How to Remove “mshta.exe”

What is mshta.exe?


mshta.exe is a legitimate file that is also known as an interperter for Microsoft Scripting Host. It is responsible for executing html applications and assisting scripts to run in Windows system. It is typically located in c:\windows\system32.
Malware writers create malicious programs and replicate their file names as mshta.exe to spread virus on the internet.
 
Affected Platform: Windows OS


How to check if your computer is infected with mshta.exe malware?


If your PC is infected with mshta.exe, you will start getting unsolicited popups in your browser  or you will automatically be redirected to irrelevant websites. Take the following steps to diagnose your PC for possible mshta.exe malware:
 
Step 1: Simultaneously press CTRL+ALT+DEL keys to open Task Manager.
 
Step 2: If you notice the file located outside the file path c:\windows\system32, then you should run an antivirus scan to get ride of the malware.
 
How to remove mshta.exe malware from system using Comodo Antivirus?
 
Step 1: Download the award-winning Comodo  Free Antivirus.
 
Step 2: Installation configuration frames will be displayed. Select the configuration you would like to apply.
 
Step 3: Select Customize Configuration option and arrange installers, configuration, and file location.
 
Step 4: Restart your PC.

Step 5: It will take some time for the Comodo Internet Security to update the antivirus.
 
Step 6: Proceed with a quick scan that automatically begins after the update.
 
Step 7: If threats are found during the scanning, you will be prompted with an alert screen.
 
Step 8: Comodo Antivirus will remove mshta.exe malware from your computer including all other malware!
43

Malware Entries

First Seen: 22 April 2018 at 5:42 pm
No. Company File Type SHA1 MD5 Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1 Microsoft Corporation Executable a5b184f333320a61
b581527d7f4e7bfb
bff37264
62ff085f4e7a49a9
c5c079c8e5269c1c
Virus.Win32.
Sality.gen
No 6.00.2900.
5512
(xpsp.0804
13-2105)
6.00.2900.
5512
Ukraine N/A
2 Microsoft Corporation Executable c3d78105ec447161
5d9ed41584db4d1a
307ac077
76137ac71297badd
9afd20f2616d370b
Virus.Win32.
Sality.gen
No 6.00.2900.
2180
(xpsp_sp2_
rtm.040803
-2158)
6.00.2900.
2180
United Kingdom N/A
3 Microsoft Corporation Executable 6d64895b3dfc7eac
e629ef72b6dfef17
95c110b1
2901b8296ab47543
e2c04a5468d96b69
Virus.Win32.
Ramnit.A
No 9.00.8112.
16421
(WIN7_IE9_
RTM.110308
-0330)
9.00.8112.
16421
Panama N/A
4 Microsoft Corporation Executable 6e91eab912fde233
bf3ee853a8a1a43d
34db87ab
4b6fe82950f6be11
dbd2de388a500a20
Virus.Win32.
Virut.CE
No 9.00.8112.
16421
(WIN7_IE9_
RTM.110308
-0330)
9.00.8112.
16421
Syrian Arab Republic N/A
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
6

Safe Entries

First Seen: 26 November 2008 at 6:48 pm
No. Company File Type SHA1 MD5 Digitally
Signed
File
Version
Product
Version
Submitted
From
1 Microsoft Corporation Executable 13f139b62a817fe3
26649bdb5f9983a9
95b94ef4
d2df4f88865dd80c
95271a8630d0076d
No 11.00.1775
5.1
(WinBuild.
160101.080
0)
11.00.1775
5.1
Japan
2 Microsoft Corporation Executable a8f7de079e24b076
9b14f908f8e8344f
fe223cfa
fee6903b9036b199
6ac3fd6687eb6a07
No 11.00.1775
4.1
(WinBuild.
160101.080
0)
11.00.1775
4.1
Sweden
3 Microsoft Corporation Executable 907479b5d3fdd5ba
77d84c73c31b6056
2209c924
e656d925809f3cf5
e98afd74007c070e
No 11.00.1773
8.1000
(WinBuild.
160101.080
0)
11.00.1773
8.1000
Japan
4 Microsoft Corporation Executable eda18f3d7cefab38
9203277881e8edbf
258b2f64
08a8931db4d9302f
9804c4dfa14596d1
No 7.00.5730.
11
(winmain(w
mbla).0610
17-1135)
7.00.5730.
11
United States
Display 4 items per page
  • 4 items per page
  • 8 items per page
  • 16 items per page
  • 32 items per page
 
Exclusive Offer
Get Free Endpoint Protection
Get Advanced
Endpoint
Protection

Award-Winning Security to Protect Your Clients from Cyber Attacks

Comodo Internet Security Pro

Antivirus Protection protection from hackers! Get the ultimate Antivirus solution to keep your PC clean and to remove viruses from a slow or infected PC. Improve the PC performance at home or use it on-the-go!

Get Comodo Internet Security Comodo Internet Security