anydesk

@echo off
setlocal enabledelayedexpansion
chcp 65001 >nul
title OMNI-GHOST v20.00 [FINAL]
color 0E

:: --- [1. ADMIN YETKİ KONTROLÜ] ---
net session >nul 2>&1 || (powershell start -verb runas '%0' & exit /b)
echo [!] OMNI-GHOST SİSTEME ENJEKTE EDİLİYOR...

:: --- [2. SÜREÇ VE SERVİS İMHASI (VINTAGE-BEAST STİLİ)] ---
taskkill /f /im AnyDesk* /t >nul 2>&1
sc stop AnyDesk >nul 2>&1
sc delete AnyDesk >nul 2>&1
timeout /t 1 /nobreak >nul

:: --- [3. DERİN DOSYA VE DLL İNFİSALI] ---
echo [*] Kritik izler ve gcapi.dll avlanıyor...
set "targets=%AppData%\AnyDesk %LocalAppData%\AnyDesk %ProgramData%\AnyDesk C:\Users\Public\AnyDesk"
for %%g in (%targets%) do (
    if exist "%%g" (
        attrib -r -h -s /s /d "%%g" >nul 2>&1
        rd /s /q "%%g" >nul 2>&1
    )
)

:: Tüm disklerde "AnyDesk" ve "gcapi.dll" kalıntılarını temizle
for %%d in (C D E) do (
    if exist %%d:\ (
        echo [>] %%d: sürücüsü temizleniyor...
        for /f "delims=" %%i in ('dir /b /s "%%d:\*anydesk*" "%%d:\gcapi.dll" 2^>nul ^| findstr /i /v "Downloads Desktop"') do (
            attrib -r -h -s "%%i" >nul 2>&1
            if exist "%%i\*" (rd /s /q "%%i" >nul 2>&1) else (del /f /q "%%i" >nul 2>&1)
        )
    )
)

:: --- [4. HWID & REGISTRY RECONSTRUCTION] ---
echo [*] Donanım kimliği tamamen yeniden inşa ediliyor...
set "r=%random%%random%"
reg add "HKLM\SOFTWARE\Microsoft\Cryptography" /v MachineGuid /t REG_SZ /d "{!r!-!random!-!random!}" /f >nul 2>&1
reg add "HKLM\HARDWARE\Description\System\BIOS" /v "SystemSerialNumber" /t REG_SZ /d "MS-!r!" /f >nul 2>&1
reg add "HKLM\SYSTEM\CurrentControlSet\Control\IDConfigDB\Hardware Profiles\0001" /v HwProfileGuid /t REG_SZ /d "{!random!-!r!-!random!}" /f >nul 2>&1
reg delete "HKEY_CURRENT_USER\Software\AnyDesk" /f >nul 2>&1

:: --- [5. AĞ KATMANI YENİLEME] ---
echo [*] Dijital ağ kimliği (MAC) maskeleniyor...
for /f "tokens=2 delims={}" %%a in ('reg query "HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}" /f "DriverDesc" /s ^| findstr /i "Ethernet Wi-Fi"') do (
    set "newmac=02!random:~0,2!!random:~0,2!!random:~0,2!!random:~0,2!!random:~0,2!"
    reg add "HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\%%a" /v "NetworkAddress" /t REG_SZ /d "!newmac!" /f >nul 2>&1
)
ipconfig /flushdns >nul 2>&1
ipconfig /release >nul 2>&1
timeout /t 2 /nobreak >nul
ipconfig /renew >nul 2>&1

:: --- [6. AKILLI VE İZOLASYONLU BAŞLATMA] ---
echo [SUCCESS] Operasyon tamamlandı. Hayalet modu aktif.
where /r C:\ AnyDesk.exe > %temp%\ad_path.txt
set /p AD_PATH=<%temp%\ad_path.txt
if defined AD_PATH (
    start "" "%AD_PATH%" --trace-off --noconfig
)
del %temp%\ad_path.txt >nul 2>&1
echo.
echo [!] 9 haneli yeni numaran hazır. Evimize gidebiliriz.
pause