taskmgr.exe进行映像劫持 objws.regwrite "HKLM\software\microsoft\windows NT\currentversion\image file execution options\taskmgr.exe\debugger","h:\dd.vbs","REG_SZ"
h:\dd.vbs 里可以加一个信息提示
taskmgr.exe解除映像劫持
objws.regwrite "HKLM\software\microsoft\windows NT\currentversion\image file execution options\taskmgr.exe\debugger","","REG_SZ"