What is ALG file is not a virus

What is alg file?

The Alg.exe process file is a program from Microsoft's Windows operating system that handles Microsoft Windows network Connection Sharing and network connection firewalls. Application Gateway Service, which provides support for Third-party protocol plug-ins for Internet Connection Sharing and Windows Firewall. (Tip: This program is very important to your system's normal operation.) What is the process of ALG that can be closed?

Alg.exe process file memory usage is about 4000KB. In Windows XP, the process file is located under the C:windowssystem32 system directory, which is important for your system to function properly, and it is best not to end this process. If this file appears in the C:windowsalg.exe system directory, it may be a virus.

Please follow the steps below to find out if ALG is a virus in your computer, if it is a virus, you can not shut down, and suggest you as soon as possible through the following solutions to kill the virus!

Tip: When Alg.exe (or ALG) is uppercase ALG.exe (or ALG), you will not be able to access the Internet (most wireless internet access). Simply log off the user and then log on again.

　　Alg.exe is not a virus?

The Alg.exe file is located under the C:windowssystem32 system directory in Windows XP. But when you find a alg.exe in the C:windows directory, you can be sure of the virus on your computer.

After the Alg.exe virus, it will pass 135, 445 and so on several ports outward communication, to the local area network has the influence, and often can cause system error and restart. Because it invokes the Winlogon.exe process, the alg.exe process cannot be closed directly.

　Alg.exe is not a virus?

Alg.exe Virus Processing methods:

There is no alg.exe virus, and some anti-virus software can not be removed. This time is only by manual deletion.

　Manual Anti-Virus Process:

1. Clean up the registration form:

(1) Expansion: hklmsystemcurrentcontrolsetservices

Delete: Application Layer Gateway Services (pointing to C:windowsalg.exe)

(2) Expansion: HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows Ntcurrentversionwinlogon

Change the sfcdisable's build value to dword:00000000

(3) Expansion: HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows Ntcurrentversionwinlogon

Delete: "SfcScan" =dword:00000000

(4) Expansion: Hkey_local_machinesoftwaremicrosoftwindowscurrentversionshell Extensions

Delete: "V7b5x2s1i4h3" = "12/15/2006, 01:26 PM"

2, restart the system. Displays hidden files.

3, delete C:windowsalg.exe.

4, in the C:windowssystem32microsoft directory to find Backup.ftp, renamed to Ftp.exe; find Backup.tftp, renamed Tftp.exe. Then, drag Ftp.exe and Tftp.exe to the System32 folder, overwriting the Ftp.exe and tftp.exe that were overwritten by the virus.