XP OS with multiple iterations of mshta.exe in Task Manager
In the past week I have seen multiple iterations of mshta.exe in my task manager. I know not what is generating this or why the application is not closing properly
November 19th, 2010 4:05am

Hi GFar74, MSHTA (Microsoft HTML <Hypertext Markup Language> Application Host Is a process that runs .HTA files (HTML Applications), typically MSHTA loads as soon as an .HTA application needs to run, and then terminates when the application completes. This issue may occur if a Windows system file is missing or corrupted. Method 1: Run SFC (System File checker) Scan. To do this, follow the steps below With Windows XP installation disc in the drive a) Click Start, click All Programs, click Accessories, and click Command Promptb) Type the following command, and then press ENTER:sfc /scannowThe sfc /scannow command scans all protected system files and replaces incorrect versions with correct Microsoft versions. If the issue persists, this could be an activity of virus Method 2: Run an online scan for any threat and try to fix themhttp://onecare.live.com/site/en-Us/center/cleanup.htm Thanks and Regards:Ajay KMicrosoft Answers Support Engineer---------------------------------------------------------------------------------------------------------Visit our Microsoft Answers Feedback Forum and let us know what you think.
Free Windows Admin Tool Kit Click here and download it now
November 22nd, 2010 10:33pm

HiCan give some more information??Open command prompt and type "at" (without quotes" and ENTER.Post the results.ThanksRamesh Asari.
December 2nd, 2010 3:50am

scannow did repair some DLL. Cleanup does not match my browser or OS. I tried several other suggestions which likewise did no work.Oddly they build up when I am not using the computer! I have had over 40 iterations. Thank you for trying
Free Windows Admin Tool Kit Click here and download it now
January 4th, 2011 5:34am

hiClick on start and then RUN.In RUN box type "CMD" (without quotes)in the command prompt windows type "AT" (without quote)If you see multiple entries then type "AT /DELETE" (without quotes"now type "AT" againYou should see a message like "there are no entries in the list"Now type the following.TASKKILL /IM MSHTA.EXE /T /FRestart the computer immediately.You shoud not see mshta.exe running again and moreover the Internet Explorer will not open another window with some advertisement site.
January 5th, 2011 2:41am

Running sfc /scannow only updates files in this folder:%Systemroot%\system32\dllcacheSince that is not where XP gets files it needs to run and sfc /scannow does not update any other folders or files on your system, running sfc /scannow will not help you.The MS Cleanup only works with Internet Explorer, so you can run it from there if you want, but cleaning up your files does not sound like it is going to help you but you can sure try it.Removing any pending tasks with the AT command or killing all the currently running mshta tasks with TASKKILL and restarting the computer will kill the immediate mshta tasks, but not actually fix anything. It will stop the running processes for the moment, but you will still have whatever your original problem is when you are done. It is likely that whatever the problem is will soon return.What you should do (unless you want to keep trying things) is first provide more information about your system, then run some scans for malicious software, then if you still have the problem when the scans run clean, start roubleshooting:Please provide additional information about your system:What is your system make and model?What is your XP Version and Service Pack?Describe your current antivirus and anti malware situation: McAfee, Symantec, Norton, Spybot, AVG, Avira!, MSE, Panda, Trend Micro, CA, Defender, ZoneAlarm, PC Tools, Comodo, etc.Download, install, update and do a full scan with these free malware detection programs:Malwarebytes (MBAM): http://malwarebytes.org/SUPERAntiSpyware: (SAS): http://www.superantispyware.com/They can be uninstalled later if desired. Do, or do not. There is no try.I decided to save up points for a new puppy instead of a pony!
Free Windows Admin Tool Kit Click here and download it now
January 5th, 2011 7:21am

I guess GFAR74 computer had some infections which created tasks. The tasks are scheduled to start every hour after the computer is restarted. Maybe GFAR74 ran scans and removed the infected files. and since the tasks folder contains scheduled tasks which utilises MSHTA applicaiton to connect to the internet without the actual browser. So killling and deleting the tasks should take caer of his computer.Most likely GFAR74 scenario is that ashopping site would pop up along with the homepage.
January 5th, 2011 3:28pm

I see...Killing the tasks would indeed stop the immediate problem of the mshta processes, and then I would see if MBAM and SAS could clean up the infections so that they do not show up again when the system is restarted.I need to get that infection on my system so I can actually see it - I have only read about it.Do, or do not. There is no try.I decided to save up points for a new puppy instead of a pony!
Free Windows Admin Tool Kit Click here and download it now
January 5th, 2011 5:08pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics