The registry, Task Manager cannot be opened, or the hard drive is occupied for no reason, kill a trojan after a number of soft, only task Manager or can not open, the phenomenon is not the appearance of the pop-up manager immediately disappear, but the mouse only lightly flash just without any reaction, the specific symptoms are as follows:
The method of setting task manager with Regedit or gpedit.msc is invalid, the copy new Taskmgr.exe to System32.dllcache is also invalid, the same as in Safe mode, Windows 7 CD repair installation is invalid, the next manager on the net is useless.
In fact, this situation as long as a normal operation of the EXE file, Renamed it the Taskmgr.exe, it also became this phenomenon, as long as Taskmgr.exe changed the name Abc.exe can run, but the other file such as Notepad.exe to Taskmgr.exe can not run.
This is the typical image hijacking, the principle is Trojan virus image hijacking, a lot of executable program image to the Ntsd.exe this file, so can not open, Ntsd.exe is the Windows system with the debugging command, should be in the virus after the virus call this command terminated the process. The workaround is simple, open Registry Editor, and navigate to HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows ntcurrentversionimage File Execution Options, Then the image File Execution options under the project all clear and then the latest kill soft Trojan can solve the problem.