exhmunmlclr

[Scheich]

I have got this hijacker and even found a spanish desscription, which i think descripes how to remove it. I tried babelfish to translate it, but its still rubbish. Could someone translate it for me, please ?

1 en el registro HKLM/software/microsoft/windows/currentversion/run borra la entrada de devenv

2- reinicia en el modo seguro borra todos archivos exe en % TEMP% eso se parece a nn*nn. exe donde nn son 2 dígitos
borra C: /windows/system/smvss.exe

3- reinicia norma

[Dark_Webster]

Originally Posted by Scheich

I have got this hijacker and even found a spanish desscription, which i think descripes how to remove it. I tried babelfish to translate it, but its still rubbish. Could someone translate it for me, please ?

1 en el registro HKLM/software/microsoft/windows/currentversion/run borra la entrada de devenv

2- reinicia en el modo seguro borra todos archivos exe en % TEMP% eso se parece a nn*nn. exe donde nn son 2 dígitos
borra C: /windows/system/smvss.exe

3- reinicia norma

1 - In the registry key HKLM/software/microsoft/windows/currentversion/run delete the devenv entry.

2 - Restart in safe mode and delete all exe archives in TEMP directory that look like nn*nn.exe where nn are 2 digits.
Delete c://windows/system/smvss.exe

3 - Restart normally

[Scheich]

Thanks !

[pozer]

is this working? i checked that spanish/italian forum but solution i found solution not matching to this case. i couldn't find neither devenv entry nor C: /windows/system/smvss.exe. am i wrong? let me know. this crap is annoying the s..t out of me.

[Scheich]

I did what was suggested and disabled another entry, its called devenv.exe and ist located in
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURE CONTROL\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION.

Maybe its not needed to disable it, but i did it anyway.