Use the system console to delete stubborn viruses

My laptop with an operating system of Win2000 Server has recently been infected with a virus. I first used anti-virus software to scan the computer. The scan report is as follows:

Virus name: Hacktool

File Name: c: winntsystem32tservice.exe

Operation: deletion failed, isolation failed, Access Denied

　　How can we completely delete it?

Because c: winntsystem32tservice.exe is already running, it is obviously impossible to delete it directly. So I run Windows Task Manager and select the ntservice.exe process in the process selection card. The result shows that the process cannot be aborted and access is denied ".

I suddenly thought that the Windows 2000 (XP) console can use the DOS command.

What is Console

The console is a simple running mode of Windows. It can access the FAT and NTFS partitions in the command line state without starting the graphical interface, and perform some settings and operations on the system.

On the console, you can change system files, disable or disable a system service, disable or detach hardware devices, repair boot sectors, create partitions, and Format hard disk partitions.

　　Start the Console

For Windows 2000, we can start the computer with a CD, and then press the R key in the installation program menu to select "repair Windows 2000 installation ", then, press the C key in the repair menu and select "fault recovery console repair Windows2000 ".

For Windows XP, start the computer with a CD, and then press R to choose repair, you can directly go to the console.

Install console-related options directly to the method in the Startup Menu: Put the disc into the optical drive, and then directly enter "d: after i386winnt32/cmdcons, press enter (assume that your optical drive is D) and then click "yes" to install the console options to the Advanced Startup menu, in this way, you can directly access the console from the hard disk. This method applies to Windows 2000 and Windows XP.

To ensure security, we will first back up ntservice.exe and run del c: winntsystem32tservice.exe directly.