a)将 SYSTEM32\CONFIG 下的 DEFAULT,加载到 HKEY_USERS,比如项目名称为 PE
  b)将 HKEY_USERS\PE\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams 导出
  c)将导出文件中关于文件夹视图部分的内容为:

"Settings"=hex:08,00,00,00,04,00,00,00,01,00,00,00,00,77,7e,13,73,35,cf,11,ae,\ 69,08,00,2b,2e,12,62,04,00,00,00,01,00,00,00,43,00,00,00

  d)替换为你想要的格式,不同格式对应内容如下:

平铺查看 "Settings"=hex:08,00,00,00,06,00,00,00,01,00,00,00,e5,25,f1,65,e1,7b,10,48,ba,\ 9d,d2,71,c8,43,2c,e3,04,00,00,00,1a,00,00,00,43,00,00,00 缩略图查看 "Settings"=hex:08,00,00,00,05,00,00,00,01,00,00,00,90,b2,eb,8b,d0,52,d0,11,b7,\ f4,00,c0,4f,d7,06,ec,04,00,00,00,07,00,00,00,43,00,00,00 列表查看 "Settings"=hex:09,00,00,00,03,00,00,00,00,00,00,00,e0,a5,1f,0e,73,35,cf,11,ae,\ 69,08,00,2b,2e,12,62,04,00,00,00,01,00,00,00,43,00,00,00 详细信息查看 "Settings"=hex:08,00,00,00,04,00,00,00,01,00,00,00,00,77,7e,13,73,35,cf,11,ae,\ 69,08,00,2b,2e,12,62,04,00,00,00,01,00,00,00,43,00,00,00 图标查看 "Settings"=hex:08,00,00,00,01,00,00,00,01,00,00,00,e0,d0,57,00,73,35,cf,11,ae,\ 69,08,00,2b,2e,12,62,04,00,00,00,20,00,00,00,43,00,00,00

  e)保存文件->导入到注册表->卸载单元->替换到内核
  还有一个简单方法就是在 PECMD.INI 中通过设置注册表数据修改
  如设置为图标查看,在 PECMD.INI 中增加:

REGI HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Settings=@08,00,00,00,01,00,00,00,01,00,00,00,e0,d0,57,00,73,35,cf,11,ae,69,08,00,2b,2e,12,62,04,00,00,00,20,00,00,00,43,00,00,00

  其中 @ 后面的内容即为上面列举的 "Settings"=hex: 后面的内容,把续行符 \ 去掉即可。


本软件需在电脑端使用
请搜索U盘杀毒专家免费下载