【轉貼】Stop Virus from Running Automatically When you Execute Files » Raymond.CC Blog



贊助商連結


FYI
2008-09-30, 04:59 AM
Stop Virus from Running Automatically When you Execute Files » Raymond.CC Blog (http://www.raymond.cc/blog/archives/2007/07/01/stop-virus-from-running-automatically-when-you-execute-files/)

Symantec Security UnHookExec.inf (http://securityresponse.symantec.com/avcenter/UnHookExec.inf)

[Version]
Signature=”$Chicago$”
Provider=Symantec

[DefaultInstall]
AddReg=UnhookRegKey

[UnhookRegKey]
HKLM, Software\CLASSES\batfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\comfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\exefile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\piffile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\regfile\shell\open\command,,,”regedit.exe “”%1″”"
HKLM, Software\CLASSES\scrfile\shell\open\command,,,”"”%1″” %*”
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools,0×00000020,0
Stop Windows From Executing Instructions Found In AUTORUN.INF » Raymond.CC Blog (http://www.raymond.cc/blog/archives/2008/04/22/stop-windows-from-executing-instructions-found-in-autoruninf/)