AFD.sys removed from registry

Hi guys,


Due to antivirus I'm having issue with AFD.SYS file. Microsoft Security Essentials removed WIN7 registry entries related to this file because of suspicious malware. As this file is needed for WinSock's functionality my WINDOWS installation is suffering of network outage. I cannot connect to any network via cable neither via wifi. Also printers stopped to work.


I check files consistency with SFC tool (sfc.exe /scannow) and it reports following issue:


2011-12-20 10:08:19, Info                  CSI    0000015f [SR] Cannot repair member file [l:14{7}]"afd.sys" of Microsoft-Windows-Winsock-Core, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, file cannot be checked


I checked file \windows\system32\drivers\afd.sys and it is the same as on original WIN7 installation media.

Therefore I believe that I need to recreate removed entries from registry related to AFD.SYS


I found similar post here at:


Where user beAauxta in post on April 2, 2010 suggest how to create similar registry entries. However I'm not able to derive entries in my case.

PS: reinstallation of WIN should help, I just wan to avoid reinstallation if possible.

Could anyone help? Thanks,



Question Info

Last updated January 20, 2018 Views 4,377 Applies to:


You may perform an in place upgrade and check:
How to Perform an In-Place Upgrade on Windows Vista, Windows 7, Windows Server 2008 & Windows Server 2008 R2


Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.