

{450D8FBA-AD25-11D0-98A8-0800361B1103} 我的文档
{645FF040-5081-101B-9F08-00AA002F954}或者{5ef4af3a-f726-11d0-b8a2-00c04fc309a4} 回收站空或者满

记住可疑的第一项,然后去HKEY_CLASSES_ROOT\CLSID\里查找{112FDC99-4915-4f6e-B11B-41370D5F9A1A},找到的内容如下:
"InfoTip"="@shdoclc.dll,-880"
"LocalizedString"="@shdoclc.dll,-880"
[HKEY_CLASSES_ROOT\CLSID\{112FDC99-4915-4f6e-B11B-41370D5F9A1A}\DefaultIcon]
@=hex(2):73,00,68,00,64,00,6f,00,63,00,6c,00,63,00,2e,00,64,00,6c,00,6c,00,2c,\
00,30,00,00,00
[HKEY_CLASSES_ROOT\CLSID\{112FDC99-4915-4f6e-B11B-41370D5F9A1A}\InProcServer32]
@="%SystemRoot%\\system32\\shdocvw.dll"
"ThreadingModel"="Apartment"
[HKEY_CLASSES_ROOT\CLSID\{112FDC99-4915-4f6e-B11B-41370D5F9A1A}\shell]
@="打开主页(&H)"
[HKEY_CLASSES_ROOT\CLSID\{112FDC99-4915-4f6e-B11B-41370D5F9A1A}\shell\属性(&R)]
[HKEY_CLASSES_ROOT\CLSID\{112FDC99-4915-4f6e-B11B-41370D5F9A1A}\shell\属性(&R)\Command]
@="rundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl,,0"
[HKEY_CLASSES_ROOT\CLSID\{112FDC99-4915-4f6e-B11B-41370D5F9A1A}\shell\打开主页(&H)]
"MUIVerb"="@shdoclc.dll,-10241"
[HKEY_CLASSES_ROOT\CLSID\{112FDC99-4915-4f6e-B11B-41370D5F9A1A}\shell\打开主页(&H)\Command]
@="C:\\Program Files\\Internet Explorer\\iexplore.exe http://%%77%%77%%77%%2e%%34%%35%%34%%35%%31%%2e%%6e%%65%%74/?45451"
[HKEY_CLASSES_ROOT\CLSID\{112FDC99-4915-4f6e-B11B-41370D5F9A1A}\ShellFolder]
"HideFolderVerbs"=""
"WantsParsDisplayName"=""
"HideOnDesktopPerUser"=""
"Attributes"=dword:00000000

