回复: 瑞星怎么样【讨论】
C:\Program Files\EXPLORER.EXE
×´}G½ÀýEbbs.ikaka.com¾!Þ:PP&dec*BPossible String Ref To->"Funny!.reg
×´}G½ÀýEbbs.ikaka.com¾!Þ:PP&dec*BPossible String Ref To->HKEY_CLASSES_ROOT\exefile
×´}G½ÀýEbbs.ikaka.com¾!Þ:PP&dec*BRef To->HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
×´}G½ÀýEbbs.ikaka.com¾!Þ:PP&dec*BHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
×´}G½ÀýEbbs.ikaka.com¾!Þ:PP&dec*BHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL
×´}G½ÀýEbbs.ikaka.com¾!Þ:PP&dec*BHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
×´}G½ÀýEbbs.ikaka.com¾!Þ:PP&dec*Bregedit /s
×´}G½ÀýEbbs.ikaka.com¾!Þ:PP&dec*Buser32.GetWindowTextA
×´}G½ÀýEbbs.ikaka.com¾!Þ:PP&dec*BHKEY_CLASSES_ROOT\exefile
×´}G½ÀýEbbs.ikaka.com¾!Þ:PP&dec*BHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
×´}G½ÀýEbbs.ikaka.com¾!Þ:PP&dec*Bshell\vir\Command=fun.xls.exe /ShellApp
×´}G½ÀýEbbs.ikaka.com¾!Þ:PP&dec*B