For example, the input method under the DOS command is replaced by conime.exe.
Reference Baidu Encyclopedia: it is a program related to the input method editor, and it is also a remote control backdoor program of bfghost. This program allows attackers to access your computer and steal personal information. Generally, it does not run. Conime. EXE is indeed created by CMD. EXE. If process explorer is enabled. delete the ime process and start cmd. then start conime. EXE, conime. EXE is the Chinese Input Tool of CMD. Delete this process, cmd. EXE cannot enter Chinese characters. After cmd. EXE is disabled, conime. exe will not be automatically closed, so it is prone to the illusion that it is not a parent-child process. Conime. EXE cannot be deleted. After deletion, you cannot enter Chinese characters in the doscommand window.
After I installed the MySQL database, I found that the input method cannot be switched under DOS. After querying, I learned that I want to modify the registry. The steps are as follows:
Start --> Run --> enter Regedit to enter the registry and modify the loadconime.exe of HKEY_CURRENT_USER \ console. when the slave node is started, the conime.exe is started. Therefore, the value must be changed to 1, which is not safe, but after use, manually turn off the conime process.