mshta.exe process

[Mike Lambert]

I have a Windows XP computer that runs really slow. I checked in the
Task Manager and on the process tab I found a process called mshta.exe that
is using 95-99 percent of CPU. I did some searches on the internet and I am
still confused what I should so about it. Some of the websites make it
sound like it is spyware, but yet it is part of the Windows operating
system. Does anyone know what I can do to get rid of this process short of
re-installing the operating system?

Mike

 

[R. McCarty]

What Anti-Spyware tools do you use ?

Before undertaking a re-install, I would spend some time running the
mix of tools used to clean/immunize your system from Spyware. You
need AdAware, Spybot, CWShredder and perhaps HiJackThis for
detecting & removing this class of threat.

Once the system is clean or reasonably clean - I would tighten up it's
security by adjusting IE Zone security, Cookie Handling and then check
Startups & Watchdogs.

 

[Torgeir Bakken \(MVP\)]

I have a Windows XP computer that runs really slow. I checked in the
Task Manager and on the process tab I found a process called mshta.exe that
is using 95-99 percent of CPU. I did some searches on the internet and I am
still confused what I should so about it. Some of the websites make it
sound like it is spyware, but yet it is part of the Windows operating
system. Does anyone know what I can do to get rid of this process short of
re-installing the operating system?

Hi

To find out what hta script is being run:

Download the free Process Explorer from SysInternals (task manager on
steroids) and from it right click on hta.exe and select Properties
to see the command line which it was started with (will include the
script file path/name).

http://www.sysinternals.com

 

[Mike Lambert]

Thanks for the response. I download the free copies of each of the programs
you noted below. I made sure I updated the software by connecting to the
web and then ran the scans. The only progam that found anything was
HiJackThis. And looking at the stuff it did find, I don't believe any of it
to be harmful. I looked through the settings in each program looking for
some way to make sure the most aggressive scan was being performed. So, now
what? Am I doing something wrong? Any more help you can offer would be
great. Otherwise I will probably just re-install.
Just so you know, this computer is part of a domain network with one
Small Business Server 2003. A lot of the policies and control is set-up
using GPO's from the server. None of the computers in the network have this
process running and none of them have had any problems. We only have virus
software (NOD32) installed on all the machines, no adware or spyware
software. I didn't know if any of this would matter, but I thought I would
mention it.

Thanks
Mike