未名Q

此生若能得幸福安稳,谁又愿颠沛流离。

  :: 首页 :: 博问 :: 闪存 :: 新随笔 :: :: 订阅 订阅 :: 管理 ::
Windows Registry Editor Version 5.00

[-HKEY_CLASSES_ROOT\*\shell\edit]
[HKEY_CLASSES_ROOT\*\shell\edit]
@=""

[HKEY_CLASSES_ROOT\*\shell\edit\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6e,00,6f,00,\
  74,00,65,00,70,00,61,00,64,00,2e,00,65,00,78,00,65,00,20,00,22,00,25,00,31,\
  00,22,00,00,00

[-HKEY_CLASSES_ROOT\Directory\Background\shell\7-Zip]
[HKEY_CLASSES_ROOT\Directory\Background\shell\7-Zip]
@="7-Zip File Manager"
"icon"="C:\\Program Files\\7-Zip\\7zFM.exe"

[HKEY_CLASSES_ROOT\Directory\Background\shell\7-Zip\command]
@="\"C:\\Program Files\\7-Zip\\7zFM.exe\" \"%V\""

[-HKEY_CLASSES_ROOT\Directory\Background\shell\cmd]
[HKEY_CLASSES_ROOT\Directory\Background\shell\cmd]
@="Command"
"icon"="C:\\Windows\\System32\\cmd.exe"

[HKEY_CLASSES_ROOT\Directory\Background\shell\cmd\command]
@="C:\\Windows\\System32\\cmd.exe /s /k pushd \"%V\" & title Command"

[-HKEY_CLASSES_ROOT\Directory\Background\shell\runas]
[HKEY_CLASSES_ROOT\Directory\Background\shell\runas]
@="Command as UAC"
"icon"="C:\\Windows\\System32\\cmd.exe"

[HKEY_CLASSES_ROOT\Directory\Background\shell\runas\command]
@="C:\\Windows\\System32\\cmd.exe /s /t:1f /k pushd \"%V\" & title Command"

 

; 劫持notepad.exe
; https://www.rizonesoft.com/downloads/notepad3/
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad.exe]
"Debugger"="\"D:\\Apps\\Notepad3\\Notepad3.exe\" /z"

[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad.exe]
"Debugger"="\"D:\\Apps\\Notepad3\\Notepad3.exe\" /z"

 

posted on 2019-12-26 09:53  未名Q  阅读(241)  评论(0编辑  收藏  举报