如何清理wvw.8ah.net恶意浏览器

来源：互联网发布：人工智能剑士编辑：程序博客网时间：2024/06/11 15:22

这个网页应该是通过程序修改了系统lnk文件达到劫持浏览器的目的。更改方法如下：

先打开记事本,输入以下内容,保存为"lnk .reg"文件，再双击导入注册表。(下面代码只需复制后存为REG格式文件即可)

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT/.lnk]

@="lnkfile"

[HKEY_CLASSES_ROOT/.lnk/ShellEx]

[HKEY_CLASSES_ROOT/.lnk/ShellEx/{000214EE-0000-0000-C000-000000000046}]

@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT/.lnk/ShellEx/{000214F9-0000-0000-C000-000000000046}]

@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT/.lnk/ShellEx/{00021500-0000-0000-C000-000000000046}]

@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT/.lnk/ShellEx/{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}]

@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT/.lnk/ShellNew]

"Command"="rundll32.exe appwiz.cpl,NewLinkHere %1"

[HKEY_CLASSES_ROOT/lnkfile]

@="快捷方式"

"EditFlags"=dword:00000001

"IsShortcut"=""

"NeverShowExt"=""

[HKEY_CLASSES_ROOT/lnkfile/CLSID]

@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT/lnkfile/shellex]

[HKEY_CLASSES_ROOT/lnkfile/shellex/ContextMenuHandlers]

[HKEY_CLASSES_ROOT/lnkfile/shellex/ContextMenuHandlers/Offline Files]

@="{750fdf0e-2a26-11d1-a3ea-080036587f03}"

[HKEY_CLASSES_ROOT/lnkfile/shellex/ContextMenuHandlers/{00021401-0000-0000-C000-000000000046}]

[HKEY_CLASSES_ROOT/lnkfile/shellex/DropHandler]

@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT/lnkfile/shellex/IconHandler]

@="{00021401-0000-0000-C000-000000000046}"

[HKEY_CLASSES_ROOT/lnkfile/shellex/PropertySheetHandlers]

[HKEY_CLASSES_ROOT/lnkfile/shellex/PropertySheetHandlers/ShimLayer Property Page]

@="{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"