{"id":508,"date":"2006-08-17T11:01:47","date_gmt":"2006-08-17T03:01:47","guid":{"rendered":"https:\/\/www.ecjtu.com\/keith\/archives\/508"},"modified":"2006-08-31T02:04:13","modified_gmt":"2006-08-30T18:04:13","slug":"winlogon-exe%e7%97%85%e6%af%92%e7%9a%84%e6%9f%a5%e6%9d%80%e6%96%b9%e6%b3%95","status":"publish","type":"post","link":"https:\/\/www.ecjtu.com\/keith\/archives\/508","title":{"rendered":"winlogon.exe\u75c5\u6bd2\u7684\u67e5\u6740\u65b9\u6cd5"},"content":{"rendered":"<p>\u6c5f\u6c11\u201c\u843d\u96ea\u201d\u75c5\u6bd2\u4e13\u6740\u5de5\u5177\u4e0b\u8f7d\u5730\u5740\uff1a<\/p>\n<p><a title=\"http:\/\/www.jiangmin.com\/download\/TrojanKiller.exe\" href=\"http:\/\/www.jiangmin.com\/download\/TrojanKiller.exe\" target=\"_blank\">http:\/\/www.jiangmin.com\/download\/TrojanKiller.exe<\/a><\/p>\n<p>\u8fd9\u4e2a\u8fdb\u7a0b\u662f\u4e0d\u662f\u4e00\u4e2a\u4f20\u5947\u4e16\u754c\u7a0b\u5e8f\u7684\u56fe\u6807\u4f7f\u752851\u7834\u89e3\u7248\u4f20\u5bb6\u5b9d\u4f1a\u751f\u4ea7\u4e00\u4e2aWINLOGON.EXE\u8fdb\u7a0b<br \/>\n\u6b63\u5e38\u7684winlogon\u7cfb\u7edf\u8fdb\u7a0b\uff0c\u5176\u7528\u6237\u540d\u4e3a\u201cSYSTEM\u201d \u7a0b\u5e8f\u540d\u4e3a\u5c0f\u5199winlogon.exe\u3002<br \/>\n\u800c\u4f2a\u88c5\u6210\u8be5\u8fdb\u7a0b\u7684\u6728\u9a6c\u7a0b\u5e8f\u5176\u7528\u6237\u540d\u4e3a\u5f53\u524d\u7cfb\u7edf\u7528\u6237\u540d\uff0c\u4e14\u7a0b\u5e8f\u540d\u4e3a\u5927\u5199\u7684WINLOGON.exe\u3002<br \/>\n\u8fdb\u7a0b\u67e5\u770b\u65b9\u5f0f ctrl+alt+del \u7136\u540e\u9009\u62e9\u8fdb\u7a0b\u3002\u6b63\u5e38\u60c5\u51b5\u4e0b\u6709\u4e14\u53ea\u6709\u4e00\u4e2awinlogon.exe\u8fdb\u7a0b\uff0c\u5176\u7528\u6237\u540d\u4e3a\u201cSYSTEM\u201d\u3002\u5982\u679c\u51fa\u73b0\u4e86\u4e24\u4e2awinlogon.exe\uff0c\u4e14\u5176\u4e2d\u4e00\u4e2a\u4e3a\u5927\u5199\uff0c\u7528\u6237\u540d\u4e3a\u5f53\u524d\u7cfb\u7edf\u7528\u6237\u7684\u8bdd\uff0c\u8868\u660e\u53ef\u80fd\u5b58\u5728\u6728\u9a6c\u3002<\/p>\n<p>\u8fd9\u4e2a\u6728\u9a6c\u975e\u5e38\u5389\u5bb3\uff0c\u80fd\u7834\u574f\u6389\u6728\u9a6c\u514b\u661f\uff0c\u4f7f\u5176\u4e0d\u80fd\u6b63\u5e38\u8fd0\u884c\u3002\u76ee\u524d\u6211\u4f7f\u7528\u5176\u4ed6\u6740\u6bd2\u8f6f\u4ef6\u672a\u80fd\u67e5\u51fa\u3002<br \/>\n\u90a3\u4e2aWINDOWS\u4e0b\u7684WINLOGON.EXE\u786e\u5b9e\u662f\u75c5\u6bd2\uff0c\u4f46\u662f\uff0c\u5979\u4e0d\u8fc7\u662f\u8fd9\u4e2a\u75c5\u6bd2\u4e2d\u7684\u5c0f\u89d2\u8272\u800c\u5df2\uff0c\u5927\u5bb6\u6253\u5f00D\u76d8\u770b\u770b\u662f\u5426\u6709\u4e00\u4e2apagefile\u7684DOS \u6307\u5411\u6587\u4ef6\u548c\u4e00\u4e2aautorun.inf\u6587\u4ef6\u4e86\uff0c\u5475\u5475\uff0c\u5f53\u7136\u90fd\u662f\u9690\u85cf\u7684\uff0c\u5220\u8fd9\u51e0\u4e2a\u6ca1\u7528\u7684\uff0c\u56e0\u4e3a\u5979\u5173\u8054\u4e86\u5f88\u591a\u4e1c\u897f\uff0c\u751a\u81f3\u5728\u5b89\u5168\u6a21\u5f0f\u90fd\u96be\u641e\uff0c\u53ea\u8981\u8fd0\u884c\u4efb\u4f55\u7a0b\u5e8f\uff0c\u6216\u8005\u53cc\u51fb\u6253\u5f00D\u76d8\uff0c\u5979\u5c31\u4f1a\u91cd\u65b0\u88ab\u5b89\u88c5\u4e86\uff0c\u5475\u5475\uff0c\u8fd9\u6bb5\u65f6\u95f4\u5f88\u591a\u4eba\u88ab\u76d7\u5c31\u662f\u56e0\u4e3a\u8fd9\u4e2a\u7834\u89e3\u7684\u4f20\u5bb6\u5b9d\u4e86\uff0c\u800c\u4e14\u6740\u6bd2\u8f6f\u4ef6\u67e5\u4e0d\u51fa\u6765\uff0c\u6709\u4eba\u53eb\u8fd9\u4e2a\u75c5\u6bd2\u4e3a \u201d\u843d\u96ea\u201c \u662f\u4e13\u95e8\u76d7\u4f20\u5947\u4f20\u5947\u4e16\u754c\u7684\u6728\u9a6c\uff0c\u81f3\u4e8e\u4f1a\u4e0d\u4f1a\u76d7\u5176\u4ed6\u5e10\u53f7\u5982QQ\uff0c\u7f51\u94f6\u5c31\u770b\u5979\u9ad8\u5174\u4e86\uff0c\u5475\u5475\uff0c\u4f30\u8ba1\u4e5f\u90fd\u662f\u4e00\u5e76\u5f55\u5236\u3002\u4e0d\u6015\u6bd2\u548c\u8981\u51cf\u5c11\u635f\u5931\u7684\u6700\u597d\u5f00\u542f\u9632\u706b\u5899\u963b\u6b62\u9664\u4e86\u81ea\u5df1\u4fe1\u4efb\u7684\u51e0\u4e2a\u5e38\u7528\u4efb\u52a1\u51fa\u95e8\uff0c\u5176\u4ed6\u7684\u5168\u90e8\u963b\u6321\uff0c\u5f53\u7136\u5927\u5bb6\u6700\u597d\u5c3d\u5feb\u5907\u4efd\uff0c\u7136\u540e\u5173\u95e8\u6740\u6bd2<br \/>\n\u5305\u62ec\u65b9\u65b0\u7b49\u4fee\u6539\u8fc7\u768451pywg\u4f20\u5bb6\u5b9d\uff0c\u548c\u4ed6\u4eec\u7834\u89e3\u7684\u5176\u4ed6\u4e00\u5207\u5916\u6302\uff0c\u8fd9\u6b21\u5acc\u7591\u6700\u5927\u7684\u662f51PYWG\uff0c\u81f3\u4e8e\u5176\u4ed6\u5408\u4f5c\u7f51\u7ad9\u4f30\u8ba1\u4e5f\u9003\u4e0d\u4e86\u5173\u7cfb\uff0c\u7279\u522b\u662f\u65b9\u65b0\u7f51\u7ad9\uff0c\u5df2\u7ecf\u88ab\u8bc1\u5b9e\u8fc7\u591a\u6b21\u5728\u7f51\u7ad9\u653e\u6728\u9a6c\uff0c\u867d\u7136\u4ed6\u89e3\u91ca\u662f\u88ab\u9ed1\u4e86\uff0c\u4f46\u662f\u4e0d\u80fd\u6392\u9664\u5176\u4ed6\u53ef\u80fd\uff0c\u7279\u522b\u5c0f\u5fc3\u90a3\u4e9b\u542f\u52a8\u540e\u8fde\u63a5\u7f51\u7ad9\u7684\u5916\u6302\uff0c\u4e0d\u6392\u9664\u542f\u52a8\u5668\u672c\u8eab\u5c31\u6709\u6bd2\uff0c\u53cd\u6b63\u4e00\u53e5\u8bdd\uff0c\u8fd9\u79cd\u542f\u52a8\u5c31\u8fde\u63a5\u67d0\u7f51\u7ad9\u7684\u7834\u89e3\u8f6f\u4ef6\u6700\u5bb9\u6613\u653e\u6bd2\uff0c\u81f3\u4e8e\u4ec0\u4e48\u65f6\u5019\u653e\uff0c\u600e\u4e48\u65b9\uff0c\u6bd4\u5982\u4e00\u5929\u653e\u51e0\u4e2a\u5c0f\u65f6\uff0c\u90fd\u8981\u770b\u4ed6\u600e\u4e48\u723d\uff0c\u7528\u4e5f\u5c3d\u91cf\u7528\u90a3\u79cd\u5b8c\u5168\u672c\u5730\u7834\u89e3\u9a8c\u8bc1\u7248\u7684\uff0c\u867d\u7136\u6302\u76df\u73b0\u5728\u597d\u50cf\u8fd8\u6ca1\u53d1\u73b0\u88ab\u653e\u9a6c\u6216\u8005\u81ea\u5df1\u653e\uff0c\u4f46\u662f\u5343\u4e07\u5c0f\u5fc3\uff0c\uff0c\u6700\u8fd1\u4f20\u5947\u4e16\u754c\u4f20\u5947N\u591a\u4eba\u88ab\u76d7\u53f7\uff0c\u76ee\u6807\u76f4\u6307\u8fd9\u4e9b\u7f51\u7ad9\uff0c\u4ee5\u4e0b\u662f\u6700\u8fd1\u7279\u522b\u6bd2\u7684 WINLOGON.EXE\u76d7\u53f7\u75c5\u6bd2\u6e05\u9664\u65b9\u6cd5\uff0c\u6ce8\u610f\u8fd9\u4e2a\u5047\u7684WINLOGON.EXE\u662f\u5728WINDOWS\u4e0b\uff0c\u8fdb\u7a0b\u91cc\u5934\u8868\u73b0\u4e3a\u5f53\u524d\u7528\u6237\u6216 ADMINISTRATOR.\u53e6\u5916\u4e00\u4e2a SYSTEM\u7684winlogon.exe\u662f\u6b63\u5e38\u7684\uff0c\u90a3\u4e2a\u5343\u4e07\u4e0d\u8981\u4e71\u5220\uff0c\u770b\u6e05\u695a\u4e86\uff0c\u524d\u9762\u4e00\u4e2a\u662f\u5927\u5199\uff0c\u540e\u9762\u4e00\u4e2a\u662f\u5c0f\u5199\uff0c\u800c\u4e14\u7ecf\u90e8\u5206\u7f51\u53cb\u8bc1\u5b9e\uff0c\u6b64\u6587\u4ef6\u8fde\u63a5\u76ee\u7684\u5730\u4e3a\u6cb3\u5357\u3002<\/p>\n<p>\u89e3\u51b3\u201c\u843d\u96ea\u201d\u75c5\u6bd2\u7684\u65b9\u6cd5<br \/>\n\u75c7\u72b6\uff1aD\u76d8\u53cc\u51fb\u6253\u4e0d\u5f00\uff0c\u91cc\u9762\u6709autorun.inf\u548cpagefile.com\u6587\u4ef6<br \/>\n\u505a\u8fd9\u4e2a\u75c5\u6bd2\u7684\u4eba\u4e5f\u592a\u5f3a\u4e86\uff0c\u5728\u5b89\u5168\u6a21\u5f0f\u7528Administrator\u4e00\u6837\u89e3\u51b3\u4e0d\u4e86\uff01\u7ecf\u8fc7\u4e00\u4e2a\u4e0b\u5348\u7684\u594b\u6218\u624d\u7b97\u52c9\u5f3a\u89e3\u51b3\u3002\u6211\u6ca1\u7528\u4ec0\u4e48\u67e5\u6740\u6728\u9a6c\u7684\u8f6f\u4ef6\uff0c\u5168\u662f\u624b\u52a8\u4e00\u4e2a\u4e00\u4e2a\u628a\u5b83\u63ea\u51fa\u6765\u628a\u4ed6\u5220\u6389\u7684\u3002\u5b83\u6240\u5173\u8054\u7684\u6587\u4ef6\u5982\u4e0b\uff0c\u7edd\u5927\u591a\u6570\u6587\u4ef6\u90fd\u662f\u663e\u793a\u4e3a\u7cfb\u7edf\u6587\u4ef6\u548c\u9690\u85cf\u7684\u3002\u6240\u4ee5\u8981\u5728\u6587\u4ef6\u5939\u9009\u9879\u91cc\u6253\u5f00\u663e\u793a\u9690\u85cf\u6587\u4ef6\u3002<br \/>\nD\u76d8\u91cc\u5c31\u4e24\u4e2a\uff0c\u641e\u5f97\u4f60\u65e0\u6cd5\u53cc\u51fb\u6253\u5f00D\u76d8\u3002C\u76d8\u91cc\u76d8\u91cc\u7684\u5c31\u591a\u4e86\uff01<br \/>\nD:\\autorun.inf<br \/>\nD:\\pagefile.com<br \/>\nC:\\Program Files\\Internet Explorer\\iexplore.com<br \/>\nC:\\Program Files\\Common Files\\iexplore.com<br \/>\nC:\\WINDOWS\\1.com<br \/>\nC:\\WINDOWS\\iexplore.com<br \/>\nC:\\WINDOWS\\finder.com<br \/>\nC:\\WINDOWS\\Exeroud.exe\uff08\u5fd8\u4e86\u662f\u4e0d\u662f\u8fd9\u4e2a\u540d\u5b57\u4e86\uff0c\u7ea2\u8272\u56fe\u6807\u6709\u4f20\u5947\u4e16\u754c\u56fe\u6807\u7684\uff09<br \/>\nC:\\WINDOWS\\Debug\\*** Programme.exe(\u4e5f\u662f\u4e0a\u9762\u90a3\u4e2a\u56fe\u6807\uff0c\u540d\u5b57\u5fd8\u4e86-_- \u597d\u5927\u597d\u660e\u663e\u975e\u9690\u85cf\u7684)<br \/>\nC:\\Windows\\system32\\command.com \u8fd9\u4e2a\u4e0d\u8981\u8f7b\u6613\u5220\uff0c\u770b\u770b\u662f\u4e0d\u662f\u548c\u4e0b\u9762\u51e0\u4e2a\u65e5\u671f\u4e0d\u4e00\u6837\u800c\u548c\u5176\u4ed6\u6587\u4ef6\u65e5\u671f\u4e00\u6837\uff0c\u5982\u679c\u548c\u5176\u4ed6\u6587\u4ef6\u5927\u90e8\u5206\u7cfb\u7edf\u6587\u4ef6\u65e5\u671f\u4e00\u6837\u5c31\u4e0d\u80fd\u5220\uff0c\u5f53\u7136\u7cfb\u7edf\u6587\u4ef6\u80af\u5b9a\u4e0d\u662f\u8fd9\u6bb5\u65f6\u95f4\u7684\u3002<br \/>\nC:\\Windows\\system32\\msconfig.com<br \/>\nC:\\Windows\\system32\\regedit.com<br \/>\nC:\\Windows\\system32\\dxdiag.com<br \/>\nC:\\Windows\\system32\\rundll32.com<br \/>\nC:\\Windows\\system32\\finder.com<br \/>\nC:\\Windows\\system32\\a.exe<br \/>\n\u5bf9\u4e86\uff0c\u770b\u770b\u8fd9\u4e9b\u6587\u4ef6\u7684\u65e5\u671f\uff0c\u770b\u770b\u5176\u4ed6\u5730\u65b9\u8fd8\u6709\u6ca1\u6709\u76f8\u540c\u65f6\u95f4\u7684\u6587\u4ef6\u8fd8\u662f.COM\u7ed3\u5c3e\u7684\u53ef\u7591\u6587\u4ef6\uff0c\u5c0f\u5fc3\u4e0d\u8981\u8fd0\u884c\u4efb\u4f55\u7a0b\u5e8f\uff0c\u8981\u4e0d\u5c31\u53c8\u542f\u52a8\u4e86\uff0c\u5305\u62ec\u53cc\u51fb\u78c1\u76d8<br \/>\n\u8fd8\u6709\u4e00\u4e2a\u5934\u53f7\u6587\u4ef6\uff01WINLOGON.EXE\uff01\u505a\u4e86\u8fd9\u4e48\u591a\u5de5\u4f5c\u76ee\u7684\u5c31\u662f\u8981\u5e72\u6389\u5979\uff01\uff01\uff01<br \/>\nC:\\Windows\\WINLOGON.EXE<br \/>\n\u8fd9\u4e2a\u5728\u8fdb\u7a0b\u91cc\u53ef\u4ee5\u770b\u5f97\u5230\uff0c\u6709\u4e24\u4e2a\uff0c\u4e00\u4e2a\u662f\u771f\u7684\uff0c\u4e00\u4e2a\u662f\u5047\u7684\u3002<br \/>\n\u771f\u7684\u662f\u5c0f\u5199winlogon.exe\uff0c\uff08\u4e0d\u77e5\u4f60\u4eec\u7684\u662f\u4e0d\u662f\uff09\uff0c\u7528\u6237\u540d\u662fSYSTEM\uff0c<br \/>\n\u800c\u5047\u7684\u662f\u5927\u5199\u7684WINLOGON.EXE\uff0c\u7528\u6237\u540d\u662f\u4f60\u81ea\u5df1\u7684\u7528\u6237\u540d\u3002<br \/>\n\u8fd9\u4e2a\u6587\u4ef6\u5728\u8fdb\u7a0b\u91cc\u662f\u4e2d\u6b62\u4e0d\u4e86\u7684\uff0c\u8bf4\u662f\u5173\u952e\u8fdb\u7a0b\u65e0\u6cd5\u4e2d\u6b62\uff0c\u641e\u5f97\u8ddf\u771f\u7684\u4e00\u6837\uff01\u5c31\u8fde\u5728\u5b89\u5168\u6a21\u5f0f\u4e0b\u5b83\u90fd\u4f1a<br \/>\n\u5446\u5728\u4f60\u7684\u8fdb\u7a0b\u91cc\uff01\u6211\u73b0\u5728\u6240\u77e5\u9053\u7684\u5c31\u8fd9\u4e9b\uff0c\u8981\u662f\u4e0d\u653e\u5fc3\uff0c\u5c31\u6700\u597d\u770b\u4e00\u4e0b\u5176\u4e2d\u4e00\u4e2a\u6587\u4ef6\u7684\u4fee\u6539\u65e5\u671f\uff0c\u7136\u540e\u7528\u201c\u641c\u7d22\u201d\u641c\u8fd9\u5929\u4fee\u6539\u8fc7\u7684\u6587\u4ef6\uff0c\u76f8\u540c\u65f6\u95f4\u7684\u80af\u5b9a\u4f1a\u51fa\u6765\u4e00\u5927\u5806\u7684\uff0c\u8fde\u7cfb\u7edf\u8fd8\u539f\u5939\u91cc\u90fd\u6709\uff01\uff01\u8fd9\u4e9b\u6587\u4ef6\u4f1a\u81ea\u5df1\u5173\u8054\u7684\uff0c\u8981\u662f\u4f60\u5220\u4e86\u4e00\u90e8\u5206\uff0c\u4e0d\u5c0f\u5fc3\u8fd0\u884c\u4e86\u4e00\u4e2a\uff0c\u6216\u5728\u5f00\u59cb\uff0d\u8fd0\u884c\u91cc\u8fd0\u884cmsocnfig\uff0ccommand\uff0cregedit\u8fd9\u4e9b\u547d\u4ee4\uff0c\u6240\u6709\u7684\u8fd9\u4e9b\u6587\u4ef6\u5168\u4f1a\u81ea\u5df1\u8865\u5145\u56de\u6765\uff01<br \/>\n\u77e5\u9053\u4e86\u8fd9\u4e9b\u6587\u4ef6\uff0c\u9996\u5148\u5173\u95ed\u53ef\u4ee5\u5173\u95ed\u7684\u6240\u6709\u7a0b\u5e8f\uff0c\u6253\u5f00\u7a0b\u5e8f\u9644\u4ef6\u91cc\u5934\u7684WINDOWS\u8d44\u6e90\u7ba1\u7406\u5668\uff0c\u5e76\u5728\u4e0a\u9762\u7684\u5de5\u5177\u91cc\u5934\u7684\u6587\u4ef6\u5939\u9009\u9879\u91cc\u5934\u7684\u67e5\u770b\u91cc\u8bbe\u7f6e\u663e\u793a\u6240\u6709\u6587\u4ef6\u548c\u6587\u4ef6\u5047\uff0c\u53d6\u6d88\u9690\u85cf\u53d7\u4fdd\u62a4\u64cd\u4f5c\u7cfb\u7edf\u6587\u4ef6\uff0c\u7136\u540e\u6253\u5f00\u5f00\u59cb\u83dc\u5355\u7684\u8fd0\u884c\uff0c\u8f93\u5165\u547d\u4ee4 regedit\uff0c\u8fdb\u6ce8\u518c\u8868\uff0c\u5230<br \/>\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run<br \/>\n\u91cc\u9762\uff0c\u6709\u4e00\u4e2aTorjan pragramme\uff0c\u8fd9\u4e2a\u660e\u6446\u7740\u201c\u6211\u662f\u6728\u9a6c\u201d\uff0c\u5220\uff01\uff01<br \/>\n\u7136\u540e\u6ce8\u9500\uff01 \u91cd\u65b0\u8fdb\u5165\u7cfb\u7edf\u540e\uff0c\u6253\u5f00\u201c\u4efb\u52a1\u7ba1\u7406\u5668\u201d\uff0c\u770b\u770b\u6709\u6ca1rundll32\uff0c\u6709\u7684\u8bdd\u5148\u4e2d\u6b62\u4e86\uff0c\u4e0d\u77e5\u8fd9\u4e2a\u662f\u771f\u8fd8\u662f\u5047\uff0c\u5c0f\u5fc3\u4e3a\u597d\u3002 \u5230D\u76d8\uff08\u6ce8\u610f\u4e0d\u8981\u53cc\u51fb\u8fdb\u5165\uff01\u5426\u5219\u53c8\u4f1a\u6fc0\u6d3b\u8fd9\u4e2a\u75c5\u6bd2\uff09\u53f3\u952e\uff0c\u9009\u201c\u6253\u5f00\u201d\uff0c\u628aautorun.inf\u548cpagefile.com\u5220\u6389\uff0c<br \/>\n\u7136\u540e\u518d\u5230C\u76d8\u628a\u4e0a\u9762\u6240\u5217\u51fa\u6765\u7684\u6587\u4ef6\u90fd\u5220\u6389\uff01\u4e2d\u9014\u6ce8\u610f\u4e0d\u8981\u53cc\u51fb\u5230\u5176\u4e2d\u4e00\u4e2a\u6587\u4ef6\uff0c\u5426\u5219\u6240\u6709\u6b65\u9aa4\u90fd\u8981\u91cd\u65b0\u6765\u8fc7\uff01 \u7136\u540e\u518d\u6ce8\u9500\u3002<br \/>\n\u6211\u5728\u594b\u6218\u8fc7\u7a0b\u4e2d\uff0c\u628a\u90a3\u4e9b\u6587\u4ef6\u5220\u6389\u540e\uff0c\u6240\u6709\u7684exe\u6587\u4ef6\u5168\u90fd\u6253\u4e0d\u5f00\u4e86\uff0c\u8fd0\u884ccmd\u4e5f\u4e0d\u884c\u3002<br \/>\n\u7136\u540e\uff0c\u5230C:\\Windows\\system32 \u91cc\uff0c\u628acmd.exe\u6587\u4ef6\u590d\u5236\u51fa\u6765\uff0c\u6bd4\u5982\u5230\u684c\u9762\uff0c\u6539\u540d\u6210cmd.com \u563f\u563f \u6211\u4e5f\u4f1a\u7528com\u6587\u4ef6\uff0c\u7136\u540e\u53cc\u51fb\u8fd9\u4e2aCOM\u6587\u4ef6<br \/>\n\u7136\u540e\u884c\u52a8\u53ef\u4ee5\u8fdb\u5165\u5230DOS\u4e0b\u7684\u547d\u4ee4\u63d0\u793a\u7b26\u3002<br \/>\n\u518d\u6253\u5165\u4ee5\u4e0b\u7684\u547d\u4ee4\uff1a<br \/>\nassoc .exe=exefile \uff08assoc\u4e0e.exe\u4e4b\u95f4\u6709\u7a7a\u683c\uff09<br \/>\nftype exefile=&#8221;%1&#8243; %*<br \/>\n\u8fd9\u6837exe\u6587\u4ef6\u5c31\u53ef\u4ee5\u8fd0\u884c\u4e86\u3002 \u5982\u679c\u4e0d\u4f1a\u6253\u547d\u4ee4\uff0c\u53ea\u8981\u6253\u5f00CMD.COM\u540e\u590d\u5236\u4e0a\u9762\u7684\u4e24\u884c\u5206\u4e24\u6b21\u7c98\u8d34\u4e0a\u53bb\u6267\u884c\u5c31\u53ef\u4ee5\u4e86\u3002<br \/>\n\u4f46\u6211\u5728\u5f04\u5b8c\u8fd9\u4e9b\u4e4b\u540e\uff0c\u5728\u5f00\u673a\u7684\u8fdb\u5165\u7528\u6237\u65f6\u4f1a\u6709\u4e9b\u6162\uff0c\u5e76\u4f1a\u8df3\u51fa\u4e00\u4e2a\u8b66\u544a\u6846\uff0c\u8bf4\u6587\u4ef6&#8221;1&#8243;\u627e\u4e0d\u5230\u3002\uff08\u5e94\u8be5\u662fWindows\u4e0b\u76841.com\u6587\u4ef6\u3002\uff09,\u6700\u540e\u7528\u4e0a\u7f51\u52a9\u624b\u4e4b\u7c7b\u7684\u8f6f\u4ef6\u5168\u9762\u4fee\u590dIE\u8bbe\u7f6e<br \/>\n\u6700\u540e\u8bf4\u4e00\u4e0b\u600e\u4e48\u89e3\u51b3\u5f00\u673a\u8df3\u51fa\u627e\u4e0d\u5230\u6587\u4ef6\u201c1.com\u201d\u7684\u65b9\u6cd5\uff1a<br \/>\n\u5728\u8fd0\u884c\u7a0b\u5e8f\u4e2d\u8fd0\u884c\u201cregedit\u201d\uff0c\u6253\u5f00\u6ce8\u518c\u8868\uff0c\u5728[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon]\u4e2d<br \/>\n\u628a&#8221;Shell&#8221;=&#8221;Explorer.exe 1&#8243;\u6062\u590d\u4e3a&#8221;Shell&#8221;=&#8221;Explorer.exe&#8221;<br \/>\n\u5927\u529f\u544a\u6210\uff01\u5927\u5bb6\u5206\u4eab\u4e00\u4e0b\u5427\uff01<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u6c5f\u6c11\u201c\u843d\u96ea\u201d\u75c5\u6bd2\u4e13\u6740\u5de5\u5177\u4e0b\u8f7d\u5730\u5740\uff1a http:\/\/www.jiangmin.com\/download\/Troj [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[71],"tags":[116],"_links":{"self":[{"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/posts\/508"}],"collection":[{"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/comments?post=508"}],"version-history":[{"count":1,"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/posts\/508\/revisions"}],"predecessor-version":[{"id":509,"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/posts\/508\/revisions\/509"}],"wp:attachment":[{"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/media?parent=508"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/categories?post=508"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ecjtu.com\/keith\/wp-json\/wp\/v2\/tags?post=508"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}