Customer downloaded anydesk Mshta execution

[computertechguy]

And now Datto EDR is saying there are MSHTA executions. Where do I begin to make it stable enough so I can download and reinstall? I am seeing a series of these alerts

Is there anything that may neutralize this during the rebuild process?