Alg.exe process and alg.exe virus

There are a lot of processes in the XP system. Maybe we don't know. Sometimes, if we accidentally delete the system process, the system will not work properly.

Today, Xiaobian tells everyone about the alg.exe process. This process is often suspected by many netizens that alg.exe is a virus. In fact, alg.exe is not a virus, but this process can often be used by viruses. The system brings a lot of trouble. So what is the process of alg.exe, if it is really alg.exe virus how to deal with it?

Figure 1
What

alg.exe that?

alg.exe is a program that comes with the Microsoft Windows operating system. It is used to handle Microsoft Windows network connection sharing and network connection firewall. This program is very important for the normal operation of your system.

Xiaobian used 360 software housekeeper to show you, with 360 software housekeeper can see the detailed description of the process in the system is running.

Figure 2

alg.exe is not a virus?

The alg.exe file is located under the C:Windowssystem32 system directory in Windows XP. But when you find out that there is an alg.exe in the C:\\windows directory, you can be sure that the virus is on your computer.

After the alg.exe virus is in the middle, it will communicate with several ports, such as 135 and 445, which will affect the local area network, and often cause the system to report an error and restart. The alg.exe process cannot be closed directly because it calls the winLogon.exe process.

alg.exe virus processing method:

There is no specific killing tool for alg.exe virus, and some anti-virus software can not be cleared. This time only by manual deletion.

Manual anti-virus process:

1. Clean up the registry:

(1) Expand: HKLMSystemCurrentControlSetServices

Delete: Application Layer Gateway Services (point to C: Windowsalg.exe)

(2) Expand: HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinLogon

Change the value of SFCDisable to dword:00000000

(3) Expand: HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinLogon

Delete: "SFCScan"=dword:00000000

(4) Expand: HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShell Extensions

Delete: "v7b5x2s1i4h3"="12/15/2006, 01:26 PM"

2. Restart the system. Show hidden files.

3. Delete C:windowsalg.exe.

4, in the C: WINDOWSsystem32 Microsoft directory to find backup.ftp, renamed ftp.exe; find backup.tftp, renamed tftp.exe. Then, drag and drop ftp.exe and tftp.exe into the system32 folder, overwriting the ftp.exe and tftp.exe that have been overwritten by the virus.

How to recover after alg.exe application is disabled

Create a new "alg.exe" program in Task Manager. If this doesn't work, then go to "Control Panel - Management" Tools - Performance and Maintenance - Services - Select "Application Layer Gateway Service" to launch this service item - Properties -
Figure 3