Running it shows the initial screen, but no entries. The maximize/minimize/exit buttons nor the left-side
icons do nothing. The only way to exit is to kill the mshta process.
Also, double-clicking on *.htt, *.hta stuff locks the file manager.
Tried to rename/delete the mshta.exe executable, but regardless of how it is done, it shows back up
in the system32 directory.
24,576 8/29/2002 found in system32 & dllcache - renamed, deleted (replacement same size/date)
29,968 6/19/2003 replacement after deletion from system32, dllcache (source = ServicePackFiles/i386 ???)
Both versions seemingly react the same on execution.
What is the process that keeps replacing the file in the system32 directory? Is this normal?
This started after I ran combofix. Posted request to:
No answer to that post.