I was about to create a Limited Account on my PC when Defense + alerted me about a “mshta.exe” process. I was told that it was “unsafe”. I just wanted to know if this is confirmed.
:THNK
(B)
Like all programs/viruses, the actual filename doesn’t provide enough information. What provides enough information is the full file path to that file.
However saying that, mshta.exe is a known needed Windows program.
[edit=1]It’s used in a virus called ‘VBS.Elva.Worm’ by symantec[/edit]
Correct me if I’m wrong people of the Forums, but Comodo considers all activities on a persons computer as ‘Unsafe’. At least till the user identifies it and decides what to do with it.
To find out if its a virus, obtain a Virus scanner and place the file through the scanner. If its uptodate it should allow you to discover if the code inside it is of a good or bad nature for your computer.
It is normal to get an alert like that. D+ doesn’t know everything so its doing its job and warning you. If you know the program then allow it. If you actaully read the alert iw ill say if you know and trust the program then allow it.If your pc is 100% clean then there is no reason not to trust it. I know just about every process on my pc. Just Google the process and you get your answer.
Have a look in your C:\WINDOWS\system 32 for mshta.exe,right click on it and choose properties,it should be version 7.0.5730.13 assuming(which you should never do) your on xp-sp3
Matty
mshta is it a potentially unsafe app. Since it is a scripting host depending on the scripts it runs it can do pretty much anything.
When I need to run scripts I usually assign mshta an windows systemm application policy but I don’t mark it to be remembered.
If I get a mshta alert out of blank without clicking on an hta script I would be suspicious.
[font=tahoma]Thank you all for the explaination.
Thanks Matty for the information, I’ve confirmed what you said.
I would just like to ask… !ot!
What are these “scripts”? I took a look at Wikipedia’s article and it was too much to absorb. Are they somewhat in a way, “languages”?
I would like to learn more (B)
In a way scripts are batch files on steroids ;D
Windows scripts are a way to automate admin tasks and manage PCs. Since they can manage your PC they could also be used for malicious purposes.
You can find few examples on Windows Script Host Bazaar
[font=tahoma]This seems a bit foggy… So I’ll try to understand it, in the best way I can.
Batch usually means in a group and I also read about the “commands”. They are just a serious of texts which are executed by [cmd.exe?].
So when you mean (the example in Wiki was on “steroids”) then it’s a whole bunch… like an army of those commands?
barch files are a lists of commands that can carry many tasks in an automated way.
windows scripts are usually more powerful than batch files (thus scripts are on steroids).
eg a script could run a ms office app and send command to automate some task
[font=tahoma]Thanks for the explanation and your prompt response. I have a general understanding of “scripts” and “batch files”.
This Thread is now closed.
If you need this thread reopened, Please PM any online Moderator.
Josh