Hello, I live in Brazil and I was having the same problem described above, and I
found a solution (IÂ´m sorry for posting in english, I canÂ´t write in French,
had to use Babelfish do translate your messages above).
the sequence of actions I used to get rid of these damn files:
Check the processes of Windows Task Manager for .exe files with numbers followed
by "exmodula" plus a letter, for example:
As above, this name varies, in my computer I had several different
files, some using "exmodulaf" and "exmodulag". End the process.
2) Next, go to your C:\Documents and Settings\<Username>\Local
where "<UserName>" varies according
to the username on your computer. YouÂ´ll find several files that follow the
format described above. (**exmodula*.exe). Delete them.
perform a search on your registry for the "exmodula" word youÂ´ll probably
find references to it in the HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
key. In this key youÂ´ll find something like this:
What this key does is to create a fake entry for Windows
Firewall under the name "Windows Update" for each new **exmodula*.exe
file it creates. Remove this entry from the registry.
Look in C:\WINDOWS\system\ folder if you find the file smss.exe (file responsible
for automatic windows updates) running in the C:\WINDOWS\system\ folder, that
is wrong. This file is responsible for generating the **exmodula*.exe files.
NOTICE: the smss.exe file running under C:\WINDOWS\system32\
is the real, legal file, do not touch it!
5) Now search your registry
for smss.exe and youÂ´ll find references to it under these keys, delete them.
Congratulations, YOU ARE CLEAN.
Date: 4/27/2006 6:11:35 PM
Submitted By: Peter Bromberg
My Home Page: http://www.eggheadcafe.com