Msnet.sys, Jet300.dll simple Analysis and removal method _ virus killing

Jiangmin the definition of the virus is named: TROJANSPY.AGENT.RW

Releasing files
%system%\drivers\svchost.exe
%system%\drivers\msnet.sys
%system%\jet300.dll

Add registry information
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]
Msnet%system%\drivers\msnet.sys
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]
Svchost%system%\drivers\svchost.exe

Main Features
Jet300.dll inserted into the system process Svchost.exe
Created a service svchost
Created a driver msnet
May download and install other viruses Trojan

Solution:
1, in order to avoid the system normal process Svchost.exe mistakenly terminated, it is recommended to stop and delete services first
2. Delete all registry information that it added (service and driver information)
3, after reboot, delete all the virus files that it releases
4, for the deletion of the fixed, you can use unlocker to carry out