Delete the safedrv virus (this virus is a bit interesting)

1. manually delete the following files:

% Program Files % \ common files \ safedrv.exe
% Documents and Settings % \ Administrator \ rkoxe. DRV (random file name)
% Documents and Settings % \ Administrator \ lrqkv. DRV
% SystemRoot % \ system32 \ drivers \ DRV. sys
X: \ infected run. inf (X is the infected drive letter)
X: \ safedrv.exe

2. manually delete the following registry items:

HKEY_LOCAL_MACHINE \ SYSTEM \ ControlSet \ Services \ one
Data: ImagePath
Value: system32 \ drivers \ DRV. sys
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Run
Data: safedrv
Value: C: \ Program Files \ common files \ safedrv.exe
Follow-up:
I was touched by the speed of your answers. But please do not search for any answers and paste them, OK? The computer is not infected with this virus, but the memory card is faulty.
Answer:
Connect your mobile phone to your computer. Start anti-virus software. Then select Mobile Disk detection and removal

 

3. find an XP SP3 host and copy the srsvc in the "C: \ WINDOWS \ System32" directory. DLL] to the U disk, and then copy this file from the U disk to your machine, in turn cover [c: \ windows \ system32 \ dllcache], [C: \ windows \ system32] file of the same name under the directory, and then restart the computer to see if rising and ice blade are back to normal?

--------------------------------------------------------------------------------

The three steps above are all done and the test is effective. The ControlSet may be divided into controlset001 and controlset002, and related options must be deleted ~

Finally, we can use Ultrasearch to search for safedrv globally. If it is not, we can feel relieved ~

Delete the safedrv virus (this virus is a bit interesting)