I have several mshta.exe running processes on my computer
Mshta.exe is listed in the task manager at least 14 times. I close them and they come back. Anyone know what it is, or why its running so many times, and what I can do about it? thanx
I had a similar on my wifes computer problem after an ifestation Trojan horse got into his system.
I am running xp home with service pack 3.
I put end to the largest part of the instance of mshta.exe in Task Manager so that the repressive would work quite well to fix.
I did a search for the mshta. * which yealded multiple copies, some with version behind numbers. I deleted all but one of:
c:\windows\system32\mshta.exe
c:\windows\servicepackfiles\i386\mshta.exe
The in the folder system32 was 45 k and the one in the service pack files was 29 k I went in the Service Pack folder and copied mshta.exe.
Then I put end to all instances of mshta.exe in the Task Manager.
Then I went in the system32 folder and pasted the file by replacing the infected file. So far, everything is ok. If I have problems I have reload service pack 3.
Tags: Windows
Similar Questions
-
5.0.2 loaded on my Win7 PC this morning. Now whenever I launch Firefox, I have 2 Firefox.exe * 32 process running in Task Manager. Why?
http://www.gHacks.NET/2016/07/22/multi-process-Firefox/
Firefox multiprocess is the code name "e10s. https://wiki.Mozilla.org/Firefox/multiprocess
-
several svchost.exe running
I can't start my Windows Vista, even after several repair system. Now, I'm in safe mode and noticed to Bishop of the task that there are several svchost.exe running. This could be the culprit? The repair of the system said that a recently installed or updated driver prevents windows to start. Appreciate your comments.
Hello
After using the Troubleshoot utility above and if so, try a clean boot.
Use the startup clean and other methods to try to determine the cause of and eliminate
the questions.---------------------------------------------------------------
What antivirus/antispyware/security products do you have on the machine? Be one you have NEVER
on this machine, including those you have uninstalled (they leave leftovers behind which can cause
strange problems).----------------------------------------------------
Follow these steps:
Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN
Enter this at the command prompt - sfc/scannow
How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
generates in Windows Vista cbs.log
http://support.Microsoft.com/kb/928228Also run CheckDisk, so we cannot exclude as much as possible of the corruption.
How to run the check disk at startup in Vista
http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html==========================================
After the foregoing:
How to troubleshoot a problem by performing a clean boot in Windows Vista
http://support.Microsoft.com/kb/929135
How to troubleshoot performance issues in Windows Vista
http://support.Microsoft.com/kb/950685Optimize the performance of Microsoft Windows Vista
http://support.Microsoft.com/kb/959062
To see everything that is in charge of startup - wait a few minutes with nothing to do - then right-click
Taskbar - the Task Manager process - take a look at stored by - Services - this is a quick way
reference (if you have a small box at the bottom left - show for all users, then check that).How to check and change Vista startup programs
http://www.Vistax64.com/tutorials/79612-startup-programs-enable-disable.htmlA quick check to see that load method 2 is - using MSCONFIG then put a list of
those here.
--------------------------------------------------------------------Tools that should help you:
Process Explorer - free - find out which files, key of registry and other objects processes have opened.
What DLLs they have loaded and more. This exceptionally effective utility will show you even who has
each process.
http://TechNet.Microsoft.com/en-us/Sysinternals/bb896653.aspxAutoruns - free - see what programs are configured to start automatically when you start your system
and you log in. Autoruns also shows you the full list of registry and file locations where applications can
Configure auto-start settings.
http://TechNet.Microsoft.com/en-us/sysinternals/bb963902.aspx
Process Monitor - Free - monitor the system files, registry, process, thread and DLL real-time activity.
http://TechNet.Microsoft.com/en-us/Sysinternals/bb896645.aspxThere are many excellent free tools from Sysinternals
http://TechNet.Microsoft.com/en-us/Sysinternals/default.aspx-Free - WhatsInStartUP this utility displays the list of all applications that are loaded automatically
When Windows starts. For each request, the following information is displayed: Type of startup (registry/Startup folder), Command - Line String, the product name, Version of the file, the name of the company;
Location in the registry or the file system and more. It allows you to easily disable or remove unwanted
a program that runs in your Windows startup.
http://www.NirSoft.NET/utils/what_run_in_startup.htmlThere are many excellent free tools to NirSoft
http://www.NirSoft.NET/utils/index.htmlWindow Watcher - free - do you know what is running on your computer? Maybe not. The window
Watcher says it all, reporting of any window created by running programs, if the window
is visible or not.
http://www.KarenWare.com/PowerTools/ptwinwatch.aspMany excellent free tools and an excellent newsletter at Karenware
http://www.KarenWare.com/===========================================
Vista and Windows 7 updated drivers love then here's how update the most important.
This is my generic how updates of appropriate driver:
This utility, it is easy see which versions are loaded:
-Free - DriverView utility displays the list of all device drivers currently loaded on your system.
For each driver in the list, additional useful information is displayed: load address of the driver,
Description, version, product name, company that created the driver and more.
http://www.NirSoft.NET/utils/DriverView.htmlFor drivers, visit manufacturer of emergency system and of the manufacturer of the device that are the most common.
Control Panel - device - Graphics Manager - note the brand and complete model
your video card - double - tab of the driver - write version information. Now, click on update
Driver (this can do nothing as MS is far behind the certification of drivers) - then right-click.
Uninstall - REBOOT it will refresh the driver stack.Repeat this for network - card (NIC), Wifi network, sound, mouse, and keyboard if 3rd party
with their own software and drivers and all other main drivers that you have.Now in the system manufacturer (Dell, HP, Toshiba as examples) site (in a restaurant), peripheral
Site of the manufacturer (Realtek, Intel, Nvidia, ATI, for example) and get their latest versions. (Look for
BIOS, Chipset and software updates on the site of the manufacturer of the system here.)Download - SAVE - go to where you put them - right click - RUN AD ADMIN - REBOOT after
each installation.Always check in the Device Manager - drivers tab to be sure the version you actually install
presents itself. This is because some restore drivers before the most recent is installed (sound card drivers
in particular that) so to install a driver - reboot - check that it is installed and repeat as
necessary.Repeat to the manufacturers - BTW in the DO NOT RUN THEIR SCANNER device - check
manually by model.Look at the sites of the manufacturer for drivers - and the manufacturer of the device manually.
http://pcsupport.about.com/od/driverssupport/HT/driverdlmfgr.htmHow to install a device driver in Vista Device Manager
http://www.Vistax64.com/tutorials/193584-Device-Manager-install-driver.htmlIf you update the drivers manually, then it's a good idea to disable the facilities of driver under Windows
Updates, that leaves about Windows updates but it will not install the drivers that will be generally
older and cause problems. If updates offers a new driver and then HIDE it (right click on it), then
get new manually if you wish.How to disable automatic driver Installation in Windows Vista - drivers
http://www.AddictiveTips.com/Windows-Tips/how-to-disable-automatic-driver-installation-in-Windows-Vista/
http://TechNet.Microsoft.com/en-us/library/cc730606 (WS.10) .aspx===========================================
Refer to these discussions because many more excellent advice however don't forget to check your antivirus
programs, the main drivers and BIOS update and also solve the problems with the cleanboot method
first.Problems with the overall speed of the system and performance
http://support.Microsoft.com/GP/slow_windows_performance/en-usPerformance and Maintenance Tips
http://social.answers.Microsoft.com/forums/en-us/w7performance/thread/19e5d6c3-BF07-49ac-a2fa-6718c988f125Explorer Windows stopped working
http://social.answers.Microsoft.com/forums/en-us/w7performance/thread/6ab02526-5071-4DCC-895F-d90202bad8b3I hope this helps.
Rob Brown - Microsoft MVP<- profile="" -="" windows="" expert="" -="" consumer="" :="" bicycle="" -="" mark="" twain="" said="" it="">->
-
Should I run / have several AV programs and GOT on my computer?
I have two computers (Vista OS) desktop and a laptop (OS-Windows 7). Do I need to have any other AV/AS programmed on/running on my computers?
Hello
You should have only one protection on each major system however antivirus/security program
on all of them at once. Two must not be installed on the computer running much less because
the remains of those even uninstalled can cause problems. Remove always unused antivirus/security
programs using their Creator removal tools.List of tools to remove the antivirus/security programs.
http://social.answers.Microsoft.com/forums/en-us/msestart/thread/407bf6da-C05D-4546-8788-0aa4c25a1f91/================================
Here's what I use and recommend: (these are all free and works very well.)
Avast and Prevx proved extremely reliable and compatible with all I have
launched on them. Microsoft Security Essentials and Prevx have also proven to be very
reliable and compatible. Use MSE or Avast and Prevx, Prevx 3 but not all.Avast Home free - stop any shields is not necessary except leaving Standard, Web, and
Operation of the network.Prevx - Home - free
Windows Firewall
Windows Defender (is not necessary if you use MSE)
Protected IE - mode
IE 8 - SmartScreen filter WE (IE 7 phishing filter)
I also IE always start with asset if filter InPrivate IE 8.
(It may temporarily turn off with the little icon to the left of the + bottom
right of IE)Two versions of Avast are available 5.x and 4.8 x
Avast - home - free - 5.x stop shields you do not use (except files, Web, network, &)
Shields of behavior) - double click on the icon in the Notification area - real time Orange - click on the
Shield that you want to stop - STOP. To stop the Orange icon to show an error indicator-
Click on the Orange icon - top right - settings - click on the status bar - uncheck shields you
disabled - click OK
http://www.avast.com/free-antivirus-downloadAvast 4.8 x - home - free - stop shields, you don't need except leaving Standard, Web,.
and the network running. (Double-click the blue icon - look OK. - upper left - Shields details
Finish those you don't use).
http://www.avast.com/free-antivirus-download#TAB4Or use Microsoft Security Essentials - free
http://www.Microsoft.com/Security_Essentials/Prevx works well alongside MSE or Avast
Prevx - home - free small, fast, exceptional protection CLOUD, working with other security
programs. It is a single scanner, VERY EFFICIENT, if it finds something come back here
or use Google to see how to remove.
http://www.prevx.com/ <-->-->
http://info.prevx.com/downloadcsi.asp <-->-->PCmag - Prevx - Editor's choice
http://www.PCMag.com/Article2/0, 2817,2346862,00.aspAlso get Malwarebytes - free - use as scanner only. If you ever think malware and that
would be unusual with Avast and occasional Prevx running with the exception of a low level cookie
(not much), to UPDATE and then run it as a scanner. I have a lot of scanners and they
never find anything of note that I started to use this configuration.I hope this helps.
Rob - bicycle - Mark Twain said it is good.
-
Whenever I start my computer, I noticed a box skipped upward.
It looked like this:
I installed a lot of orbs and custom themes start. It may be because of this.
Here is a beautiful all my explorer.exe files screenshot:
Help would be appreciated! Thank you!
It's definitely because of the themes custom/patched.
To repair your system files for the correct versions, open a command prompt as an administrator (right click on the command prompt shortcut "run as Administrator"), and then type this command to use the System File Checker.
sfc/scannow
-
I recently reinstalled Vista (reinstall clean due to the failure of the hard drive to the new hard drive) and SP2 and all updates available. I think WerFault.exe works sporadically (up to 5 instances at a time) using 100% cpu. This makes my system unusable. I end the prossess (s) by using the Task Manager, but they keep restarting. I tried the error report auto disablinf and made many analyses of malware with various reputable antivirus/antispyware programs that have all found nothing sinister. I do not have insalled all programs that I didn't have prior to reintalling Vista. I had never experienced this problem during the four years that I've been running Vista. Any suggestions?
Werfault.exe is the windows error reporting service. type 'services' in the search from the start menu, right click on the "error reporting service Windows" and choose "Properties". In the drop-down list "Startup type", choose "disabled", then restart your computer.
-
Is there possible to see which are the background running processes in the system which is having Windows XP as operating system?
There is no resource manager (or resource monitor) in the XP Task Manager.
Please read these notes I send to the people who are (sometimes) concerned about the svchost.exe process number they see on their system or when it looks like one of their svchost.exe process has run amok. We can not all apply to your situation, but I don't want to type in a bunch of stuff once again. Then get Process Explorer and you will be able to be Omniscient:
To help understand your processes svchost.exe and what is running under them, read this article and you will be smarter than the average bear:
http://www.bleepingcomputer.com/tutorials/tutorial129.htmlYou may be able to get clues with what is happening with your svchost.exe process using the Task Manager and maybe understand.
You will always be able to understand what is happening with your svchost.exe process if you use Process Explorer.
Download Process Explorer, so you can see what is 'really' running on your system, especially behind those svchosts several process see you in the running task manager.
Download Process Explorer from here:
http://TechNet.Microsoft.com/en-us/Sysinternals/bb896653.aspx
You'll like Process Explorer when you get the hang of it. Process Explorer is the Manager of Windows taskbar on steroids.
Process Explorer installs nothing so it won't slow down your system since it works only on request.
Process Explorer can seem a little intimidating at first because it has so much information, but you will begin to make love the way it works when you're looking for performance problems. You can even say EP you want it to be your new default 'Task Manager' value in the future. You can always run the original tasks as Manager.
Once you get Process Explorer running, expand the columns, made drag the corners of the screen for it's largest, etc., so you can see as much information as possible in the window. Now you can really see what is running on the system.
Here's a screenshot of my poor system when I use Process Explorer:
http://img222.imageshack.us/img222/2567/ProcessExplorer.PNG
The CPU column is usually the most interesting start with performance issues - which uses the most?
It is OK and normal to have several svchost exe processes running. Important XP Services are actually running under svchost.exe processes. There are sometimes an XP Service that runs under a svchost.exe process, sometimes there are several Services in XP, which runs under a svchost.exe process.
Sometimes malware will hide behind a svchost.exe process because the malware knows that you won't be able to find it in the Task Manager. He will hide behind a svchost.exe process to deceive you, but you can outsmart it.
Malicious software can disguise itself also seems to be a legitimate process of XP or he could hide under/behind other processes that you see running in Task Manager if you can't see the execution.
The malware would trick you into thinking you must use a System Restore Point, run a repair install or reinstall your XP from scratch when you really don't.
Looking at the display in process Explorer, you want the CPU most to be associated with the system idle process. It's 'free time' on your system, so more time there, more free.
If you look at the graphs of performance and see red spikes (or not) double click the graphic in the upper left corner to display the graph to use. Move the mouse over any pics to see what are the causes. Even if the Spike has already scroll screen, you can still move the mouse over the edge to see what caused. You can also just wait for a pic to happen and then see what caused the Spike.
-
I seem to have a large number of process MSHTA.exe running on my computer. They do not stop when the windows are closed. It is a new problem on my computer. Looking for a way to fix this problem.
I found a related topic about your problem, you can also visit it if you want
Simplicity is the best ^_^
-
several iexplorer.exe in my task manager
When I check the Task Manager, I have several iexplorer.exe files that come up. Sometimes it takes up to 500 to 600 MB of my ram. I sometimes up to twenty of these iexplorer.exe in my process. Microsoft has a solution and saw thousands of others with the same problem in forums etc. When will this be fixed?
Hi plonky12,
Every new Internet Explorer window that you open will create a new entry iexplorer.exe in the Task Manager.You see several iexplorer.exe in the Task Manager when you are not using Internet Explorer?Hope this helps to understand the issue. Can't wait to hear back on your part. -
Original title: Vprotection application?
Application of Vprotct? Recently, I noticed that I have a process called VProt.exe running. What is the Vprotection application? I have no files named when I try to search for it.
Hi Baldwin16, Matt
Welcome to the community of Microsoft and thanks for posting the question.
1. who is the antivirus installed on the computer program?
2. do you use AVG products?
3. do you have problems regarding the application Vprotection?
Vprotection is a part of AVG Safe Search Toolbar; Some malware will be a miscarriage as vprot.exe.
If you have not installed or there is more than one instance running it may be something else. You can check if it is authentic, by locating the file, view the digital signatures tab and checking the signer are AVG Technologies.
If you have installed the AVG program, you don't have to worry about the processes running on the computer. If you need help with the application, I suggest you to contact AVG support.
Reference:
AVG forums
http://forums.Avg.com/in-en/AVG-forums?sec=theme&Act=show&ID=1
Hope this information helps. Please reply back with the State so that we can help you.
-
XP operating system with several iterations of mshta.exe in the Task Manager
Last week, I saw several iterations of mshta.exe in my task manager. I don't know what it generates, or why the request is not closed properly
Hi GFar74,
MSHTA (Microsoft HTML Hypertext Markup Language > Host Application is a process that is running.) The HTA (HTML application) file, usually MSHTA charge once. HTA application must be running and then ends when the application ends.
This problem may occur if a Windows system file is missing or damaged.
Method 1: Run the SFC (System File checker) Scan. To do this, follow the steps below
With the installation of Windows XP in the drive disc
un) Click Start, click principally made programs, click Accessories, and click command prompt of
(b) type the following command and press ENTER:
sfc/scannow
The sfc/scannow command analyzes all protected system files and replaces incorrect versions with appropriate Microsoft versions.
If the problem persists, this could be an activity of the virus
Method 2: A scanner online for any threat and try to correct
http://OneCare.live.com/site/en-us/Center/cleanup.htm
Thank you, and in what concerns:
Ajay K
Microsoft Answers Support Engineer
---------------------------------------------------------------------------------------------------------
Visit our Microsoft answers feedback Forum and let us know what you think. -
When I turn on the internet, I have an iexplore.exe which uses a lot of memory, more than 200 000 K and one that uses very little of 15, 000 K. I also seem to have a running explorer.exe.
Anyone running Windows XP has "explorer.exe" running - it's the office.
When iexplore.exe is, assuming that you are sure that the two tasks are spelled the same and both are run under the same user account, and then if you have upgraded Internet Explorer to version 8, the reason for the two instances of iexplore.exe is the new browser uses a separate process 'iexplore.exe' for each currently open tab. If you start your browser, you will automatically have two processes, one for the main browser window and one for the first tab.
Microsoft has implemented this technique in Internet Explorer 8 to accommodate a more effective process to each tab priority. An example would be if you were listening to streaming radio in a tab and the surf in another. The tab that has your focus can and will take precedence over the background tab and cause the radio to cut or even stop. In the new Internet Explorer, each tab has its own procedure that allows equal priority over time CPU and not let not another tab steal the processing time for an another background tab.
If you don't have IE 8, then you probably have a malware problem. Download, install, update and run each of these two free scanners. Do not run both at the same time. Each will take a while ends, then start it up and then go for a non-it chore.
-
original title: port162
Hi, on port 162 there is a process called java.exe running. I tried to kill him with the command prodess k 1289. 1298 here is the process ID. but it comes back again. I need the port 162 for sending traps. I first removed java completely from my pc, but still there was this java.exe. in fact, there are two java.exe if I check in the running task manager. need help. I also ran antivirus as well as anti-malware software, but no difference.
Hello
I suggest you to visit these links and check if it helps:
http://www.Java.com/en/download/uninstall.jsp
http://Java.com/en/download/help/regkey_addremove.XMLHave you tried to change the port to Java? See this link:
http://www.Java.com/en/download/help/proxy_setup.XML
It will be useful.
-
HHmmmm bears ok I will answer your questions, but I don't really see the relivence of them for the progs anti, spy, virus, malware are not the problem.
(1) a little more than two or three weeks ago or not.
2A) about two weeks ago.
No. 2B) I don't buy anti progs that do not work. Why would I? He did not set the blocks just prob the random load IE 8 to a maleware site addresses.
(3) I got the updated version of Avast for almost two years. He simply blocked addresses saying something was trying to use svchost and WScript mshta.exe to attempt to load IE to a maleware site. I disabled Avast but since the installation of NOD32 if she does not interfere.
(4) I don't remember what I used before I think it's Norton or macafree but I don't know about two years ago, I had the computer taken, wiped and reinstalled windows and they gave me Avast for free.
(5) Yes, I tried Norton and Macafree, and they do not work to correct the problem. I uninstalled them well and they are no longer on my computer.
(6) no they were not preinstalled.
If you're going to ask me to do a system restore it will not help I already tried. Useless program when you can't use it. I tried several times with different dates, even in safe mode. I already ran on Microsoft Live Onecare, MSRT, Fix and MSE. I have spybot, malwarebytes, superantispyware, synematic and have tried them all. Nothing can solve the problem. Now NOD32 blocks the random addresses loading IE but it is very annoying seeing this thing pop up constantly. The only thing that it does not stop is when I use IE occasionally it will load a location for a Wal-Mart gift card, but I've just close it. If I use a different prog or any it constantly blocks the random addresses loading IE. I don't have IE loaded. Yes I have popups blockers, but it does not block another page being loaded on the card gift wlmart site. everything else works well.
Please don't give me no matter what more links to the help pages for Microsoft because I already looked through them all and tried a lot of useful advice and none have worked. What I really need Bear is a set of instructions on what or the files to search posibly containing a script that gives orders to the system files to try and load IE maleware sites. I need to know where to look, what I'm looking for and how to rewrite or erase the command or script. Probly get rid of some files HKLM or commands too if there are orders as well. I'm sure you'll tell me its probly in both registry keys. in any case if you can help with a set of instructions on how manually enter and take care of the problem that would be great.
I have seen the manual of instructions on how to repair scvhost.exe but I'll not go messin' and delete this file cause I know that you need so that windows run. I'm sorry for the poor fools who go on Ehow and follow the instructions. in any case if you can help it would be greatly appreciated I don't have the money right now to put this thing in the shop with Christmas around the corner and all. Peace!
bear oppss sorry I forgot to say of windows has been completely updated in time and yes I was able to connect to windows update and defender update as well before that happens, but now I cannot connect to a, but can connect to anywheree else apparently on microsoft or other juice of sites not not both.
-
I have a Thinkpad T450s and I'm trying to update the BIOS version 1.19 to 1.20. I've created a live usb with the 'el tortio' - image extracted using linux "dd". Once I boot on the USB under Legacy-BIOS and select upgrade, it proceeds witht the error message "the process does not have this system. The process has been cancelled. "I have disabled the protection against theft, AMT (I think this is the option) and I'm sure that I use the correct .iso file from the downloads section. I don't have a Windows operating system installed, but I'm able to start in various linux distributions using Legacy and UEFI methods.
Here is my BIOS information.
"Manage 0 x 0031, DMI type 0, 24 bytes.
BIOS information
Seller: LENOVO
Version: JBET54WW (1.19)
Release date: 06/11/2015
Address: 0xE0000Runtime size: 128 kB
ROM size: 16384 KB
Features:
PCI is supported
PNP is supported
BIOS is extensible
BIOS shadowing is allowed
Boot from CD is supported
Selectable boot is supported
ACPI is supported
Legacy USB is supported
BIOS boot specification is supported
Targeted content distribution is supported
UEFI is supported
BIOS version: 1.19
Firmware revision: 1.2 "What could you suggest to get the update disc to recognize my system?
I think I've fixed the problem, I formatted FAT16 USB drive and not in FAT32 and also when you use the geteltorito command, it is preferable to use the-o option rather than a redirection ">"syntax. " An article said that it is best to drop in a DOS command line using the USB boot, then run dosflash.exe from there, however, I could not edit the .bat file, but it is an option however.
I hope this helps someone stuck in a similar situation.
Maybe you are looking for
-
Re: How to disable the sleep on Satellite C660 mode?
How to disable hibernation / standby on a Toshiba C660-1JH? Tried to charge the battery on an ipod via a USB cable, left hip and noticed after a few minutes laptop screen became dark and "standby mode". So of course, my ipod stopped charging.Any idea
-
The trash is no accept any file
Hi all Well, as the title suggests, the trash does not accept any file and I mean 'everything', I don't speak of locked files. Whenever I drag and drop a file into the trash, I get this error message: "the operation could not complete because it is i
-
How can I find my password for the user account on the adobe reader software
Adobe Reader keeps asking for my password that I don't how is it can only know what it is?
-
I get the 80070242 error code when I try to update windows, y at - it a fix for this problem?
-
I accidentally locke my computer how unlock it?
I closed my computer how unlock it