中毒后回收站我的文档出错解决方法

上次一个朋友电脑中毒了,回收站和我的文档图标都变为ie图标了,以下是解决方法:

运行 regedit 表  查找“项”{645FF040-5081-101B-9F08-00AA002F954E},这个是回收站,右键权限,在 完全控制 项 打勾,其子项权限相应修改,改了就可以删除了,删除此项,再点我给的注册文件。
新建TXT型文本文件,改扩展名txt改为reg(注意扩展名显示后改动),将下面内容存入后保存即可。
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-101B-9F08-00AA002F954E}]
@="回收站"
"InfoTip"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,/
 6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,/
 00,53,00,48,00,45,00,4c,00,4c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,/
 2d,00,32,00,32,00,39,00,31,00,35,00,00,00
"SortOrderIndex"=dword:00000060
"IntroText"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,/
 6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,/
 00,53,00,48,00,45,00,4c,00,4c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,/
 2d,00,33,00,31,00,37,00,34,00,38,00,00,00
"LocalizedString"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,/
 6f,00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,/
 00,5c,00,53,00,48,00,45,00,4c,00,4c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,/
 2c,00,2d,00,38,00,39,00,36,00,34,00,00,00

[HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-101B-9F08-00AA002F954E}/DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,/
 00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,/
 65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,33,00,31,00,00,/
 00
"Empty"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,/
 00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,/
 68,00,65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,33,00,31,/
 00,00,00
"Full"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,/
 00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,/
 68,00,65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,33,00,32,/
 00,00,00

[HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-101B-9F08-00AA002F954E}/InProcServer32]
@="shell32.dll"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-101B-9F08-00AA002F954E}/shellex]

[HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-101B-9F08-00AA002F954E}/shellex/ContextMenuHandlers]

[HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-101B-9F08-00AA002F954E}/shellex/ContextMenuHandlers/{645FF040-5081-101B-9F08-00AA002F954E}]

[HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-101B-9F08-00AA002F954E}/shellex/PropertySheetHandlers]

[HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-101B-9F08-00AA002F954E}/shellex/PropertySheetHandlers/{645FF040-5081-101B-9F08-00AA002F954E}]

[HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-101B-9F08-00AA002F954E}/ShellFolder]
"Attributes"=hex:40,01,00,20
"CallForAttributes"=dword:00000040

再说我的文档:
方法一样,注册表中 查找:{450D8FBA-AD25-11D0-98A8-0800361B1103} ,这个是我的文档,同上修改权限后删除此项,再点我给的注册表文件。
内容如下:
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}]
"SortOrderIndex"=dword:00000048
"InfoTip"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,/
 6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,/
 00,53,00,48,00,45,00,4c,00,4c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,/
 2d,00,32,00,32,00,39,00,31,00,34,00,00,00
"LocalizedString"=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,/
 6f,00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,/
 00,5c,00,53,00,48,00,45,00,4c,00,4c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,/
 2c,00,2d,00,39,00,32,00,32,00,37,00,00,00

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}/DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,/
 00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,53,00,48,00,/
 45,00,4c,00,4c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,32,00,33,/
 00,35,00,00,00

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}/InProcServer32]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,/
 00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,53,00,48,00,/
 45,00,4c,00,4c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,00,00
"ThreadingModel"="Apartment"
"LoadWithoutCOM"=""

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}/shell]
@="none"

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}/shell/find]
"SuppressionPolicy"=dword:00000080

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}/shell/find/command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,/
 00,5c,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,00,72,00,2e,00,65,00,78,00,/
 65,00,00,00

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}/shell/find/ddeexec]
@="[FindFolder(/"%l/", %I)]"

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}/shell/find/ddeexec/application]
@="Folders"

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}/shell/find/ddeexec/topic]
@="AppProperties"

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}/shellex]

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}/shellex/ContextMenuHandlers]

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}/shellex/ContextMenuHandlers/Offline Files]
@="{750fdf0e-2a26-11d1-a3ea-080036587f03}"

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}/shellex/PropertySheetHandlers]

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}/shellex/PropertySheetHandlers/{4a7ded0a-ad25-11d0-98a8-0800361b1103}]
@=""

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}/shellex/PropertySheetHandlers/{596AB062-B4D2-4215-9F74-E9109B0A8153}]
@=""

[HKEY_CLASSES_ROOT/CLSID/{450D8FBA-AD25-11D0-98A8-0800361B1103}/ShellFolder]
"WantsFORPARSING"=""
"CallForAttributes"=dword:00020040
"HideOnDesktopPerUser"=""
"QueryForOverlay"=""
"Attributes"=dword:f080013d

以上基本恢复了,可能图标有点变样,再查找以上两项,在CLSID项下,DefaultIcon是图标,修改右边数据,%SystemRoot%/System32/shell32.dll,31  是回收站图标,%WinDir%/system32/mydocs.dll,0  是我的文档的图标。

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值