通过Windows组策略限制证书组织流氓软件的安装运行

https://liwei2.com/2015/11/27/378.html
关于如何提取证书，请参阅：https://www.zhihu.com/question/26917038
http://www.appinn.com/ 小众软件,不错的站点.

关于如何拉黑证书,代码如下:

@echo off
:: BatchGotAdmin
:-------------------------------------
REM  --> Check for permissions
>nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"  

REM --> If error flag set, we do not have admin.
if '%errorlevel%' NEQ '0' (
    echo Requesting administrative privileges...
    goto UACPrompt
) else ( goto gotAdmin )  

:UACPrompt
    echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
    echo UAC.ShellExecute "%~s0", "", "", "runas", 1 >> "%temp%\getadmin.vbs"  

    "%temp%\getadmin.vbs"
    exit /B  

:gotAdmin
    if exist "%temp%\getadmin.vbs" ( del "%temp%\getadmin.vbs" )
    pushd "%CD%"
    CD /D "%~dp0"
:--------------------------------------  

for /R %%s in (.,*.cer) do (
certutil -addstore -user -f “Disallowed” %%s
)

pause