Posted:
Tue Nov 09, 2004 7:57 am Post subject:
mshta.exe - what is mshta.exe removal process ?
Question: mshta.exe - what is mshta.exe removal process ?
I have not noticed 'mshta.exe' showing in my Task Manager, under the Tab "process" header before on my computer,I noticed the 'mshta' just now and I am a bit concerned and so I want to know what this 'mshta' does and how to remove the 'mshta.exe' from my computer ? Also I want to know whether it is a system process or user process and Is it because of some error in any program exe, virus or worm? Please tell me how this file mshta.exe showed up and do I need to remove this file ? And is Removal process easy?
Posted:
Tue Nov 23, 2004 1:45 am Post subject:
Update on Info
MSHTA.EXE is a real bi+ch. I have run Spy Sweeper, Spybot, Norton, SpyGuard, PestPatrol, and most downloadable sweepers available. It seems it cannot be contained. I read somewhere that it's a Microsoft Windows child. That is cannot be blocked with any firewall, which stands to reason that it cannot be removed with any sweeper. I also read somewhere that WinMain.exe or .com, cannot remember exactly which, is the launcher for this MSHTA.EXE but I haven't tried the deletion of that file yet. The mshta.exe file was supposed to be used to execute .HTA files. I don't give a sh*t about .HTAs. I just want my computer running real good again. Specific911.com is the only source for the mal .HTAs, so don't go there. If all else fails, you could try deleting the launcher, but it may destroy the fabric of Windows when you do that. I'm downloading a real large file on my home computer, so it's going to be around ten days before I can even think about reformatting. Good luck to you if you are having trouble in this field. I hope this information helps. bye-bye.
Posted:
Tue Nov 23, 2004 1:57 pm Post subject:
Update
Here's what I found...
Download HiJackThis from download.com. Disconnect from internet. Close all browsers. Copy the unzipped HiJackThis into an empty folder on C:\ Drive. Open HijackThis. Run. Tick all occurances of anything browser related (including yahoo.com and specific911.com). Tick to fix. Go to Start -> Run. Type in msconfig. Tick OK. In msconfig -> Boot.ini -> Safemode. Tick OK. Tick to restart from msconfig screen upon exit. Upon restart, you will be in safemode. Go to Drive C: -> Documents & Settings -> User (whatever your username is) -> Temp. Do not delete this folder. Go inside the folder and select all, then delete. Go to Start -> Run. Type msconfig. Tick OK. In msconfig -> Boot.ini -> untick safemode (for normal boot). Tick OK. Tick to restart from msconfig screen upon exit. Upon restart, you will be in normal mode. If you don't have this program (PestPatrol), it's ok and the specific911.com / mashta.exe problem should be fixed...but to be sure that other problems may not occur within the same parameters of the previous problem, you may want to do a full scan with PP, fix, and one more full scan with PP. Another program you may choose to use afterward is SpyBot. While it didn't cure the mshta.exe problem before, it could still offer some protection on future problems. Do a full scan, fix, immunize. This process should work. I deliberately infected my system to find the fix. After all the scans and fixes (before reconnecting to the internet) be sure to do this: Start -> Run -> Restore. Use this Windows feature to create a restore point. And please remember to make a restore point at least once a week. Some systems do this automatically, but I always tell people to do a manual one each week as well just to be on the safe side. Mshta.exe isn't the problem. Mshta is a Microsoft .hta reader. But it cannot be blocked or prevented. Some .htas out there take advantage of this program. Specific911.com has a nasty hijacker that uses this program. Using the same way to create a restore point, you can do a rollback restore. Rollback restores revert your computer settings back to the last saved restore point. This can fix so many problems that can happen. The three programs I listed are very good to have on your computer. But they are not the only ones you can use. Some others have more protections. These are my personal favs simply because I feel they are the best. Another strong recommendation is XoftSpy. I give two warnings: Sometimes if you remove a certain spyware, another program that was previously associated with the spyware may not function correctly if it functions at all. The other warning is that HiJackThis can really F*ck up your computer if you tick some of the wrong things. But there is nothing better than that program for browser hijackers. Again, Good Luck and Farewell.
mshta.exe is used by Windows Operating System. mshta.exe is required to open .hta files. I think its not safe to close this exe because it support your operating system and if you close it you will be in trouble. I suggest you only to terminate mshta.exe if you find that its create any problem.
mshta.exe is associated with Microsoft Windows. mshta.exe is considered to be safe and not recommended to turn off this process. May be some spyware or maleware affect this system process but in most cases mshta.exe is not virus but is Microsoft system process that run on your computer.
Posted:
Wed Dec 28, 2005 6:15 am Post subject:
mshta.exe contains suspicious scripting activity
what the hell is meant by "mshta.exe contains suspicious scripting activity"????
whenever i go to "user accounts" in control panel and click on "change the way user log on or off" - my anti virus(McAfee) prompts this message. what should i do to access it??
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
FAQ
Search
Register
Profile
Log in to check your private messages
Log in
