

a)将 SYSTEM32\CONFIG 下的 DEFAULT,加载到 HKEY_USERS,比如项目名称为 PE
b)将 HKEY_USERS\PE\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams 导出
c)将导出文件中关于文件夹视图部分的内容为:
"Settings"=hex:08,00,00,00,04,00,00,00,01,00,00,00,00,77,7e,13,73,35,cf,11,ae,\
69,08,00,2b,2e,12,62,04,00,00,00,01,00,00,00,43,00,00,00
d)替换为你想要的格式,不同格式对应内容如下:
平铺查看
"Settings"=hex:08,00,00,00,06,00,00,00,01,00,00,00,e5,25,f1,65,e1,7b,10,48,ba,\
9d,d2,71,c8,43,2c,e3,04,00,00,00,1a,00,00,00,43,00,00,00
缩略图查看
"Settings"=hex:08,00,00,00,05,00,00,00,01,00,00,00,90,b2,eb,8b,d0,52,d0,11,b7,\
f4,00,c0,4f,d7,06,ec,04,00,00,00,07,00,00,00,43,00,00,00
列表查看
"Settings"=hex:09,00,00,00,03,00,00,00,00,00,00,00,e0,a5,1f,0e,73,35,cf,11,ae,\
69,08,00,2b,2e,12,62,04,00,00,00,01,00,00,00,43,00,00,00
详细信息查看
"Settings"=hex:08,00,00,00,04,00,00,00,01,00,00,00,00,77,7e,13,73,35,cf,11,ae,\
69,08,00,2b,2e,12,62,04,00,00,00,01,00,00,00,43,00,00,00
图标查看
"Settings"=hex:08,00,00,00,01,00,00,00,01,00,00,00,e0,d0,57,00,73,35,cf,11,ae,\
69,08,00,2b,2e,12,62,04,00,00,00,20,00,00,00,43,00,00,00
e)保存文件->导入到注册表->卸载单元->替换到内核
还有一个简单方法就是在 PECMD.INI 中通过设置注册表数据修改
如设置为图标查看,在 PECMD.INI 中增加:
REGI HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Settings=@08,00,00,00,01,00,00,00,01,00,00,00,e0,d0,57,00,73,35,cf,11,ae,69,08,00,2b,2e,12,62,04,00,00,00,20,00,00,00,43,00,00,00
其中 @ 后面的内容即为上面列举的 "Settings"=hex: 后面的内容,把续行符 \ 去掉即可。
本软件需在电脑端使用
请搜索U盘杀毒专家免费下载
请搜索U盘杀毒专家免费下载