Sometimes we use anti-virus software to remove the virus, there will be desktop can not be displayed or stopped in the Welcome interface. What the hell is going on? This is actually a worm that replaces the Explorer.exe file. The solution is to copy a Explorer.exe file from a normal computer.
How do you guard against the worm that replaces the Explorer.exe file?
Turn on the system's Windows File Protection. Some friends in order to save space, delete the C:windows System32dllcache folder (protected system file cache), in fact, this damage the "Windows File Protection" feature, the virus left a loophole.
Click "Start → run" Enter cmd, then enter "Sfc/scannow" command to open Windows File Protection Scan, then see if the Dllcache folder is enabled, in Group Policy, click " Local Group Policy → Computer Configuration → admin templates → system →windows File Protection.
Little knowledge: Replacing system files is also a stress-version numbering as much as possible. If the version number is not correct, it can be replaced successfully and run, but a series of strange things happen, such as the "Load phone book failed error 5" prompt when broadband dialing.