Intermediary transaction http://www.aliyun.com/zixun/aggregation/6858.html ">seo diagnose Taobao guest cloud host technology Hall
When a computer gets poisoned, many friends open the process manager and turn off a few unfamiliar programs, but sometimes this happens: turn off one, then close the other, and the one that just closed runs again. Again from the registration table after the start of the deletion, restart the test, just deleted those startup items restored. Because the computer only installed an operating system, there is no way to remove these viruses under another system. Download the special Kill tool on the internet, still can't kill.
So tossing and turning, the virus did not kill, but people are on the verge of collapse. What happens then? In this case, I recommend a method to everyone.
The first step: enter cmd in start → Run and open the Command Prompt window.
Step Two: Enter ftype exefile=notepad.exe% 1, which means that all EXE files are opened with Notepad. So the original virus can not start.
Step Three: Restart your computer, and you'll see a lot of "notepad" open. Of course, this not only has virus files, there are some original system files, such as: Input Method program.
Step Fourth: Right click on any file, select "Open by", then click "Browse", go to Windows\System32, select Cmd.exe, so you can open the Command Prompt window again.
The fifth step: Run Ftype exefile=%1%*, all EXE file association restore. Now run antivirus software or directly back to the registry, you can kill the virus.
Sixth step: In each "Notepad", click on the menu "file → Save as", you can see the path and file name. Find the virus file, manually delete it, but be careful, you must be sure it is a virus to remove. It is recommended that these files be renamed and noted, restart, if there is no virus mischief, there is no system problems, and then delete,
Attachment: Usage of ftype
In Windows, the Ftype command is used to display and modify the open programs associated with different file name extensions. Equivalent to modifying some of the contents of the "HKEY_CLASSES_ROOT" item in Registry Editor.
The basic use format for Ftype is: Ftype [File Type [=[open Method/Procedure]]]
For example, the ftype exefile=notepad.exe% 1 In the example above indicates that all files of the file type EXE (exefile as an EXE type file) are opened through the Notepad program, and the following%1 represents the program itself (the one that was double-clicked).
Ftype exefile=%1%* means that all EXE files are run directly (EXE can be run directly, so use%1 to represent the program itself), and subsequent%* represent all the parameters of the program command (which is why EXE files can run with parameters). This article is supplied by www.aiqinghy.cn