One-minute learning to manually scan and kill rogue drivers

Recently, the focus is on home tickets and renting a house in the coming year. Ah, people who are in Beijing are depressed, and every time they get entangled in things.

Do an advertisement first, our Su Qing classmates finally three times opened Bo, please visit: http://rebeccasu.blog.sohu.com

However, we were lucky enough to have a machine. With safe360, rising KaKa was able to launch the game. After restarting it for n times, it was not effective.

Finally, we finally worked with a powerful human flesh search machine to manually handle the hidden rogue driver. Then we summarized several common methods of manual detection and removal of the rogue driver for reference by netizens who are suffering from illness.

To manually scan and kill rogue drivers, you must pay attention to the following three parts: Device Manager, system registry, and file system.

1. Device Manager

Right-click <my computer> and choose <Properties> from the shortcut menu. in the <System Properties> window that appears, select

Select a driver, such as FIPS, right-click the driver, choose <Properties> from the shortcut menu, select <driver> from the Properties window, and click <Driver Details>. in the new window, check whether the driver file path, provider, file version, copyright, and other information are complete. most hooligans drive providers disguise themselves as Microsoft. Check whether the file version information is correct and whether the driver function information exists. if the file version number of a driver is incorrect, or the driver function is not labeled, the driver may be a rogue. the normal driver file information is as follows:

 

2. system registry

System registry HKEY_LOCAL_MACHINE/system/CurrentControlSet/services

Contains Windows Services and system drivers. select an item, such as FIPS, right-click the item and choose <permission>. in the displayed window, select <advanced>. the following window is displayed, removing option <inherit permission projects that can be applied to sub-objects from the parent item, including those explicitly defined here (I) ..>. in the displayed window, select <Delete>. click OK to restrict all users to access this table.

3. File System

In the file browser window, select <tools> and then <Folder Options>. the following window is displayed. select <View> and <Advanced Settings> remove <use simple file sharing (recommended)>. click OK. after that, right-click any PE file (including EXE, DLL, sys file), such as FIPS. sys, select <attribute>. the <Security> page appears in the pop-up property window.

Most of the driver files in windows are stored in C:/Windows/system32/drivers. if a driver is suspected of being rogue, right-click the rogue driver file and choose <attribute> from the pop-up menu. in the Properties window, select <Security>, then select advanced, and remove the option <inherit permission projects that can be applied to sub-objects from the parent item, including those explicitly defined here (I. in the displayed window, select <Delete>. click OK to restrict all users to access this driver.