【轉貼】Stop Virus from Running Automatically When you Execute Files » Raymond.CC Blog
[URL="http://www.raymond.cc/blog/archives/2007/07/01/stop-virus-from-running-automatically-when-you-execute-files/"]Stop Virus from Running Automatically When you Execute Files » Raymond.CC Blog[/URL]
[URL="http://securityresponse.symantec.com/avcenter/UnHookExec.inf"]Symantec Security [B]UnHookExec.inf[/B][/URL]
[code][Version]
Signature=”$Chicago$”
Provider=Symantec
[DefaultInstall]
AddReg=UnhookRegKey
[UnhookRegKey]
HKLM, Software\CLASSES\batfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\comfile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\exefile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\piffile\shell\open\command,,,”"”%1″” %*”
HKLM, Software\CLASSES\regfile\shell\open\command,,,”regedit.exe “”%1″”"
HKLM, Software\CLASSES\scrfile\shell\open\command,,,”"”%1″” %*”
HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools,0×00000020,0 [/code]
[URL="http://www.raymond.cc/blog/archives/2008/04/22/stop-windows-from-executing-instructions-found-in-autoruninf/"]Stop Windows From Executing Instructions Found In AUTORUN.INF » Raymond.CC Blog[/URL]