Jump to content

How to allow a mshta.exe/wscript.shell popup window


Recommended Posts

Hi, how can I whitelist this puppy?--

I have a little script that pops up a periodic note. It's driven by a perl script called by task scheduler. Perl calls a .bat file utility I created that does a popup window with a message. The msgbox.bat file calls mshta.exe to do a WScript.Shell Popup--

mshta "javascript:var sh=new ActiveXObject( 'WScript.Shell' ); sh.Popup( '%*', 10, '', 64 );close()"

 

Mostly this works, but every so often, MBAM blocks it. (Nothing in any of the files has changed.) I've put both the perl script and the msgbox.bat file on the file exclusions list. I don't want to whitelist all calls to mshta.exe for obvious reasons.

So, how do I accomplish that?

I've seen similar with some other scripts I've written (where my script calls all sorts of other scripts), and mostly it seems to work to allow the top script, though every now and then MBAM will still block them. It would be nice to have a way to whitelist a script and anything it invokes when it runs.

 

Log file attached...

 

Thanks!

xxmbam-popup.txt

Link to post
Share on other sites
  • Staff

Hi CSProf,

Can you please provide us some logs following the below instructions. Thanks.

NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

  • Farbar Recovery Scan Tool (FRST)
    1. Download FRST and save it to your desktop
      Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit
    2. Double-click to run FRST and when the tool opens click "Yes" to the disclaimer
    3. Press the "Scan" button
    4. This will produce two files in the same location (directory) as FRST: FRST.txt and Addition.txt
      • Leave the log files in the current location, they will be automatically collected by mb-check once you complete the next set of instructions
  • MB-Check
    1. Download MB-Check and save to your desktop
    2. Double-click to run MB-Check and within a few second the command window will open, press "Enter" to accept the EULA then click "OK" 
    3. This will produce one log file on your desktop: mb-check-results.zip
      • This file will include the FRST logs generated from the previous set of instructions
      • Attach this file to your forum post by clicking on the "Drag files here to attach, or choose files..." or simply drag the file to the attachment area
Link to post
Share on other sites
  • 2 months later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.