Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

mshta.exe All menu bars, buttons...etc are black and I can see what they say.


  • This topic is locked This topic is locked
3 replies to this topic

#1 ver2k

ver2k

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:06:57 PM

Posted 13 December 2012 - 04:37 PM

Hello,

I run ZoneAlarm and today I started getting popups regarding SUSPICIOUS BEHAVIOR "dabanu is trying to launch C:\Windows\SysWOW64\mshta.exe". I click deny, which is actually just a black square but know the position of the deny button, but it continues to pop up ever 15-20 seconds or so. MS Security Essentials is currently in the process of running...somehow its the only program that I can see the interface and is not completely black...although the title bar is. I can get to my task manger but it is essentially a black box.
Any help would be greatly appreciated!

Thank you in advance.

BC AdBot (Login to Remove)

 


#2 ver2k

ver2k
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:06:57 PM

Posted 13 December 2012 - 04:44 PM

I left off the end of the message:
"dabanu is trying to launch C:\Windows\SysWOW64\mshta.exe, or use another program to gain access to privileged resources"
Thanks again.

#3 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:07:57 PM

Posted 15 December 2012 - 10:26 AM

Please do the following:

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.
  • Disable any script blocking protection
  • Double click dds to run the tool.
  • When done, two DDS.txt's will open.
  • Save both reports to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.


NEXT

Please download aswMBR to your desktop.
  • Double click the aswMBR.exe icon to run it
  • When asked if you want to download Avast's virus definitions please select Yes.
  • Click the Scan button to start the scan
  • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.
  • You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#4 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:07:57 PM

Posted 20 December 2012 - 09:44 AM

Due to the lack of feedback, this topic is now closed.In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users