Command Prompt cmd.exe wuxuu ku hayaa soo bixida Startup

Marka aad kor u qaaddo PC-gaaga Windows , waxa laga yaabaa in aad la kulanto daaqad pop up madow ah oo ay ku qoran tahay ciwaanka C:\WINDOWS\system32\cmd.exe . Ugu dambayntii, isla markiiba way baxaysaa laakiin waxaad ogaan doontaa waxqabadka kombuyuutarka oo gaabis ah  sida ay sheegeen isticmaalayaasha ay saameeyeen. Maqaalkan, waxaanu ku siin doonaa xalalka ugu habboon ee aad isku dayi karto inaad joojiso degdegga ka soo baxa bilawga.

C:WINDOWSsystem32cmd.exe markiiba waxay ku socotaa soo bixida Startup

Faylka dhabta ah ee  cmd.exe waa qayb software ka ah Windows 11/10 nidaamka hawlgalka. cmd.exe waxay ku socotaa Command Prompt , oo ah turjubaanka khadka taliska ee Windows OS .

Command Prompt cmd.exe wuxuu ku hayaa soo bixida Startup(Startup)

Haddii aad la kulanto arrintan, waxaad isku dayi kartaa xalalkayaga hoos ku qoran oo aan si gaar ah u kala horrayn oo arag haddii ay taasi caawinayso xallinta arrinta.

  1. Samee iskaanka fayraska
  2. Samee iskaanka SFC
  3. Ka dami cmd.exe walxaha bilowga ah ee ku jira Maareeyaha (Startup)Hawsha(Task Manager)
  4. Ka(Delete) tirtir cmd.exe ka Run galka ku jira Registry Editor

Aynu eegno sharraxaadda habka ay khusayso mid kasta oo ka mid ah xalalka taxan.

Akhri(Read) : Command Prompt isla markiiba wuu xidhmayaa ka dib marka la furo faylka dufcadda .

1] Samee iskaanka antivirus

Kordhinta .exe ee magaca faylka waxay muujineysaa fayl la fulin karo. Faylasha la fulin karo, xaaladaha qaarkood, waxa laga yaabaa inay waxyeelo u geystaan ​​kombayutarkaaga. Sidaa darteed, waa in aad go'aamiso in cmd .exe kumbiyuutarkaagu uu yahay Trojan oo ay tahay in aad ka saarto, ama haddii ay tahay fayl uu leeyahay nidaamka hawlgalka Windows ama codsi la aamini karo.

Asalka cmd.exe waa qayb muhiim ah oo ka mid ah Windows wuxuuna ku yaalaa C:\Windows\System32 folder. In kasta oo dariiqa saxda ah uu ku yaal baarka cinwaanka ee isla markiiba, malware-ka qaar ayaa iska dhigaya cmd.exe, gaar ahaan marka  uusan(not) ku jirin faylka C:\Windows\System32 . Si kastaba ha ahaatee, way ka badbaadsan tahay ka xumahay, markaa waxaanu kuu soo jeedinaynaa inaad ku socodsiiso iskaanka ka-hortagga buuxa ee Windows Defender  ama wax  soo saar AV oo dhinac saddexaad ah oo(third-party AV product) sumcad leh si meesha looga saaro suurtogalnimada  caabuqa malware .

Haddi arintu wali aan la xalin ka dib iskaanka AV, waxaad isku dayi kartaa xalka xiga.

Akhri(Read)PowerShell wuxuu ka furmay Startup(PowerShell opens at Startup) .

2] Samee iskaanka SFC

Haddii aad leedahay khaladaad faylka nidaamka, waxaa laga yaabaa inaad la kulanto arrintan. Xaaladdan oo kale, waxaad samayn kartaa iskaanka SFC oo arag haddii ay taasi ku caawinayso.

Akhri(Read) : Taskeng.exe ayaa soo baxaysa .

3] Ka dami cmd.exe alaabta bilawga ah ee Maareeyaha (Startup)Hawsha(Task Manager)

Waxay noqon kartaa in faylka cmd.exe uu ku taxan yahay qaybta bilowga ee Maareeyaha (Startup)Hawsha -(Task Manager –) taasi waxay ka dhigan tahay in mar kasta oo kombuyuutarku uu kabahaaga galo, cmd.exe wuxuu si toos ah ula soo bixi doonaa dhammaan walxaha kale ee ku qoran qaybtaas. Markaa, haddii aadan rabin shay si toos ah loogu shubayo bilowga laakiin ay ku qoran tahay qaybta Bilawga ee (Startup)Maareeyaha Hawsha(Task Manager) , waxaad si fudud u joojin kartaa shayga bilawga ah ee(disable the startup item) halkaas ku yaal.

Akhri(Read) : Rakibaadaha Daaqadaha ayaa si joogto ah u soo baxaya ama bilaabaya .

4] Tirtir(Delete) cmd.exe oo ka soo baxa Run galka ku jira Tifaftiraha Diiwaanka(Registry Editor)

Tani waa beddelka ka saarida cmd.exe ee alaabta bilowga ah ee Maareeyaha (Startup)Hawsha(Task Manager) . Si aad u tirtirto cmd.exe-ka Run galka ku jira Diiwaanka Diiwaangelinta(Registry Editor) , samee sidan soo socota:

Maadaama uu kani yahay hawlgal diwaangelineed, waxaa lagugula talinayaa inaad kaydiso diiwaanka(back up the registry)  ama  aad abuurto barta soo celinta nidaamka  taxadarka lagama maarmaanka ah. Marka la sameeyo, waxaad ku socon kartaa sida soo socota:

  • Riix Windows key + R si aad ugu yeerto Run dialog.
  • In sanduuqa Run Run, ku qor regedit(regedit) oo ku dhufo Gelida si aad u furto Registry Editor(open Registry Editor) .
  • U gudub ama u bood dariiqa furaha diiwaangelinta ee hoose:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  • Goobta, dhinaca midigta, eeg haddii cmd.exe ku qoran tahay, haddii ay sidaas tahay midig-guji gelida oo dooro Delete .
  • Marka xigta, u gudub ama u bood dariiqa furaha diiwaangelinta ee hoose:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  • Goobta, dhinaca midigta, eeg haddii cmd.exe ku qoran tahay, haddii ay sidaas tahay midig-guji gelida oo dooro Delete .
  • Dib(Reboot) u bilow kombuyutarkaaga oo arag in cmd.exe uu soo muuqdo mar kale inta lagu jiro bilowga.

Waa kaas!

Akhri(Read) : Daaqadda caawinta si toos ah u furto .



About the author

Waxaan ahay injineer software ah oo khibrad u leh Xbox Explorer, Microsoft Excel, iyo Windows 8.1 Explorer. Waqtiga firaaqada, waxaan jeclahay inaan ciyaaro ciyaaraha fiidiyaha oo aan daawado TV-ga. Waxaan shahaadada ka qaatay Jaamacadda Utah, waxaanan hadda u shaqeynayaa sidii injineer software ah oo shirkad caalami ah.



Related posts