主机文件劫持

主机文件劫持

我想在我的主机文件中添加一个条目,所以我打开了目录并

主机网络协议服务

除 Imhosts.sam 文件之外的所有文件都乱了。

双击这 4 个文件时,不知何故现在启动了《质量效应 2》。之前我注意到一些随机图标已更改为 ME2 图标,但这些图标仍可正常运行。

这怎么会发生?更重要的是,我该如何解决它?Win10。

答案1

听起来像是有人将不带扩展名文件的默认程序设置为 ME2。如果您愿意编辑注册表(此处可能会造成损坏,因此请严格遵守),您可以导航到:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts,然后左键单击其中的“。”。这将突出显示它,现在您应该右键单击它。单击“导出”选项并将该文件保存到桌面(如果您突出显示的键出现任何问题,这将为您提供备份点)。之后,单击“+”加号打开文件夹,并确保其中唯一的文件夹是:“OpenWithList”。执行此操作后,删除除“Default”之外的所有条目。默认的唯一内容应该是:(未设置值)。实际上,默认条目中是否有其他内容并不重要,所以如果有,请不要担心。

如果在执行上述任何操作后出现问题,请双击您一开始导出的文件以撤消对该密钥造成的损坏。请注意,如果您执行了此处未列出的任何操作,则您导出的文件将无法撤消该损坏,您可能会遇到麻烦。

编辑:我应该更具体一点,所以我对此表示歉意。在 Regedit 窗口的右侧可能也有一些条目,请确保也删除它们。我已为您发布了两个文件夹的屏幕截图。右侧应该只有默认条目。 截屏。


编辑 2:好吧,看来我之前说的有点不对,所以我很抱歉。上面的方法修复了文件名末尾带有“.”句点且没有扩展名的文件。您需要重置没有句点的文件关联。如果您查看:HKEY_CLASSES_ROOT\Unknown,您可能会看到您的游戏列在其中的一个或多个条目中。左键单击Unknown然后右键单击它并将该密钥条目导出到安全的地方(在弄乱注册表之前始终备份)。接下来打开记事本或您选择的纯文本编辑器并将其粘贴到其中(此版本适用于 Windows 7):

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\Unknown]
"AlwaysShowExt"=""
"QueryClassStore"=""
"TypeOverlay"=""

[HKEY_CLASSES_ROOT\Unknown\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,30,00,00,00

[HKEY_CLASSES_ROOT\Unknown\shell]
@="openas"

[HKEY_CLASSES_ROOT\Unknown\shell\openas]
"MultiSelectModel"="Single"

[HKEY_CLASSES_ROOT\Unknown\shell\openas\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,72,00,75,00,\
  6e,00,64,00,6c,00,6c,00,33,00,32,00,2e,00,65,00,78,00,65,00,20,00,25,00,53,\
  00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,00,5c,00,73,00,\
  79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,65,00,6c,00,6c,\
  00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,4f,00,70,00,65,00,6e,00,41,00,\
  73,00,5f,00,52,00,75,00,6e,00,44,00,4c,00,4c,00,20,00,25,00,31,00,00,00
"DelegateExecute"="{e44e9428-bdbc-4987-a099-40dc8fd255e7}"

[HKEY_CLASSES_ROOT\Unknown\shell\opendlg]
"LegacyDisable"=""
"MultiSelectModel"="Single"

[HKEY_CLASSES_ROOT\Unknown\shell\opendlg\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,72,00,75,00,\
  6e,00,64,00,6c,00,6c,00,33,00,32,00,2e,00,65,00,78,00,65,00,20,00,25,00,53,\
  00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,00,5c,00,73,00,\
  79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,65,00,6c,00,6c,\
  00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,4f,00,70,00,65,00,6e,00,41,00,\
  73,00,5f,00,52,00,75,00,6e,00,44,00,4c,00,4c,00,20,00,25,00,31,00,00,00

或者,如果你使用的是 Windows 10,请使用这个:

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\Unknown]
"AlwaysShowExt"=""
"QueryClassStore"=""
"TypeOverlay"=""

[HKEY_CLASSES_ROOT\Unknown\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,30,00,00,00

[HKEY_CLASSES_ROOT\Unknown\shell]
@="openas"

[HKEY_CLASSES_ROOT\Unknown\shell\InvokeDefaultVerbInOtherProcess]
"ProgrammaticAccessOnly"=""

[HKEY_CLASSES_ROOT\Unknown\shell\InvokeDefaultVerbInOtherProcess\command]
"DelegateExecute"="{e44e9428-bdbc-4987-a099-40dc8fd255e7}"

[HKEY_CLASSES_ROOT\Unknown\shell\Open]
"MultiSelectModel"="Single"
"ProgrammaticAccessOnly"=""

[HKEY_CLASSES_ROOT\Unknown\shell\Open\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,4f,00,70,00,\
  65,00,6e,00,57,00,69,00,74,00,68,00,2e,00,65,00,78,00,65,00,20,00,22,00,25,\
  00,31,00,22,00,00,00
"DelegateExecute"="{e44e9428-bdbc-4987-a099-40dc8fd255e7}"

[HKEY_CLASSES_ROOT\Unknown\shell\openas]
@=hex(2):40,00,25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\
  00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,\
  68,00,65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,35,\
  00,33,00,37,00,36,00,00,00
"MultiSelectModel"="Single"

[HKEY_CLASSES_ROOT\Unknown\shell\openas\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,4f,00,70,00,\
  65,00,6e,00,57,00,69,00,74,00,68,00,2e,00,65,00,78,00,65,00,20,00,22,00,25,\
  00,31,00,22,00,00,00
"DelegateExecute"="{e44e9428-bdbc-4987-a099-40dc8fd255e7}"

[HKEY_CLASSES_ROOT\Unknown\shell\OpenWithSetDefaultOn]
"MultiSelectModel"="Single"
"ProgrammaticAccessOnly"=""

[HKEY_CLASSES_ROOT\Unknown\shell\OpenWithSetDefaultOn\command]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,4f,00,70,00,\
  65,00,6e,00,57,00,69,00,74,00,68,00,2e,00,65,00,78,00,65,00,20,00,2d,00,6f,\
  00,76,00,65,00,72,00,72,00,69,00,64,00,65,00,20,00,22,00,25,00,31,00,22,00,\
  00,00
"DelegateExecute"="{e44e9428-bdbc-4987-a099-40dc8fd255e7}"

接下来将其另存为:"UnknownReset.reg",请注意,需要使用引号,因为如果文件名周围没有引号,记事本会自动添加 .txt 扩展名。接下来,双击新创建的文件,这应该可以解决您的问题。如果它使用 .txt 扩展名保存文件,那么您必须删除扩展名并重试,或者在 Regedit 中手动导入数据。要手动导入,您可以打开 Regedit,然后单击菜单File,然后单击ImportAll files从下拉菜单中选择,然后选择您输入上述代码的文件。只要它被正确粘贴到文件中,它就应该可以工作。

相关内容