中科新闻网陈一发儿路透社:双击硬盘后在新窗口打开
来源：百度文库 编辑：中科新闻网 时间：2024/04/29 22:36:30
mryork 你的答案我看过了，我查找了注册表的那几项，只有第二项不同，如下：
%SystemRoot%\Explorer.exe /idlist,%I,%L
你的
[HKEY_CLASSES_ROOT\Folder\shell\open\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
00,5c,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,00,72,00,2e,00,65,00,78,00,\
65,00,20,00,2f,00,69,00,64,00,6c,00,69,00,73,00,74,00,2c,00,25,00,49,00,2c,\
00,25,00,4c,00,00,00
我看不懂，这一项应该怎么改？
修改注册表
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\Folder\shell\open]
"BrowserFlags"=dword:00000010
"ExplorerFlags"=dword:00000012
[HKEY_CLASSES_ROOT\Folder\shell\open\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
00,5c,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,00,72,00,2e,00,65,00,78,00,\
65,00,20,00,2f,00,69,00,64,00,6c,00,69,00,73,00,74,00,2c,00,25,00,49,00,2c,\
00,25,00,4c,00,00,00
[HKEY_CLASSES_ROOT\Folder\shell\open\ddeexec]
@="[ViewFolder(\"%l\", %I, %S)]"
"NoActivateHandler"=""
[HKEY_CLASSES_ROOT\Folder\shell\open\ddeexec\application]
@="Folders"
[HKEY_CLASSES_ROOT\Folder\shell\open\ddeexec\ifexec]
@="[]"
[HKEY_CLASSES_ROOT\Folder\shell\open\ddeexec\topic]
@="AppProperties"
看的头都晕了！！！！！
对于不太了解电脑的人来说
用专门的杀毒软件是最好不过了
以上电脑是中了落雪的木马
在你打开硬盘的时候它就自动运行了
你的进程应该有两个WINLOGON。EXE的进程吧
找落雪的专杀就搞定！