|
Answer» what does an MSHTA Computer Application Do?Robyn Hull.....Here's some info on it for you .
http://www.thejemreport.com/news_index81.html
dl65 Thanks, that helps, but one more question.......I have a teenage son at home whom my husband and I monitor (and he is aware of it)
There is an application MSHTA open and he is typing stuff in it, how is that possible?Robyn Hull.....Ok ...I see WHATS going on ....sounds like POSSIBLY a chat room of some type...does it have a name ie.......ICQ , msn , yahoo or one like that ? Its possible there may be a log file associated with whatever it is he's using. If you can it might be prudent to check the internet History.....after he has left the pc.....open explorer , then click on the history icon .....its up on the top toolbar and the icon looks like a clock.......this will list all the sites he's been VISITING ...( unless hes smart enough to have been deleting that info before he leaves. ( And if thats the case you will just have to outsmart him) install a keylogger on the pc and it will record every keystroke he uses .....
Hopefully you wont have to go that far.
let us know .
dl65 That is what we have already done and it is COMING up under keystrokes typed (which looks like a login /password) with the application of MSHTA out to the side
Quote mshta.exe is a part of Microsoft Windows Operating System which is needed to execute .HTA files.
Perhaps he is trying to execute HTA files?
QuoteWe all know what a .HTM file. But what about a .HTA file? The two are closely related, yet very different. Let me explain.
The letters HTA are meant to stand for HTML Application. The technology was developed by Microsoft, so is a proprietary concept, and only works in conjunction with Internet Explorer (specifically version 5 and above).
When you follow a link in a Web page to a file that the browser does not know how to render, such as a .ZIP file, the What would you like to do with this file? dialog box displays.
The same dialog will appear when you follow a link to a .HTA file, because the browser itself doesn't recognise it as something that it can display (or 'render') itself. However, thne enviroment is aware, though, that an HTA file can be executed just like a .EXE file. So you can think of an HTA file as being much like an EXE file, but with a .HTA file extension.
Robyn Hull....It could also be a dialer......check you phone bills.. http://www.2-files.com/filename/mshta-exe
The keylogger , which you have installed .......doesnt it log everthing he types ?
Let us know
dl65
|