API tools faq
paste
Advertisement
uniQ168

Windows 10 TNBT v6.5.6 official

uniQ168
Aug 2nd, 2015
10,390
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Batch 130.42 KB | None | 0 0
raw download clone embed print report
  1. @ECHO OFF
  2.  
  3. REM -- Sets global variables
  4. COLOR 1F
  5. SET V=6.5.6
  6. TITLE Windows 10 TNBT: The Next Big Tweak v%V%
  7.  
  8. REM -- Checks boot state and skips elevation in safemode
  9. COLOR 1F
  10. wmic COMPUTERSYSTEM GET BootupState | findstr /i "fail-safe" > NUL
  11. IF %ERRORLEVEL% EQU 0 GOTO menu_start
  12.  
  13. REM -- Elevates script if necessary
  14. "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system" > NUL 2>&1
  15. IF '%ERRORLEVEL%' NEQ '0' (GOTO admin_no) ELSE (GOTO admin_yes)
  16. :admin_no
  17. ECHO Set UAC = CreateObject^("Shell.Application"^) > "%TEMP%\runasadmin.vbs"
  18. ECHO UAC.ShellExecute "%~s0", "", "", "runas", 1 >> "%TEMP%\runasadmin.vbs"
  19. "%TEMP%\runasadmin.vbs"
  20. EXIT /B
  21. :admin_yes
  22. IF EXIST "%TEMP%\runasadmin.vbs" ( DEL "%TEMP%\runasadmin.vbs" )
  23. PUSHD "%CD%"
  24. CD /D "%~dp0"
  25.  
  26. REM -- Checks your Windows version
  27. ver | findstr /i "10.0.10586" > NUL
  28. IF %ERRORLEVEL% EQU 0 SET B=VERSION 1511 (BUILD 10586)&GOTO menu_start
  29. ver | findstr /i "10.0.14393" > NUL
  30. IF %ERRORLEVEL% EQU 0 SET B=VERSION 1607 (BUILD 14393)&GOTO menu_start
  31. SET B=YOUR VERSION IS UNTESTED!
  32. GOTO win_untested
  33.  
  34. REM -- Warns user that the script was not tested with his Windows version
  35. :win_untested
  36. COLOR 4F
  37. CLS
  38. ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ»
  39. ECHO º         WINDOWS 10 TNBT: THE NEXT BIG TWEAK         º
  40. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  41. ECHO º  CURRENT REVISION: v%V%                           º
  42. ECHO º  AUTHOR: SEBASTIAN KOEHLING                         º
  43. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  44. ECHO º                                                     º
  45. ECHO º  WARNING                                            º
  46. ECHO º  The Windows version you are using was not tested   º
  47. ECHO º  with this revision of TNBT. You might encounter    º
  48. ECHO º  errors or system malfunctions when using certain   º
  49. ECHO º  tweaks and features.                               º
  50. ECHO º                                                     º
  51. ECHO º  Use TNBT anyway?                                   º
  52. ECHO º                                                     º
  53. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  54. ECHO º  [1] I'll take the risk        [2] Exit script      º
  55. ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ
  56. SET /p menu0="Select: "
  57. IF '%menu0%' == '1' GOTO menu_start
  58. IF '%menu0%' == '2' EXIT
  59.  
  60. REM -- Main Menu
  61. :menu_start
  62. COLOR 1F
  63. CLS
  64. ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ»
  65. ECHO º         WINDOWS 10 TNBT: THE NEXT BIG TWEAK         º
  66. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  67. ECHO º  CURRENT REVISION: v%V%                           º
  68. ECHO º  AUTHOR: SEBASTIAN KOEHLING                         º
  69. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  70. ECHO º  DETECTED WINDOWS: %B%       º
  71. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  72. ECHO º                                                     º
  73. ECHO º  MAIN MENU                                          º
  74. ECHO º    [1] Windows Tweaks                               º
  75. ECHO º    [2] Windows Features                             º
  76. ECHO º    [3] Windows Network                              º
  77. ECHO º    [4] Diagnostic / Repair Tools                    º
  78. ECHO º    [5] Windows Activation Tools                     º
  79. ECHO º    [6] Anti-Ransomware Process Faker                º
  80. ECHO º                                                     º
  81. ECHO º    [7] Check Windows Version                        º
  82. ECHO º                                                     º
  83. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  84. ECHO º    [0] Exit                                         º
  85. ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ
  86. ECHO.
  87. SET /p menu1="Select: "
  88. IF '%menu1%' == '1' GOTO menu_tweaks
  89. IF '%menu1%' == '2' GOTO menu_features
  90. IF '%menu1%' == '3' GOTO menu_network
  91. IF '%menu1%' == '4' GOTO menu_diagnostic
  92. IF '%menu1%' == '5' GOTO menu_activation
  93. IF '%menu1%' == '6' GOTO menu_fakeprocess
  94. IF '%menu1%' == '7' WINVER & GOTO menu_start
  95. IF '%menu1%' == '0' EXIT
  96. GOTO menu_start
  97.  
  98. REM -- Tweaks Menu
  99. :menu_tweaks
  100. COLOR 1F
  101. CLS
  102. ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ»
  103. ECHO º         WINDOWS 10 TNBT: THE NEXT BIG TWEAK         º
  104. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  105. ECHO º  CURRENT REVISION: v%V%                           º
  106. ECHO º  AUTHOR: SEBASTIAN KOEHLING                         º
  107. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  108. ECHO º  DETECTED WINDOWS: %B%       º
  109. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  110. ECHO º                                                     º
  111. ECHO º  WINDOWS TWEAKS                                     º
  112. ECHO º    [1] Apply Registry Tweaks                        º
  113. ECHO º    [2] Apply Services Tweaks                        º
  114. ECHO º    [3] Apply Thirdparty Services Tweaks             º
  115. ECHO º    [4] Apply Scheduled Tasks Tweaks                 º
  116. ECHO º                                                     º
  117. ECHO º    [5] Recover Registry                             º
  118. ECHO º    [6] Recover Services                             º
  119. ECHO º    [7] Recover Thirdparty Services                  º
  120. ECHO º    [8] Recover Scheduled Tasks                      º
  121. ECHO º                                                     º
  122. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  123. ECHO º    [0] Back to Main Menu                            º
  124. ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ
  125. ECHO.
  126. SET /p menu2="Select: "
  127. IF '%menu2%' == '1' GOTO seq_tweakregistry
  128. IF '%menu2%' == '2' GOTO seq_tweakservices
  129. IF '%menu2%' == '3' GOTO seq_tweaktpservices
  130. IF '%menu2%' == '4' GOTO seq_tweakscheduled
  131. IF '%menu2%' == '5' GOTO seq_recoverregistry
  132. IF '%menu2%' == '6' GOTO seq_recoverservices
  133. IF '%menu2%' == '7' GOTO seq_recovertpservices
  134. IF '%menu2%' == '8' GOTO seq_recoverscheduled
  135. IF '%menu2%' == '0' GOTO menu_start
  136. GOTO menu_start
  137.  
  138. REM -- Registry Tweaks start
  139. :seq_tweakregistry
  140. COLOR 2F
  141. ECHO.
  142.  
  143. REM -- Disables automatic app updates
  144. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /v "AutoDownload" /t REG_DWORD /d 4 /f > NUL 2>&1
  145.  
  146. REM -- Disables Aero Shake
  147. reg add "HKCU\Software\Policies\Microsoft\Windows\Explorer" /v NoWindowMinimizingShortcuts /t REG_DWORD /d 1 /f
  148. reg add "HKLM\Software\Policies\Microsoft\Windows\Explorer" /v NoWindowMinimizingShortcuts /t REG_DWORD /d 1 /f
  149.  
  150. REM -- Disables Notifications in File Explorer in Windows 10
  151. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v ShowSyncProviderNotifications /t REG_DWORD /d 0 /f
  152.  
  153. REM -- Enables Transparency, sets accent color, activates window/taskbar colorization
  154. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v EnableTransparency /t REG_DWORD /d 1 /f
  155. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v ColorPrevalence /t REG_DWORD /d 1 /f
  156. reg add "HKCU\Software\Microsoft\Windows\DWM" /v ColorPrevalence /t REG_DWORD /d 1 /f
  157. reg add "HKCU\Software\Microsoft\Windows\DWM" /v AccentColor /t REG_DWORD /d 0x00d77800 /f
  158. reg add "HKCU\Software\Microsoft\Windows\DWM" /v Composition /t REG_DWORD /d 1 /f
  159. reg add "HKCU\Software\Microsoft\Windows\DWM" /v ColorizationColor /t REG_DWORD /d 0xc40078d7 /f
  160. reg add "HKCU\Software\Microsoft\Windows\DWM" /v ColorizationAfterglow /t REG_DWORD /d 0xc40078d7 /f
  161. reg add "HKCU\Software\Microsoft\Windows\DWM" /v ColorizationGlassAttribute /t REG_DWORD /d 0 /f
  162. reg add "HKCU\Software\Microsoft\Windows\DWM" /v EnableWindowColorization /t REG_DWORD /d 1 /f
  163.  
  164. REM -- Enables an additional security feature for Windows Defender
  165. reg add "HKLM\Software\Policies\Microsoft\Windows Defender\MpEngine" /v MpEnablePus /t REG_DWORD /d 1 /f
  166.  
  167. REM -- Disables Driver Signing
  168. reg add "HKLM\Software\Microsoft\Driver Signing" /v "Policy" /t REG_BINARY /d "01" /f
  169.  
  170. REM -- Sets Logon Background to accent color
  171. reg add "HKLM\Software\Policies\Microsoft\Windows\System" /v "DisableLogonBackgroundImage" /t REG_DWORD /d 1 /f
  172.  
  173. REM -- Removes Pin to start from context menus
  174. reg delete "HKEY_CLASSES_ROOT\exefile\shellex\ContextMenuHandlers\PintoStartScreen" /f > NUL 2>&1
  175. reg delete "HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\PintoStartScreen" /f > NUL 2>&1
  176. reg delete "HKEY_CLASSES_ROOT\mscfile\shellex\ContextMenuHandlers\PintoStartScreen" /f > NUL 2>&1
  177.  
  178. REM -- Disables various Telemetry and data collection/synchronization settings (ShutUp10 equivalent)
  179. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Device Metadata" /v PreventDeviceMetadataFromNetwork /t REG_DWORD /d 1 /f
  180. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d 0 /f
  181. reg add "HKLM\Software\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d 0 /f
  182. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "Start_TrackDocs" /t REG_DWORD /d 0 /f
  183. reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "Disabled" /t REG_DWORD /d 1 /f
  184. reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "Disabled" /t REG_DWORD /d 1 /f
  185. reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "DontSendAdditionalData" /t REG_DWORD /d 1 /f
  186. reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "DontSendAdditionalData" /t REG_DWORD /d 1 /f
  187. reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "DontShowUI" /t REG_DWORD /d 1 /f
  188. reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "DontShowUI" /t REG_DWORD /d 1 /f
  189. reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "LoggingDisabled" /t REG_DWORD /d 1 /f
  190. reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "LoggingDisabled" /t REG_DWORD /d 1 /f
  191. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application-Experience/Program-Telemetry" /v "Enabled" /t REG_DWORD /d 0 /f
  192. reg add "HKLM\Software\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d 0 /f
  193. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d 0 /f
  194. reg add "HKLM\Software\Policies\Microsoft\SQMClient\Windows" /v "CEIPEnable" /t REG_DWORD /d 0 /f
  195. reg add "HKLM\Software\Policies\Microsoft\Windows\AppCompat" /v "AITEnable" /t REG_DWORD /d 0 /f
  196. reg add "HKLM\Software\Policies\Microsoft\Windows\AppCompat" /v DisableInventory /t REG_DWORD /d 1 /f
  197. reg add "HKLM\Software\Policies\Microsoft\Windows\AdvertisingInfo" /v "DisabledByGroupPolicy" /t REG_DWORD /d 1 /f
  198. reg add "HKLM\Software\Policies\Microsoft\Windows\AppCompat" /v "DisableUAR" /t REG_DWORD /d 1 /f
  199. reg add "HKLM\Software\Policies\Microsoft\Windows\LocationAndSensors" /v "DisableLocation" /t "REG_DWORD" /d 1 /f
  200. reg add "HKLM\Software\Policies\Microsoft\Windows\LocationAndSensors" /v "DisableLocationScripting" /t "REG_DWORD" /d 1 /f
  201. reg add "HKLM\Software\Policies\Microsoft\Windows\LocationAndSensors" /v "DisableWindowsLocationProvider" /t "REG_DWORD" /d 1 /f
  202. reg add "HKLM\Software\Policies\Microsoft\Biometrics" /v Enabled /t REG_DWORD /d 0 /f
  203. reg add "HKLM\Software\Policies\Microsoft\MRT" /v DontReportInfectionInformation /t REG_DWORD /d 1 /f
  204. reg add "HKLM\Software\Policies\Microsoft\Windows\AppCompat" /v DisableInventory /t REG_DWORD /d 1 /f
  205. reg add "HKLM\Software\Policies\Microsoft\Windows\DeliveryOptimization" /v DODownloadMode /t REG_DWORD /d 0 /f
  206. reg add "HKLM\Software\Policies\Microsoft\Windows\HandwritingErrorReports" /v PreventHandwritingErrorReports /t REG_DWORD /d 1 /f
  207. reg add "HKLM\Software\Policies\Microsoft\Windows\LocationAndSensors" /v DisableSensors /t REG_DWORD /d 1 /f
  208. reg add "HKLM\Software\Policies\Microsoft\Windows\Personalization" /v NoLockScreenCamera /t REG_DWORD /d 1 /f
  209. reg add "HKLM\Software\Policies\Microsoft\Windows\TabletPC" /v PreventHandwritingDataSharing /t REG_DWORD /d 1 /f
  210. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v AllowCortana /t REG_DWORD /d 0 /f
  211. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v AllowSearchToUseLocation /t REG_DWORD /d 0 /f
  212. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v DisableWebSearch /t REG_DWORD /d 1 /f
  213. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v ConnectedSearchUseWeb /t REG_DWORD /d 0 /f
  214. reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet" /v SpynetReporting /t REG_DWORD /d 0 /f
  215. reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet" /v SubmitSamplesConsent /t REG_DWORD /d 0 /f
  216. reg add "HKLM\Software\Policies\Microsoft\WMDRM" /v DisableOnline /t REG_DWORD /d 1 /f
  217. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection" /v AllowTelemetry /t REG_DWORD /d 0 /f
  218. reg add "HKLM\System\ControlSet001\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener" /v Start /t REG_DWORD /d 0 /f
  219. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{A8804298-2D5F-42E3-9531-9C8C39EB29CE}" /v Value /t REG_SZ /d Deny /f
  220. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\LooselyCoupled" /v Value /t REG_SZ /d Deny /f
  221. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{C1D23ACC-752B-43E5-8448-8D0E519CD6D6}" /v Value /t REG_SZ /d Deny /f
  222. reg add "HKCU\Software\Microsoft\Personalization\Settings" /v AcceptedPrivacyPolicy /t REG_DWORD /d 0 /f
  223. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Language" /v Enabled /t REG_DWORD /d 0 /f
  224. reg add "HKCU\Software\Microsoft\InputPersonalization" /v RestrictImplicitInkCollection /t REG_DWORD /d 1 /f
  225. reg add "HKCU\Software\Microsoft\InputPersonalization" /v RestrictImplicitTextCollection /t REG_DWORD /d 1 /f
  226. reg add "HKCU\Software\Microsoft\InputPersonalization\TrainedDataStore" /v HarvestContacts /t REG_DWORD /d 0 /f
  227. reg add "HKCU\Software\Microsoft\Input\TIPC" /v Enabled /t REG_DWORD /d 0 /f
  228. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /v Enabled /t REG_DWORD /d 0 /f
  229. reg add "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /v Enabled /t REG_DWORD /d 0 /f
  230. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{A8804298-2D5F-42E3-9531-9C8C39EB29CE}" /v Value /t REG_SZ /d Deny /f
  231. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{E5323777-F976-4f5b-9B55-B94699C46E44}" /v Value /t REG_SZ /d Deny /f
  232. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" /v Value /t REG_SZ /d Deny /f
  233. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{2EEF81BE-33FA-4800-9670-1CD474972C3F}" /v Value /t REG_SZ /d Deny /f
  234. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{992AFA70-6F47-4148-B3E9-3003349C1548}" /v Value /t REG_SZ /d Deny /f
  235. reg add "HKCU\Control Panel\International\User Profile" /v HttpAcceptLanguageOptOut /t REG_DWORD /d 1 /f
  236. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeliveryOptimization" /v SystemSettingsDownloadMode /t REG_DWORD /d 0 /f
  237. reg add "HKLM\System\CurrentControlSet\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener" /v Start /t REG_DWORD /d 0 /f
  238. reg add "HKLM\System\CurrentControlSet\Control\WMI\AutoLogger\SQMLogger" /v Start /t REG_DWORD /d 0 /f
  239. reg add "HKCU\Software\Microsoft\Siuf\Rules" /v "NumberOfSIUFInPeriod" /t REG_DWORD /d 0 /f
  240. reg delete "HKCU\Software\Microsoft\Siuf\Rules" /v PeriodInNanoSeconds /f > NUL 2>&1
  241. reg add "HKCU\Software\Microsoft\Siuf\Rules" /v PeriodInNanoSeconds /t REG_DWORD /d 0 /f
  242. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" /v Value /t REG_SZ /d Deny /f
  243. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{E5323777-F976-4f5b-9B55-B94699C46E44}" /v Value /t REG_SZ /d Deny /f
  244. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{2EEF81BE-33FA-4800-9670-1CD474972C3F}" /v Value /t REG_SZ /d Deny /f
  245. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{D89823BA-7180-4B81-B50C-7E471E6121A3}" /v Value /t REG_SZ /d Deny /f
  246. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{992AFA70-6F47-4148-B3E9-3003349C1548}" /v Value /t REG_SZ /d Deny /f
  247. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{A8804298-2D5F-42E3-9531-9C8C39EB29CE}" /v Value /t REG_SZ /d Deny /f
  248. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{C1D23ACC-752B-43E5-8448-8D0E519CD6D6}" /v Value /t REG_SZ /d Deny /f
  249. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync" /v SyncPolicy /t REG_DWORD /d 5 /f
  250. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Accessibility" /v Enabled /t REG_DWORD /d 0 /f
  251. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\AppSync" /v Enabled /t REG_DWORD /d 0 /f
  252. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\BrowserSettings" /v Enabled /t REG_DWORD /d 0 /f
  253. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Credentials" /v Enabled /t REG_DWORD /d 0 /f
  254. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\DesktopTheme" /v Enabled /t REG_DWORD /d 0 /f
  255. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Language" /v Enabled /t REG_DWORD /d 0 /f
  256. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Personalization" /v Enabled /t REG_DWORD /d 0 /f
  257. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\StartLayout" /v Enabled /t REG_DWORD /d 0 /f
  258. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Windows" /v Enabled /t REG_DWORD /d 0 /f
  259. reg add "HKLM\System\CurrentControlSet\Services\lfsvc\Service\Configuration" /v Status /t REG_DWORD /d 0 /f
  260. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Sensor\Overrides\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" /v SensorPermissionState /t REG_DWORD /d 0 /f
  261. reg add "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Sensor\Permissions\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" /v SensorPermissionState /t REG_DWORD /d 0 /f
  262. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" /v Value /t REG_SZ /d Deny /f
  263.  
  264. REM -- Enables "This PC" icon on deksktop
  265. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{20D04FE0-3AEA-1069-A2D8-08002B30309D}" /t REG_DWORD /d 0 /f
  266.  
  267. REM -- Enables classic Control Panel view
  268. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "ForceClassicControlPanel" /t REG_DWORD /d 1 /f
  269.  
  270. reg add "HKCU\Control Panel\Accessibility\StickyKeys" /v "Flags" /t REG_SZ /d "506" /f
  271. reg add "HKCU\Control Panel\Accessibility\Keyboard Response" /v "Flags" /t REG_SZ /d "122" /f
  272.  
  273. REM -- Disables bing web search
  274. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "AllowCortana" /t REG_DWORD /d 0 /f
  275. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "BingSearchEnabled" /t REG_DWORD /d 0 /f
  276. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "CortanaEnabled" /t REG_DWORD /d 0 /f
  277. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f
  278. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d 0 /f
  279. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "DisableWebSearch" /t REG_DWORD /d 1 /f
  280. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchUseWeb" /t REG_DWORD /d 0 /f
  281. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchUseWebOverMeteredConnections" /t REG_DWORD /d 0 /f
  282.  
  283. REM -- Disables automatic driver downloads from Windows Update
  284. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\DriverSearching" /v "SearchOrderConfig" /t REG_DWORD /d 2 /f
  285.  
  286. REM -- Shows file extensions
  287. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f
  288.  
  289. REM -- Sets default view for explorer to "This PC"
  290. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "LaunchTo" /t REG_DWORD /d 1 /f
  291.  
  292. REM -- Hides Task View Button
  293. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f
  294.  
  295. REM -- Disable Tips, Notifications and Notification Center
  296. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\SoftLanding" /v "Enabled" /t REG_DWORD /d 0 /f
  297. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d 0 /f
  298. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v "NOC_GLOBAL_SETTING_TOASTS_ENABLED" /t REG_DWORD /d 0 /f
  299. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v "NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK" /t REG_DWORD /d 0 /f
  300. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v "NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK" /t REG_DWORD /d 0 /f
  301. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v "NOC_GLOBAL_SETTING_SUPRESS_TOASTS_WHILE_DUPLICATING" /t REG_DWORD /d 0 /f
  302. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\PushNotifications" /v "ToastEnabled" /t REG_DWORD /d 0 /f
  303. reg add "HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" /v "NoToastApplicationNotification" /t REG_DWORD /d 1 /f
  304. reg add "HKCU\Software\Policies\Microsoft\Windows\Explorer" /v "DisableNotificationCenter" /t REG_DWORD /d 1 /f
  305.  
  306. REM -- Disables security warnings
  307. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations" /v "DefaultFileTypeRisk" /t REG_DWORD /d 1808 /f
  308. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" /v "SaveZoneInformation" /t REG_DWORD /d 1 /f
  309.  
  310. REM -- Sets timeout for the System to end processes/services after the user tries to shutdown
  311. reg add "HKCU\Control Panel\Desktop" /v "WaitToKillAppTimeout" /t REG_SZ /d "10000" /f
  312. reg add "HKLM\System\CurrentControlSet\Control" /v "WaitToKillServiceTimeout" /t REG_SZ /d "10000" /f
  313.  
  314. REM -- Improves responsiveness of your system by removing delays
  315. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v "StartupDelayInMSec" /t REG_DWORD /d 75 /f
  316. reg add "HKCU\Control Panel\Desktop" /v "MenuShowDelay" /t REG_DWORD /d 75 /f
  317. reg add "HKCU\Control Panel\Mouse" /v "MouseHoverTime" /t REG_SZ /d 75 /f
  318.  
  319. REM -- Disables automatic maintenance
  320. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance" /v "MaintenanceDisabled" /t REG_DWORD /d "1" /f
  321.  
  322. REM -- Disables Encrypting File System
  323. reg add "HKLM\System\CurrentControlSet\Control\FileSystem" /v "NtfsDisableEncryption" /t REG_DWORD /d 1 /f
  324. reg add "HKLM\System\CurrentControlSet\Control\FileSystem" /v "NtfsDisableLastAccessUpdate" /t REG_DWORD /d 1 /f
  325.  
  326. REM -- Disables Active Desktop
  327. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "ForceActiveDesktopOn" /t REG_DWORD /d 0 /f
  328. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoActiveDesktop" /t REG_DWORD /d 1 /f
  329. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoActiveDesktopChanges" /t REG_DWORD /d 1 /f
  330.  
  331. REM -- Disables Smart Screen
  332. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t REG_SZ /d "Off" /f
  333. reg add "HKLM\Software\Policies\Microsoft\Windows\System" /v "EnableSmartScreen" /t "REG_DWORD" /d 0 /f
  334. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d 0 /f
  335.  
  336. REM -- Disables Lockscreen (no longer working on Windows Core/Pro 1607)
  337. reg add "HKLM\Software\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d 1 /f
  338.  
  339. REM -- Disables Wifi Sense
  340. reg add "HKLM\Software\Microsoft\WcmSvc\wifinetworkmanager\config" /v AutoConnectAllowedOEM /t REG_DWORD /d 0 /f
  341. reg add "HKLM\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots" /v "value" /t REG_DWORD /d 0 /f
  342. reg add "HKLM\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting" /v "value" /t REG_DWORD /d 0 /f
  343.  
  344. REM -- Disables sending files to encrypted drives
  345. reg add "HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices" /v "TCGSecurityActivationDisabled" /t REG_DWORD /d 0 /f
  346.  
  347. REM -- Disables OneDrive Sync
  348. reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableFileSyncNGSC" /t REG_DWORD /d 1 /f
  349.  
  350. REM -- Disables settings synchronization
  351. reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableSettingSync" /t REG_DWORD /d 2 /f
  352. reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableSettingSyncUserOverride" /t REG_DWORD /d 1 /f
  353. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application-Experience/Steps-Recorder" /v "Enabled" /t REG_DWORD /d 0 /f
  354. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /v "DownloadMode" /t REG_DWORD /d 0 /f
  355. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /v "DODownloadMode" /t REG_DWORD /d 0 /f
  356.  
  357. REM -- Increases wallpaper image quality
  358. reg add "HKCU\Control Panel\Desktop" /v "JPEGImportQuality" /t REG_DWORD /d 100 /f
  359.  
  360. REM -- Disables automatic update for downloaded maps
  361. reg add "HKLM\Software\Policies\Microsoft\Windows\Maps" /v "AutoDownloadAndUpdateMapData" /t "REG_DWORD" /d 0 /f
  362.  
  363. REM -- Removes OneDrive from autorun and explorer
  364. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "OneDrive" /f > NUL 2>&1
  365. reg add "HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d 0 /f
  366. reg add "HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d 0 /f > NUL 2>&1
  367.  
  368. REM -- Deactivate screensaver
  369. reg add "HKCU\Control Panel\Desktop" /v "ScreenSaveActive" /t REG_SZ /d 0 /f
  370.  
  371. REM -- Disables GameDVR
  372. reg add "HKCU\System\GameConfigStore" /v "GameDVR_Enabled" /t REG_DWORD /d 0 /f
  373. reg add "HKLM\Software\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t REG_DWORD /d 0 /f
  374. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\GameDVR" /v "AppCaptureEnabled" /t REG_DWORD /d 0 /f
  375.  
  376. REM -- Removes frequent/recent entries from explorer
  377. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "ShowFrequent" /t REG_DWORD /d 0 /f
  378. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "ShowRecent" /t REG_DWORD /d 0 /f
  379.  
  380. REM -- Disables CD/DVD/USB autorun
  381. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoDriveTypeAutorun" /t REG_DWORD /d "0xFF" /f
  382. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoDriveTypeAutorun" /t REG_DWORD /d "0xFF" /f
  383.  
  384. REM -- Sets computers active hours to 10-22h
  385. reg add "HKLM\Software\Microsoft\WindowsUpdate\UX\Settings" /v "ActiveHoursStart" /t REG_DWORD /d "10" /f
  386. reg add "HKLM\Software\Microsoft\WindowsUpdate\UX\Settings" /v "ActiveHoursEnd" /t REG_DWORD /d "22" /f
  387.  
  388. REM -- Removes "Scan with Windows defender" from context menu (only works if WD is disabled)
  389. reg delete "HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\EPP" /f > NUL 2>&1
  390. reg delete "HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\EPP" /f > NUL 2>&1
  391. reg delete "HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\EPP" /f > NUL 2>&1
  392.  
  393. REM -- Disables reveal password button
  394. reg add "HKLM\Software\Policies\Microsoft\Windows\CredUI" /v DisablePasswordReveal /t REG_DWORD /d 1 /f
  395.  
  396. REM -- Internet Explorer / Microsoft Edge optimizations
  397. reg add "HKLM\Software\Policies\Microsoft\Internet Explorer\Suggested Sites" /v Enabled /t REG_DWORD /d 1 /f
  398. reg add "HKLM\Software\Policies\Microsoft\Internet Explorer" /v AllowServicePoweredQSA /t REG_DWORD /d 1 /f
  399. reg add "HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete" /v AutoSuggest /t REG_SZ /d no /f
  400. reg add "HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions" /v NoUpdateCheck /t REG_DWORD /d 1 /f
  401. reg add "HKLM\Software\Policies\Microsoft\Internet Explorer\Geolocation" /v PolicyDisableGeolocation /t REG_DWORD /d 1 /f
  402. reg add "HKLM\Software\Policies\Microsoft\MicrosoftEdge\Main" /v "Use FormSuggest" /t REG_SZ /d no /f
  403. reg add "HKLM\Software\Policies\Microsoft\MicrosoftEdge\Main" /v DoNotTrack /t REG_DWORD /d 0 /f
  404. reg add "HKLM\Software\Policies\Microsoft\MicrosoftEdge\Main" /v "FormSuggest Passwords" /t REG_SZ /d no /f
  405. reg add "HKLM\Software\Policies\Microsoft\MicrosoftEdge\SearchScopes" /v ShowSearchSuggestionsGlobal /t REG_DWORD /d 0 /f
  406. reg add "HKLM\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v EnabledV9 /t REG_DWORD /d 0 /f
  407.  
  408. REM -- Prevent device metadata retrieval from the Internet
  409. reg add "HKLM\Software\Policies\Microsoft\Windows\Device Metadata" /v PreventDeviceMetadataFromNetwork /t REG_DWORD /d 1 /f
  410.  
  411. REM -- Disable Windows Updates for Malicious Software Removal Tool
  412. reg add "HKLM\Software\Policies\Microsoft\MRT" /v DontOfferThroughWUAU /t REG_DWORD /d 1 /f
  413.  
  414. REM -- Disables Aero Peek
  415. reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v DisablePreviewDesktop /t REG_DWORD /d 1 /f
  416.  
  417. REM -- Sets Windows sound scheme to "No Sounds"
  418. reg add "HKCU\AppEvents\Schemes" /t REG_SZ /d ".None" /f
  419. reg add "HKCU\AppEvents\Schemes\Apps\.Default\.Default\.Current" /t REG_SZ /d "" /f
  420. reg add "HKCU\AppEvents\Schemes\Apps\.Default\AppGPFault\.Current" /t REG_SZ /d "" /f
  421. reg add "HKCU\AppEvents\Schemes\Apps\.Default\CCSelect\.Current" /t REG_SZ /d "" /f
  422. reg add "HKCU\AppEvents\Schemes\Apps\.Default\ChangeTheme\.Current" /t REG_SZ /d "" /f
  423. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Close\.Current" /t REG_SZ /d "" /f
  424. reg add "HKCU\AppEvents\Schemes\Apps\.Default\CriticalBatteryAlarm\.Current" /t REG_SZ /d "" /f
  425. reg add "HKCU\AppEvents\Schemes\Apps\.Default\DeviceConnect\.Current" /t REG_SZ /d "" /f
  426. reg add "HKCU\AppEvents\Schemes\Apps\.Default\DeviceDisconnect\.Current" /t REG_SZ /d "" /f
  427. reg add "HKCU\AppEvents\Schemes\Apps\.Default\DeviceFail\.Current" /t REG_SZ /d "" /f
  428. reg add "HKCU\AppEvents\Schemes\Apps\.Default\FaxBeep\.Current" /t REG_SZ /d "" /f
  429. reg add "HKCU\AppEvents\Schemes\Apps\.Default\LowBatteryAlarm\.Current" /t REG_SZ /d "" /f
  430. reg add "HKCU\AppEvents\Schemes\Apps\.Default\MailBeep\.Current" /t REG_SZ /d "" /f
  431. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Maximize\.Current" /t REG_SZ /d "" /f
  432. reg add "HKCU\AppEvents\Schemes\Apps\.Default\MenuCommand\.Current" /t REG_SZ /d "" /f
  433. reg add "HKCU\AppEvents\Schemes\Apps\.Default\MenuPopup\.Current" /t REG_SZ /d "" /f
  434. reg add "HKCU\AppEvents\Schemes\Apps\.Default\MessageNudge\.Current" /t REG_SZ /d "" /f
  435. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Minimize\.Current" /t REG_SZ /d "" /f
  436. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Default\.Current" /t REG_SZ /d "" /f
  437. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.IM\.Current" /t REG_SZ /d "" /f
  438. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Alarm\.Current" /t REG_SZ /d "" /f
  439. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Alarm10\.Current" /t REG_SZ /d "" /f
  440. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Alarm2\.Current" /t REG_SZ /d "" /f
  441. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Alarm3\.Current" /t REG_SZ /d "" /f
  442. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Alarm4\.Current" /t REG_SZ /d "" /f
  443. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Alarm5\.Current" /t REG_SZ /d "" /f
  444. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Alarm6\.Current" /t REG_SZ /d "" /f
  445. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Alarm7\.Current" /t REG_SZ /d "" /f
  446. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Alarm8\.Current" /t REG_SZ /d "" /f
  447. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Alarm9\.Current" /t REG_SZ /d "" /f
  448. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Call\.Current" /t REG_SZ /d "" /f
  449. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Call10\.Current" /t REG_SZ /d "" /f
  450. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Call2\.Current" /t REG_SZ /d "" /f
  451. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Call3\.Current" /t REG_SZ /d "" /f
  452. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Call4\.Current" /t REG_SZ /d "" /f
  453. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Call5\.Current" /t REG_SZ /d "" /f
  454. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Call6\.Current" /t REG_SZ /d "" /f
  455. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Call7\.Current" /t REG_SZ /d "" /f
  456. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Call8\.Current" /t REG_SZ /d "" /f
  457. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Looping.Call9\.Current" /t REG_SZ /d "" /f
  458. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Mail\.Current" /t REG_SZ /d "" /f
  459. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Proximity\.Current" /t REG_SZ /d "" /f
  460. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.Reminder\.Current" /t REG_SZ /d "" /f
  461. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Notification.SMS\.Current" /t REG_SZ /d "" /f
  462. reg add "HKCU\AppEvents\Schemes\Apps\.Default\Open\.Current" /t REG_SZ /d "" /f
  463. reg add "HKCU\AppEvents\Schemes\Apps\.Default\PrintComplete\.Current" /t REG_SZ /d "" /f
  464. reg add "HKCU\AppEvents\Schemes\Apps\.Default\ProximityConnection\.Current" /t REG_SZ /d "" /f
  465. reg add "HKCU\AppEvents\Schemes\Apps\.Default\RestoreDown\.Current" /t REG_SZ /d "" /f
  466. reg add "HKCU\AppEvents\Schemes\Apps\.Default\RestoreUp\.Current" /t REG_SZ /d "" /f
  467. reg add "HKCU\AppEvents\Schemes\Apps\.Default\ShowBand\.Current" /t REG_SZ /d "" /f
  468. reg add "HKCU\AppEvents\Schemes\Apps\.Default\SystemAsterisk\.Current" /t REG_SZ /d "" /f
  469. reg add "HKCU\AppEvents\Schemes\Apps\.Default\SystemExclamation\.Current" /t REG_SZ /d "" /f
  470. reg add "HKCU\AppEvents\Schemes\Apps\.Default\SystemExit\.Current" /t REG_SZ /d "" /f
  471. reg add "HKCU\AppEvents\Schemes\Apps\.Default\SystemHand\.Current" /t REG_SZ /d "" /f
  472. reg add "HKCU\AppEvents\Schemes\Apps\.Default\SystemNotification\.Current" /t REG_SZ /d "" /f
  473. reg add "HKCU\AppEvents\Schemes\Apps\.Default\SystemQuestion\.Current" /t REG_SZ /d "" /f
  474. reg add "HKCU\AppEvents\Schemes\Apps\.Default\WindowsLogoff\.Current" /t REG_SZ /d "" /f
  475. reg add "HKCU\AppEvents\Schemes\Apps\.Default\WindowsLogon\.Current" /t REG_SZ /d "" /f
  476. reg add "HKCU\AppEvents\Schemes\Apps\.Default\WindowsUAC\.Current" /t REG_SZ /d "" /f
  477. reg add "HKCU\AppEvents\Schemes\Apps\.Default\WindowsUnlock\.Current" /t REG_SZ /d "" /f
  478. reg add "HKCU\AppEvents\Schemes\Apps\sapisvr\DisNumbersSound\.Current" /t REG_SZ /d "" /f
  479. reg add "HKCU\AppEvents\Schemes\Apps\sapisvr\HubOffSound\.Current" /t REG_SZ /d "" /f
  480. reg add "HKCU\AppEvents\Schemes\Apps\sapisvr\HubOnSound\.Current" /t REG_SZ /d "" /f
  481. reg add "HKCU\AppEvents\Schemes\Apps\sapisvr\HubSleepSound\.Current" /t REG_SZ /d "" /f
  482. reg add "HKCU\AppEvents\Schemes\Apps\sapisvr\MisrecoSound\.Current" /t REG_SZ /d "" /f
  483. reg add "HKCU\AppEvents\Schemes\Apps\sapisvr\PanelSound\.Current" /t REG_SZ /d "" /f
  484.  
  485. REM -- Restarts explorer.exe to make registry tweaks visible without reboot
  486. taskkill /IM explorer.exe /F & explorer.exe > NUL 2>&1
  487. ECHO.
  488. ECHO Done...
  489. ECHO Press any key to got back to the menu.
  490. PAUSE > NUL
  491. GOTO menu_tweaks
  492.  
  493. REM -- Services Tweaks start
  494. :seq_tweakservices
  495. COLOR 2F
  496. ECHO.
  497.  
  498. REM -- Disables Windows Telemetry services
  499. sc config diagnosticshub.standardcollector.service start= disabled
  500. net stop diagnosticshub.standardcollector.service > NUL 2>&1
  501. sc config DiagTrack start= disabled
  502. net stop DiagTrack > NUL 2>&1
  503. sc config dmwappushservice start= disabled
  504. net stop dmwappushservice > NUL 2>&1
  505.  
  506. REM -- Disables OneDrive service
  507. sc config OneSyncSvc start= disabled
  508. net stop OneSyncSvc > NUL 2>&1
  509. reg add "HKLM\System\CurrentControlSet\Services\OneSyncSvc_Session1" /v "Start" /t REG_DWORD /d 4 /f > NUL 2>&1
  510.  
  511. REM -- Disables RetailDemo service
  512. sc config RetailDemo start=disabled
  513. net stop RetailDemo > NUL 2>&1
  514.  
  515. REM -- Disables Windows Search service
  516. sc config WSearch start= disabled
  517. net stop WSearch > NUL 2>&1
  518. del "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" /s > NUL 2>&1
  519.  
  520. REM -- Disables Adobe services if installed
  521. sc config AdobeARMservice start= disabled > NUL 2>&1
  522. net stop AdobeARMservice > NUL 2>&1
  523. sc config AGSService start= disabled > NUL 2>&1
  524. net stop AGSService > NUL 2>&1
  525. ECHO.
  526. ECHO Done...
  527. ECHO Press any key to got back to the menu.
  528. PAUSE > NUL
  529. GOTO menu_tweaks
  530.  
  531. REM -- Disabled third party services
  532. :seq_tweaktpservices
  533. COLOR 2F
  534. ECHO.
  535. ECHO Disabling third party services...
  536.  
  537. REM -- Disables Google Chrome Update services
  538. sc config gupdate start= demand > NUL 2>&1
  539. net stop gupdate > NUL 2>&1
  540.  
  541. REM -- Disables Adobe services
  542. sc config AdobeARMservice start= demand > NUL 2>&1
  543. net stop AdobeARMservice > NUL 2>&1
  544. sc config AGSService start= demand > NUL 2>&1
  545. net stop AGSService > NUL 2>&1
  546. sc config AdobeFlashPlayerUpdateSvc start= demand > NUL 2>&1
  547. net stop AdobeFlashPlayerUpdateSvc > NUL 2>&1
  548.  
  549. REM -- Disables NVIDIA Geforce Experience service
  550. sc config GfExperienceService start= demand > NUL 2>&1
  551. net stop GfExperienceService > NUL 2>&1
  552.  
  553. REM -- Disables AMD service
  554. sc config "AMD External Events Utility" start= demand > NUL 2>&1
  555. net stop "AMD External Events Utility" > NUL 2>&1
  556.  
  557. REM -- Disables Conexant Audio Message Service
  558. sc config CxAudMsg start= demand > NUL 2>&1
  559. net stop CxAudMsg > NUL 2>&1
  560. sc config SAService start= demand > NUL 2>&1
  561. net stop SAService > NUL 2>&1
  562.  
  563. REM -- Disables Yandex Browser Update service
  564. sc config YandexBrowserService start= demand > NUL 2>&1
  565. net stop YandexBrowserService > NUL 2>&1
  566.  
  567. ECHO.
  568. ECHO Done...
  569. ECHO Press any key to got back to the menu.
  570. PAUSE > NUL
  571. GOTO menu_tweaks
  572.  
  573. REM -- Scheduled Tasks Tweaks start
  574. :seq_tweakscheduled
  575. COLOR 2F
  576. ECHO.
  577. ECHO Disabling Windows scheduled tasks...
  578. schtasks /Change /TN "Microsoft\Windows\SettingSync\BackgroundUploadTask" /Disable > NUL 2>&1
  579. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319" /Disable > NUL 2>&1
  580. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64" /Disable > NUL 2>&1
  581. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical" /Disable > NUL 2>&1
  582. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical" /Disable > NUL 2>&1
  583. schtasks /Change /TN "Microsoft\Windows\AppID\SmartScreenSpecific" /Disable > NUL 2>&1
  584. schtasks /Change /TN "Microsoft\Windows\ApplicationData\CleanupTemporaryState" /Disable > NUL 2>&1
  585. schtasks /Change /TN "Microsoft\Windows\ApplicationData\DsSvcCleanup" /Disable > NUL 2>&1
  586. schtasks /Change /TN "Microsoft\Windows\Application Experience\AitAgent" /Disable > NUL 2>&1
  587. schtasks /Change /TN "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /Disable > NUL 2>&1
  588. schtasks /Change /TN "Microsoft\Windows\Application Experience\ProgramDataUpdater" /Disable > NUL 2>&1
  589. schtasks /Change /TN "Microsoft\Windows\Application Experience\StartupAppTask" /Disable > NUL 2>&1
  590. schtasks /Change /TN "Microsoft\Windows\Autochk\Proxy" /Disable > NUL 2>&1
  591. schtasks /Change /TN "Microsoft\Windows\CloudExperienceHost\CreateObjectTask" /Disable > NUL 2>&1
  592. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /Disable > NUL 2>&1
  593. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /Disable > NUL 2>&1
  594. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /Disable > NUL 2>&1
  595. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\BthSQM" /Disable > NUL 2>&1
  596. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\HypervisorFlightingTask" /Disable > NUL 2>&1
  597. schtasks /Change /TN "Microsoft\Windows\Diagnosis\Scheduled" /Disable > NUL 2>&1
  598. schtasks /Change /TN "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /Disable > NUL 2>&1
  599. schtasks /Change /TN "Microsoft\Windows\DiskFootprint\Diagnostics" /Disable > NUL 2>&1
  600. schtasks /Change /TN "Microsoft\Windows\DiskFootprint\StorageSense" /Disable > NUL 2>&1
  601. schtasks /Change /TN "Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate" /Disable > NUL 2>&1
  602. schtasks /Change /TN "Microsoft\Windows\Feedback\Siuf\DmClient" /Disable > NUL 2>&1
  603. schtasks /Change /TN "Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload" /Disable > NUL 2>&1
  604. schtasks /Change /TN "Microsoft\Windows\File Classification Infrastructure\Property Definition Sync" /Disable > NUL 2>&1
  605. schtasks /Change /TN "Microsoft\Windows\Management\Provisioning\Logon" /Disable > NUL 2>&1
  606. schtasks /Change /TN "Microsoft\Windows\Maintenance\WinSAT" /Disable > NUL 2>&1
  607. schtasks /Change /TN "Microsoft\Windows\Maps\MapsToastTask" /Disable > NUL 2>&1
  608. schtasks /Change /TN "Microsoft\Windows\Maps\MapsUpdateTask" /Disable > NUL 2>&1
  609. schtasks /Change /TN "Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" /Disable > NUL 2>&1
  610. schtasks /Change /TN "Microsoft\Windows\Multimedia\SystemSoundsService" /Disable > NUL 2>&1
  611. schtasks /Change /TN "Microsoft\Windows\NlaSvc\WiFiTask" /Disable > NUL 2>&1
  612. schtasks /Change /TN "Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler" /Disable > NUL 2>&1
  613. schtasks /Change /TN "Microsoft\Windows\NetTrace\GatherNetworkInfo" /Disable > NUL 2>&1
  614. schtasks /Change /TN "Microsoft\Windows\Offline Files\Background Synchronization" /Disable > NUL 2>&1
  615. schtasks /Change /TN "Microsoft\Windows\Offline Files\Logon Synchronization" /Disable > NUL 2>&1
  616. schtasks /Change /TN "Microsoft\Windows\PI\Sqm-Tasks" /Disable > NUL 2>&1
  617. schtasks /Change /TN "Microsoft\Windows\Ras\MobilityManager" /Disable > NUL 2>&1
  618. schtasks /Change /TN "Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask" /Disable > NUL 2>&1
  619. schtasks /Change /TN "Microsoft\Windows\Servicing\StartComponentCleanup" /Disable > NUL 2>&1
  620. schtasks /Change /TN "Microsoft\Windows\SettingSync\BackupTask" /Disable > NUL 2>&1
  621. schtasks /Change /TN "Microsoft\Windows\SettingSync\NetworkStateChangeTask" /Disable > NUL 2>&1
  622. schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyMonitor" /Disable > NUL 2>&1
  623. schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyRefresh" /Disable > NUL 2>&1
  624. schtasks /Change /TN "Microsoft\Windows\SpacePort\SpaceAgentTask" /Disable > NUL 2>&1
  625. schtasks /Change /TN "Microsoft\Windows\SpacePort\SpaceManagerTask" /Disable > NUL 2>&1
  626. schtasks /Change /TN "Microsoft\Windows\Speech\SpeechModelDownloadTask" /Disable > NUL 2>&1
  627. schtasks /Change /TN "Microsoft\Windows\User Profile Service\HiveUploadTask" /Disable > NUL 2>&1
  628. schtasks /Change /TN "Microsoft\Windows\WCM\WiFiTask" /Disable > NUL 2>&1
  629. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance" /Disable > NUL 2>&1
  630. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cleanup" /Disable > NUL 2>&1
  631. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan" /Disable > NUL 2>&1
  632. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Verification" /Disable > NUL 2>&1
  633. schtasks /Change /TN "Microsoft\Windows\Windows Error Reporting\QueueReporting" /Disable > NUL 2>&1
  634. schtasks /Change /TN "Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange" /Disable > NUL 2>&1
  635. schtasks /Change /TN "Microsoft\Windows\Windows Media Sharing\UpdateLibrary" /Disable > NUL 2>&1
  636. schtasks /Change /TN "Microsoft\Windows\Wininet\CacheTask" /Disable > NUL 2>&1
  637. schtasks /Change /TN "Microsoft\Windows\Work Folders\Work Folders Logon Synchronization" /Disable > NUL 2>&1
  638. schtasks /Change /TN "Microsoft\Windows\Work Folders\Work Folders Maintenance Work" /Disable > NUL 2>&1
  639. schtasks /Change /TN "Microsoft\Windows\Workplace Join\Automatic-Device-Join" /Disable > NUL 2>&1
  640. schtasks /Change /TN "Microsoft\XblGameSave\XblGameSaveTask" /Disable > NUL 2>&1
  641. schtasks /Change /TN "Microsoft\XblGameSave\XblGameSaveTaskLogon" /Disable > NUL 2>&1
  642. schtasks /Change /TN "Driver Easy Scheduled Scan" /Disable > NUL 2>&1
  643. schtasks /Change /TN "Microsoft\Office\OfficeTelemetryAgentFallBack2016" /Disable > NUL 2>&1
  644. schtasks /Change /TN "Microsoft\Office\OfficeTelemetryAgentLogOn2016" /Disable > NUL 2>&1
  645. schtasks /Change /TN "Microsoft\Office\Office ClickToRun Service Monitor" /Disable > NUL 2>&1
  646. ECHO.
  647. ECHO Done...
  648. ECHO Press any key to got back to the menu.
  649. PAUSE > NUL
  650. GOTO menu_tweaks
  651.  
  652. REM -- Registry Recovery start
  653. :seq_recoverregistry
  654. COLOR 2F
  655. ECHO.
  656.  
  657. REM -- Recovers the default Windows registry settings - see Registry Tweaks for detailed information
  658. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /v "AutoDownload" /t REG_DWORD /d 4 /f > NUL 2>&1
  659. reg delete "HKCU\Software\Policies\Microsoft\Windows\Explorer" /v NoWindowMinimizingShortcuts /f > NUL 2>&1
  660. reg delete "HKLM\Software\Policies\Microsoft\Windows\Explorer" /v NoWindowMinimizingShortcuts /f > NUL 2>&1
  661. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v ShowSyncProviderNotifications /t REG_DWORD /d 1 /f
  662. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v EnableTransparency /t REG_DWORD /d 1 /f
  663. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v ColorPrevalence /t REG_DWORD /d 0 /f
  664. reg add "HKCU\Software\Microsoft\Windows\DWM" /v ColorPrevalence /t REG_DWORD /d 0 /f
  665. reg add "HKCU\Software\Microsoft\Windows\DWM" /v AccentColor /t REG_DWORD /d 0x00d77800 /f
  666. reg add "HKCU\Software\Microsoft\Windows\DWM" /v Composition /t REG_DWORD /d 1 /f
  667. reg add "HKCU\Software\Microsoft\Windows\DWM" /v ColorizationColor /t REG_DWORD /d 0xc40078d7 /f
  668. reg add "HKCU\Software\Microsoft\Windows\DWM" /v ColorizationAfterglow /t REG_DWORD /d 0xc40078d7 /f
  669. reg add "HKCU\Software\Microsoft\Windows\DWM" /v ColorizationGlassAttribute /t REG_DWORD /d 1 /f
  670. reg add "HKCU\Software\Microsoft\Windows\DWM" /v EnableWindowColorization /t REG_DWORD /d 1 /f
  671. reg delete "HKLM\Software\Policies\Microsoft\Windows Defender\MpEngine" /f > NUL 2>&1
  672. reg add "HKLM\Software\Microsoft\Driver Signing" /v "Policy" /t REG_BINARY /d "00" /f
  673. reg delete "HKLM\Software\Policies\Microsoft\Windows\System" /v "DisableLogonBackgroundImage" /f > NUL 2>&1
  674. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Device Metadata" /v PreventDeviceMetadataFromNetwork /t REG_DWORD /d 0 /f
  675. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d 1 /f
  676. reg add "HKLM\Software\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d 1 /f
  677. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "Start_TrackDocs" /f > NUL 2>&1
  678. reg add "HKEY_CLASSES_ROOT\exefile\shellex\ContextMenuHandlers\PintoStartScreen" /t REG_SZ /d {470C0EBD-5D73-4d58-9CED-E91E22E23282} /f > NUL 2>&1
  679. reg add "HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\PintoStartScreen" /t REG_SZ /d {470C0EBD-5D73-4d58-9CED-E91E22E23282} /f > NUL 2>&1
  680. reg add "HKEY_CLASSES_ROOT\mscfile\shellex\ContextMenuHandlers\PintoStartScreen" /t REG_SZ /d {470C0EBD-5D73-4d58-9CED-E91E22E23282} /f > NUL 2>&1
  681. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{20D04FE0-3AEA-1069-A2D8-08002B30309D}" /t REG_DWORD /d 1 /f
  682. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "ForceClassicControlPanel" /f > NUL 2>&1
  683. reg add "HKCU\Control Panel\Accessibility\StickyKeys" /v "Flags" /t REG_SZ /d "510" /f
  684. reg add "HKCU\Control Panel\Accessibility\Keyboard Response" /v "Flags" /t REG_SZ /d "126" /f
  685. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "AllowCortana" /f > NUL 2>&1
  686. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "BingSearchEnabled" /f > NUL 2>&1
  687. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "CortanaEnabled" /f > NUL 2>&1
  688. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /f > NUL 2>&1
  689. reg delete "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /f > NUL 2>&1
  690. reg delete "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "DisableWebSearch" /f > NUL 2>&1
  691. reg delete "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchUseWeb" /f > NUL 2>&1
  692. reg delete "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchUseWebOverMeteredConnections" /f > NUL 2>&1
  693. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\DriverSearching" /v "SearchOrderConfig" /t REG_DWORD /d 1 /f
  694. reg delete "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "Disabled" /t REG_DWORD /d 1 /f > NUL 2>&1
  695. reg delete "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "Disabled" /t REG_DWORD /d 1 /f > NUL 2>&1
  696. reg delete "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "DontSendAdditionalData" /t REG_DWORD /d 1 /f > NUL 2>&1
  697. reg delete "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "DontSendAdditionalData" /t REG_DWORD /d 1 /f > NUL 2>&1
  698. reg delete "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "DontShowUI" /t REG_DWORD /d 1 /f > NUL 2>&1
  699. reg delete "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "DontShowUI" /t REG_DWORD /d 1 /f > NUL 2>&1
  700. reg delete "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "LoggingDisabled" /t REG_DWORD /d 1 /f > NUL 2>&1
  701. reg delete "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "LoggingDisabled" /t REG_DWORD /d 1 /f > NUL 2>&1
  702. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 1 /f
  703. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "LaunchTo" /f > NUL 2>&1
  704. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /f > NUL 2>&1
  705. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\SoftLanding" /f > NUL 2>&1
  706. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v "NOC_GLOBAL_SETTING_TOASTS_ENABLED" /f > NUL 2>&1
  707. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v "NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK" /f > NUL 2>&1
  708. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v "NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK" /f > NUL 2>&1
  709. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v "NOC_GLOBAL_SETTING_SUPRESS_TOASTS_WHILE_DUPLICATING" /f > NUL 2>&1
  710. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\PushNotifications" /v "ToastEnabled" /f > NUL 2>&1
  711. reg delete "HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" /v "NoToastApplicationNotification" /f > NUL 2>&1
  712. reg delete "HKCU\Software\Policies\Microsoft\Windows\Explorer" /v "DisableNotificationCenter" /f > NUL 2>&1
  713. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations" /v "DefaultFileTypeRisk" /f > NUL 2>&1
  714. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" /v "SaveZoneInformation" /f > NUL 2>&1
  715. reg delete "HKCU\Control Panel\Desktop" /v "WaitToKillAppTimeout" /f > NUL 2>&1
  716. reg add "HKLM\System\CurrentControlSet\Control" /v "WaitToKillServiceTimeout" /t REG_SZ /d "5000" /f
  717. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /f > NUL 2>&1
  718. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance" /v "MaintenanceDisabled" /f > NUL 2>&1
  719. reg add "HKLM\System\CurrentControlSet\Control\FileSystem" /v "NtfsDisableEncryption" /t REG_DWORD /d 0 /f
  720. reg add "HKLM\System\CurrentControlSet\Control\FileSystem" /v "NtfsDisableLastAccessUpdate" /t REG_DWORD /d 1 /f
  721. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "ForceActiveDesktopOn" /t REG_DWORD /d 0 /f
  722. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoActiveDesktop" /t REG_DWORD /d 1 /f
  723. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoActiveDesktopChanges" /t REG_DWORD /d 1 /f
  724. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t REG_SZ /d "Off" /f
  725. reg delete "HKLM\Software\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /f > NUL 2>&1
  726. reg add "HKLM\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots" /v "value" /t REG_DWORD /d 1 /f
  727. reg add "HKLM\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting" /v "value" /t REG_DWORD /d 1 /f
  728. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d 1 /f
  729. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application-Experience/Program-Telemetry" /v "Enabled" /t REG_DWORD /d 1 /f
  730. reg add "HKLM\Software\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d 1 /f
  731. reg add "HKLM\Software\Policies\Microsoft\SQMClient\Windows" /v "CEIPEnable" /t REG_DWORD /d 1 /f
  732. reg add "HKLM\Software\Policies\Microsoft\Windows\AppCompat" /v "AITEnable" /t REG_DWORD /d 1 /f
  733. reg add "HKLM\Software\Policies\Microsoft\Windows\AdvertisingInfo" /v "DisabledByGroupPolicy" /t REG_DWORD /d 0 /f
  734. reg add "HKLM\Software\Policies\Microsoft\Windows\AppCompat" /v "DisableUAR" /t REG_DWORD /d 0 /f
  735. reg add "HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices" /v "TCGSecurityActivationDisabled" /t REG_DWORD /d 1 /f
  736. reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableFileSyncNGSC" /t REG_DWORD /d 0 /f
  737. reg delete "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableSettingSync" /f > NUL 2>&1
  738. reg delete "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableSettingSyncUserOverride" /f > NUL 2>&1
  739. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application-Experience/Steps-Recorder" /v "Enabled" /t REG_DWORD /d 1 /f
  740. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /v "DownloadMode" /f > NUL 2>&1
  741. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /v "DODownloadMode" /f > NUL 2>&1
  742. reg add "HKCU\Control Panel\Desktop" /v "MenuShowDelay" /t REG_DWORD /d 400 /f
  743. reg add "HKCU\Control Panel\Mouse" /v "MouseHoverTime" /t REG_SZ /d 400 /f
  744. reg delete "HKCU\Control Panel\Desktop" /v "JPEGImportQuality" /f > NUL 2>&1
  745. reg add "HKLM\Software\Policies\Microsoft\Windows\System" /v "EnableSmartScreen" /t "REG_DWORD" /d 1 /f
  746. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d 1 /f
  747. reg add "HKLM\Software\Policies\Microsoft\Windows\LocationAndSensors" /v "DisableLocation" /t "REG_DWORD" /d 0 /f
  748. reg add "HKLM\Software\Policies\Microsoft\Windows\LocationAndSensors" /v "DisableLocationScripting" /t "REG_DWORD" /d 0 /f
  749. reg add "HKLM\Software\Policies\Microsoft\Windows\LocationAndSensors" /v "DisableWindowsLocationProvider" /t "REG_DWORD" /d 0 /f
  750. reg add "HKLM\Software\Policies\Microsoft\Windows\Maps" /v "AutoDownloadAndUpdateMapData" /t "REG_DWORD" /d 1 /f
  751. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "OneDrive" /t REG_SZ /d ""%LocalAppData%\Microsoft\OneDrive\OneDrive.exe" /background" /f
  752. reg add "HKCU\Control Panel\Desktop" /v "ScreenSaveActive" /t REG_SZ /d 1 /f
  753. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\GameDVR" /v "AppCaptureEnabled" /t REG_DWORD /d 1 /f
  754. reg add "HKCU\System\GameConfigStore" /v "GameDVR_Enabled" /t REG_DWORD /d 1 /f
  755. reg add "HKLM\Software\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t REG_DWORD /d 1 /f
  756. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "ShowFrequent" /t REG_DWORD /d 1 /f
  757. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "ShowRecent" /t REG_DWORD /d 1 /f
  758. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d 1 /f
  759. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoDriveTypeAutorun" /f > NUL 2>&1
  760. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoDriveTypeAutorun" /f > NUL 2>&1
  761. reg delete "HKCU\Software\Microsoft\Siuf" /f > NUL 2>&1
  762. reg add "HKLM\Software\Microsoft\WindowsUpdate\UX\Settings" /v "ActiveHoursStart" /t REG_DWORD /d "8" /f
  763. reg add "HKLM\Software\Microsoft\WindowsUpdate\UX\Settings" /v "ActiveHoursEnd" /t REG_DWORD /d "17" /f
  764. reg add "HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\EPP" /t REG_SZ /d "{09A47860-11B0-4DA5-AFA5-26D86198A780}" /f
  765. reg add "HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\EPP" /t REG_SZ /d "{09A47860-11B0-4DA5-AFA5-26D86198A780}" /f
  766. reg add "HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\EPP" /t REG_SZ /d "{09A47860-11B0-4DA5-AFA5-26D86198A780}" /f
  767. reg add "HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d 1 /f
  768. reg add "HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d 1 /f > NUL 2>&1
  769. reg add "HKLM\Software\Policies\Microsoft\Biometrics" /v Enabled /t REG_DWORD /d 1 /f
  770. reg add "HKLM\Software\Policies\Microsoft\MRT" /v DontReportInfectionInformation /t REG_DWORD /d 0 /f
  771. reg add "HKLM\Software\Policies\Microsoft\Windows\AppCompat" /v DisableInventory /t REG_DWORD /d 0 /f
  772. reg add "HKLM\Software\Policies\Microsoft\Windows\CredUI" /v DisablePasswordReveal /t REG_DWORD /d 0 /f
  773. reg add "HKLM\Software\Policies\Microsoft\Windows\DeliveryOptimization" /v DODownloadMode /t REG_DWORD /d 1 /f
  774. reg add "HKLM\Software\Policies\Microsoft\Windows\HandwritingErrorReports" /v PreventHandwritingErrorReports /t REG_DWORD /d 0 /f
  775. reg add "HKLM\Software\Policies\Microsoft\Windows\LocationAndSensors" /v DisableSensors /t REG_DWORD /d 0 /f
  776. reg add "HKLM\Software\Policies\Microsoft\Windows\Personalization" /v NoLockScreenCamera /t REG_DWORD /d 0 /f
  777. reg add "HKLM\Software\Policies\Microsoft\Windows\TabletPC" /v PreventHandwritingDataSharing /t REG_DWORD /d 0 /f
  778. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v AllowCortana /t REG_DWORD /d 1 /f
  779. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v AllowSearchToUseLocation /t REG_DWORD /d 1 /f
  780. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v DisableWebSearch /t REG_DWORD /d 0 /f
  781. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v ConnectedSearchUseWeb /t REG_DWORD /d 1 /f
  782. reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet" /v SpynetReporting /t REG_DWORD /d 1 /f
  783. reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet" /v SubmitSamplesConsent /t REG_DWORD /d 1 /f
  784. reg add "HKLM\Software\Policies\Microsoft\WMDRM" /v DisableOnline /t REG_DWORD /d 0 /f
  785. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection" /v AllowTelemetry /t REG_DWORD /d 1 /f
  786. reg add "HKLM\System\ControlSet001\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener" /v Start /t REG_DWORD /d 1 /f
  787. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{A8804298-2D5F-42E3-9531-9C8C39EB29CE}" /v Value /t REG_SZ /d Allow /f
  788. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\LooselyCoupled" /v Value /t REG_SZ /d Allow /f
  789. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{C1D23ACC-752B-43E5-8448-8D0E519CD6D6}" /v Value /t REG_SZ /d Allow /f
  790. reg add "HKCU\Software\Microsoft\Personalization\Settings" /v AcceptedPrivacyPolicy /t REG_DWORD /d 1 /f
  791. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Language" /v Enabled /t REG_DWORD /d 1 /f
  792. reg add "HKCU\Software\Microsoft\InputPersonalization" /v RestrictImplicitInkCollection /t REG_DWORD /d 0 /f
  793. reg add "HKCU\Software\Microsoft\InputPersonalization" /v RestrictImplicitTextCollection /t REG_DWORD /d 0 /f
  794. reg add "HKCU\Software\Microsoft\InputPersonalization\TrainedDataStore" /v HarvestContacts /t REG_DWORD /d 1 /f
  795. reg add "HKCU\Software\Microsoft\Input\TIPC" /v Enabled /t REG_DWORD /d 1 /f
  796. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /v Enabled /t REG_DWORD /d 1 /f
  797. reg add "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /v Enabled /t REG_DWORD /d 1 /f
  798. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{A8804298-2D5F-42E3-9531-9C8C39EB29CE}" /v Value /t REG_SZ /d Allow /f
  799. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{E5323777-F976-4f5b-9B55-B94699C46E44}" /v Value /t REG_SZ /d Allow /f
  800. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" /v Value /t REG_SZ /d Allow /f
  801. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{2EEF81BE-33FA-4800-9670-1CD474972C3F}" /v Value /t REG_SZ /d Allow /f
  802. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{992AFA70-6F47-4148-B3E9-3003349C1548}" /v Value /t REG_SZ /d Allow /f
  803. reg add "HKCU\Control Panel\International\User Profile" /v HttpAcceptLanguageOptOut /t REG_DWORD /d 0 /f
  804. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeliveryOptimization" /v SystemSettingsDownloadMode /t REG_DWORD /d 1 /f
  805. reg add "HKLM\Software\Policies\Microsoft\Internet Explorer\Suggested Sites" /v Enabled /t REG_DWORD /d 0 /f
  806. reg add "HKLM\Software\Policies\Microsoft\Internet Explorer" /v AllowServicePoweredQSA /t REG_DWORD /d 0 /f
  807. reg add "HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete" /v AutoSuggest /t REG_SZ /d yes /f
  808. reg add "HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions" /v NoUpdateCheck /t REG_DWORD /d 0 /f
  809. reg add "HKLM\Software\Policies\Microsoft\Internet Explorer\Geolocation" /v PolicyDisableGeolocation /t REG_DWORD /d 0 /f
  810. reg add "HKLM\Software\Policies\Microsoft\MicrosoftEdge\Main" /v "Use FormSuggest" /t REG_SZ /d yes /f
  811. reg add "HKLM\Software\Policies\Microsoft\MicrosoftEdge\Main" /v DoNotTrack /t REG_DWORD /d 1 /f
  812. reg add "HKLM\Software\Policies\Microsoft\MicrosoftEdge\Main" /v "FormSuggest Passwords" /t REG_SZ /d yes /f
  813. reg add "HKLM\Software\Policies\Microsoft\MicrosoftEdge\SearchScopes" /v ShowSearchSuggestionsGlobal /t REG_DWORD /d 1 /f
  814. reg add "HKLM\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v EnabledV9 /t REG_DWORD /d 1 /f
  815. reg add "HKLM\Software\Microsoft\WcmSvc\wifinetworkmanager\config" /v AutoConnectAllowedOEM /t REG_DWORD /d 1 /f
  816. reg add "HKLM\Software\Policies\Microsoft\Windows\Device Metadata" /v PreventDeviceMetadataFromNetwork /t REG_DWORD /d 0 /f
  817. reg add "HKLM\Software\Policies\Microsoft\MRT" /v DontOfferThroughWUAU /t REG_DWORD /d 0 /f
  818. reg add "HKLM\System\CurrentControlSet\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener" /v Start /t REG_DWORD /d 1 /f
  819. reg add "HKLM\System\CurrentControlSet\Control\WMI\AutoLogger\SQMLogger" /v Start /t REG_DWORD /d 1 /f
  820. reg add "HKEY_CURRENT_USER\Software\Microsoft\Siuf\Rules" /v "NumberOfSIUFInPeriod" /t REG_DWORD /d 0 /f
  821. reg add "HKCU\Software\Microsoft\Siuf\Rules" /v PeriodInNanoSeconds /t REG_DWORD /d 0 /f
  822. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" /v Value /t REG_SZ /d Allow /f
  823. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{E5323777-F976-4f5b-9B55-B94699C46E44}" /v Value /t REG_SZ /d Allow /f
  824. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{2EEF81BE-33FA-4800-9670-1CD474972C3F}" /v Value /t REG_SZ /d Allow /f
  825. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{D89823BA-7180-4B81-B50C-7E471E6121A3}" /v Value /t REG_SZ /d Allow /f
  826. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{992AFA70-6F47-4148-B3E9-3003349C1548}" /v Value /t REG_SZ /d Allow /f
  827. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{A8804298-2D5F-42E3-9531-9C8C39EB29CE}" /v Value /t REG_SZ /d Allow /f
  828. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{C1D23ACC-752B-43E5-8448-8D0E519CD6D6}" /v Value /t REG_SZ /d Allow /f
  829. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync" /v SyncPolicy /t REG_DWORD /d 1 /f
  830. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Accessibility" /v Enabled /t REG_DWORD /d 1 /f
  831. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\AppSync" /v Enabled /t REG_DWORD /d 1 /f
  832. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\BrowserSettings" /v Enabled /t REG_DWORD /d 1 /f
  833. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Credentials" /v Enabled /t REG_DWORD /d 1 /f
  834. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\DesktopTheme" /v Enabled /t REG_DWORD /d 1 /f
  835. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Language" /v Enabled /t REG_DWORD /d 1 /f
  836. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Personalization" /v Enabled /t REG_DWORD /d 1 /f
  837. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\StartLayout" /v Enabled /t REG_DWORD /d 1 /f
  838. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Windows" /v Enabled /t REG_DWORD /d 1 /f
  839. reg add "HKLM\System\CurrentControlSet\Services\lfsvc\Service\Configuration" /v Status /t REG_DWORD /d 1 /f
  840. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Sensor\Overrides\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" /v SensorPermissionState /t REG_DWORD /d 1 /f
  841. reg add "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Sensor\Permissions\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" /v SensorPermissionState /t REG_DWORD /d 1 /f
  842. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" /v Value /t REG_SZ /d Allow /f
  843. reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v DisablePreviewDesktop /t REG_DWORD /d 0 /f
  844. taskkill /IM explorer.exe /F & explorer.exe > NUL 2>&1
  845. ECHO.
  846. ECHO Done...
  847. ECHO Press any key to got back to the menu.
  848. PAUSE > NUL
  849. GOTO menu_tweaks
  850.  
  851. REM -- Services recovery start
  852. :seq_recoverservices
  853. COLOR 2F
  854. ECHO.
  855.  
  856. REM -- Recovers the default Windows services - see Services Tweaks for detailed information
  857. sc config diagnosticshub.standardcollector.service start= auto
  858. net start diagnosticshub.standardcollector.service > NUL 2>&1
  859. sc config DiagTrack start= auto
  860. net start DiagTrack > NUL 2>&1
  861. sc config dmwappushservice start= auto
  862. net start dmwappushservice > NUL 2>&1
  863. sc config OneSyncSvc start= auto
  864. net start OneSyncSvc > NUL 2>&1
  865. sc config RetailDemo start= demand
  866. sc config WSearch start= auto
  867. net start WSearch > NUL 2>&1
  868. ECHO.
  869. ECHO Done...
  870. ECHO Press any key to got back to the menu.
  871. PAUSE > NUL
  872. GOTO menu_tweaks
  873.  
  874. REM -- Recover third party services
  875. :seq_recovertpservices
  876. COLOR 2F
  877. ECHO.
  878. ECHO Recovering third party services...
  879. sc config gupdate start= delayed-auto > NUL 2>&1
  880. net start gupdate > NUL 2>&1
  881. sc config AdobeARMservice start= auto > NUL 2>&1
  882. net start AdobeARMservice > NUL 2>&1
  883. sc config AGSService start= auto > NUL 2>&1
  884. net start AGSService > NUL 2>&1
  885. sc config GfExperienceService start= auto > NUL 2>&1
  886. net start GfExperienceService > NUL 2>&1
  887. sc config AdobeFlashPlayerUpdateSvc start= auto > NUL 2>&1
  888. net start AdobeFlashPlayerUpdateSvc > NUL 2>&1
  889. sc config "AMD External Events Utility" start= auto > NUL 2>&1
  890. net start "AMD External Events Utility" > NUL 2>&1
  891. sc config CxAudMsg start= auto > NUL 2>&1
  892. net start CxAudMsg > NUL 2>&1
  893. sc config SAService start= auto > NUL 2>&1
  894. net start SAService > NUL 2>&1
  895. sc config YandexBrowserService start= auto > NUL 2>&1
  896. net start YandexBrowserService > NUL 2>&1
  897. ECHO.
  898. ECHO Done...
  899. ECHO Press any key to got back to the menu.
  900. PAUSE > NUL
  901. GOTO menu_tweaks
  902.  
  903. REM -- Scheduled Tasks recovery start
  904. :seq_recoverscheduled
  905. COLOR 2F
  906. ECHO.
  907.  
  908. REM -- Recovers the default Scheduled Tasks
  909. ECHO Recovering Windows scheduled tasks
  910. schtasks /Change /TN "Microsoft\Windows\SettingSync\BackgroundUploadTask" /Enable > NUL 2>&1
  911. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319" /Enable > NUL 2>&1
  912. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64" /Enable > NUL 2>&1
  913. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical" /Enable > NUL 2>&1
  914. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical" /Enable > NUL 2>&1
  915. schtasks /Change /TN "Microsoft\Windows\AppID\SmartScreenSpecific" /Enable > NUL 2>&1
  916. schtasks /Change /TN "Microsoft\Windows\ApplicationData\CleanupTemporaryState" /Enable > NUL 2>&1
  917. schtasks /Change /TN "Microsoft\Windows\ApplicationData\DsSvcCleanup" /Enable > NUL 2>&1
  918. schtasks /Change /TN "Microsoft\Windows\Application Experience\AitAgent" /Enable > NUL 2>&1
  919. schtasks /Change /TN "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /Enable > NUL 2>&1
  920. schtasks /Change /TN "Microsoft\Windows\Application Experience\ProgramDataUpdater" /Enable > NUL 2>&1
  921. schtasks /Change /TN "Microsoft\Windows\Application Experience\StartupAppTask" /Enable > NUL 2>&1
  922. schtasks /Change /TN "Microsoft\Windows\Autochk\Proxy" /Enable > NUL 2>&1
  923. schtasks /Change /TN "Microsoft\Windows\CloudExperienceHost\CreateObjectTask" /Enable > NUL 2>&1
  924. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /Enable > NUL 2>&1
  925. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /Enable > NUL 2>&1
  926. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /Enable > NUL 2>&1
  927. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\BthSQM" /Enable > NUL 2>&1
  928. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\HypervisorFlightingTask" /Enable > NUL 2>&1
  929. schtasks /Change /TN "Microsoft\Windows\Defrag\ScheduledDefrag" /Enable > NUL 2>&1
  930. schtasks /Change /TN "Microsoft\Windows\Diagnosis\Scheduled" /Enable > NUL 2>&1
  931. schtasks /Change /TN "Microsoft\Windows\DiskCleanup\SilentCleanup" /Enable > NUL 2>&1
  932. schtasks /Change /TN "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /Enable > NUL 2>&1
  933. schtasks /Change /TN "Microsoft\Windows\DiskFootprint\Diagnostics" /Enable > NUL 2>&1
  934. schtasks /Change /TN "Microsoft\Windows\DiskFootprint\StorageSense" /Enable > NUL 2>&1
  935. schtasks /Change /TN "Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate" /Enable > NUL 2>&1
  936. schtasks /Change /TN "Microsoft\Windows\Feedback\Siuf\DmClient" /Enable > NUL 2>&1
  937. schtasks /Change /TN "Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload" /Enable > NUL 2>&1
  938. schtasks /Change /TN "Microsoft\Windows\File Classification Infrastructure\Property Definition Sync" /Enable > NUL 2>&1
  939. schtasks /Change /TN "Microsoft\Windows\FileHistory\File History (maintenance mode)" /Enable > NUL 2>&1
  940. schtasks /Change /TN "Microsoft\Windows\Management\Provisioning\Logon" /Enable > NUL 2>&1
  941. schtasks /Change /TN "Microsoft\Windows\Maintenance\WinSAT" /Enable > NUL 2>&1
  942. schtasks /Change /TN "Microsoft\Windows\Maps\MapsToastTask" /Enable > NUL 2>&1
  943. schtasks /Change /TN "Microsoft\Windows\Maps\MapsUpdateTask" /Enable > NUL 2>&1
  944. schtasks /Change /TN "Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" /Enable > NUL 2>&1
  945. schtasks /Change /TN "Microsoft\Windows\Multimedia\SystemSoundsService" /Enable > NUL 2>&1
  946. schtasks /Change /TN "Microsoft\Windows\NlaSvc\WiFiTask" /Enable > NUL 2>&1
  947. schtasks /Change /TN "Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler" /Enable > NUL 2>&1
  948. schtasks /Change /TN "Microsoft\Windows\NetTrace\GatherNetworkInfo" /Enable > NUL 2>&1
  949. schtasks /Change /TN "Microsoft\Windows\Offline Files\Background Synchronization" /Enable > NUL 2>&1
  950. schtasks /Change /TN "Microsoft\Windows\Offline Files\Logon Synchronization" /Enable > NUL 2>&1
  951. schtasks /Change /TN "Microsoft\Windows\PI\Sqm-Tasks" /Enable > NUL 2>&1
  952. schtasks /Change /TN "Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem" /Enable > NUL 2>&1
  953. schtasks /Change /TN "Microsoft\Windows\Ras\MobilityManager" /Enable > NUL 2>&1
  954. schtasks /Change /TN "Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask" /Enable > NUL 2>&1
  955. schtasks /Change /TN "Microsoft\Windows\RetailDemo\CleanupOfflineContent" /Enable > NUL 2>&1
  956. schtasks /Change /TN "Microsoft\Windows\Servicing\StartComponentCleanup" /Enable > NUL 2>&1
  957. schtasks /Change /TN "Microsoft\Windows\SettingSync\BackupTask" /Enable > NUL 2>&1
  958. schtasks /Change /TN "Microsoft\Windows\SettingSync\NetworkStateChangeTask" /Enable > NUL 2>&1
  959. schtasks /Change /TN "Microsoft\Windows\Setup\SetupCleanupTask" /Enable > NUL 2>&1
  960. schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyMonitor" /Enable > NUL 2>&1
  961. schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyRefresh" /Enable > NUL 2>&1
  962. schtasks /Change /TN "Microsoft\Windows\Shell\IndexerAutomaticMaintenance" /Enable > NUL 2>&1
  963. schtasks /Change /TN "Microsoft\Windows\SpacePort\SpaceAgentTask" /Enable > NUL 2>&1
  964. schtasks /Change /TN "Microsoft\Windows\SpacePort\SpaceManagerTask" /Enable > NUL 2>&1
  965. schtasks /Change /TN "Microsoft\Windows\Speech\SpeechModelDownloadTask" /Enable > NUL 2>&1
  966. schtasks /Change /TN "Microsoft\Windows\TextServicesFramework\MsCtfMonitor" /Enable > NUL 2>&1
  967. schtasks /Change /TN "Microsoft\Windows\TPM\Tpm-HASCertRetr" /Enable > NUL 2>&1
  968. schtasks /Change /TN "Microsoft\Windows\TPM\Tpm-Maintenance" /Enable > NUL 2>&1
  969. schtasks /Change /TN "Microsoft\Windows\User Profile Service\HiveUploadTask" /Enable > NUL 2>&1
  970. schtasks /Change /TN "Microsoft\Windows\WCM\WiFiTask" /Enable > NUL 2>&1
  971. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance" /Enable > NUL 2>&1
  972. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cleanup" /Enable > NUL 2>&1
  973. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan" /Enable > NUL 2>&1
  974. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Verification" /Enable > NUL 2>&1
  975. schtasks /Change /TN "Microsoft\Windows\Windows Error Reporting\QueueReporting" /Enable > NUL 2>&1
  976. schtasks /Change /TN "Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange" /Enable > NUL 2>&1
  977. schtasks /Change /TN "Microsoft\Windows\Windows Media Sharing\UpdateLibrary" /Enable > NUL 2>&1
  978. schtasks /Change /TN "Microsoft\Windows\Wininet\CacheTask" /Enable > NUL 2>&1
  979. schtasks /Change /TN "Microsoft\Windows\Work Folders\Work Folders Logon Synchronization" /Enable > NUL 2>&1
  980. schtasks /Change /TN "Microsoft\Windows\Work Folders\Work Folders Maintenance Work" /Enable > NUL 2>&1
  981. schtasks /Change /TN "Microsoft\Windows\Workplace Join\Automatic-Device-Join" /Enable > NUL 2>&1
  982. schtasks /Change /TN "Microsoft\XblGameSave\XblGameSaveTask" /Enable > NUL 2>&1
  983. schtasks /Change /TN "Microsoft\XblGameSave\XblGameSaveTaskLogon" /Enable > NUL 2>&1
  984. schtasks /Change /TN "Driver Easy Scheduled Scan" /Enable > NUL 2>&1
  985. schtasks /Change /TN "Microsoft\Office\OfficeTelemetryAgentFallBack2016" /Enable > NUL 2>&1
  986. schtasks /Change /TN "Microsoft\Office\OfficeTelemetryAgentLogOn2016" /Enable > NUL 2>&1
  987. schtasks /Change /TN "Microsoft\Office\Office ClickToRun Service Monitor" /Enable > NUL 2>&1
  988. ECHO.
  989. ECHO Done...
  990. ECHO Press any key to got back to the menu.
  991. PAUSE > NUL
  992. GOTO menu_tweaks
  993.  
  994. REM -- Features Menu
  995. :menu_features
  996. COLOR 1F
  997. CLS
  998. ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ»
  999. ECHO º         WINDOWS 10 TNBT: THE NEXT BIG TWEAK         º
  1000. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1001. ECHO º  CURRENT REVISION: v%V%                           º
  1002. ECHO º  AUTHOR: SEBASTIAN KOEHLING                         º
  1003. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1004. ECHO º  DETECTED WINDOWS: %B%       º
  1005. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1006. ECHO º                                                     º
  1007. ECHO º  WINDOWS FEATURES                                   º
  1008. ECHO º    [1] Disable Windows Defender                     º
  1009. ECHO º    [2] Disable Hibernation                          º
  1010. ECHO º    [3] Disable OneDrive                             º
  1011. ECHO º    [4] Disable Windows Update                       º
  1012. ECHO º    [5] Remove Windows Apps except store             º
  1013. ECHO º    [6] Remove all Windows Apps                      º
  1014. ECHO º    [7] Enable OS compression                        º
  1015. ECHO º                                                     º
  1016. ECHO º    [8] Recover Windows Defender                     º
  1017. ECHO º    [9] Recover Hibernation                          º
  1018. ECHO º   [10] Recover OneDrive                             º
  1019. ECHO º   [11] Recover Windows Update                       º
  1020. ECHO º   [12] Recover all Windows Apps                     º
  1021. ECHO º   [13] Disable OS compression                       º
  1022. ECHO º                                                     º
  1023. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1024. ECHO º    [0] Back to Main Menu                            º
  1025. ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ
  1026. ECHO.
  1027. SET /p menu3="Select: "
  1028. IF '%menu3%' == '1' GOTO seq_disabledefender
  1029. IF '%menu3%' == '2' GOTO seq_disablehybernation
  1030. IF '%menu3%' == '3' GOTO seq_disableonedrive
  1031. IF '%menu3%' == '4' GOTO seq_disablewinupdate
  1032. IF '%menu3%' == '5' GOTO seq_removeappsexceptstore
  1033. IF '%menu3%' == '6' GOTO seq_removeapps
  1034. IF '%menu3%' == '7' GOTO seq_enablecompression
  1035. IF '%menu3%' == '8' GOTO seq_recoverdefender
  1036. IF '%menu3%' == '9' GOTO seq_recoverhybernation
  1037. IF '%menu3%' == '10' GOTO seq_recoveronedrive
  1038. IF '%menu3%' == '11' GOTO seq_recoverwinupdate
  1039. IF '%menu3%' == '12' GOTO seq_recoverapps
  1040. IF '%menu3%' == '13' GOTO seq_disablecompression
  1041. IF '%menu3%' == '0' GOTO menu_start
  1042. GOTO menu_start
  1043.  
  1044. REM -- Disables Windows Defender
  1045. :seq_disabledefender
  1046. COLOR 2F
  1047. ECHO.
  1048. sc config Sense start= disabled > NUL 2>&1
  1049. net stop Sense > NUL 2>&1
  1050. sc config WdFilter start= disabled > NUL 2>&1
  1051. net stop WdFilter > NUL 2>&1
  1052. sc config WdNisSvc start= disabled > NUL 2>&1
  1053. net stop WdNisSvc Track > NUL 2>&1
  1054. sc config WinDefend start= disabled > NUL 2>&1
  1055. net stop WinDefend > NUL 2>&1
  1056. reg add "HKLM\System\CurrentControlSet\Services\Sense" /v "Start" /t REG_DWORD /d "4" /f > NUL 2>&1
  1057. reg add "HKLM\System\CurrentControlSet\Services\WdFilter" /v "Start" /t REG_DWORD /d "4" /f > NUL 2>&1
  1058. reg add "HKLM\System\CurrentControlSet\Services\WdNisSvc" /v "Start" /t REG_DWORD /d "4" /f > NUL 2>&1
  1059. reg add "HKLM\System\CurrentControlSet\Services\WinDefend" /v "Start" /t REG_DWORD /d "4" /f > NUL 2>&1
  1060. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance" /Disable > NUL 2>&1
  1061. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cleanup" /Disable > NUL 2>&1
  1062. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan" /Disable > NUL 2>&1
  1063. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Verification" /Disable > NUL 2>&1
  1064. reg delete "HKLM\Software\Policies\Microsoft\Windows Defender" /f > NUL 2>&1
  1065. reg add "HKLM\Software\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t REG_DWORD /d 1 /f
  1066. reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableBehaviorMonitoring" /t REG_DWORD /d 1 /f
  1067. reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableOnAccessProtection" /t REG_DWORD /d 1 /f
  1068. reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableRealtimeMonitoring" /t REG_DWORD /d 1 /f
  1069. reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableScanOnRealtimeEnable" /t REG_DWORD /d 1 /f
  1070. reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Reporting" /v "DisableEnhancedNotifications" /t REG_DWORD /d 1 /f
  1071. reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet" /v "SpynetReporting" /t REG_DWORD /d 0 /f
  1072. reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet" /v "SubmitSamplesConsent" /t REG_DWORD /d 0 /f
  1073. reg add "HKLM\Software\Policies\Microsoft\Windows Defender\MpEngine" /v "MpEnablePus" /t REG_DWORD /d 0 /f
  1074. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" /v "WindowsDefender" /f > NUL 2>&1
  1075. ECHO.
  1076. ECHO Done...
  1077. ECHO Press any key to got back to the menu.
  1078. PAUSE > NUL
  1079. GOTO menu_features
  1080.  
  1081. REM -- Disables Hybrid Boot aka Hibernation
  1082. :seq_disablehybernation
  1083. COLOR 2F
  1084. ECHO.
  1085. reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Power" /v "HiberbootEnabled" /t REG_DWORD /d 0 /f
  1086. powercfg /hibernate off > NUL 2>&1
  1087. ECHO.
  1088. ECHO Done...
  1089. ECHO Press any key to got back to the menu.
  1090. PAUSE > NUL
  1091. GOTO menu_features
  1092.  
  1093. REM -- Disables OneDrive
  1094. :seq_disableonedrive
  1095. COLOR 2F
  1096. ECHO.
  1097. taskkill /F /IM OneDrive.exe /T > NUL 2>&1
  1098. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "OneDrive" /f > NUL 2>&1
  1099. reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableFileSyncNGSC" /t REG_DWORD /d 1 /f
  1100. reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableMeteredNetworkFileSync" /t REG_DWORD /d 1 /f
  1101. reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableLibrariesDefaultSaveToOneDrive" /t REG_DWORD /d 1 /f
  1102. sc config OneSyncSvc start= disabled
  1103. net stop OneSyncSvc > NUL 2>&1
  1104. reg add "HKLM\System\CurrentControlSet\Services\OneSyncSvc" /v "Start" /t REG_DWORD /d 4 /f > NUL 2>&1
  1105. reg add "HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d 0 /f
  1106. reg add "HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d 0 /f > NUL 2>&1
  1107. ECHO.
  1108. ECHO Done...
  1109. ECHO Press any key to got back to the menu.
  1110. PAUSE > NUL
  1111. GOTO menu_features
  1112.  
  1113. REM -- Disables Windows Update so you can update via Windows Update MiniTool instead
  1114. :seq_disablewinupdate
  1115. COLOR 2F
  1116. ECHO.
  1117. schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\Automatic App Update" /Disable > NUL 2>&1
  1118. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /v "AutoDownload" /t REG_DWORD /d 2 /f > NUL 2>&1
  1119. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v "3G" /t REG_DWORD /d 2 /f > NUL 2>&1
  1120. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v "4G" /t REG_DWORD /d 2 /f > NUL 2>&1
  1121. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v "Default" /t REG_DWORD /d 2 /f > NUL 2>&1
  1122. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v "Ethernet" /t REG_DWORD /d 2 /f > NUL 2>&1
  1123. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v "WiFi" /t REG_DWORD /d 2 /f > NUL 2>&1
  1124. sc config wuauserv start= disabled
  1125. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\Reboot" /Disable > NUL 2>&1
  1126. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\Refresh Settings" /Disable > NUL 2>&1
  1127. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display" /Disable > NUL 2>&1
  1128. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot" /Disable > NUL 2>&1
  1129. schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\sih" /Disable > NUL 2>&1
  1130. schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\sihboot" /Disable > NUL 2>&1
  1131. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /v "DODownloadMode" /t REG_DWORD /d 0 /f
  1132. reg add "HKLM\Software\Microsoft\WindowsUpdate\UX\Settings" /v "DeferUpgrade" /t REG_DWORD /d 1 /f
  1133. reg add "HKLM\Software\Policies\Microsoft\MRT" /v DontOfferThroughWUAU /t REG_DWORD /d 1 /f
  1134. reg add "HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate" /v "ExcludeWUDriversInQualityUpdate" /t REG_DWORD /d 1 /f
  1135. reg add "HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "AlwaysAutoRebootAtScheduledTime" /t REG_DWORD /d 0 /f
  1136. reg add "HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoRebootWithLoggedOnUsers" /t REG_DWORD /d 1 /f
  1137. ECHO.
  1138. ECHO Done...
  1139. ECHO Press any key to got back to the menu.
  1140. PAUSE > NUL
  1141. GOTO menu_features
  1142.  
  1143. REM -- Removes all windows apps excluding the windows store
  1144. :seq_removeappsexceptstore
  1145. COLOR 2F
  1146. ECHO.
  1147. PowerShell.exe -Command "Get-AppxPackage | where-object {$_.name -notlike '*store*'} | Remove-AppxPackage" -ErrorAction SilentlyContinue
  1148. ECHO.
  1149. ECHO Done...
  1150. ECHO You should reboot your computer now.
  1151. ECHO Press any key to got back to the menu.
  1152. PAUSE > NUL
  1153. GOTO menu_features
  1154.  
  1155. REM -- Removes all windows apps including the windows store
  1156. :seq_removeapps
  1157. COLOR 2F
  1158. ECHO.
  1159. PowerShell.exe -Command "Get-AppxPackage | Remove-AppxPackage" -ErrorAction SilentlyContinue
  1160. ECHO.
  1161. ECHO Done...
  1162. ECHO You should reboot your computer now.
  1163. ECHO Press any key to got back to the menu.
  1164. PAUSE > NUL
  1165. GOTO menu_features
  1166.  
  1167. REM -- Enables Windows OS compression which uses zip to compress OS files
  1168. :seq_enablecompression
  1169. COLOR 2F
  1170. ECHO.
  1171. compact.exe /CompactOS:always /Q
  1172. ECHO.
  1173. ECHO Done...
  1174. ECHO Press any key to got back to the menu.
  1175. PAUSE > NUL
  1176. GOTO menu_features
  1177.  
  1178. REM -- Recovers the Windows Defender
  1179. :seq_recoverdefender
  1180. COLOR 2F
  1181. ECHO.
  1182. sc config Sense start= demand > NUL 2>&1
  1183. net start Sense > NUL 2>&1
  1184. sc config WdFilter start= boot > NUL 2>&1
  1185. net start WdFilter > NUL 2>&1
  1186. sc config WdNisSvc start= demand > NUL 2>&1
  1187. net start WdNisSvc > NUL 2>&1
  1188. sc config WinDefend start= auto > NUL 2>&1
  1189. net start WinDefend > NUL 2>&1
  1190. reg add "HKLM\System\CurrentControlSet\Services\Sense" /v "Start" /t REG_DWORD /d "3" /f > NUL 2>&1
  1191. reg add "HKLM\System\CurrentControlSet\Services\WdFilter" /v "Start" /t REG_DWORD /d "3" /f > NUL 2>&1
  1192. reg add "HKLM\System\CurrentControlSet\Services\WdNisSvc" /v "Start" /t REG_DWORD /d "3" /f > NUL 2>&1
  1193. reg add "HKLM\System\CurrentControlSet\Services\WinDefend" /v "Start" /t REG_DWORD /d "3" /f > NUL 2>&1
  1194. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance" /Enable > NUL 2>&1
  1195. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cleanup" /Enable > NUL 2>&1
  1196. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan" /Enable > NUL 2>&1
  1197. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Verification" /Enable > NUL 2>&1
  1198. reg add "HKLM\Software\Policies\Microsoft\Windows Defender" /f
  1199. reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Policy Manager" /f
  1200. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" /v "WindowsDefender" /t REG_EXPAND_SZ /d "%ProgramFiles%\Windows Defender\MSASCuiL.exe" /f
  1201. ECHO.
  1202. ECHO Done...
  1203. ECHO You should reboot your computer now.
  1204. ECHO Press any key to got back to the menu.
  1205. PAUSE > NUL
  1206. GOTO menu_features
  1207.  
  1208. REM -- Recovers Hybrid Boot
  1209. :seq_recoverhybernation
  1210. COLOR 2F
  1211. ECHO.
  1212. reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Power" /v "HiberbootEnabled" /t REG_DWORD /d 1 /f
  1213. powercfg /hibernate on > NUL 2>&1
  1214. ECHO.
  1215. ECHO Done...
  1216. ECHO Press any key to got back to the menu.
  1217. PAUSE > NUL
  1218. GOTO menu_features
  1219.  
  1220. REM -- Recovers OneDrive
  1221. :seq_recoveronedrive
  1222. COLOR 2F
  1223. ECHO.
  1224. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "OneDrive" /t REG_SZ /d ""C:\Users\Test\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background"C:\Users\Test\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background" /f > NUL 2>&1
  1225. reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableMeteredNetworkFileSync" /t REG_DWORD /d 0 /f
  1226. reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableLibrariesDefaultSaveToOneDrive" /t REG_DWORD /d 0 /f
  1227. reg delete "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /f > NUL 2>&1
  1228. sc config OneSyncSvc start= auto
  1229. net start OneSyncSvc > NUL 2>&1
  1230. reg add "HKLM\System\CurrentControlSet\Services\OneSyncSvc" /v "Start" /t REG_DWORD /d 2 /f > NUL 2>&1
  1231. reg add "HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d 1 /f
  1232. reg add "HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d 1 /f > NUL 2>&1
  1233. ECHO.
  1234. ECHO Done...
  1235. ECHO You should reboot your computer now.
  1236. ECHO Press any key to got back to the menu.
  1237. PAUSE > NUL
  1238. GOTO menu_features
  1239.  
  1240. REM -- Recovers Windows Update
  1241. :seq_recoverwinupdate
  1242. COLOR 2F
  1243. ECHO.
  1244. schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\Automatic App Update" /Enable > NUL 2>&1
  1245. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /v "AutoDownload" /t REG_DWORD /d 4 /f > NUL 2>&1
  1246. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v "3G" /t REG_DWORD /d 2 /f > NUL 2>&1
  1247. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v "4G" /t REG_DWORD /d 2 /f > NUL 2>&1
  1248. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v "Default" /t REG_DWORD /d 1 /f > NUL 2>&1
  1249. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v "Ethernet" /t REG_DWORD /d 1 /f > NUL 2>&1
  1250. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v "WiFi" /t REG_DWORD /d 1 /f > NUL 2>&1
  1251. sc config wuauserv start= demand
  1252. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\Reboot" /Enable > NUL 2>&1
  1253. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\Refresh Settings" /Enable > NUL 2>&1
  1254. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display" /Enable > NUL 2>&1
  1255. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot" /Enable > NUL 2>&1
  1256. schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\sih" /Enable > NUL 2>&1
  1257. schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\sihboot" /Enable > NUL 2>&1
  1258. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /v "DODownloadMode" /f > NUL 2>&1
  1259. reg add "HKLM\Software\Microsoft\WindowsUpdate\UX\Settings" /v "DeferUpgrade" /t REG_DWORD /d 0 /f
  1260. reg add "HKLM\Software\Policies\Microsoft\MRT" /v DontOfferThroughWUAU /t REG_DWORD /d 1 /f
  1261. reg delete "HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate" /f > NUL 2>&1
  1262. ECHO.
  1263. ECHO Done...
  1264. ECHO You should reboot your computer now.
  1265. ECHO Press any key to got back to the menu.
  1266. PAUSE > NUL
  1267. GOTO menu_features
  1268.  
  1269. REM -- Reinstalls all default windows apps
  1270. :seq_recoverapps
  1271. COLOR 2F
  1272. ECHO.
  1273. PowerShell.exe -Command "Get-AppxPackage -AllUsers | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register ($_.InstallLocation + '\AppXManifest.xml')}" -ErrorAction SilentlyContinue
  1274. ECHO.
  1275. ECHO Done...
  1276. ECHO You should reboot your computer now.
  1277. ECHO Press any key to got back to the menu.
  1278. PAUSE > NUL
  1279. GOTO menu_features
  1280.  
  1281. REM -- Disables Windows OS compression
  1282. :seq_disablecompression
  1283. COLOR 2F
  1284. ECHO.
  1285. compact.exe /CompactOS:never /Q
  1286. ECHO.
  1287. ECHO Done...
  1288. ECHO Press any key to got back to the menu.
  1289. PAUSE > NUL
  1290. GOTO menu_features
  1291.  
  1292. REM -- Network Menu
  1293. :menu_network
  1294. COLOR 1F
  1295. CLS
  1296. ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ»
  1297. ECHO º         WINDOWS 10 TNBT: THE NEXT BIG TWEAK         º
  1298. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1299. ECHO º  CURRENT REVISION: v%V%                           º
  1300. ECHO º  AUTHOR: SEBASTIAN KOEHLING                         º
  1301. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1302. ECHO º  DETECTED WINDOWS: %B%       º
  1303. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1304. ECHO º                                                     º
  1305. ECHO º  WINDOWS NETWORK                                    º
  1306. ECHO º    [1] Set Network as Private                       º
  1307. ECHO º    [2] Set Network as Public                        º
  1308. ECHO º    [3] Show Network Configuration                   º
  1309. ECHO º                                                     º
  1310. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1311. ECHO º    [0] Back to Main Menu                            º
  1312. ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ
  1313. ECHO.
  1314. SET /p menu4="Select: "
  1315. IF '%menu4%' == '1' GOTO net_setprivate
  1316. IF '%menu4%' == '2' GOTO net_setpublic
  1317. IF '%menu4%' == '3' GOTO net_showconfig
  1318. IF '%menu4%' == '0' GOTO menu_start
  1319. GOTO menu_start
  1320.  
  1321. REM -- Sets your current network interface to private
  1322. :net_setprivate
  1323. COLOR 2F
  1324. ECHO.
  1325. ECHO Loading Current Network(s)...
  1326. PowerShell.exe -Command "Get-NetConnectionProfile"
  1327. SET /p netindex="Select InterfaceIndex: "
  1328. PowerShell.exe -Command "Set-NetConnectionProfile -InterfaceIndex %netindex% -NetworkCategory Private"
  1329. ECHO.
  1330. ECHO Press any key to got back to the menu.
  1331. PAUSE > NUL
  1332. GOTO menu_network
  1333.  
  1334. REM -- Sets your current network interface to public
  1335. :net_setpublic
  1336. COLOR 2F
  1337. ECHO.
  1338. ECHO Loading Current Network(s)...
  1339. PowerShell.exe -Command "Get-NetConnectionProfile"
  1340. SET /p netindex="Select InterfaceIndex: "
  1341. PowerShell.exe -Command "Set-NetConnectionProfile -InterfaceIndex %netindex% -NetworkCategory Public"
  1342. ECHO.
  1343. ECHO Press any key to got back to the menu.
  1344. PAUSE > NUL
  1345. GOTO menu_network
  1346.  
  1347. REM -- Outputs your current network interfaces
  1348. :net_showconfig
  1349. COLOR 2F
  1350. ECHO.
  1351. ipconfig /all
  1352. ECHO.
  1353. ECHO Press any key to got back to the menu.
  1354. PAUSE > NUL
  1355. GOTO menu_network
  1356.  
  1357. REM -- Diagnostic Menu
  1358. :menu_diagnostic
  1359. COLOR 1F
  1360. CLS
  1361. ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ»
  1362. ECHO º         WINDOWS 10 TNBT: THE NEXT BIG TWEAK         º
  1363. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1364. ECHO º  CURRENT REVISION: v%V%                           º
  1365. ECHO º  AUTHOR: SEBASTIAN KOEHLING                         º
  1366. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1367. ECHO º  DETECTED WINDOWS: %B%       º
  1368. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1369. ECHO º                                                     º
  1370. ECHO º  DIAGNOSTIC / REPAIR TOOLS                          º
  1371. ECHO º    [1] Complete Windows Integrity Check             º
  1372. ECHO º    [2] Fix Windows Network                          º
  1373. ECHO º    [3] Fix Windows Update                           º
  1374. ECHO º    [4] Clean Up Windows                             º
  1375. ECHO º    [5] Setup System CMD on Login (Safemode)         º
  1376. ECHO º                                                     º
  1377. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1378. ECHO º    [0] Back to Main Menu                            º
  1379. ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ
  1380. ECHO.
  1381. SET /p menu5="Select: "
  1382. IF '%menu5%' == '1' GOTO fix_integrety
  1383. IF '%menu5%' == '2' GOTO fix_network
  1384. IF '%menu5%' == '3' GOTO fix_winupdate
  1385. IF '%menu5%' == '4' GOTO fix_cleanup
  1386. IF '%menu5%' == '5' GOTO fix_systemcmd
  1387. IF '%menu5%' == '0' GOTO menu_start
  1388. GOTO menu_start
  1389.  
  1390. REM -- performs an integrety check for system files
  1391. :fix_integrety
  1392. COLOR 2F
  1393. ECHO.
  1394. chkdsk /scan
  1395. net start RpcLocator > NUL 2>&1
  1396. dism /Online /Cleanup-Image /CheckHealth
  1397. dism /Online /Cleanup-Image /ScanHealth
  1398. dism /Online /Cleanup-Image /RestoreHealth
  1399. sfc /scannow
  1400. ECHO.
  1401. ECHO Done...
  1402. ECHO Press any key to got back to the menu.
  1403. PAUSE > NUL
  1404. GOTO menu_diagnostic
  1405.  
  1406. REM -- Script to reset network related services and caches
  1407. :fix_network
  1408. COLOR 2F
  1409. ECHO.
  1410. sc config BFE start= auto
  1411. sc config Dhcp start= auto
  1412. sc config Dnscache start= auto
  1413. sc config DPS start= auto
  1414. sc config lmhosts start= auto
  1415. sc config MpsSvc start= auto
  1416. sc config NlaSvc start= auto
  1417. sc config nsi start= auto
  1418. sc config Wcmsvc start= auto
  1419. sc config Winmgmt start= auto
  1420. sc config NcbService start= demand
  1421. sc config Netman start= demand
  1422. sc config netprofm start= demand
  1423. sc config WinHttpAutoProxySvc start= demand
  1424. sc config WlanSvc start= demand
  1425. sc config WwanSvc start= demand
  1426. net start DPS > NUL 2>&1
  1427. net start BFE > NUL 2>&1
  1428. net start MpsSvc > NUL 2>&1
  1429. net start nsi > NUL 2>&1
  1430. net start NlaSvc > NUL 2>&1
  1431. net start Dnscache > NUL 2>&1
  1432. net start Dhcp > NUL 2>&1
  1433. net start Wcmsvc > NUL 2>&1
  1434. wmic path win32_networkadapter where index=0 call disable > NUL 2>&1
  1435. wmic path win32_networkadapter where index=1 call disable > NUL 2>&1
  1436. wmic path win32_networkadapter where index=2 call disable > NUL 2>&1
  1437. wmic path win32_networkadapter where index=3 call disable > NUL 2>&1
  1438. wmic path win32_networkadapter where index=4 call disable > NUL 2>&1
  1439. wmic path win32_networkadapter where index=5 call disable > NUL 2>&1
  1440. wmic path win32_networkadapter where index=0 call enable > NUL 2>&1
  1441. wmic path win32_networkadapter where index=1 call enable > NUL 2>&1
  1442. wmic path win32_networkadapter where index=2 call enable > NUL 2>&1
  1443. wmic path win32_networkadapter where index=3 call enable > NUL 2>&1
  1444. wmic path win32_networkadapter where index=4 call enable > NUL 2>&1
  1445. wmic path win32_networkadapter where index=5 call enable > NUL 2>&1
  1446. netsh advfirewall reset > NUL 2>&1
  1447. route -f > NUL 2>&1
  1448. arp -d * > NUL 2>&1
  1449. nbtstat -r > NUL 2>&1
  1450. nbtstat -rr > NUL 2>&1
  1451. ipconfig /release > NUL 2>&1
  1452. ipconfig /renew > NUL 2>&1
  1453. ipconfig /flushdns > NUL 2>&1
  1454. ipconfig /registerdns > NUL 2>&1
  1455. netsh int 6to4 reset all > NUL 2>&1
  1456. netsh int httpstunnel reset all > NUL 2>&1
  1457. netsh int ipv4 reset all > NUL 2>&1
  1458. netsh int ipv6 reset all > NUL 2>&1
  1459. netsh int isatap reset all > NUL 2>&1
  1460. netsh int portproxy reset all > NUL 2>&1
  1461. netsh int tcp reset all > NUL 2>&1
  1462. netsh int teredo reset all > NUL 2>&1
  1463. netsh winsock reset > NUL 2>&1
  1464. ECHO.
  1465. ECHO Done...
  1466. ECHO You should reboot your computer now.
  1467. ECHO Press any key to got back to the menu.
  1468. PAUSE > NUL
  1469. GOTO menu_diagnostic
  1470.  
  1471. REM -- Script to reset Windows Update related services, caches and registry keys
  1472. :fix_winupdate
  1473. COLOR 2F
  1474. ECHO.
  1475. sc config TrkWks start= auto
  1476. net start TrkWks > NUL 2>&1
  1477. fsutil usn deletejournal /d /n c: > NUL 2>&1
  1478. chkdsk /scan > NUL 2>&1
  1479. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies" /f > NUL 2>&1
  1480. reg delete "HKCU\Software\Microsoft\WindowsSelfHost" /f > NUL 2>&1
  1481. reg delete "HKCU\Software\Policies" /f > NUL 2>&1
  1482. reg delete "HKLM\Software\Microsoft\Policies" /f > NUL 2>&1
  1483. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies" /f > NUL 2>&1
  1484. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /f > NUL 2>&1
  1485. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate" /f > NUL 2>&1
  1486. reg delete "HKLM\Software\Microsoft\WindowsSelfHost" /f > NUL 2>&1
  1487. reg delete "HKLM\Software\Policies" /f > NUL 2>&1
  1488. reg delete "HKLM\Software\WOW6432Node\Microsoft\Policies" /f > NUL 2>&1
  1489. reg delete "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies" /f > NUL 2>&1
  1490. reg delete "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /f > NUL 2>&1
  1491. reg delete "HKLM\Software\WOW6432Node\Policies" /f > NUL 2>&1
  1492. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\Refresh Settings" /Enable > NUL 2>&1
  1493. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\Schedule Scan" /Enable > NUL 2>&1
  1494. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display" /Enable > NUL 2>&1
  1495. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot" /Enable > NUL 2>&1
  1496. schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\Automatic App Update" /Enable > NUL 2>&1
  1497. schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\Scheduled Start" /Enable > NUL 2>&1
  1498. schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\sih" /Enable > NUL 2>&1
  1499. schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\sihboot" /Enable > NUL 2>&1
  1500. sc config bits start= disabled
  1501. sc config cryptSvc start= disabled
  1502. sc config UsoSvc start= disabled
  1503. sc config winmgmt start= disabled
  1504. sc config wuauserv start= disabled
  1505. taskkill /im TiWorker.exe /f > NUL 2>&1
  1506. net stop bits /y > NUL 2>&1
  1507. net stop cryptSvc /y > NUL 2>&1
  1508. net stop UsoSvc /y > NUL 2>&1
  1509. net stop winmgmt /y > NUL 2>&1
  1510. winmgmt /salvagerepository > NUL 2>&1
  1511. taskkill /im TiWorker.exe /f > NUL 2>&1
  1512. net stop wuauserv /y > NUL 2>&1
  1513. rmdir "%systemroot%\SoftwareDistribution\Download\" /s /q > NUL 2>&1
  1514. del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr0.dat" > NUL 2>&1
  1515. del "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr1.dat" > NUL 2>&1
  1516. sc config BFE start= auto
  1517. sc config Dhcp start= auto
  1518. sc config MpsSvc start= auto
  1519. sc config netprofm start= auto
  1520. sc config NlaSvc start= auto
  1521. sc config nsi start= auto
  1522. sc config WinHttpAutoProxySvc start= auto
  1523. sc config Wcmsvc start= auto
  1524. net start DPS > NUL 2>&1
  1525. net start BFE > NUL 2>&1
  1526. net start MpsSvc > NUL 2>&1
  1527. net start nsi > NUL 2>&1
  1528. net start NlaSvc > NUL 2>&1
  1529. net start Dhcp > NUL 2>&1
  1530. net start BITS > NUL 2>&1
  1531. net start wuauserv > NUL 2>&1
  1532. net start WinHttpAutoProxySvc > NUL 2>&1
  1533. net start Wcmsvc > NUL 2>&1
  1534. wmic path win32_networkadapter where index=0 call disable > NUL 2>&1
  1535. wmic path win32_networkadapter where index=1 call disable > NUL 2>&1
  1536. wmic path win32_networkadapter where index=2 call disable > NUL 2>&1
  1537. wmic path win32_networkadapter where index=3 call disable > NUL 2>&1
  1538. wmic path win32_networkadapter where index=4 call disable > NUL 2>&1
  1539. wmic path win32_networkadapter where index=5 call disable > NUL 2>&1
  1540. wmic path win32_networkadapter where index=0 call enable > NUL 2>&1
  1541. wmic path win32_networkadapter where index=1 call enable > NUL 2>&1
  1542. wmic path win32_networkadapter where index=2 call enable > NUL 2>&1
  1543. wmic path win32_networkadapter where index=3 call enable > NUL 2>&1
  1544. wmic path win32_networkadapter where index=4 call enable > NUL 2>&1
  1545. wmic path win32_networkadapter where index=5 call enable > NUL 2>&1
  1546. route -f > NUL 2>&1
  1547. arp -d * > NUL 2>&1
  1548. nbtstat -r > NUL 2>&1
  1549. nbtstat -rr > NUL 2>&1
  1550. ipconfig /release > NUL 2>&1
  1551. ipconfig /renew > NUL 2>&1
  1552. ipconfig /flushdns > NUL 2>&1
  1553. ipconfig /registerdns > NUL 2>&1
  1554. Dism /Online /Cleanup-Image /RestoreHealth > NUL 2>&1
  1555. Dism /Online /Cleanup-Image /StartComponentCleanup > NUL 2>&1
  1556. cleanmgr /sageset:65535 & cleanmgr /sagerun:65535
  1557. ECHO.
  1558. ECHO Done...
  1559. ECHO You should reboot your computer now.
  1560. ECHO Press any key to got back to the menu.
  1561. PAUSE > NUL
  1562. GOTO menu_diagnostic
  1563.  
  1564. REM -- Removes various junk like temp files, shadowcopies and recyclebin
  1565. :fix_cleanup
  1566. COLOR 2F
  1567. ECHO.
  1568. fsutil usn deletejournal /d /n c: > NUL 2>&1
  1569. chkdsk /scan > NUL 2>&1
  1570. Dism /Online /Cleanup-Image /CheckHealth > NUL 2>&1
  1571. Dism /Online /Cleanup-Image /StartComponentCleanup /ResetBase > NUL 2>&1
  1572. winmgmt /salvagerepository > NUL 2>&1
  1573. compact /CompactOs:never > NUL 2>&1
  1574. del "%temp%\*" /s /f /q > NUL 2>&1
  1575. del "C:\$Recycle.bin\*" /s /f /q > NUL 2>&1
  1576. del "D:\$Recycle.bin\*" /s /f /q > NUL 2>&1
  1577. del "%systemroot%\temp\*" /s /f /q > NUL 2>&1
  1578. vssadmin delete shadows /for=c: /all /quiet > NUL 2>&1
  1579. cleanmgr /sageset:65535 & cleanmgr /sagerun:65535
  1580. ECHO.
  1581. ECHO Done...
  1582. ECHO Press any key to got back to the menu.
  1583. PAUSE > NUL
  1584. GOTO menu_diagnostic
  1585.  
  1586. REM -- Checks current system state (normal or safemode)
  1587. :fix_systemcmd
  1588. COLOR 2F
  1589. wmic COMPUTERSYSTEM GET BootupState | findstr /i "fail-safe" > NUL
  1590. IF %errorlevel% EQU 0 GOTO fix_safemode
  1591. IF %errorlevel% EQU 1 GOTO fix_normalmode
  1592.  
  1593. REM -- If running in Safemode, gives option to install the system CMD on Login screen
  1594. :fix_safemode
  1595. ECHO System running in Safemode. Do you want to install or uninstall System CMD^? [install^|uninstall]
  1596. SET /p systemcmd="Select: "
  1597. IF '%systemcmd%' == 'install' GOTO systemcmdinstall
  1598. IF '%systemcmd%' == 'uninstall' GOTO systemcmduninstall
  1599.  
  1600. REM -- Takes own of utilman.exe, creates a backup and replaces utilman.exe with cmd.exe
  1601. :systemcmdinstall
  1602. ECHO Installing System CMD on Login...
  1603. icacls "%SYSTEMROOT%\system32\Utilman.exe" /grant:r %username%:F /T /C /Q > NUL 2>&1
  1604. IF NOT EXIST "%SYSTEMROOT%\system32\Utilman.bak" (COPY /Y "%SYSTEMROOT%\system32\Utilman.exe" "%SYSTEMROOT%\system32\Utilman.bak") > NUL 2>&1
  1605. DEL "%SYSTEMROOT%\system32\Utilman.exe" > NUL 2>&1
  1606. COPY /Y "%SYSTEMROOT%\system32\cmd.exe" "%SYSTEMROOT%\system32\Utilman.exe" > NUL 2>&1
  1607. ECHO.
  1608. ECHO Done...
  1609. ECHO You should reboot your computer now.
  1610. ECHO Press any key to got back to the menu.
  1611. PAUSE > NUL
  1612. msconfig
  1613. GOTO menu_diagnostic
  1614.  
  1615. REM -- Reverts original utilman.exe
  1616. :systemcmduninstall
  1617. ECHO Uninstalling System CMD on Login...
  1618. DEL "%SYSTEMROOT%\system32\Utilman.exe" > NUL 2>&1
  1619. COPY /Y "%SYSTEMROOT%\system32\Utilman.bak" "%SYSTEMROOT%\system32\Utilman.exe" > NUL 2>&1
  1620. ECHO.
  1621. ECHO Done...
  1622. ECHO You should reboot your computer now.
  1623. ECHO Press any key to got back to the menu.
  1624. PAUSE > NUL
  1625. msconfig
  1626. GOTO menu_diagnostic
  1627.  
  1628. REM -- If running in normal mode, just shows a warning message
  1629. :fix_normalmode
  1630. ECHO.
  1631. ECHO Note: This needs to be done in Windows Safemode, otherwise it won't work.
  1632. ECHO Restart your computer and boot into Safemode (minimal).
  1633. ECHO.
  1634. ECHO Press any key to got back to the menu.
  1635. PAUSE > NUL
  1636. msconfig
  1637. GOTO menu_diagnostic
  1638.  
  1639. REM -- Activation Menu
  1640. :menu_activation
  1641. COLOR 1F
  1642. CLS
  1643. ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ»
  1644. ECHO º         WINDOWS 10 TNBT: THE NEXT BIG TWEAK         º
  1645. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1646. ECHO º  CURRENT REVISION: v%V%                           º
  1647. ECHO º  AUTHOR: SEBASTIAN KOEHLING                         º
  1648. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1649. ECHO º  DETECTED WINDOWS: %B%       º
  1650. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1651. ECHO º                                                     º
  1652. ECHO º  WINDOWS ACTIVATION TOOLS                           º
  1653. ECHO º    [1] Uninstall Windows Key                        º
  1654. ECHO º    [2] Install Windows Key                          º
  1655. ECHO º    [3] Change KMS Server                            º
  1656. ECHO º    [4] Inject Windows GVLK Key                      º
  1657. ECHO º    [5] Inject Office GVLK Key                       º
  1658. ECHO º    [6] Show Windows/Office Activation Status        º
  1659. ECHO º    [7] Activate Windows/Office with KMS             º
  1660. ECHO º                                                     º
  1661. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1662. ECHO º    [0] Back to Main Menu                            º
  1663. ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ
  1664. ECHO.
  1665. SET /p menu6="Select: "
  1666. IF '%menu6%' == '1' GOTO act_uninstallkey
  1667. IF '%menu6%' == '2' GOTO act_installkey
  1668. IF '%menu6%' == '3' GOTO act_changekms
  1669. IF '%menu6%' == '4' GOTO act_injectkeywindows
  1670. IF '%menu6%' == '5' GOTO act_injectkeyoffice
  1671. IF '%menu6%' == '6' GOTO act_activationstatus
  1672. IF '%menu6%' == '7' GOTO act_activatenow
  1673. IF '%menu6%' == '0' GOTO menu_start
  1674. GOTO menu_start
  1675.  
  1676. REM -- Uninstalls the current Windows key
  1677. :act_uninstallkey
  1678. COLOR 2F
  1679. ECHO.
  1680. START /WAIT slmgr -upk
  1681. ECHO.
  1682. ECHO Done...
  1683. ECHO Press any key to got back to the menu.
  1684. PAUSE > NUL
  1685. GOTO menu_activation
  1686.  
  1687. REM -- Option to manually install a new Windows key
  1688. :act_installkey
  1689. COLOR 2F
  1690. ECHO.
  1691. SET /p winkey="Insert Key: "
  1692. START /WAIT slmgr -ipk %winkey%
  1693. ECHO.
  1694. ECHO Done...
  1695. ECHO Press any key to got back to the menu.
  1696. PAUSE > NUL
  1697. GOTO menu_activation
  1698.  
  1699. REM -- Checks for current activation status for Windows and Office
  1700. :act_activationstatus
  1701. COLOR 2F
  1702. ECHO.
  1703. START /WAIT slmgr /dli
  1704. IF EXIST "%programfiles(x86)%\Microsoft Office\Office14\OSPP.VBS" SET opath="%programfiles(x86)%\Microsoft Office\Office14\" > NUL 2>&1
  1705. IF EXIST "%programfiles(x86)%\Microsoft Office\Office15\OSPP.VBS" SET opath="%programfiles(x86)%\Microsoft Office\Office15\" > NUL 2>&1
  1706. IF EXIST "%programfiles(x86)%\Microsoft Office\Office16\OSPP.VBS" SET opath="%programfiles(x86)%\Microsoft Office\Office16\" > NUL 2>&1
  1707. IF EXIST "%programfiles%\Microsoft Office\Office14\OSPP.VBS" SET opath="%programfiles%\Microsoft Office\Office14\" > NUL 2>&1
  1708. IF EXIST "%programfiles%\Microsoft Office\Office15\OSPP.VBS" SET opath="%programfiles%\Microsoft Office\Office15\" > NUL 2>&1
  1709. IF EXIST "%programfiles%\Microsoft Office\Office16\OSPP.VBS" SET opath="%programfiles%\Microsoft Office\Office16\" > NUL 2>&1
  1710. CD %opath% > NUL 2>&1
  1711. cscript ospp.vbs /dstatus
  1712. ECHO.
  1713. ECHO Done...
  1714. ECHO Press any key to got back to the menu.
  1715. PAUSE > NUL
  1716. GOTO menu_activation
  1717.  
  1718. REM -- Simple routine to change the current KMS server
  1719. :act_changekms
  1720. COLOR 2F
  1721. ECHO.
  1722. SET /p kmsserver="KMS Server IP: "
  1723. SET /p kmsport="KMS Server Port: "
  1724. IF EXIST "%programfiles(x86)%\Microsoft Office\Office14\OSPP.VBS" SET opath="%programfiles(x86)%\Microsoft Office\Office14\" > NUL 2>&1
  1725. IF EXIST "%programfiles(x86)%\Microsoft Office\Office15\OSPP.VBS" SET opath="%programfiles(x86)%\Microsoft Office\Office15\" > NUL 2>&1
  1726. IF EXIST "%programfiles(x86)%\Microsoft Office\Office16\OSPP.VBS" SET opath="%programfiles(x86)%\Microsoft Office\Office16\" > NUL 2>&1
  1727. IF EXIST "%programfiles%\Microsoft Office\Office14\OSPP.VBS" SET opath="%programfiles%\Microsoft Office\Office14\" > NUL 2>&1
  1728. IF EXIST "%programfiles%\Microsoft Office\Office15\OSPP.VBS" SET opath="%programfiles%\Microsoft Office\Office15\" > NUL 2>&1
  1729. IF EXIST "%programfiles%\Microsoft Office\Office16\OSPP.VBS" SET opath="%programfiles%\Microsoft Office\Office16\" > NUL 2>&1
  1730. CD %opath% > NUL 2>&1
  1731. ECHO Setting KMS Server to: %kmsserver%:%kmsport%...
  1732. cscript ospp.vbs /sethst:%kmsserver%
  1733. cscript ospp.vbs /setprt:%kmsport%
  1734. START /WAIT slmgr /skms %kmsserver%:%kmsport%
  1735. START /WAIT slmgr /skhc
  1736. ECHO.
  1737. ECHO Done...
  1738. ECHO Press any key to got back to the menu.
  1739. PAUSE > NUL
  1740. GOTO menu_activation
  1741.  
  1742. REM -- Windows Activation Menu
  1743. :act_injectkeywindows
  1744. COLOR 1F
  1745. CLS
  1746. ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ»
  1747. ECHO º         WINDOWS 10 TNBT: THE NEXT BIG TWEAK         º
  1748. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1749. ECHO º  CURRENT REVISION: v%V%                           º
  1750. ECHO º  AUTHOR: SEBASTIAN KOEHLING                         º
  1751. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1752. ECHO º  DETECTED WINDOWS: %B%       º
  1753. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1754. ECHO º                                                     º
  1755. ECHO º  INJECT WINDOWS GVLK KEY                            º
  1756. ECHO º    [1] Windows 10 Professional                      º
  1757. ECHO º    [2] Windows 10 Professional N                    º
  1758. ECHO º    [3] Windows 10 Education                         º
  1759. ECHO º    [4] Windows 10 Education N                       º
  1760. ECHO º    [5] Windows 10 Enterprise                        º
  1761. ECHO º    [6] Windows 10 Enterprise N                      º
  1762. ECHO º    [7] Windows 10 Enterprise 2015 LTSB              º
  1763. ECHO º    [8] Windows 10 Enterprise 2015 LTSB N            º
  1764. ECHO º                                                     º
  1765. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1766. ECHO º    [0] Back to Activation Menu                      º
  1767. ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ
  1768. ECHO.
  1769. SET /p menu7="Select: "
  1770. IF '%menu7%' == '1' GOTO key_w10_1
  1771. IF '%menu7%' == '2' GOTO key_w10_2
  1772. IF '%menu7%' == '3' GOTO key_w10_3
  1773. IF '%menu7%' == '4' GOTO key_w10_4
  1774. IF '%menu7%' == '5' GOTO key_w10_5
  1775. IF '%menu7%' == '6' GOTO key_w10_6
  1776. IF '%menu7%' == '7' GOTO key_w10_7
  1777. IF '%menu7%' == '8' GOTO key_w10_8
  1778. IF '%menu7%' == '0' GOTO menu_activation
  1779. GOTO act_injectkeywindows
  1780.  
  1781. REM -- Uninstalls current Windows key and injects GVLK key
  1782. :key_w10_1
  1783. COLOR 2F
  1784. START /WAIT slmgr -upk
  1785. START /WAIT slmgr -ipk W269N-WFGWX-YVC9B-4J6C9-T83GX
  1786. GOTO key_end
  1787.  
  1788. :key_w10_2
  1789. COLOR 2F
  1790. START /WAIT slmgr -upk
  1791. START /WAIT slmgr -ipk MH37W-N47XK-V7XM9-C7227-GCQG9
  1792. GOTO key_end
  1793.  
  1794. :key_w10_3
  1795. COLOR 2F
  1796. START /WAIT slmgr -upk
  1797. START /WAIT slmgr -ipk NW6C2-QMPVW-D7KKK-3GKT6-VCFB2
  1798. GOTO key_end
  1799.  
  1800. :key_w10_4
  1801. COLOR 2F
  1802. START /WAIT slmgr -upk
  1803. START /WAIT slmgr -ipk 2WH4N-8QGBV-H22JP-CT43Q-MDWWJ
  1804. GOTO key_end
  1805.  
  1806. :key_w10_5
  1807. COLOR 2F
  1808. START /WAIT slmgr -upk
  1809. START /WAIT slmgr -ipk NPPR9-FWDCX-D2C8J-H872K-2YT43
  1810. GOTO key_end
  1811.  
  1812. :key_w10_6
  1813. COLOR 2F
  1814. START /WAIT slmgr -upk
  1815. START /WAIT slmgr -ipk DPH2V-TTNVB-4X9Q3-TJR4H-KHJW4
  1816. GOTO key_end
  1817.  
  1818. :key_w10_7
  1819. COLOR 2F
  1820. START /WAIT slmgr -upk
  1821. START /WAIT slmgr -ipk WNMTR-4C88C-JK8YV-HQ7T2-76DF9
  1822. GOTO key_end
  1823.  
  1824. :key_w10_8
  1825. COLOR 2F
  1826. START /WAIT slmgr -upk
  1827. START /WAIT slmgr -ipk 2F77B-TNFGY-69QQF-B8YKP-D69TJ
  1828. GOTO key_end
  1829.  
  1830. :key_end
  1831. ECHO.
  1832. ECHO Done...
  1833. ECHO Press any key to got back to the menu.
  1834. PAUSE > NUL
  1835. GOTO menu_activation
  1836.  
  1837. REM -- Office Activation Menu
  1838. :act_injectkeyoffice
  1839. COLOR 1F
  1840. IF EXIST "%programfiles(x86)%\Microsoft Office\Office14\OSPP.VBS" SET opath="%programfiles(x86)%\Microsoft Office\Office14\" > NUL 2>&1
  1841. IF EXIST "%programfiles(x86)%\Microsoft Office\Office15\OSPP.VBS" SET opath="%programfiles(x86)%\Microsoft Office\Office15\" > NUL 2>&1
  1842. IF EXIST "%programfiles(x86)%\Microsoft Office\Office16\OSPP.VBS" SET opath="%programfiles(x86)%\Microsoft Office\Office16\" > NUL 2>&1
  1843. IF EXIST "%programfiles%\Microsoft Office\Office14\OSPP.VBS" SET opath="%programfiles%\Microsoft Office\Office14\" > NUL 2>&1
  1844. IF EXIST "%programfiles%\Microsoft Office\Office15\OSPP.VBS" SET opath="%programfiles%\Microsoft Office\Office15\" > NUL 2>&1
  1845. IF EXIST "%programfiles%\Microsoft Office\Office16\OSPP.VBS" SET opath="%programfiles%\Microsoft Office\Office16\" > NUL 2>&1
  1846. CLS
  1847. ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ»
  1848. ECHO º         WINDOWS 10 TNBT: THE NEXT BIG TWEAK         º
  1849. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1850. ECHO º  CURRENT REVISION: v%V%                           º
  1851. ECHO º  AUTHOR: SEBASTIAN KOEHLING                         º
  1852. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1853. ECHO º  DETECTED WINDOWS: %B%       º
  1854. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1855. ECHO º                                                     º
  1856. ECHO º  INJECT WINDOWS GVLK KEY                            º
  1857. ECHO º    [1] Office Professional Plus 2016                º
  1858. ECHO º    [2] Office Standard 2016                         º
  1859. ECHO º    [3] Office Professional Plus 2013                º
  1860. ECHO º    [4] Office Standard 2013                         º
  1861. ECHO º    [5] Office Professional Plus 2010                º
  1862. ECHO º    [6] Office Home and Student 2010                 º
  1863. ECHO º                                                     º
  1864. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1865. ECHO º    [0] Back to Activation Menu                      º
  1866. ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ
  1867. ECHO.
  1868. SET /p menu8="Select: "
  1869. IF '%menu8%' == '1' GOTO key_o16_1
  1870. IF '%menu8%' == '2' GOTO key_o16_2
  1871. IF '%menu8%' == '3' GOTO key_o13_1
  1872. IF '%menu8%' == '4' GOTO key_o13_2
  1873. IF '%menu8%' == '5' GOTO key_o10_1
  1874. IF '%menu8%' == '6' GOTO key_o10_2
  1875. IF '%menu8%' == '0' GOTO menu_activation
  1876. GOTO act_injectkeyoffice
  1877.  
  1878. REM -- Office GVLK key injection
  1879. :key_o16_1
  1880. COLOR 2F
  1881. cd %opath%
  1882. cscript ospp.vbs /inpkey:XQNVK-8JYDB-WJ9W3-YJ8YR-WFG99
  1883. GOTO key_endoffice
  1884.  
  1885. :key_o16_2
  1886. COLOR 2F
  1887. cd %opath%
  1888. cscript ospp.vbs /inpkey:JNRGM-WHDWX-FJJG3-K47QV-DRTFM
  1889. GOTO key_endoffice
  1890.  
  1891. :key_o13_1
  1892. COLOR 2F
  1893. cd %opath%
  1894. cscript ospp.vbs /inpkey:YC7DK-G2NP3-2QQC3-J6H88-GVGXT
  1895. GOTO key_endoffice
  1896.  
  1897. :key_o13_2
  1898. COLOR 2F
  1899. cd %opath%
  1900. cscript ospp.vbs /inpkey:KBKQT-2NMXY-JJWGP-M62JB-92CD4
  1901. GOTO key_endoffice
  1902.  
  1903. :key_o10_1
  1904. COLOR 2F
  1905. cd %opath%
  1906. cscript ospp.vbs /inpkey:MKCGC-FBXRX-BMJX6-F3Q8C-2QC6P
  1907. GOTO key_endoffice
  1908.  
  1909. :key_o10_2
  1910. COLOR 2F
  1911. cd %opath%
  1912. cscript ospp.vbs /inpkey:PXVMG-8F9K6-9GQYX-VJB66-FH626
  1913. GOTO key_endoffice
  1914.  
  1915. :key_endoffice
  1916. ECHO.
  1917. ECHO Done...
  1918. ECHO Press any key to got back to the menu.
  1919. PAUSE > NUL
  1920. GOTO menu_activation
  1921.  
  1922. REM -- Looks for Office installation folders and activates both Windows and Office
  1923. :act_activatenow
  1924. COLOR 2F
  1925. ECHO.
  1926. START /WAIT slmgr /ato
  1927. IF EXIST "%programfiles(x86)%\Microsoft Office\Office14\OSPP.VBS" SET opath="%programfiles(x86)%\Microsoft Office\Office14\" > NUL 2>&1
  1928. IF EXIST "%programfiles(x86)%\Microsoft Office\Office15\OSPP.VBS" SET opath="%programfiles(x86)%\Microsoft Office\Office15\" > NUL 2>&1
  1929. IF EXIST "%programfiles(x86)%\Microsoft Office\Office16\OSPP.VBS" SET opath="%programfiles(x86)%\Microsoft Office\Office16\" > NUL 2>&1
  1930. IF EXIST "%programfiles%\Microsoft Office\Office14\OSPP.VBS" SET opath="%programfiles%\Microsoft Office\Office14\" > NUL 2>&1
  1931. IF EXIST "%programfiles%\Microsoft Office\Office15\OSPP.VBS" SET opath="%programfiles%\Microsoft Office\Office15\" > NUL 2>&1
  1932. IF EXIST "%programfiles%\Microsoft Office\Office16\OSPP.VBS" SET opath="%programfiles%\Microsoft Office\Office16\" > NUL 2>&1
  1933. CD %opath% > NUL 2>&1
  1934. cscript ospp.vbs /act
  1935. ECHO.
  1936. ECHO Done...
  1937. ECHO Press any key to got back to the menu.
  1938. PAUSE > NUL
  1939. GOTO menu_activation
  1940.  
  1941. REM -- Anti-Ransomware Menu
  1942. :menu_fakeprocess
  1943. COLOR 1F
  1944. CLS
  1945. ECHO ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ»
  1946. ECHO º         WINDOWS 10 TNBT: THE NEXT BIG TWEAK         º
  1947. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1948. ECHO º  CURRENT REVISION: v%V%                           º
  1949. ECHO º  AUTHOR: SEBASTIAN KOEHLING                         º
  1950. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1951. ECHO º  DETECTED WINDOWS: %B%       º
  1952. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1953. ECHO º                                                     º
  1954. ECHO º  ANTI-RANSOMWARE PROCESS FAKER                      º
  1955. ECHO º    [1] Start Process Faker                          º
  1956. ECHO º    [2] Stop Process Faker                           º
  1957. ECHO º    [3] Install Process Faker (Autorun)              º
  1958. ECHO º    [4] Uninstall Process Faker                      º
  1959. ECHO º                                                     º
  1960. ECHO º    [5] What is this Process Faker anyway^?           º
  1961. ECHO º                                                     º
  1962. ECHO ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
  1963. ECHO º    [0] Back to Main Menu                            º
  1964. ECHO ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ
  1965. ECHO.
  1966. SET /p menu9="Select: "
  1967. IF '%menu9%' == '1' GOTO rsw_start
  1968. IF '%menu9%' == '2' GOTO rsw_stop
  1969. IF '%menu9%' == '3' GOTO rsw_install
  1970. IF '%menu9%' == '4' GOTO rsw_uninstall
  1971. IF '%menu9%' == '5' GOTO rsw_info
  1972. IF '%menu9%' == '0' GOTO menu_start
  1973. GOTO menu_fakeprocess
  1974.  
  1975. REM -- Creates processfaker.ps1 and runs it manually
  1976. :rsw_start
  1977. COLOR 2F
  1978. ECHO.
  1979. IF EXIST "%~dp0processfaker.ps1" DEL "%~dp0processfaker.ps1"
  1980. ECHO param([Parameter(Mandatory=$true)][string]$action)                         >> "%~dp0processfaker.ps1"
  1981. ECHO $fakeProcesses = @("wireshark.exe", "vmacthlp.exe", "VBoxService.exe",             >> "%~dp0processfaker.ps1"
  1982. ECHO     "VBoxTray.exe", "procmon.exe", "ollydbg.exe", "vmware-tray.exe",               >> "%~dp0processfaker.ps1"
  1983. ECHO     "idag.exe", "ImmunityDebugger.exe", "idaq.exe",                        >> "%~dp0processfaker.ps1"
  1984. ECHO     "idaq64.exe")                                          >> "%~dp0processfaker.ps1"
  1985. ECHO if ($action -ceq "start") {                                    >> "%~dp0processfaker.ps1"
  1986. ECHO     $tmpdir = [System.Guid]::NewGuid().ToString()                          >> "%~dp0processfaker.ps1"
  1987. ECHO     $binloc = Join-path $env:temp $tmpdir                              >> "%~dp0processfaker.ps1"
  1988. ECHO     New-Item -Type Directory -Path $binloc                             >> "%~dp0processfaker.ps1"
  1989. ECHO     $oldpwd = $pwd                                         >> "%~dp0processfaker.ps1"
  1990. ECHO     Set-Location $binloc                                       >> "%~dp0processfaker.ps1"
  1991. ECHO     foreach ($proc in $fakeProcesses) {                                >> "%~dp0processfaker.ps1"
  1992. ECHO         Copy-Item c:\windows\system32\ping.exe "$binloc\$proc"                 >> "%~dp0processfaker.ps1"
  1993. ECHO         Start-Process ".\$proc" -WindowStyle Hidden -ArgumentList "-t -w 600000000 -4 1.1.1.1" >> "%~dp0processfaker.ps1"
  1994. ECHO         write-host "[+] Process $proc spawned"                         >> "%~dp0processfaker.ps1"
  1995. ECHO     }                                              >> "%~dp0processfaker.ps1"
  1996. ECHO     Set-Location $oldpwd                                       >> "%~dp0processfaker.ps1"
  1997. ECHO }                                                  >> "%~dp0processfaker.ps1"
  1998. ECHO elseif ($action -ceq "stop") {                                 >> "%~dp0processfaker.ps1"
  1999. ECHO     foreach ($proc in $fakeProcesses) {                                >> "%~dp0processfaker.ps1"
  2000. ECHO         Stop-Process -processname "$proc".Split(".")[0]                        >> "%~dp0processfaker.ps1"
  2001. ECHO         write-host "[+] Killed $proc"                              >> "%~dp0processfaker.ps1"
  2002. ECHO     }                                              >> "%~dp0processfaker.ps1"
  2003. ECHO }                                                  >> "%~dp0processfaker.ps1"
  2004. ECHO else {                                             >> "%~dp0processfaker.ps1"
  2005. ECHO     write-host "Bad usage: need '-action start' or '-action stop' parameter"           >> "%~dp0processfaker.ps1"
  2006. ECHO }                                                  >> "%~dp0processfaker.ps1"
  2007. PowerShell.exe -ExecutionPolicy Unrestricted -File "%~dp0processfaker.ps1" -action start -ErrorAction SilentlyContinue
  2008. DEL "%~dp0processfaker.ps1"
  2009. ECHO.
  2010. ECHO Done...
  2011. ECHO Press any key to got back to the menu.
  2012. PAUSE > NUL
  2013. GOTO menu_fakeprocess
  2014.  
  2015. REM -- Creates processfaker.ps1 and stops it manually
  2016. :rsw_stop
  2017. COLOR 2F
  2018. ECHO.
  2019. IF EXIST "%~dp0processfaker.ps1" DEL "%~dp0processfaker.ps1"
  2020. ECHO param([Parameter(Mandatory=$true)][string]$action)                         >> "%~dp0processfaker.ps1"
  2021. ECHO $fakeProcesses = @("wireshark.exe", "vmacthlp.exe", "VBoxService.exe",             >> "%~dp0processfaker.ps1"
  2022. ECHO     "VBoxTray.exe", "procmon.exe", "ollydbg.exe", "vmware-tray.exe",               >> "%~dp0processfaker.ps1"
  2023. ECHO     "idag.exe", "ImmunityDebugger.exe", "idaq.exe",                        >> "%~dp0processfaker.ps1"
  2024. ECHO     "idaq64.exe")                                          >> "%~dp0processfaker.ps1"
  2025. ECHO if ($action -ceq "start") {                                    >> "%~dp0processfaker.ps1"
  2026. ECHO     $tmpdir = [System.Guid]::NewGuid().ToString()                          >> "%~dp0processfaker.ps1"
  2027. ECHO     $binloc = Join-path $env:temp $tmpdir                              >> "%~dp0processfaker.ps1"
  2028. ECHO     New-Item -Type Directory -Path $binloc                             >> "%~dp0processfaker.ps1"
  2029. ECHO     $oldpwd = $pwd                                         >> "%~dp0processfaker.ps1"
  2030. ECHO     Set-Location $binloc                                       >> "%~dp0processfaker.ps1"
  2031. ECHO     foreach ($proc in $fakeProcesses) {                                >> "%~dp0processfaker.ps1"
  2032. ECHO         Copy-Item c:\windows\system32\ping.exe "$binloc\$proc"                 >> "%~dp0processfaker.ps1"
  2033. ECHO         Start-Process ".\$proc" -WindowStyle Hidden -ArgumentList "-t -w 600000000 -4 1.1.1.1" >> "%~dp0processfaker.ps1"
  2034. ECHO         write-host "[+] Process $proc spawned"                         >> "%~dp0processfaker.ps1"
  2035. ECHO     }                                              >> "%~dp0processfaker.ps1"
  2036. ECHO     Set-Location $oldpwd                                       >> "%~dp0processfaker.ps1"
  2037. ECHO }                                                  >> "%~dp0processfaker.ps1"
  2038. ECHO elseif ($action -ceq "stop") {                                 >> "%~dp0processfaker.ps1"
  2039. ECHO     foreach ($proc in $fakeProcesses) {                                >> "%~dp0processfaker.ps1"
  2040. ECHO         Stop-Process -processname "$proc".Split(".")[0]                        >> "%~dp0processfaker.ps1"
  2041. ECHO         write-host "[+] Killed $proc"                              >> "%~dp0processfaker.ps1"
  2042. ECHO     }                                              >> "%~dp0processfaker.ps1"
  2043. ECHO }                                                  >> "%~dp0processfaker.ps1"
  2044. ECHO else {                                             >> "%~dp0processfaker.ps1"
  2045. ECHO     write-host "Bad usage: need '-action start' or '-action stop' parameter"           >> "%~dp0processfaker.ps1"
  2046. ECHO }                                                  >> "%~dp0processfaker.ps1"
  2047. PowerShell.exe -ExecutionPolicy Unrestricted -File "%~dp0processfaker.ps1" -action stop -ErrorAction SilentlyContinue
  2048. DEL "%~dp0processfaker.ps1"
  2049. ECHO.
  2050. ECHO Done...
  2051. ECHO Press any key to got back to the menu.
  2052. PAUSE > NUL
  2053. GOTO menu_fakeprocess
  2054.  
  2055. REM -- Creates processfaker.ps1, copys it to C:\Windows and creates a script in autorun folder to automatically run the script on boot
  2056. :rsw_install
  2057. COLOR 2F
  2058. ECHO.
  2059. IF EXIST "%SYSTEMROOT%\processfaker.ps1" DEL "%SYSTEMROOT%\processfaker.ps1"
  2060. ECHO param([Parameter(Mandatory=$true)][string]$action)                         >> "%SYSTEMROOT%\processfaker.ps1"
  2061. ECHO $fakeProcesses = @("wireshark.exe", "vmacthlp.exe", "VBoxService.exe",             >> "%SYSTEMROOT%\processfaker.ps1"
  2062. ECHO     "VBoxTray.exe", "procmon.exe", "ollydbg.exe", "vmware-tray.exe",               >> "%SYSTEMROOT%\processfaker.ps1"
  2063. ECHO     "idag.exe", "ImmunityDebugger.exe", "idaq.exe",                        >> "%SYSTEMROOT%\processfaker.ps1"
  2064. ECHO     "idaq64.exe")                                          >> "%SYSTEMROOT%\processfaker.ps1"
  2065. ECHO if ($action -ceq "start") {                                    >> "%SYSTEMROOT%\processfaker.ps1"
  2066. ECHO     $tmpdir = [System.Guid]::NewGuid().ToString()                          >> "%SYSTEMROOT%\processfaker.ps1"
  2067. ECHO     $binloc = Join-path $env:temp $tmpdir                              >> "%SYSTEMROOT%\processfaker.ps1"
  2068. ECHO     New-Item -Type Directory -Path $binloc                             >> "%SYSTEMROOT%\processfaker.ps1"
  2069. ECHO     $oldpwd = $pwd                                         >> "%SYSTEMROOT%\processfaker.ps1"
  2070. ECHO     Set-Location $binloc                                       >> "%SYSTEMROOT%\processfaker.ps1"
  2071. ECHO     foreach ($proc in $fakeProcesses) {                                >> "%SYSTEMROOT%\processfaker.ps1"
  2072. ECHO         Copy-Item c:\windows\system32\ping.exe "$binloc\$proc"                 >> "%SYSTEMROOT%\processfaker.ps1"
  2073. ECHO         Start-Process ".\$proc" -WindowStyle Hidden -ArgumentList "-t -w 600000000 -4 1.1.1.1" >> "%SYSTEMROOT%\processfaker.ps1"
  2074. ECHO         write-host "[+] Process $proc spawned"                         >> "%SYSTEMROOT%\processfaker.ps1"
  2075. ECHO     }                                              >> "%SYSTEMROOT%\processfaker.ps1"
  2076. ECHO     Set-Location $oldpwd                                       >> "%SYSTEMROOT%\processfaker.ps1"
  2077. ECHO }                                                  >> "%SYSTEMROOT%\processfaker.ps1"
  2078. ECHO elseif ($action -ceq "stop") {                                 >> "%SYSTEMROOT%\processfaker.ps1"
  2079. ECHO     foreach ($proc in $fakeProcesses) {                                >> "%SYSTEMROOT%\processfaker.ps1"
  2080. ECHO         Stop-Process -processname "$proc".Split(".")[0]                        >> "%SYSTEMROOT%\processfaker.ps1"
  2081. ECHO         write-host "[+] Killed $proc"                              >> "%SYSTEMROOT%\processfaker.ps1"
  2082. ECHO     }                                              >> "%SYSTEMROOT%\processfaker.ps1"
  2083. ECHO }                                                  >> "%SYSTEMROOT%\processfaker.ps1"
  2084. ECHO else {                                             >> "%SYSTEMROOT%\processfaker.ps1"
  2085. ECHO     write-host "Bad usage: need '-action start' or '-action stop' parameter"           >> "%SYSTEMROOT%\processfaker.ps1"
  2086. ECHO }                                                  >> "%SYSTEMROOT%\processfaker.ps1"
  2087. IF EXIST "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\Process_Faker.bat" DEL "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\Process_Faker.bat"
  2088. ECHO ^@ECHO OFF                                                                 > "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\Process_Faker.bat"
  2089. ECHO PowerShell.exe -ExecutionPolicy Unrestricted -File "%SYSTEMROOT%\processfaker.ps1" -action start -ErrorAction SilentlyContinue     >> "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\Process_Faker.bat"
  2090. ECHO EXIT                                                                   >> "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\Process_Faker.bat"
  2091. PowerShell.exe -ExecutionPolicy Unrestricted -File "%SYSTEMROOT%\processfaker.ps1" -action stop -ErrorAction SilentlyContinue > NUL 2>&1
  2092. PowerShell.exe -ExecutionPolicy Unrestricted -File "%SYSTEMROOT%\processfaker.ps1" -action start -ErrorAction SilentlyContinue
  2093. ECHO.
  2094. ECHO Done...
  2095. ECHO Press any key to got back to the menu.
  2096. PAUSE > NUL
  2097. GOTO menu_fakeprocess
  2098.  
  2099. REM -- Simply stops the process faker and deletes the files created by the installer script
  2100. :rsw_uninstall
  2101. COLOR 2F
  2102. ECHO.
  2103. PowerShell.exe -ExecutionPolicy Unrestricted -File "%SYSTEMROOT%\processfaker.ps1" -action stop -ErrorAction SilentlyContinue
  2104. IF EXIST ""%SYSTEMROOT%\processfaker.ps1"" DEL ""%SYSTEMROOT%\processfaker.ps1"" > NUL 2>&1
  2105. IF EXIST "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\Process_Faker.bat" DEL "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\Process_Faker.bat" > NUL 2>&1
  2106. ECHO.
  2107. ECHO Done...
  2108. ECHO Press any key to got back to the menu.
  2109. PAUSE > NUL
  2110. GOTO menu_fakeprocess
  2111.  
  2112. REM -- Just outputs some information text about process faker
  2113. :rsw_info
  2114. COLOR 2F
  2115. ECHO.
  2116. ECHO "Simulate fake processes of analysis sandbox/VM that some malware will try to evade.
  2117. ECHO This script will just spawn ping.exe with different names (wireshark.exe, vboxtray.exe, etc.)"
  2118. ECHO Source: https://gist.github.com/x0rz/e8b36fee33b87aa7e4e5dfd4c0cfc1a6
  2119. ECHO.
  2120. ECHO Done...
  2121. ECHO Press any key to got back to the menu.
  2122. PAUSE > NUL
  2123. GOTO menu_fakeprocess
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!