This program was originally from the 2000 system, but was taken by a rogue malicious program and changed its name and turned around everywhere, which became something that everyone hated.
Viruses manifest as:
The IE homepage is forced to change, the system is automatically restarted from time to time for no reason, this process appears in the task manager, etc.
How to check and kill:
For services with WalALET appearing in the system service, you can delete them in the registry. The registry location is:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WalALET]
Description: Send and receive messages delivered by the LAN internal system administrator or "Sirensor" service.
Display name: Intranet Messenger
The path of the executable file: C:\WINDOWS\SYSTEM32\ C:\WINDOWS\SYSTEM32\WBEM\,Export 1087
For the program itself, you can use Unlock and other forced deletion tools to delete it.
Viruses manifest as:
The IE homepage is forced to change, the system is automatically restarted from time to time for no reason, this process appears in the task manager, etc.
How to check and kill:
For services with WalALET appearing in the system service, you can delete them in the registry. The registry location is:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WalALET]
Description: Send and receive messages delivered by the LAN internal system administrator or "Sirensor" service.
Display name: Intranet Messenger
The path of the executable file: C:\WINDOWS\SYSTEM32\ C:\WINDOWS\SYSTEM32\WBEM\,Export 1087
For the program itself, you can use Unlock and other forced deletion tools to delete it.