Suspicious Script Detected, What to do?

Question

Dimension 2350, window XP

When I go into, control panel>user accounts as soon as I click on change way users log on and off a McAfee/Virus Scan box pops up saying (A Suspicious Script has been detected) sript details are the following.

File: mshta.exe

Activity: the script is attempting to call the RegRead method within the IWshSell3 object.

File path: mshta.exe

Since the unit was new this spring I have had the welcome page as the sign on, yesterday that was gone and the logon windows box was there, so I tried to change back and discovered the script thing, I am not able to change back to the Welcome sign on screen.

Also I am not able to open the (set program access and defalts) or the (add and remove programs and windows components).

McAfee Tech told me to down load thew hot fix for article Q812400 and Q812960, MS sent me the link to 12960, I down loaded and the same problem exists, MS said 12400 is not available.

Any ideas, I also posted this in the General/Virus section.

ChrisRLG · Answer

I checked on google for that file and one of the first page of data was this link
http://www.nsclean.com/psc-htas.html

I would do a check for malware that may have got on your system
--------------------------
Use these to remove Malware (Spyware and Adware).
Spybot S&D
Ad-Aware
Cwshredder
With all of these download them, install (after unzip if required), download the latest signature/update file, run, delete all that they find.

Failing those solving your problems a post of a hijackthis log for the experts to advise.
HijackThis From Here
Download, run, scan, save log, then in notepad copy the FULL log by copy and paste to a post in one of these specialist spyware removal forums:-
http://tomcoyote.org/forums/index.php
http://forums.spywareinfo.com/index.php
http://www.net-integration.net/cgi-bin/forum/ikonboard.cgi
http://boards.cexx.org/index.php
DO NOT FIX ANYTHING WITH HIJACKTHIS WITHOUT EXPERT ADVICE, most of what it finds you need for normal MS Windows tasks.
Do read the sites FAQ before posting, and advise your problem and what steps you have already done to try to cure your problem.

I am in all those sites as ChrisRLG. You might get me, but any of the more problematic ones are handled by the experts. If you get a 'advanced member' like me, we have other ways of asking for advice from the experts, to pass on to you.

You could post your log here in this thread (if in the Virus Information and Removal Board - if not post in that board not in this thread), and I will have a go at giving advice, but if you go to one of the more specalist forums more experts will be able to help.

L74250 · Answer

Downloaded the programs and ran, picked up on a some files, but nothing seamed to fix the problem, worked with McAfee tech, and everything seams to be working now. Thanks for the reply

Windows General

Suspicious Script Detected, What to do?

Was this post helpful?