wsctf.exe\u548cEXPLORER.EXE\u7684\u67e5\u6740<\/p>\n
\u76f8\u5173\u75c7\u72b6:<\/p>\n
1\u3001\u591a\u4e86wsctf.exe\u548cEXPLORER.EXE\u4e24\u4e2a\u8fdb\u7a0b\uff0c\u5176\u4e2dEXPLORER.EXE\u8fdb\u7a0b\u8ddf\u7cfb\u7edf\u7684EXPLORER.EXE\u8fdb\u7a0b\u540d\u79f0\u4e00\u6837\uff0c\u7528msconfig\u67e5\u770b\u53d1\u73b0\u4e86\u591a\u4e86\u4e24\u4e2a\u542f\u52a8\u9879\u76eewsctf.exe\u548cEXPLORER.EXE\uff0c\u5728\"C:\\WINDOWS\\system32\"\u4e0b\u9762\u51fa\u73b0\u4e86\u4e24\u4e2a\u6587\u4ef6:wsctf.exe\u548cEXPLORER.EXE\uff08\u4e24\u4e2a\u90fd\u662f\u9690\u85cf\u6587\u4ef6\uff09<\/p>\n
2\u3001\u4e0d\u80fd\u6b63\u5e38\u8fd0\u884c\u6d69\u65b9\u3001\u51b0\u5c01\u738b\u5ea7\u7b49\u8f6f\u4ef6<\/p>\n
\u89e3\u51b3\u529e\u6cd5:<\/p>\n
\u2014\u2014\u63d2\u5165\u53d7\u611f\u67d3\u7684U\u76d8\u6216MP3\uff08\u5982\u679c\u6709\u7684\u8bdd\uff09<\/p>\n
\u2014\u2014\u6309\"Ctrl+Alt+Del\"\u8c03\u51faWindows\u4efb\u52a1\u7ba1\u7406\u5668\uff0c\u7ed3\u675f\u6389EXPLORER.EXE\u8fdb\u7a0b\uff0c\u5176\u4e2dEXPLORER.EXE\u8fdb\u7a0b\u6709\u4e24\u4e2a\uff0c\u4e00\u4e2a\u662f\u7cfb\u7edf\u7684\uff0c\u4e00\u4e2a\u662f\u75c5\u6bd2\u7684\uff0c\u7cfb\u7edf\u7684\u6240\u5728\u4f4d\u7f6e\u662f\"C:\\WINDOWS\u201d\uff0c\u75c5\u6bd2\u7684\u6240\u5728\u4f4d\u7f6e\u662f\"C:\\WINDOWS\\system32\",\u53ea\u9700\u7ed3\u675f\u6389\u75c5\u6bd2\u7684\u8fdb\u7a0b\u5c31\u884c\u4e86\u3002\u82e5\u4e0d\u80fd\u533a\u522b\u4e24\u4e2a\u8fdb\u7a0b\uff0c\u53ef\u4ee5\u628a\u4e24\u4e2a\u8fdb\u7a0b\u90fd\u7ed3\u675f\u6389\uff0c\u7136\u540e\u518d\u5207\u6362\u5230\u2014\u2014\u5e94\u7528\u7a0b\u5e8f\u2014\u2014\u65b0\u4efb\u52a1\u2014\u2014\u6d4f\u89c8\u2014\u2014\u9009\u62e9\"C:\\WINDOWS\"\u6587\u4ef6\u5939\u4e0b\u7684explorer.exe\uff0c\u7136\u540e\u6253\u5f00\u3001\u786e\u5b9a\u5c31\u53ef\u4ee5\u91cd\u65b0\u542f\u52a8\u7cfb\u7edf\u7684EXPLORER.EXE\u8fdb\u7a0b\u4e86<\/p>\n
\u2014\u2014\u7ed3\u675f\u6389wsctf.exe\u8fdb\u7a0b<\/p>\n
\u2014\u2014\u6253\u5f00\"\u6211\u7684\u7535\u8111\"\u2014\u2014\u5de5\u5177\u2014\u2014\u6587\u4ef6\u5939\u9009\u9879\u2014\u2014\u67e5\u770b\u2014\u2014\u53bb\u6389\u201c\u9690\u85cf\u53d7\u4fdd\u62a4\u7684\u64cd\u4f5c\u7cfb\u7edf\u6587\u4ef6\u201d\u524d\u9762\u7684\u52fe\uff0c\u5728\u5f39\u51fa\u7684\u5bf9\u8bdd\u6846\u4e2d\u6309\u201c\u662f\u201d\uff0c\u7136\u540e\u518d\u9009\u62e9\u201c\u663e\u793a\u6240\u6709\u6587\u4ef6\u548c\u6587\u4ef6\u5939\u201d\u2014\u2014\u786e\u5b9a<\/p>\n
\u2014\u2014\u8fdb\u5165U\u76d8\u6216MP3\uff08\u5982\u679c\u6709\u7684\u8bdd\uff09\uff0c\u628awsctf.exe\u3001EXPLORER.EXE\u3001autorun.inf\u4e09\u4e2a\u6587\u4ef6\u90fd\u5220\u9664\u6389\uff0c\u5220\u9664\u65f6\u4f1a\u5f39\u51fa\u662f\u201c\u7cfb\u7edf\u6587\u4ef6\u201d\u7684\u5bf9\u8bdd\u6846\uff0c\u4e0d\u7528\u7ba1\uff0c\u76f4\u63a5\u6309\u201c\u662f\u201d\u5220\u9664\u5c31\u884c\uff08\u82e5\u4e0d\u5220\u9664\u7684\u8bdd\uff0c\u4e0b\u6b21\u4f7f\u7528\u7684\u65f6\u5019\u7535\u8111\u4f1a\u88ab\u518d\u6b21\u611f\u67d3\uff09<\/p>\n
\u2014\u2014\u8fdb\u5165\"C:\\WINDOWS\\system32\"\u2014\u2014\u5220\u9664\u6389\u6587\u4ef6\u5939\u91cc\u9762\u7684wsctf.exe\u548cEXPLORER.EXE\u4e24\u4e2a\u6587\u4ef6<\/p>\n
\u2014\u2014\u6309\u7b2c\u56db\u6b65\u76f8\u53cd\u7684\u64cd\u4f5c\uff0c\u91cd\u65b0\u9690\u85cf\u7cfb\u7edf\u6587\u4ef6<\/p>\n
\u2014\u2014\u5f00\u59cb\u2014\u2014\u8fd0\u884c\u2014\u2014\u8f93\u5165regedit,\u6309\u786e\u5b9a\u540e\u6253\u5f00\u6ce8\u518c\u8868\uff0c\u8fdb\u5165HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\u76ee\u5f55\uff0c\u53f3\u952e\u5220\u9664\u6389wsctf.exe\u548cEXPLORER.EXE\u4e24\u6761\u8bb0\u5f55\u3002\u8fdb\u5165HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon, \u53ef\u4ee5\u770b\u5230\u952e\u503c\u9879Userinit\uff0c\u5176\u503c\u4e3auserinit.exe,EXPLORER.EXE\uff0c\u53cc\u51fbUserinit\u5c06\u4e2d\u95f4\u7684\u9017\u53f7\u548cEXPLORER.EXE\u5220\u9664\u2014\u2014\u786e\u5b9a<\/p>\n
\u2014\u2014\u91cd\u542f\u7535\u8111, \u641e\u5b9a!!<\/p>\n","protected":false},"excerpt":{"rendered":"
wsctf.exe\u548cEXPLORER.EXE\u7684\u67e5\u6740 \u76f8\u5173\u75c7\u72b6: 1\u3001\u591a\u4e86wsctf.exe\u548cEXPLORER.EXE\u4e24\u4e2a\u8fdb\u7a0b\uff0c\u5176\u4e2dEXPLORER.EXE\u8fdb\u7a0b\u8ddf\u7cfb\u7edf\u7684EXPLORER.EXE\u8fdb\u7a0b\u540d\u79f0\u4e00...<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[29],"tags":[],"class_list":["post-98","post","type-post","status-publish","format-standard","hentry","category-windows"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.liangliang.org.cn\/index.php?rest_route=\/wp\/v2\/posts\/98","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.liangliang.org.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.liangliang.org.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.liangliang.org.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.liangliang.org.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=98"}],"version-history":[{"count":0,"href":"https:\/\/www.liangliang.org.cn\/index.php?rest_route=\/wp\/v2\/posts\/98\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.liangliang.org.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=98"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.liangliang.org.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=98"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.liangliang.org.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=98"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}