Security Hijack description
Security Hijack is a browser hijacker which spreads via trojan that makes a perfect background for malware to sneak. It is known that usually hijacker comes through the help of My Security Shield and Smart Security applications. Both are malicious and fraudulent.
Bogus systems imitate computer scans and display numerous pop-ups that state about computer infections. Do not fall for these kinds of scams. They just want to trick you into thinking your PC is severely compromised and should be healed with their “full” version. Ignore all notifications they shoe but use decent anti-spyware application and terminate My Security Shield or Smart Security in order to get rid of Security Hijack.
Manual Security Hijack Removal
Security Hijack processes:
seta.exe
desktoplayer.exe
dwm.exe
A3.exe
Help: A Guideline of Killing Malicious Processes
Security Hijack registry values:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\0
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\1
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\2
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\3
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\4
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\5
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\7
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\8
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\9
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\10
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\11
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\12
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\13
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\14
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun\15
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{742ea7b6-7ef3-d456-3ddc-7c98e4890659}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{6535dce2-510c-5dd2-ae57-6353a36483c5}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
Help: How to edit windows registry entries
Other malicious Security Hijack files:
C:\Documents and Settings\[user]\Local Settings\Temp\dwm.exe
C:\Documents and Settings\[user]\Application Data\Microsoft\svchost.exe
C:\Documents and Settings\[user]\Local Settings\Temp\A3.exe
C:\Program Files\Microsoft\desktoplayer.exe
C:\Documents and Settings\[user]\Application Data\Idviav\ogbi.exe
C:\Documents and Settings\[user]\Application Data\Dyfew\esemy.exe
C:\Documents and Settings\[user]\Application Data\Microsoft\Windows\shell.exe