wmiexec.vbs(通过135端口执行命令)
set ww=createobject("wbemscripting.swbemlocator")
set cc=ww.connectserver("172.20.241.218","root/cimv2","user","password")
Set pp=cc.get("Win32_Process")
pp.create("cmd /c temp.exe")
用vbs通过135端口执行命令的脚本
原文:http://www.jb51.net/article/14894.htm