mshta

  • 1
  • Question
  • Updated 2 days ago
  • Doesn't Need an Answer
I keep getting a notification from Trend Micro that it has blocked mshta.exe.IS this a virus, if so why does trend micro not remove it.
Photo of john.charles

john.charles

  • 140 Points 100 badge 2x thumb

Posted 6 months ago

  • 1
Photo of TM_Jedi

TM_Jedi, Employee

  • 190 Points 100 badge 2x thumb
Hi john.charles,

Can you verify the location of the mshta.exe file that is being detected by Trend Micro? 

The legitimate file should be located at he legitimate Mshta.exe will be found at C:\WINDOWS\System32\mshta.exe. 

There are instances that a virus uses names similar to a legitimate windows file and place in other folders in an attempt to fool you into thinking it is a good file. 

If it is located on a different location then try to manually delete it.

Please inform us if the issue is resolved by this.

Thanks,
Jedi
Photo of cool breeze

cool breeze

  • 130 Points 100 badge 2x thumb
Photo of cool breeze

cool breeze

  • 130 Points 100 badge 2x thumb
Photo of cool breeze

cool breeze

  • 130 Points 100 badge 2x thumb
Should I unblock mshta.exe and targeted file MSIMGSIZ.DAT? Folder Shield blocked them unilaterally. Thank you.
Photo of TM_Malik

TM_Malik, Employee

  • 7,374 Points 5k badge 2x thumb
Hi cool breeze,

Make sure not to include the entire Local Disk C: in Folder Shield. The MSIMGSIZ.DAT is a memory-mapped file that simply maintains a cache of image URLs to image dimensions. It's a safe file.

Regards...
Photo of Tom Emmelot

Tom Emmelot, Champion

  • 18,880 Points 10k badge 2x thumb
Hi cool breeze

Welcome to TM Home users Community, a public site where volunteers try to help each-other , also there are TM Employees that can give answers, that is only at working hours. I am just a volunteer! 

Mshta. exe is a knowing MS product, so you can see that: 
Right click the file and "properties" so if it is a MS file, just unblock them. 
The target file MSIMGSiZ.DAT you have 1 for Explorer and 1 for Edge, keeps info updated. 
Hope this helps

Kind regards,Tom
(Edited)
Photo of cool breeze

cool breeze

  • 130 Points 100 badge 2x thumb
Thank you, Tom. I appreciate your insights and will follow your lead. Thank you so much for sharing. All the best.