Specify debugger antivirus in the image file execution option

  

Since the running program is protected by Windows, the virus can't be killed even if it is found, and it can't be deleted. What should I do with anti-virus software? In the past, it was generally recommended to kill in safe mode or DOS mode. There is now a new method called "specify the debugger in the image file execution option", and antivirusing in this way should be feasible. The principle is to modify the registry, so that the virus can not start when the next time you start the computer, and then anti-virus. The steps are as follows:

1. Discover the virus. If you use anti-virus software to find, or find suspicious programs in the task manager (Ctrl, Alt, Del three-click).

2. Click "Start", "Run", fill in "regedit", click OK to enter the Registry Editor.

3. In the registry HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options inside a new item (whatever called), create a new string value in the item, named "Debugger", double-click, enter to prohibit The path to the file.

For example, if there is a Trojan or virus in the process and the path is C:aaa123.exe, enter C:aaa123.exe in the newly created Debugger (the path slash uses double slashes).

4. Close the Registry Editor and restart your computer. At this point the virus can not be started, and then directly delete it.

When you are unable to uninstall clean anti-virus software or other more stubborn programs, you can disable it by the above method. This saves system resources and greatly reduces the startup time of the computer.


Copyright © Windows knowledge All Rights Reserved