卸载Wscript.Shell，FSO，stream等对象，防止被提权挂马
Wscript.Shell,FSO和stream对象

1、卸载(关闭)Wscript.Shell
regsvr32 /u %windir%\system32\wshom.ocx

2、卸载(关闭)FSO
regsvr32 /u %windir%\system32\scrrun.dll

3、卸载(关闭)Shell.application
regsvr32 /u %windir%\system32\shell32.dll

4、卸载(关闭)Wscript.network
regsvr32 /u %windir%\system32\Wshext.dll

恢复的话，去掉/u就行了