Malicious script tries to load odbc.hta

  • Thread starter Thread starter Erik
  • Start date Start date
E

Erik

Every time I boot up my NAV recognizes a malicious script
found at C:\WINDOWS\ODBC.HTA. Before I request NAV to
stop the script, I pull up task manager and notice that
mshta.exe is trying to load. When NAV stops the script,
the mshta.exe dissappears. I'm not sure if the two are
related. I'm contemplating renaming odbc.hta. But it is a
hidden system file. Does anyone have any ideas? Thanx in
advance.
 
Erik said:
Every time I boot up my NAV recognizes a malicious script found at
C:\WINDOWS\ODBC.HTA. Before I request NAV to stop the script, I pull
up task manager and notice that mshta.exe is trying to load. When NAV
stops the script, the mshta.exe dissappears. I'm not sure if the two
are related. I'm contemplating renaming odbc.hta. But it is a hidden
system file. Does anyone have any ideas? Thanx in advance.
Click to expand...

From -
http://www.liutilities.com/products/wintaskspro/processlibrary/mshta/
Description: Application that is used to run HTA files in Windows.
The application is loaded as soon as an .HTA application needs to run
and then terminates when the application completes.
Click to expand...


FWIW *.hta = HTML Application.

You might want to take a look at odbc.hta in notepad.

Bob
 
Back
Top