anchor.diff:  net accounts /minpwage:1
   REM Display current password policy
   net accounts
  +goto MENU
   
  -
  +:Four
   REM Turn on UAC
   echo "TURNING ON UAC"
   reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 1 /f
  +goto MENU
   
  -
  +:Five
   REM No Remote Desktop
   echo "DISABLING REMOTE DESKTOP"
   reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 1 /f
   reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v UserAuthentication /t REG_DWORD /d 0 /f
  +goto MENU
   
  -
  +:Six
   REM Windows auomatic updates
   echo "ENABLING AUTO-UPDATES"
   reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v AUOptions /t REG_DWORD /d 3 /f
  +goto MENU
   
  -
  +:Seven
   REM Removing good ol' insecure stuff
   echo "DISABLING WEAK SERVICES"
   dism /online /disable-feature /featurename:IIS-WebServerRole >NUL
  
positive.code: dism /online /disable-feature /featurename:TFTP >NUL
  dism /online /disable-feature /featurename:TelnetClient >NUL
  dism /online /disable-feature /featurename:TelnetServer >NUL
  
  
  REM START SYS INTEG SCAN!
  echo "STARTING SYSTEM INTERGRITY SCAN"
  Sfc.exe /scannow
  
  
  REM PowerShell RootKit detection start
  echo "POWERSHELL ROOTKIT DETECTION WITH MALWAREBYTES ROOTKIT BETA"
  powershell Invoke-WebRequest -OutFile MBRTKit.exe https://data-cdn.mbamupdates.com/web/mbar-1.09.3.1001.exe
  MBRTKit.exe
  
  
  PAUSE
  
negative.code: 
  
  CHOICE /C 123456789 /M "Enter your choice:"
  if ERROTLEVEL 9 goto Nine
  if ERROTLEVEL 8 goto Eight
  if ERROTLEVEL 7 goto Seven
  if ERROTLEVEL 6 goto Six
  if ERROTLEVEL 5 goto Five
  if ERROTLEVEL 4 goto Four
  if ERROTLEVEL 3 goto Three
  if ERROTLEVEL 2 goto Two
  if ERRORLEVEL 1 goto One
  
  :One
  REM Windows Defender scan 
  