Windows Registry Editor Version 5.00 [-HKEY_CLASSES_ROOT\*\shell\edit] [HKEY_CLASSES_ROOT\*\shell\edit] @="" [HKEY_CLASSES_ROOT\*\shell\edit\command] @=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\ 00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,6e,00,6f,00,\ 74,00,65,00,70,00,61,00,64,00,2e,00,65,00,78,00,65,00,20,00,22,00,25,00,31,\ 00,22,00,00,00 [-HKEY_CLASSES_ROOT\Directory\Background\shell\7-Zip] [HKEY_CLASSES_ROOT\Directory\Background\shell\7-Zip] @="7-Zip File Manager" "icon"="C:\\Program Files\\7-Zip\\7zFM.exe" [HKEY_CLASSES_ROOT\Directory\Background\shell\7-Zip\command] @="\"C:\\Program Files\\7-Zip\\7zFM.exe\" \"%V\"" [-HKEY_CLASSES_ROOT\Directory\Background\shell\cmd] [HKEY_CLASSES_ROOT\Directory\Background\shell\cmd] @="Command" "icon"="C:\\Windows\\System32\\cmd.exe" [HKEY_CLASSES_ROOT\Directory\Background\shell\cmd\command] @="C:\\Windows\\System32\\cmd.exe /s /k pushd \"%V\" & title Command" [-HKEY_CLASSES_ROOT\Directory\Background\shell\runas] [HKEY_CLASSES_ROOT\Directory\Background\shell\runas] @="Command as UAC" "icon"="C:\\Windows\\System32\\cmd.exe" [HKEY_CLASSES_ROOT\Directory\Background\shell\runas\command] @="C:\\Windows\\System32\\cmd.exe /s /t:1f /k pushd \"%V\" & title Command"
; 劫持notepad.exe ; https://www.rizonesoft.com/downloads/notepad3/ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad.exe] "Debugger"="\"D:\\Apps\\Notepad3\\Notepad3.exe\" /z" [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad.exe] "Debugger"="\"D:\\Apps\\Notepad3\\Notepad3.exe\" /z"
Q 说:
欢迎转载,但请注明内容的来源或URL;
“[转]”篇章,必须保留原始来源且勿添加本blog指向。
欢迎转载,但请注明内容的来源或URL;
“[转]”篇章,必须保留原始来源且勿添加本blog指向。