How to clear the Web virus

1, ie plug-in malicious damage

There are reports on the web that the Windows XP system does not start properly after a normal shutdown, and the power is turned on again. After Windows XP system is turned on, either normal or Safe mode boot in the boot list is not able to enter the system normally, and the machine then automatically restarts, so the cycle, use system repair and other measures can not start the system. After analysis found that the system can not start the file "Cnsminkp.sys".

Cnsminkp.sys is not a system file provided by Windows, but a third-party driver file that has information about an Internet company in the file's properties. Drivers are generally at the bottom of the system, and if problems are extremely easy to cause system instability. Remind users: This phenomenon is not the virus behavior, and will not infect. If the system appears to have this symptom, do not panic, the system is not completely damaged, the following solution can be used to repair the system:

If the computer has a dual system, log on to the normal system, delete the%systemroot%system32driverscnsminkp.sys file; If your computer does not have a dual system, use the following method: Boot the system with the system boot CD, and delete the following files from the system folder:%systemroot%system32driverscnsminkp.sys.

2, IE6 window kept open until the last crash

On the internet soon, the IE6 window is kept open until the last system memory footprint is too much and freezes. This is due to the scripting virus in the Web browsing. Script virus execution can not be separated from WSH (full name "Windows scripting Host"), You need to invoke the WScript.exe program, which is located in the same folder as Windows, and can be uninstalled because the vast majority of ordinary users do not use it, thus preventing such viruses from being intrusive.

Fix method: In Windows 98, click Start/Settings/Control Panel, click Add/Remove Programs, select Windows Installer, and then double-click the Attachment option in the pop-up window to uncheck the Windows Scripting Host item. Click "OK" for the last two times to uninstall it. In Windows xp/2000, click Start/Search/files or folders, and under the System directory (C:WINDOWSSYSTEM32), locate the WScript.exe file and delete it.

3, IE's homepage settings are shielded locked

Malicious Web pages can also be modified by the registry, lock IE's homepage settings, so that the IE home page set a number of options dimmed, button is not available, to prevent users from changing back.

Fix method: Click Start/Run, type "regedit" to open the registry, navigate to the Hkey_current_usersoftwaremicrosoftinternet Explorer branch, and create a new control Panel primary key. Then, under this primary key, create a new DWORD value named "homepage" with the value "00000000" ("1" disabled), and navigate to HKEY_USERS. Defaultsoftwarepoliciesmicrosoftinternet explorercontrol Panel, the homepage key value is changed to 0;

Next, navigate to the "Settings", "Links," "Hkey_current_usersoftwarepoliciesmicrosoftinternet Explorercontrolpanel" Secaddsites "All are changed to 0." Note: In Hkey_current_usersoftwarepoliciesmicrosoft, there is only a primary key "Systemcertificates" by default, and there is generally no Internet Explorer, and if you have done so , IE still has other settings to be disabled (dimmed), you can remove the primary key "Internet Explorer".

4, in the IE toolbar has the illegal Add button

Malicious Web pages can also be used in your IE toolbar to add a variety of illegal buttons.

Fix method: Start IE, check the illegal button on the toolbar, then right mouse button pop-up menu, choose "Custom", find illegal button in pop-up window, click "Delete" can.

5, IE default search engine was tampered with

In the IE toolbar, there is a search engine tool button that can be clicked to search the Web. IE default to use Microsoft's search engine, if IE's search engine is malicious Web site tampering, as long as you click on the "Search" button, will link to malicious Web site.

Fix method: Click "Start/Run", enter "Regedit" to open the registry, navigate to Hkey_local_machinesoftwaremicrosoftinternet Explorersearch branch, and find " SearchAssistant "Key Value name, click" Modify "in the right window, change its value to a search engine URL (for example, ie.search.msn.com/{sub_rfc1766}/srchasst/srchasst.htm), and then find" Customizesearch "Key value name, change its key value to a search engine URL.

6, IE Address Bar of the Drop-down menu was tampered with

Malicious Web pages by modifying the registry, the IE address bar of the Drop-down menu is locked to gray, the drop down menu disappears, or on its cover illegal text information.

Fix method: Click "Start/Run", enter "Regedit" to open the registry, navigate to Hkey_current_usersoftwarepoliciesmicrosoftinternet Explorertoolbar Branch, find in the right window "Linksfoldername" key value name, the key value set to "link", the extra characters are removed.

7, IE right button has illegal links in the menu

When you use IE to browse the Web page, the right mouse click will pop up a menu, if the menu contains links to illegal sites (such as "Home" link information).

Fix method: Click "Start/Run", enter "Regedit" to open the registry, navigate to the Hkey_current_usersoftwaremicrosoftinternet Explorermenuext,ie right button menu are set here, If you have an Internet express or network ant installed, you will see "Download with the Internet" as a subkey under the subkey. You can delete all the primary keys that are illegal links under "Menuext".

Note: Before deleting, should expand Menuext primary key check, inside sometimes have a subkey, its content is to point to an HTML file, find this file path, and then according to this path will also delete the file, so as to completely clear.

8, IE favorites have illegal website address link

Malicious Web pages by modifying your registry, forcibly in your IE favorites, add its link information.

Fix method: Start IE to open favorites, locate to illegal website information, right click pop-up menu, select Delete can.

9, in IE click the right mouse button, no pop-up menu

Malicious Web pages by modifying the registry, so that your IE right button pop-up menu is completely prohibited, when you click on IE right button, there is no pop-up menu.

Fix method: Click "Start/Run", enter "Regedit" to open the registry, navigate to Hkey_current_usersoftwarepoliciesmicrosoftinternet explorerrestrictions branch, find "Nobrowsercontextmenu" key value name, set its key value to "00000000".

10, IE "View" menu under the "source file" is disabled

Malicious Web pages by modifying the registry, the IE "View" menu under the "source file" locked to gray, so that you can not view the source files of the Web page.

Fix method: Click Start/Run, enter "Regedit" to open the registry and navigate to Hkey_current_usersoftwarepoliciesmicrosoftinternet explorerrestrictions branch ( If no restrictions is created, the "Nobrowsercontextmenu" key value name (if not created) is found, and its key value is set to "00000000".