瑞星卡卡安全论坛

因为我一直用WIN7低权限帐户上网，今天突然蹦出要安装东西需要高用户授权的UAC窗口，仔细一看，说是····\AppData\Local\Temp 临时文件的文件夹下有两东西要安装，一个是regdelvalue.inf ，一个是RBCShellExternal.dat


用TXT打开看，是这样的，
regdelvalue.inf 文件

[Version]
Signature=$Chicago$

[Del.Reg]
HKEY_LOCAL_MACHINE,SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\.AEDDFDBAEBEBDABA\,,0x00002000
HKEY_CLASSES_ROOT,AllFilesystemObjects\shellex\ContextMenuHandlers\.AEDDFDBAEBEBDABA\,,0x00002000
HKEY_CLASSES_ROOT,Folder\ShellEx\ContextMenuHandlers\.AEDDFDBAEBEBDABA\,,0x00002000
HKEY_CLASSES_ROOT,lnkfile\shellex\ContextMenuHandlers\.AEDDFDBAEBEBDABA\,,0x00002000
HKEY_CLASSES_ROOT,*\shellex\ContextMenuHandlers\.AEDDFDBAEBEBDABA\,,0x00002000
HKEY_CLASSES_ROOT,Directory\shellex\ContextMenuHandlers\.AEDDFDBAEBEBDABA\,,0x00002000
HKEY_CLASSES_ROOT,Directory\Background\shellex\ContextMenuHandlers\.AEDDFDBAEBEBDABA\,,0x00002000
HKEY_CLASSES_ROOT,Directory\shellex\DragDropHandlers\.AEDDFDBAEBEBDABA\,,0x00002000
HKEY_CLASSES_ROOT,CLSID\.AEDDFDBAEBEBDABA\,,0x00002000
HKEY_CLASSES_ROOT,Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved,{6EDD2FDB-AEB5-4EB8-8D19-913A9B03702A}

[DefaultInstall]
DelReg=Del.Reg




RBCShellExternal.dat 文件里面是这样

[Version]
Signature=$Chicago$

[Add.Reg]
HKCR, "AppID\{ECA3C5FC-2492-48E5-9007-F9282A9B18E4}",,0x00000000,"RBCShellExternal"
HKCR, "AppID\RBCShellExternal.DLL",AppID,0x00000000,"{ECA3C5FC-2492-48E5-9007-F9282A9B18E4}"
HKCR, "RBCShellExternal.CShellExt.1",,0x00000000,"CShellExt Class"
HKCR, "RBCShellExternal.CShellExt.1\CLSID",,0x00000000,"{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}"
HKCR, "RBCShellExternal.CShellExt",,0x00000000,"CShellExt Class"
HKCR, "RBCShellExternal.CShellExt\CLSID",,0x00000000,"{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}"
HKCR, "RBCShellExternal.CShellExt\CurVer",,0x00000000,"RBCShellExternal.CShellExt.1"
HKCR, "CLSID\{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}",,0x00000000,"CShellExt Class"
HKCR, "CLSID\{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}\ProgID",,0x00000000,"RBCShellExternal.CShellExt.1"
HKCR, "CLSID\{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}\VersionIndependentProgID",,0x00000000,"RBCShellExternal.CShellExt"
HKCR, "CLSID\{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}\InprocServer32",,0x00000000,"C:\Users\Public\Video Legend\RBC\Addins\RBCShellExternal64.dll"
HKCR, "CLSID\{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}\InprocServer32",ThreadingModel,0x00000000,"Apartment"
HKCR, "CLSID\{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}\TypeLib",,0x00000000,"{CAB4313A-B089-4F9F-A095-DD434CE8B3A7}"
HKLM, "Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved",{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A},0x00000000,"CShellExt Class"
HKLM, "Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\.AEDDFDBCFBEBDABA",,0x00000000,"{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}"
HKCR, "AllFilesystemObjects\shellex\ContextMenuHandlers\.AEDDFDBCFBEBDABA",,0x00000000,"{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}"
HKCR, "Folder\ShellEx\ContextMenuHandlers\.AEDDFDBCFBEBDABA",,0x00000000,"{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}"
HKCR, "lnkfile\shellex\ContextMenuHandlers\.AEDDFDBCFBEBDABA",,0x00000000,"{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}"
HKCR, "*\shellex\ContextMenuHandlers\.AEDDFDBCFBEBDABA",,0x00000000,"{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}"
HKCR, "Directory\shellex\ContextMenuHandlers\.AEDDFDBCFBEBDABA",,0x00000000,"{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}"
HKCR, "Directory\Background\shellex\ContextMenuHandlers\.AEDDFDBCFBEBDABA",,0x00000000,"{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}"
HKCR, "Directory\shellex\DragDropHandlers\.AEDDFDBCFBEBDABA",,0x00000000,"{6EDD2FDB-CFB5-4EB8-8D19-913A9B03702A}"

[DefaultInstall]
AddReg=Add.Reg



这些是啥子东东？？

用户系统信息：Mozilla/5.0 (Windows NT 6.1; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0