Next, let's take a look at how to solve the problem that the computer boot desktop can't get in.
If nothing can be displayed on the desktop, first use Ctrl+Alt+Delete to open the task manager, and enter "explorer" to create a new task (run), so that you can generally open the desktop.
If there is this item in the process (explorer.exe), the desktop still cannot be displayed, but it can be displayed by ending the explorer.exe process and recreating the explorer.exe process. In this way, generally speaking, this is the reason for the process of crs.exe and rundll2000.exe.
This is mainly crs.exe virus, which makes the desktop unable to be displayed by creating Explorer.exe crs.exe, and cheats by displaying explorer.exe in the task manager. At this time, you can do the following.
1. Disconnect the network connection, restart the computer and enter the safe mode.
2. These viruses basically exist in the panel installed in the system, so don't double-click to open the panel, but right-click to open it.
3. Enter the WINDOWS directory, display files and folders with "Details", and sort by "Modified Time". Delete all created files, including exe files, sys files and log files.
4. Enter the \WINDOWS\system32 directory, and delete the files with corresponding dates as above, including exe files, sys files and log files.
5. Clear: all files in the directory DOCUME~ 1\ your user name (including administrator) \ locales ~ 1 \ temp \ on the system disk.
6. Search crs.exe, SystemKb.sys, NewInfo.rxk, winlog0a.exe and rundll2000.exe. Some of these virus files automatically create processes, so you should download the IceSword software before deleting them. (Run IceSword, click File-Settings-Disable process creation, so you can delete it. )
7. Click the registry in the IceSword software, find the registration items of crs, SystemKb, NewInfo, winlog0a and rundll2000, and delete them.
8. Repair the registry: expand the registry to HKEY _ local _ machine \ software \ Microsoft \ Windows NT \ current version \ Winlogon, and change the key value of the shell from crs.exe, Explorer.exe to Explorer.exe.
9. Expand the registry to HKEY _ local _ machine \ software \ Microsoft \ Windows \ current version \ and delete some registration items that don't need to be run at startup.
10. Cancel "Prohibit process creation" in IceSword.
1 1, just restart the computer.