mshta.exe trying to get out to 127.0.0.1, virus or spyware or OK?

J

J Antero

Hi all,
Every few days my firewall flags "mshta.exe" trying to get out to address
"127.0.0.1".
Apparently "mshta.exe" is a valid file but that doesn't mean it couldn't
have been corrupted.
Does anybody know what's going on? A lot of other people have apparently
been experiencing this too.

Ciao, J
 
Y

Yves Leclerc

MSHAT read HTML (web) files. So if you access local files, it may use
127.0.0.1 as the Internet address. 127.0.0.1 is reserved for special local
Internet/IP access to the current system (your PC). It will/should not be
sending out info to the Internet.
 
N

N. Miller

J Antero said:
Hi all,
Every few days my firewall flags "mshta.exe" trying to get out to address
"127.0.0.1".
Apparently "mshta.exe" is a valid file but that doesn't mean it couldn't
have been corrupted.
Does anybody know what's going on? A lot of other people have apparently
been experiencing this too.

Ah, I see your computer likes to talk to itself. So does mine.
 
M

Malke

N. Miller said:
Ah, I see your computer likes to talk to itself. So does mine.
There have been a few posts similar to this over the last week or so.
Whenever that happens, there's usually some malware behind it. What
does a scan with a current version (not earlier than 2003) antivirus
show? Make sure the definitions are updated and do the scan in Safe
Mode.

Malke
 
M

mhicaoidh

Taking a moment's reflection, J Antero mused:
|
| Does anybody know what's going on? A lot of other people have
| apparently been experiencing this too.

127.0.0.1 is a local "loopback" address. So, it is not connecting out
.... If it is a valid program, don't worry about it.
 
A

Admiral Q

Lots of programs, legit programs access 127.0.0.1 or another name
"localhost". Open a command prompt and "ping localhost" - the reply should
come from 127.0.0.1
 
P

Plato

J said:
Every few days my firewall flags "mshta.exe" trying to get out to address
"127.0.0.1".
Apparently "mshta.exe" is a valid file but that doesn't mean it couldn't
have been corrupted.
Does anybody know what's going on? A lot of other people have apparently
been experiencing this too.

Put a leash on it and dont worry anymore.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top