Rookie Collection: How to use the Notepad to remove the virus

After computer poisoning, many friends will open the "Process Manager" and close several unfamiliar programs, but sometimes this happens: turn off one When I went to close another one, the one that was just closed was running again. Then delete the startup items from the registry, restart, and restore those startup items that have just been deleted.
Since the computer only has one operating system, there is no way to remove these viruses under another system. After downloading the killing tool online, you still can't kill it.

So over and over, the virus has not been killed, but people are on the verge of collapse. What should I do then? In this case, I recommend a method to everyone.

Step 1: Enter CMD in “Start → Run” to open the “Command Prompt” window.

Step 2: Enter ftype exefile=notepad.exe %1, which means to open all EXE files with "Notepad". This way the original virus will not start.

Step 3: Restart your computer and you will see many "Notepads" open. Of course, there are not only virus files, but also some original system files, such as input method programs.

Step 4: Right-click on any file, select "Open with", then click "Browse", go to Windows System32, select cmd.exe, and you can open the "Command Prompt" window again. Step 5: Run ftype exefile=%1 %* to restore all EXE files. Now run the anti-virus software or directly change back to the registry, you can kill the virus.

Step 6: In each “Notepad”, click “File → Save As” in the menu to see the path and file name. Find the virus file and delete it manually, but be careful, you must be sure that it is a virus to delete. It is recommended to rename and write down these files. After restarting, if there is no virus, there is no system problem, and then delete it.

Attachment: Usage of Ftype

In Windows, Ftype command is used. To display and modify the open programs associated with different extension files. This is equivalent to modifying some of the contents under the "HKEY_CLASSES_ROOT" item in the Registry Editor.

The basic usage format of Ftype is: Ftype [file type [=[open mode/program]

For example: ftype exefile=notepad.exe %1 in the above example, means that all will Files whose file type is EXE (exefile is an EXE type file) are opened by the "Notepad" program, and the following %1 indicates the program itself to be opened (that is, the program when double-clicking).

ftype exefile=%1 %* means that all EXE files run directly (EXE can run directly, so it can be used to represent %1 of the program itself), followed by %* to indicate the program command. All parameters (this is why EXE files can run with parameters).