Win2003 Wscript.Shell and Shell Component Security Chapter _win Server

Uninstall and remove the WScript component
Wscript.Shell can invoke the system kernel to run DOS basic commands, which is harmful to system security. We're going to uninstall and remove the component to prevent this kind of trojan from harm.
Execute "regsvr32/u wshom.ocx" in command-line mode
Execute "regsvr32/u wshext.dll" in command-line mode
Search for Wshom.ocx and delete all the content you have searched for. If the WINODWS System File Protection dialog box pops up, confirm the deletion
Search for Wshext.dll and delete all the content you have searched for. If the WINODWS System File Protection dialog box pops up, confirm the deletion
Open Registry Editor, search the item "wscript.network", delete the contents of the search
Open Registry Editor, search the item "wscript.network.1", delete the contents of the search
Open Registry Editor, search for "{093ff999-1ea0-4079-9525-9614c3504b74}", and delete the contents of the search
Open Registry Editor, search the item "Wscript.Shell", delete the contents of the search
Open Registry Editor, search the item "WSCRIPT.SHELL.1", delete the contents of the search
Open Registry Editor, search for "{73c24dd5-d70a-438b-8a42-98424b88afb8}", and delete the contents of the search
Uninstall and remove Shell components
Execute "regsvr32/u shell32.dll" in command-line mode
Open Registry Editor, search the item "shell.application", delete the contents of the search
Open Registry Editor, search the item "Shell.application.1", delete the contents of the search
Open Registry Editor, search for "{13709620-c279-11ce-a49e-444553540000}", and delete the contents of the search

More references are available for reference
Close the Web site's Wscript.Shell command line execution