Recent popular ARP Virus thorough removal method _ virus killing
Source: Internet
Author: User
A few days ago back to school to hand over the paper, a lot of students on the computer on the virus, Kabbah, rising also old kill not clean, then everyone through the Internet to find information and consult some experts, finally resolved, and now share the experience with you:
1, delete the "Virus Component release" program:
"%WINDOWS%\SYSTEM32\LOADHW. EXE "(Window XP system directory is:" C:\WINDOWS\System32\LOADHW.) EXE ")
2, delete the "Send ARP Spoofing package driver" (and "Virus Daemon"):
"%windows%\system32\drivers\npf.sys" (Window XP system directory is: "C:\WINDOWS\System32\drivers\npf.sys")
A. In Device Manager, click View--> Show hidden devices
B. In the device tree structure, open "non-Plug and play ..."
C. Find "Netgroup Packet filter Driver" or "Netgroup Packet filter", if not found, please refresh the device list first
D. Right-click the "Netgroup Packet filter Driver" or "Netgroup Packet Filter" menu and choose "Uninstall"
E. Restart the Windows system
F. Delete "%windows%\system32\drivers\npf.sys" (Window XP system directory is: "C:windows\system32\drivers\npf.sys")
3, delete the "command driver to send ARP spoofing package Controller"
"%windows%\system32\msitinit.dll" (Window XP system directory is: "C:windows\system32\msitinit.dll")
4, delete the following "Virus fake driver" Registry Service entry:
Hkey_local_machine\system\currentcontrolset\services\npf
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.