Mshta.exe virus Help!!!?

[Alienbraham]

Ive been getting this windows 7 style update popup when i have windows 10. when i trace it back through task manger to the file location it leads me to this file. link for screenshot. Ive also ran windows defender and malware bytes and nothing is found. Ive even scanned this file alone on both.

https/gyazo.com/3a44699aca5027d4f4df4154b3869bde

 

[mdd1963]

Sysinternal's Process Explorer might allow you to see which application/file spawned this monstrosity, and, if something is forcing a "Lazarus" effect on it, you can suspend them both, then delete them both....

(There are several useful turtorials on Youtube by Mark Russinovich on Process Explorer)

https/technet.microsoft.com/en-us/sysinternals/processexplorer.aspx

 

[JoshRoss]

Sometimes Windows Defender (Rarer cases Malwarebytes) have issues dealing with specific malware/viruses in normal mode, you could try the following as a solution:

1. Restart the PC in "safe mode with networking"
2. Install RKill and run it to kill any malicious services. You could try removing the virus manually, delete its files.
3. Install any popular antivirus and do a quick scan (Majority of the providers do have free versions of their software). Or just use Windows Defender. It works really well in most cases.
4. Install and scan your PC with Malwarebytes and Hitman Pro (Maybe ADWCleaner).
5. Restart PC in normal mode and do another quick scan with Malwarebytes.

Let me know if this helps. In theory, it should solve all of the issues. Good luck!

 

[Alienbraham]

May be a bit late. But it poped up again just now. haven't seen it since i made the post i took a screen shot this time https/gyazo.com and this https/gyazo.com/f612210517679926e6ff788492c94c78/a1759cd48301daa56275695aceb2b8ac And ive done what JoshRoss said.

 

[Alienbraham]

YES!!! I downloaded and ran Malwarebytes AdwcCeaner And it found left overs of a chromium virus i a long time ago. i figure they are connected. I removed it and i have a feeling that is what it was.

 

[JoshRoss]

It could definitely be it. Chromium is closely tied to MSTHA virus. It creates those annoying pop-ups. Now, it might be that it will still pop-up because MSTHA virus creates "Task Schedule" at regular intervals, you will still have to remove that from your Windows. Just find "Task Scheduler" in windows, and remove scheduled task related to either Chromium or MSTHA. Let me know if this helps.