The alternative anti-virus method uses Ftype to cleverly clear viruses

Source: Tianji blog

Once my classmate got a virus in his computer, I went to check it out. It was a QQ virus. Because I hadn't been surfing the internet for a long time, I didn't know much about the characteristics of these viruses.

First, open process manager and close some unfamiliar programs. But when I close one and then close the other, the one I just closed will run again. No way. I decided to delete the startup items from the Registry first, and then try again. As a result, I just deleted those startup items, then refreshed the registry, and restored Those startup items, it seems that the general method does not work. After downloading the exclusive killer tool online, it cannot be killed. I know this is because the virus is running and cannot be deleted.

This computer has only one operating system and cannot delete these viruses from another system. What should I do? If this is the case, I would like to recommend a method.

Step 1: Enter CMD in "Start> Run" to open the "command prompt" window.

Step 2: Enter ftype exefile1_notepad.exe % 1, which means to open all the EXE files with notepad. In this way, the original virus cannot be started.

Step 3: restart your computer and you will see many "notebooks" opened ". Of course, there are not only virus files, but also some original system files, such as input methods.

Step 4: Right-click the file, select "option" and click "option". Then, click "Browse" to go to windowssystem32and select "cmd.exe". In this way, you can open the "command prompt" window again.

Step 5: Run ftype exefile = "% 1" % * to restore all EXE files. Now you can run anti-virus software or directly change it back to the Registry to kill the virus.

Step 6: In every "Notepad", click "File> Save as" in the menu to view the path and file name. Find the virus file and manually delete it. But be careful. You must confirm that it is a virus before deleting it. We recommend that you rename these files and write them down. After the restart, if there is no virus or system problem, delete the files.

Ftype usage

In Windows, the Ftype command is used to display and modify open programs associated with files with different extensions. It is equivalent to modifying part of the content under the [HKEY_CLASSES_ROOT] in the Registry Editor.

The basic format of Ftype is Ftype [file type [= [open mode/Program].

For example, in the above example, ftype exefile1_notepad.exe % 1 indicates that all files of the EXE type (exefile is expressed as files of the EXE type) are opened through the Notepad program, % 1 indicates the program to be opened (that is, the program at double-click ).

Ftype exefile = "% 1" % * indicates that all EXE files run directly (EXE can run directly, so % 1 of the program itself can be used ), % * indicates all parameters after the program command (this is why the EXE file can run with parameters ).