CP FILE::
C:\WINDOWS\NiwradSoft Shell Pack\Backup\wuauclt.exe|C:\WINDOWS\system32\dllcache\wuauclt.exe
C:\WINDOWS\NiwradSoft Shell Pack\Backup\wuauclt.exe|C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\NiwradSoft Shell Pack\Backup\explorer.ex|C:\WINDOWS\system32\dllcache\explorer.exe
C:\WINDOWS\NiwradSoft Shell Pack\Backup\explorer.ex|C:\WINDOWS\explorer.exe
RESET REG::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{86AEFBE8-763F-0647-899C-A93278894D8E}"]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{86AEFBE8-763F-0647-899C-A93278894D8E}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command]
[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\OpenHomePage\Command]
MOVE FILE::
C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\轎煤萇荌.lnk
C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\閉撰疑俙苤蚔牁.lnk
C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\极郤眻畦.lnk
C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\杬惘厙踏湖殏杻歎.lnk
MOD REG::
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{86AEFBE8-763F-0647-899C-A93278894D8E}"]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{86AEFBE8-763F-0647-899C-A93278894D8E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{86AEFBE8-763F-0647-899C-A93278894D8E}"]
[-HKEY_CURRENT_USER\CLSID\{86AEFBE8-763F-0647-899C-A93278894D8E}"]
[-HKEY_CLASSES_ROOT\CLSID\{86AEFBE8-763F-0647-899C-A93278894D8E}"]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{86AEFBE8-763F-0647-899C-A93278894D8E}]
[-HKEY_CURRENT_USER\CLSID\{86AEFBE8-763F-0647-899C-A93278894D8E}]
[-HKEY_CLASSES_ROOT\CLSID\{86AEFBE8-763F-0647-899C-A93278894D8E}]
[-HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\OpenHomePage\Command]
[HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\OpenHomePage\Command]
@="\"C:\\Program Files\\Internet Explorer\\iexplore.exe\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command]
@="C:\\Program Files\\Internet Explorer\\iexplore.exe"
REBOOT::
歡迎光臨 TWed2k (http://twed2k.org/) | Powered by Discuz! 4.1.0 |