New users can also deal with the virus: Making the virus run in vain

Newbie can also deal with virus series Article address: http://www.bkjia.com/Search.asp? Field = Title & ClassID = & keyword = % D0 % C2 % CA % D6 % D2 % B2 % C4 % DC % B6 % D4 % B8 % B6 % B2 % A1 % B6 % BE & Submit = + % CB % D1 % CB % F7 +

Once a friend had a virus on his computer, I went to check it out. It was a QQ virus. Because I had not been surfing the internet for a long time, I didn't know much about the characteristics of these viruses. I first open the "Process Manager" and shut down some unfamiliar programs. But when I close one program and then close the other program, the one I just closed will run again. No way. I decided to delete the startup items from the Registry first, and then try again. As a result, I just deleted those startup items, then refreshed the registry, and restored Those startup items, it seems that the general method is not feasible. After downloading the exclusive killing tool online, it still cannot be killed. I know this is because the virus is running and cannot be deleted.
This computer has only one operating system and cannot delete these viruses from another system. What should I do? If this is the case, I would like to recommend a method.
Step 1: Enter CMD in "Start> Run" to open the "command prompt" window.
Step 2: Enter ftype exefile1_notepad.exe % 1, which means to open all the EXE files with notepad. In this way, the original virus cannot be started.
Step 3: restart your computer and you will see many "notebooks" opened ". Of course, there are not only virus files, but also some original system files, such as the input method program.
Step 4: Right-click any file, select "open mode", click "Browse", go to Windows \ system32, and select cmd.exe. Then, you can open the "command prompt" window again.
Step 5: Run ftype exefile = % 1% * to restore all EXE files. Now you can run anti-virus software or directly change it back to the Registry to kill the virus.
Step 6: In every "Notepad", click "File> Save as" in the menu to view the path and file name. Find the virus file and delete it manually. But be careful that you must confirm that it is a virus before deleting it. We recommend that you Rename and write down these files. After the restart, if there is no virus or system problem, delete the files,
◆ Finally, I will introduce the usage of Ftype.
In Windows, the Ftype command is used to display and modify open programs associated with files with different extensions. It is equivalent to modifying part of the content under "HKEY_CLASSES_ROOT" in the Registry Editor.
The basic format of Ftype is Ftype [file type [= [open mode/Program].
For example, in the above example, ftype exefile1_notepad.exe % 1 indicates that all files of the type EXE (exefile is expressed as EXE files) are opened through the Notepad program, % 1 indicates the program to be opened (that is, the program at double-click ).
Ftype exefile = % 1% * indicates that all EXE files run directly (EXE can run directly, so % 1 of the program itself can be used ), % * indicates all parameters after the program command (this is why the EXE file can run with parameters ).