.exe tpsmain.exe aniwconnservice.exe winstall.exe ehsched.exe elbycdio.sys icqlite.exe ehmsas.exe mgsysctrl.exe hpqgpc01.exe sdieint.dll [all]
soundude462