求助对随波逐流8pe尝鲜版的修改

我爱太阳雨

随波逐流8pe尝鲜版是个维护级的pe，本人觉得这个pe很棒！但文件夹中等图标显示有问题，离线修改相应注册表项，但启动后又被还原了，利用pecmd.ini文件修改也不成功！找了很久也不知道注册表值是在什么地方被还原的！希望知道的朋友提示一下！

我爱太阳雨

826773297 发表于 2016-4-8 22:09
不是吧，好吧，教你个杀招：进去PE，导出HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersio ...

这个方法修改成功！谢谢！

我爱太阳雨

826773297 发表于 2016-4-8 22:09
不是吧，好吧，教你个杀招：进去PE，导出HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersio ...

这个方法修改成功！谢谢！

826773297

注册表你自己去删减了，我只提供例子....

826773297

只做参考...

826773297

我爱太阳雨 发表于 2016-4-8 20:36
试过也还原了！

不是吧，好吧，教你个杀招：进去PE，导出HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects
然后挂载DEFAULT注册表，加载配置单元比如为1，导入过去吧....
HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects



比如：

1. Windows Registry Editor Version 5.00
   
2. 
   
3. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist]
   
4. 
   
5. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{9E04CAB2-CC14-11DF-BB8C-A2F1DED72085}]
   
6. "Version"=dword:00000005
   
7. 
   
8. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{9E04CAB2-CC14-11DF-BB8C-A2F1DED72085}\Count]
   
9. 
   
10. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{A3D53349-6E61-4557-8FC7-0028EDCEEBF6}]
    
11. "Version"=dword:00000005
    
12. 
    
13. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{A3D53349-6E61-4557-8FC7-0028EDCEEBF6}\Count]
    
14. 
    
15. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{B267E3AD-A825-4A09-82B9-EEC22AA3B847}]
    
16. "Version"=dword:00000005
    
17. 
    
18. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{B267E3AD-A825-4A09-82B9-EEC22AA3B847}\Count]
    
19. 
    
20. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CAA59E3C-4792-41A5-9909-6A6A8D32490E}]
    
21. "Version"=dword:00000005
    
22. 
    
23. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CAA59E3C-4792-41A5-9909-6A6A8D32490E}\Count]
    
24. 
    
25. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}]
    
26. "Version"=dword:00000005
    
27. 
    
28. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count]
    
29. "{S38OS404-1Q43-42S2-9305-67QR0O28SP23}\\ertrqvg.rkr"=hex:00,00,00,00,01,00,00,\
    
30.   00,02,00,00,00,0b,08,00,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,\
    
31.   00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,\
    
32.   ff,ff,ff,a0,41,ad,6c,9a,91,d1,01,00,00,00,00
    
33. "HRZR_PGYFRFFVBA"=hex:00,00,00,00,01,00,00,00,03,00,00,00,c7,2a,00,00,01,00,00,\
    
34.   00,02,00,00,00,0b,08,00,00,7b,00,46,00,33,00,38,00,42,00,46,00,34,00,30,00,\
    
35.   34,00,2d,00,31,00,44,00,34,00,33,00,2d,00,34,00,32,00,46,00,32,00,2d,00,39,\
    
36.   00,33,00,30,00,35,00,2d,00,36,00,37,00,44,00,45,00,30,00,42,00,32,00,38,00,\
    
37.   46,00,43,00,32,00,33,00,7d,00,5c,00,52,00,45,00,47,00,45,00,44,00,49,00,54,\
    
38.   00,2e,00,45,00,58,00,45,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
39.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
40.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
41.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
42.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
43.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
44.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
45.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
46.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
47.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
48.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
49.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
50.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
51.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
52.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
53.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
54.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
55.   00,00,00,00,01,00,00,00,02,00,00,00,0b,08,00,00,7b,00,46,00,33,00,38,00,42,\
    
56.   00,46,00,34,00,30,00,34,00,2d,00,31,00,44,00,34,00,33,00,2d,00,34,00,32,00,\
    
57.   46,00,32,00,2d,00,39,00,33,00,30,00,35,00,2d,00,36,00,37,00,44,00,45,00,30,\
    
58.   00,42,00,32,00,38,00,46,00,43,00,32,00,33,00,7d,00,5c,00,52,00,45,00,47,00,\
    
59.   45,00,44,00,49,00,54,00,2e,00,45,00,58,00,45,00,00,00,00,00,00,00,00,00,00,\
    
60.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
61.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
62.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
63.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
64.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
65.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
66.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
67.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
68.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
69.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
70.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
71.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
72.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
73.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
74.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
75.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
76.   00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,02,00,00,00,0b,08,00,00,7b,00,\
    
77.   46,00,33,00,38,00,42,00,46,00,34,00,30,00,34,00,2d,00,31,00,44,00,34,00,33,\
    
78.   00,2d,00,34,00,32,00,46,00,32,00,2d,00,39,00,33,00,30,00,35,00,2d,00,36,00,\
    
79.   37,00,44,00,45,00,30,00,42,00,32,00,38,00,46,00,43,00,32,00,33,00,7d,00,5c,\
    
80.   00,52,00,45,00,47,00,45,00,44,00,49,00,54,00,2e,00,45,00,58,00,45,00,00,00,\
    
81.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
82.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
83.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
84.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
85.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
86.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
87.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
88.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
89.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
90.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
91.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
92.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
93.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
94.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
95.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
96.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
97.   00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00
    
98. "HRZR_PGYPHNPbhag:pgbe"=hex:ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,\
    
99.   00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,\
    
100.   80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,ff,ff,ff,00,00,00,00,00,00,00,\
     
101.   00,00,00,00,00
     
102. "Zvpebfbsg.Jvaqbjf.Furyy.EhaQvnybt"=hex:00,00,00,00,00,00,00,00,00,00,00,00,09,\
     
103.   17,00,00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,\
     
104.   80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,ff,ff,ff,00,00,00,\
     
105.   00,00,00,00,00,00,00,00,00
     
106. "Zvpebfbsg.Jvaqbjf.Rkcybere"=hex:00,00,00,00,00,00,00,00,01,00,00,00,b3,0b,00,\
     
107.   00,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,\
     
108.   00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,ff,ff,ff,00,00,00,00,00,\
     
109.   00,00,00,00,00,00,00
     
110. 
     
111. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{F2A1CB5A-E3CC-4A2E-AF9D-505A7009D442}]
     
112. "Version"=dword:00000005
     
113. 
     
114. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{F2A1CB5A-E3CC-4A2E-AF9D-505A7009D442}\Count]
     
115. 
     
116. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}]
     
117. "Version"=dword:00000005
     
118. 
     
119. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{F4E57C4B-2036-45F0-A9AB-443BCFE33D9F}\Count]
     
120. "HRZR_PGYPHNPbhag:pgbe"=hex:ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,\
     
121.   00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,00,00,\
     
122.   80,bf,00,00,80,bf,00,00,80,bf,00,00,80,bf,ff,ff,ff,ff,00,00,00,00,00,00,00,\
     
123.   00,00,00,00,00
     
124. 
     
125. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{FA99DFC7-6AC2-453A-A5E2-5E2AFF4507BD}]
     
126. "Version"=dword:00000005
     
127. 
     
128. [HKEY_LOCAL_MACHINE\1\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{FA99DFC7-6AC2-453A-A5E2-5E2AFF4507BD}\Count]
     

复制代码

我爱太阳雨

826773297 发表于 2016-4-8 20:32
在PECMD.INI里的加载桌面前加载

试过也还原了！

我爱太阳雨

这个pe内核保护了一些注册表值，但有些项还是可改！好奇，想知道是怎么保护的，以前从未遇到过！

826773297

我爱太阳雨 发表于 2016-4-8 20:27
就是想改这个值！离线修改的，但打包启动后又还原为0值了！

在PECMD.INI里的加载桌面前加载

我爱太阳雨

826773297 发表于 2016-4-8 20:21
或者用这个命令试试
REGI HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\IconsOnly= ...

就是想改这个值！离线修改的，但打包启动后又还原为0值了！

826773297

或者用这个命令试试
REGI HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\IconsOnly=#1

826773297

下载网盘里传了一个小点的DLL，我删除了一些东西不知道有没有用（我还没试）
//pan.baidu.com/s/1qWR3MWW

我爱太阳雨

大神出来了能否告知！

我爱太阳雨

体积太大了，还是改注册表好，不动文件！

826773297

用原版WIN8.0镜像中的\WINDOWS\SYSTEM32\imageres.dll替换PE里对应的文件差不多就OK了

826773297

用原版WIN8.0镜像中的\WINDOWS\SYSTEM32\imageres.dll替换PE里对应的文件差不多就OK了