针对最近的企鹅读取记录
从3Q大战过来的都知道,另外我也是直接从github转载看到相关的的规则,吧里也有不少人有教,我直接把文件放出来。方法也告诉大家。
使用方法:新建.txt文件更名为下文件名或者随意.json
tencent-auto.json(在自动处理里面导入)
{
“ver”:”5.0″,
“tag”:”hipsuser_auto”,
“data”:{
“*Tencent*”:[
{
“res_path”:”*Tencent*”,
“montype”:1,
“action_type”:15,
“treatment”:0
},
{
“res_path”:”*Tencent*”,
“montype”:1,
“action_type”:15,
“treatment”:0
},
{
“res_path”:”*qqweb*”,
“montype”:1,
“action_type”:15,
“treatment”:0
},
{
“res_path”:”*chatpic*”,
“montype”:1,
“action_type”:15,
“treatment”:0
},
{
“res_path”:”*etilqs*”,
“montype”:1,
“action_type”:15,
“treatment”:0
},
{
“res_path”:”*PrefetchQQ*”,
“montype”:1,
“action_type”:15,
“treatment”:0
},
{
“res_path”:”*WeChat*”,
“montype”:1,
“action_type”:15,
“treatment”:0
},
{
“res_path”:”*WindowsFonts*”,
“montype”:1,
“action_type”:2,
“treatment”:0
},
{
“res_path”:”*.clb”,
“montype”:1,
“action_type”:15,
“treatment”:0
},
{
“res_path”:”*Flash.ocx”,
“montype”:1,
“action_type”:2,
“treatment”:0
},
{
“res_path”:”*WindowsSysWOW64*”,
“montype”:1,
“action_type”:2,
“treatment”:0
},
{
“res_path”:”*Program FilesWindowsApps*.mui”,
“montype”:1,
“action_type”:2,
“treatment”:0
},
{
“res_path”:”*desktop.ini”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*Windows*.nls”,
“montype”:1,
“action_type”:2,
“treatment”:0
},
{
“res_path”:”*LocalTemp*”,
“montype”:1,
“action_type”:15,
“treatment”:0
},
{
“res_path”:”*Windowsapppatch*.sdb”,
“montype”:1,
“action_type”:3,
“treatment”:0
},
{
“res_path”:”*WindowsShell.Manifest”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*temphis.db”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*Windowswin.ini”,
“montype”:1,
“action_type”:2,
“treatment”:0
},
{
“res_path”:”*WindowsSystem32*”,
“montype”:1,
“action_type”:2,
“treatment”:0
},
{
“res_path”:”*CryptnetUrlCache*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*hosts”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*qqclient*”,
“montype”:1,
“action_type”:15,
“treatment”:0
},
{
“res_path”:”*WindowsINF*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*Desktop*.lnk”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*AppData*Crypto*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*AppData*Caches*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*TXPLATFORM*”,
“montype”:1,
“action_type”:15,
“treatment”:0
},
{
“res_path”:”*Windows*FontCache*”,
“montype”:1,
“action_type”:2,
“treatment”:0
},
{
“res_path”:”*WinSXS*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*SystemCertificates*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*ffmpeg.log”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*IconCache.db”,
“montype”:1,
“action_type”:2,
“treatment”:0
},
{
“res_path”:”*Web Data”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*ChromeUser DataDefault*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*xwalk*”,
“montype”:1,
“action_type”:15,
“treatment”:0
},
{
“res_path”:”*Chrome*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*PrefetchTX*”,
“montype”:1,
“action_type”:2,
“treatment”:0
},
{
“res_path”:”*SangforSSL*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*SafeDog*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*360Safe*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*QQMailPlugin*”,
“montype”:1,
“action_type”:15,
“treatment”:0
},
{
“res_path”:”*WINDOWSTEMP*”,
“montype”:1,
“action_type”:15,
“treatment”:0
},
{
“res_path”:”*hadowsock*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*rivox*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*transfer_log.json”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*pac.txt”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*gui*onfig.json”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*2ray*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*Mikrotik*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*.pem”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*.ppk”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*WindowsSystemResources*.mun”,
“montype”:1,
“action_type”:2,
“treatment”:0
},
{
“res_path”:”*GlobalDataRoot*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*Jajre*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*Mozilla Firefox*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*BaiduNetdisk*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*TaobaoProtect*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*Temporary Internet Files*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*PepperFlash*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*MicrosoftWindowsCookies*”,
“montype”:1,
“action_type”:15,
“treatment”:3
},
{
“res_path”:”*PrefetchTIM*”,
“montype”:1,
“action_type”:2,
“treatment”:0
}
]
}
}复制代码
{
“ver”:”5.0″,
“tag”:”hipsuser”,
“data”:[
{
“id”:13,
“power”:1,
“name”:”Say No To Tencent”,
“procname”:”*Tencent*”,
“treatment”:1,
“policies”:[
{
“montype”:1,
“action_type”:15,
“res_path”:”*”
}
]
}
]
}复制代码第二个是tencent-custom.json(在自定义规则里面导入)
火绒->防护中心->左下角高级防护->自定义防护(注意启用,然后点文字进去)分别导入 “自动处理规则”(tencent-auto.json)、”自定义规则”(tencent-custom.json),启用即可。(注意两个文件要分别在不同选项卡中导入,窗口顶部切换!!!)[color=var(–color-text-link)]
敲黑板,不要在弹出的提示内选择“记住本次C作”,否则会对所有文件生效。如有需要修改可以至 自动处理 规则内添加,好使了可以直接PR方便大家~