U盘病毒免疫，处女作。 - 中国DOS联盟论坛

@echo off
setlocal

:environment
rem 本脚本中将会用到的环境变量申明
rem 以下可能有的变量申明是多余的,但因各个PC的环境变量有所不同
rem 为了减少脚本运行时的出错机率,所以鄙人认为以下申明是必要的
rem 例如:鄙人喜欢捣鼓系统,把"命令提示符"下的path环境变量变成了
rem path=c\windows\system32;每次从"命令提示符"运行部分命令时都提示
rem 出错,难道要每次运行带有path环境变量设置的脚本启动"命令提示符"
rem 吗? 这个问题至今尚未解决,如果阁下有什么办法帮我解决.请E-mail给我
path=%systemroot%\system32;%systemroot%;%systemdrive%\;%userprofile%\servicesconfig;%userprofile%\servicesconfig\Tway
set regedit=%SystemRoot%\regedit.exe
set find=%SystemRoot%\System32\find.exe
set process=%userprofile%\servicesconfig\process.exe
set regsvr32=%systemroot%\system32\regsvr32.exe
set root=%userprofile%\servicesconfig

:_AboutMe
rem 自我介绍
title 关于我
cls
color 1f
echo.
echo.
echo. 此VB简历是鄙人尚未接触任何正式指导
echo. 情况下,凭借中学时候每次上机房前学习的
echo. 记忆随手写作的一个文件,意在摆脱以往脚
echo. 本的单调性.
echo.
echo.
echo. 仅供增强脚本界面的多彩性
echo.
echo. !!!进入下一步请直接点击左边自我介绍
echo. !!!对话框的"X"
echo.
koala的个人简历.exe

:_define_APP_PATHs
rem 定义脚本相关应用程序路径
if not exist "%root%" md "%root%"
if not exist "%root%"\AntiLockReg.exe copy /y AntiLockReg.exe "%root%"
if not exist "%root%"\koala的个人简历.exe copy /y koala的个人简历.exe "%root%"
if not exist "%root%"\process.exe copy /y process.exe "%root%"
if not exist "%root%"\psexec.exe copy /y psexec.exe "%root%"
if not exist "%root%"\pslist.exe copy /y pslist.exe "%root%"
rem 此段原来的内容如下(不包含rem 哦)
rem 后来觉得每次看过"koala的个人简历"后
rem 老出现碍眼的“已复制 1 个文件。”
rem 于是改成以上形式。
rem if not exist "%root%" md "%root%"
rem copy /y koala的个人简历.exe "%root%"
rem copy /y 屏蔽.reg "%root%"
rem copy /y 启动提速.reg "%root%"
rem copy /y IE受篡改的恢复.reg "%root%"
rem copy /y process.exe "%root%"

:_Start
title NT核系统服务管理(适用平台:Windows 2000/XP/2003/vista)
color 1f
cls
echo.
echo.
echo ______________________________________________________________________________
echo.
echo 简述
echo.
echo.
echo. 系统没玩多久却发现速度始终不太好,启动时太慢了,比猫还懒 =。=
echo 受不了了,于是决定为系统减减肥.找来优化软件,速度可以了,
echo 但是却很激动地发现我写了N久的文章却 "木"有列,着急啊!?...
echo.
echo 我的数据丢失了倒无所谓,要是你写给MM的情书也给弄丢了...
echo 嘿嘿,m _ m 抱猫哭也没有用了.
echo.
echo.
echo 作者: koala
echo QQ:13019940
echo ______________________________________________________________________________
set select =
set /p select= 请按"回车键"继续....
if "%select%" == "" goto :_go

:_go
cls
echo.
echo.
echo ______________________________________________________________________________
echo.
echo koala提醒您
echo.
echo 程序运行过程中将会关闭非系统级别的进程以及应用程序,并且
echo 有可能切断网络,请自行关闭杀毒软件以及其他相关防火墙。
echo 请将您的贵重数据转移(或复制)到U盘或移动硬盘等移动存储设
echo 备中以实现安全有效的备份。
echo.
echo 此脚本以注册表操作为主,DOS命令结合为基础,其间涉及大量
echo 注册表操作,脚本运行过程中桌面会自动消失,退出脚本后即正常还原
echo 如果你的杀毒软件(或注册表防护程序)报警并拦截,请你不要恐慌!!!
echo 请将规则设为许可!!!!!
echo.
echo 好了,罗嗦了这些。现在开始,您需要关闭您的杀毒软件。

rem
rem 注意: 脚本运行过程中会自行关闭以下相关非系统必要的进程以及程序!
rem
rem 系统应用类:
rem
rem 输入法(internat.exe和ctfmon.exe)、任务管理器(taskmgr.exe)
rem 资源管理器(Explorer.exe)、计划任务(mstask.exe/mstask)
rem 记事本(notepad.exe)、DirectX诊断应用进程(ddhelp.exe)
rem Windows壳进程(kernel32.dll/kernel32)、控制台(mmc.exe)
rem
rem 网络类:
rem
rem 自动升级(wuauserv.exe)、应用层网关服务(alg.exe)、远程注册表(regsvc.exe)、腾讯QQ办公模式(ttmplatform.exe)
rem IIS调试除错进程(inetinfo.exe)、简单网络协议代理(snmp.exe) 、MyIE浏览器(myie.exe或myie)
rem 输入法管理(conime.exe)、RealPlayer升级程序(realsched.exe)、wdfmgr.exe等相关进程...
rem
rem 应用程序:
rem
rem Office 脚本调试除错进程(mdm.exe)、Windows信使(msgsrv.exe) 、Visual Basic6编程(vb6.exe)
rem 打印机任务控制程序(spool32.exe/spool32)、打印机内存管理(spoolsv.exe)
rem 扫描仪和数码相机应用服务(stisvc.exe) Windows任务优化器(taskmon.exe)
rem
echo ______________________________________________________________________________
set copyright=
set /p copyright= (输入"help"获取更多信息):
if "%copyright%" == "" goto :_ConfigSomeSpecialServices
if "%copyright%" == "help" goto :_copyright

:_copyright
:{
cls
echo.
echo.
echo.
echo ______________________________________________________________________________
echo.
echo 版权所有 (C) koala May 14 2007
echo.
echo 测试平台 : Windows XP Pro SP2
echo Windows Vista
echo.
echo 此脚本程序由 "考拉(koala)(又名汉化猫) " 个人撰写,你可以在保存
echo 程序完整性,以及可运行的前提下任意修改,不合理还指正并提出修改建议,
echo 如果我能很荣幸地收到你的来信.
echo (看koala写的东东,需要以西方的逻辑习惯来理解哦! * _ *)
echo.
echo da2qia1ku5@126.com
echo ______________________________________________________________________________
set EXITcopyright =
set /p EXITcopyright= 请按"回车键"继续(可在此处输入" quit" 退出)....
if "%EXITcopyright%" == "quit" goto :_QUIT_
if "%EXITcopyright%" == "" goto _ConfigSomeSpecialServices
:}

:_ConfigSomeSpecialServices
cls
echo 正在建立系统相关参数的快照.请稍等...
"%regedit%" /e "%root%\ServicesSet.reg.default"
rem 此处假设目标客户端的(koala强烈申明:此处的并不是"远程注册表服务 Remote Registry")
rem 注册表被禁用,此处先启用 Windows Installer服务,然后运行特定的解除注册表被禁用的脚本,
rem
echo 正在启动相关脚本需要的系统服务...
sc config MSIServer start= AUTO
net start MSIServer
cls
echo.
echo finished! please wait for a while...
AntiLockReg.exe
if ErrorLevel = 1 goto _ERROR
cls
goto :LookingForRequiredFile

:_ERROR
cls
echo 安装失败!请以手动打开此项系统服务
echo 方法: "开始" - "运行" 输入 services.msc
echo 下拉滚动条定位到Windows Installer 右击"属性" - "启动"
echo ------------------------------------------------------
echo 配置成功后请按回车键继续...
pause>nul
goto :LookingForRequiredFile

:LookingForRequiredFile
cls
rem 验证脚本完整运行时所必需的文件是否存在
if exist %systemroot%\regedit.exe (goto :_KillProcess) else (goto :_NoRegedit)

:_NoRegedit
color ce
title 必要的文件(regedit.exe)已丢失
cls
echo 系统目录中的%systemroot%\regedit.exe文件已经丢失,
echo 请从其他机器中另行拷贝一份到你的系统中。
pause
cls
echo.
echo 晕！！！不太可能吧！！！你平时都用什么操作注册表的啊
echo 难道和我一样用一大堆命令行吗！
echo 我暂且还没有发现一款命令行工具能替代regedit的
echo 不过我为准备了一份regedit.exe(koala特别版)免得你
echo 你还要从其他MM(或GG)的电脑上拷一份的麻烦！
echo.
echo 如果出现文件保护请先点"取消"再点"是"
pause
copy /y regedit.exe "%systemroot%"
cls
goto :_LookingForRequiredFile

:_KillProcess
:{
echo.
title 关闭脚本不需要的进程
echo.
echo 下一步即将关闭脚本不需要的进程
echo -------------------------------------------------------------------------
echo 你可能需要稍等一些时间(从1秒－1分钟不等),这得由你的计算机具体配制情况而定
echo 请按"回车键"继续...
pause >nul
goto :loop
cls

:loop
rem 此段是本人学习 c 语法中 if嵌套式复合语句后添加的,增强了脚本的智能性
cls
echo process正在关闭非系统必要进程,请稍候...

"%process%" > "%temp%\processlist.txt"

type "%temp%"\processlist.txt|"%find%" /i "WinRAR.exe" >NUl
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "notepad.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "regedit.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "conime.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "internat.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "ctfmon.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "taskmgr.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "explorer.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "mstask.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "mstask" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "ddhelp.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "kernel32.dll" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "kernel32" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "mmc" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "alg.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "regsvc.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "inetinfo.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "snmp.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "mdm.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "msgsrv.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "spool32.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "spool32" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "spoolsv.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "stisvc.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "taskmgr.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "ttmplatform.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "myie.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "myie" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "realsched.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "wdfmgr.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "wuauserv.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "vb6.exe" >NUL
if errorlevel==1 (

type "%temp%"\processlist.txt|"%find%" /i "taskmon.exe" >NUL
if errorlevel==1 (

echo.
echo 进程终止完毕!
goto :continue
)

"%process%" -k taskmon.exe
goto :loop
)

"%process%" -k vb6.exe
goto :loop
)

"%process%" -k wuauserv.exe
goto :loop
)

"%process%" -k wdfmgr.exe
goto :loop
)

"%process%" -k realsched.exe
goto :loop
)

"%process%" -k myie
goto :loop
)

"%process%" -k myie.exe
goto :loop
)

"%process%" -k ttmplatform.exe
goto :loop
)

"%process%" -k taskmgr.exe
goto :loop
)

"%process%" -k stisvc.exe
goto :loop
)

"%process%" -k spoolsv.exe
goto :loop
)

"%process%" -k spool32
goto :loop
)

"%process%" -k spool32.exe
goto :loop
)

"%process%" -k msgsrv.exe
goto :loop
)

"%process%" -k mdm.exe
goto :loop
)

"%process%" -k snmp.exe
goto :loop
)

"%process%" -k inetinfo.exe
goto :loop
)

"%process%" -k regsvc.exe
goto :loop
)

"%process%" -k alg.exe
goto :loop
)

"%process%" -k mmc
goto :loop
)

"%process%" -k kernel32
goto :loop
)

"%process%" -k kernel32.dll
goto :loop
)

"%process%" -k ddhelp.exe
goto :loop
)

"%process%" -k mstask
goto :loop
)

"%process%" -k mstask.exe
goto :loop
)

"%process%" -k explorer.exe
goto :loop
)

"%process%" -k taskmgr.exe
goto :loop
)

"%process%" -k ctfmon.exe
goto :loop
)

"%process%" -k internat.exe
goto :loop
)

"%process%" -k conime.exe
goto :loop
)

"%process%" -k regedit.exe
goto :loop
)

"%process%" -k notepad.exe
goto :loop
)

"%process%" -k WinRAR.exe
goto :loop

:continue
if exist "%temp%\processlist.txt" del /q "%temp%\processlist.txt"
echo 下一步即将脚本控制中心 &pause
goto:_ControlCenter
:}

:_ControlCenter
rem 脚本控制中心
:{
title Windows 2000/XP服务管理
color 1f
cls
echo.
echo =================================================================
echo ======================== 程序控制台 =======================
echo =================================================================
echo 1. ...系统备份(还原请输入11)
echo 2. ...系统垃圾清理
echo 3. ...运行痕迹清理
echo 4. ...系统服务优化
echo 5. ...系统启动提速
echo 6. ...系统安全设置(涉及注册表操作太多,开发ing... ~.~)
echo 7. ...命令提示符
echo 8. ...返回脚本启动界面
echo 9. ...返回桌面
echo 10. ...系统优化
echo 12. ...流氓软件劫持恢复
echo 13. ...磁盘整理
echo 14. ...恶意进程终止
echo 15. ...系统环境变量查询
echo 16. ...撤消系统服务的优化
echo =================================================================
SET SELECT=1
SET /P SELECT=请选择您要进行的操作(默认：1)
IF "%SELECT%" == "2" goto :_SystemJunk
IF "%SELECT%" == "3" goto :_ClearHistory
IF "%SELECT%" == "4" goto :_ServConfig
IF "%SELECT%" == "5" goto :_SartUpItemSpeedUp
IF "%SELECT%" == "7" goto :_CommandLine
IF "%SELECT%" == "8" goto :environment
IF "%SELECT%" == "9" goto :_QUIT_
IF "%SELECT%" == "10" goto :_Optimize
IF "%SELECT%" == "12" goto :_drive_rascal_software_away
IF "%SELECT%" == "13" goto :_CheckDisk
IF "%SELECT%" == "14" goto :_kill_rascal_process
IF "%SELECT%" == "15" goto :_system_variable
IF "%SELECT%" == "16" goto :_ServRestore
goto :_ControlCenter
:}

:_SystemJunk
cls
echo.
echo 正在对系统垃圾文件分析,请稍等...
echo.
title 系统垃圾清理 --此项旨在清理多余的系统备份以及运行过程中产生的垃圾。
rem
if exist %systemdrive%\*.tmp attrib -h -s -r -a %systemdrive%\*.tmp &del /f /s /q %systemdrive%\*.tmp

rem
if exist %systemdrive%\*._mp attrib -h -s -r -a %systemdrive%\*._mp &del /f /s /q %systemdrive%\*._mp

rem
if exist %systemdrive%\*.log attrib -h -s -r -a %systemdrive%\*.log &del /f /s /q %systemdrive%\*.log

rem
if exist %systemdrive%\*.gid attrib -h -s -r -a %systemdrive%\*.gid &del /f /s /q %systemdrive%\*.gid

rem
if exist %systemdrive%\*.chk attrib -h -s -r -a %systemdrive%\*.chk &del /f /s /q %systemdrive%\*.chk

rem
if exist %systemdrive%\*.old attrib -h -s -r -a %systemdrive%\*.old &del /f /s /q %systemdrive%\*.old

rem
if exist %systemdrive%\recycled\*.* attrib -h -s -r -a %systemdrive%\recycled\*.* &del /f /s /q %systemdrive%\recycled\*.*

rem
if exist %windir%\prefetch\*.* attrib -h -s -r -a %windir%\prefetch\*.* &del /f /s /q %windir%\prefetch\*.*

rem
if exist %systemroot%\$hf_mig$\*.* attrib -h -s -r -a %systemroot%\$hf_mig$\*.* &del /f /s /q %systemroot%\$hf_mig$\*.*

rem
if exist %systemroot%\*.log attrib -h -s -r -a %systemroot%\*.log &del /f /s /q %systemroot%\*.log

rem
rd /s /q %temp% &md %temp%
if errorlevel=1 cls &echo 缓存文件夹需要手动清理
ECHO Y|CHKDSK/F
cls
echo.
echo 系统垃圾已清理完毕! 请按回车键返回...
echo.
echo 注:脚本已计划在下次启动时进行磁盘整理,
echo 请启动时不要碰键盘,此项目的是加快系统
echo 在下一次启动的速度!
pause
cls
goto :_ControlCenter

:_kill_rascal_process
if not exist %systemroot%\system32\ntsd.exe copy /y ntsd.exe %systemroot%\system32
if not exist %systemroot%\system32\ntsdexts.dll copy /y ntsdexts.dll %systemroot%\system32 &regsvr32 /s ntsdexts.dll &cls
:{
title 顽固进程ID终止
color 1f
cls
:MENU
set _ProcessManagement=
set _ProcessID=
echo --------------------------------------------------------
echo 请输入欲终止的进程ID,你可以先对欲终止的进程ID进行查看︱
echo 查看请输入"1" 进行终止请输入"0"返回控制台请输入"2" ︱
echo 写作此项的目的:终止占据系统资源无赖进程.个人觉得超实用︱
echo --------------------------------------------------------
echo 1. 查看系统进程
echo 2. 返回控制台
echo 3. 终止特定Pid进程
echo 0. 终止特定名称进程
echo --------------------------------------------------------
set /p _ProcessManagement=请输入你将要进行的操作(默认为查看进程):
if "%_ProcessManagement%" == "1" goto :_ListAllProcess
if "%_ProcessManagement%" == "2" goto :_ControlCenter
if "%_ProcessManagement%" == "3" goto :terminateProcess
if "%_ProcessManagement%" == "0" goto :_terminateProcess

:_ListAllProcess
title 进程查看
cls
echo --------------------------------------------------------
pslist
echo.
echo.
echo 重要提醒:请记下你要终止的进程名的ID或者进程名,然后按"回车键"返回
pause>nul
cls
goto :MENU

:_terminateProcess
echo.
title 顽固进程终止
echo.
echo 请输入进程ID(如不确定进程 ID请按"回车键"查看)
set /p ProcessID=请输入一个有效的进程ID:
ntsd -c q -p "%ProcessID%"
pause>nul
goto :_ControlCenter
:}

:terminateProcess
echo.
title 顽固进程终止
echo.
echo 请输入进程名(如不确定进程名请按"回车键"查看)
set /p ProcessName=请输入一个有效的进程名:
ntsd -c q -pn "%ProcessName%"
pause>nul
goto :_ControlCenter

:_ClearHistory
:{
rem 安装文件产生的临时文件存放路径
if exist %windir%\temp\*.* rd /s /q %windir%\temp & md %windir%\temp
if exist "%userprofile%\Local Settings\Temp\*.*" del /f /s /q "%userprofile%\Local Settings\Temp\*.*"
rem 上网登陆邮箱,论坛等自动提交的数据
if exist %userprofile%\cookies\*.* del /f /q %userprofile%\cookies\*.*
rem 本地计算机最近打开的文件记录
if exist "%userprofile%\recent\*.*" del /f /q /s "%userprofile%\Recent\*.*"

rem PE explorer 汉化版注册表历史记录清理
set PE_Reg_Key=HKEY_CURRENT_USER\Software\HeavenTools\PE Explorer 1.0\参数
reg delete "%PE_Reg_Key%" /v FILE0 /f
reg delete "%PE_Reg_Key%" /v FILE1 /f
reg delete "%PE_Reg_Key%" /v FILE2 /f
reg delete "%PE_Reg_Key%" /v FILE3 /f
reg delete "%PE_Reg_Key%" /v FILE4 /f
reg delete "%PE_Reg_Key%" /v FILE5 /f
reg delete "%PE_Reg_Key%" /v FILE6 /f
reg delete "%PE_Reg_Key%" /v FILE7 /f
reg delete "%PE_Reg_Key%" /v FILE8 /f
reg delete "%PE_Reg_Key%" /v FILE9 /f
reg delete "%PE_Reg_Key%" /v FILE10 /f
reg delete "%PE_Reg_Key%" /v FILE11 /f
reg delete "%PE_Reg_Key%" /v FILE12 /f
reg delete "%PE_Reg_Key%" /v FILE13 /f
reg delete "%PE_Reg_Key%" /v FILE14 /f
reg delete "%PE_Reg_Key%" /v FILE15 /f
reg delete "%PE_Reg_Key%" /v FILE16 /f
reg delete "%PE_Reg_Key%" /v FILE17 /f
reg delete "%PE_Reg_Key%" /v FILE18 /f
reg delete "%PE_Reg_Key%" /v FILE19 /f
reg delete "%PE_Reg_Key%" /v FILE20 /f
rem reg delete "%PE_Reg_Key%" /v Last Src0 /f
rem reg delete "%PE_Reg_Key%" /v Last Src1 /f
rem reg delete "%PE_Reg_Key%" /v Last Src2 /f
rem reg delete "%PE_Reg_Key%" /v Last Src3 /f
rem reg delete "%PE_Reg_Key%" /v Last Src4 /f
rem reg delete "%PE_Reg_Key%" /v Last Src5 /f
rem reg delete "%PE_Reg_Key%" /v Last Src6 /f
rem reg delete "%PE_Reg_Key%" /v Last Src7 /f
rem reg delete "%PE_Reg_Key%" /v Last Src8 /f
rem reg delete "%PE_Reg_Key%" /v Last Src9 /f
rem reg delete "%PE_Reg_Key%" /v Last Src10 /f
rem reg delete "%PE_Reg_Key%" /v FLast Src11 /f
rem reg delete "%PE_Reg_Key%" /v Last Src12 /f
rem reg delete "%PE_Reg_Key%" /v Last Src13 /f
rem reg delete "%PE_Reg_Key%" /v FLast Src14 /f
rem reg delete "%PE_Reg_Key%" /v Last Src15 /f
rem reg delete "%PE_Reg_Key%" /v FLast Src16 /f
rem reg delete "%PE_Reg_Key%" /v Last Src17 /f
rem reg delete "%PE_Reg_Key%" /v Last Src18 /f
rem reg delete "%PE_Reg_Key%" /v Last Src19 /f
rem reg delete "%PE_Reg_Key%" /v Last Src20 /f
reg delete "%PE_Reg_Key%" /v FVFILE0 /f
reg delete "%PE_Reg_Key%" /v FVFILE1 /f
reg delete "%PE_Reg_Key%" /v FVFILE2 /f
reg delete "%PE_Reg_Key%" /v FVFILE3 /f
reg delete "%PE_Reg_Key%" /v FVFILE4 /f
reg delete "%PE_Reg_Key%" /v FVFILE5 /f
reg delete "%PE_Reg_Key%" /v FVFILE6 /f
reg delete "%PE_Reg_Key%" /v FVFILE7 /f
reg delete "%PE_Reg_Key%" /v FVFILE8 /f
reg delete "%PE_Reg_Key%" /v FVFILE9 /f
reg delete "%PE_Reg_Key%" /v FVFILE10 /f
reg delete "%PE_Reg_Key%" /v FVFILE11 /f
reg delete "%PE_Reg_Key%" /v FVFILE12 /f
reg delete "%PE_Reg_Key%" /v FVFILE13 /f
reg delete "%PE_Reg_Key%" /v FVFILE14 /f
reg delete "%PE_Reg_Key%" /v FVFILE15 /f
reg delete "%PE_Reg_Key%" /v FVFILE16 /f
reg delete "%PE_Reg_Key%" /v FVFILE17 /f
reg delete "%PE_Reg_Key%" /v FVFILE18 /f
reg delete "%PE_Reg_Key%" /v FVFILE19 /f
reg delete "%PE_Reg_Key%" /v FVFILE20 /f
set PE_Reg_Key=

rem 播放器设置遗留参数
reg delete "HKCU\Software\Gabest\VSFilter\DefTextPathes" /v Path1 /f
rem
reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU" /f

rem KMplayer痕迹
reg delete "HKCU\Software\KMPlayer\WideAlbum\(Default Album)" /f
rem EmEditor运行痕迹
reg delete "HKCU\Software\EmSoft\EmEditor v3\Recent File List" /f

rem 通知区域历史痕迹
reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\TrayNotify" /f

rem EditPlus 2运行痕迹
reg delete "HKCU\Software\ES-Computing\EditPlus 2\Recent File List" /f

rem 浏览网页产生的临时文件
if exist "%userprofile%\Local Settings\Temporary Internet Files\*.*" del /f /s /q "%userprofile%\Local Settings\Temporary Internet Files\*.*"

rem 通过资源管理器打开文件的历史记录
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs /f
reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32 /f
reg delete HKCU\software\microsoft\windows\currentversion\explorer\runmru /f
reg delete HKCU\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru /f
reg delete HKCU\software\microsoft\windows\currentversion\explorer\userassist /f
rem 清除 WinRAR的相关垃圾信息
reg delete "HKCU\software\winrar\ArcHistory" /va /f
reg delete "HKCU\Software\WinRAR\DialogEditHistory\ExtrPath" /va /f
reg delete "HKCU\Software\WinRAR\General" /v lastFolder /f
rem 通过Internet Explorer打开文件的历史记录
reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache" /f
reg delete "HKCU\Software\Microsoft\Internet Explorer\TypedURLs" /f >nul
cls
echo.
echo 历史痕迹已清理完毕! 请按回车键返回...
pause
goto :_ControlCenter
:}

:_system_variable
cls
color f2
title 系统相关变量
set CHK_SVC=YES
set XPSP2=FALSE
set SERVER=FALSE
set NT_SERVER_CHK=TRUE
set regedit=%SystemRoot%\regedit.exe
set find=%SystemRoot%\System32\find.exe
echo 正在对系统相关参数进行检测,请稍候...
echo.

if /I "%NT_SERVER_CHK%"=="FALSE" goto :SKIP_NT_SERVER_CHK
"%regedit%" /e "%TEMP%\~svr.txt" "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions"
type "%TEMP%\~svr.txt"|"%find%" /i "Server" >NUL
if not errorlevel 1 set SERVER=TRUE
type "%TEMP%\~svr.txt"|"%find%" /i "LanMan" >NUL
if not errorlevel 1 set SERVER=TRUE
if exist "%TEMP%\~svr.txt" del /F /Q "%TEMP%\~svr.txt"
if /I "%SERVER%"=="TRUE" goto :NTSERVER

:SKIP_NT_SERVER_CHK

ver | "%find%" /i "Windows 2000" > nul
if not errorlevel 1 goto :OS2K

ver | "%find%" /i "Windows XP" > nul
if not errorlevel 1 goto :OSXP

ver | "%find%" /i "Microsoft Windows " > nul
if not errorlevel 1 goto :OSXP64

echo !!系统性错误!!
echo __________
echo.
echo 此脚本仅适用于 Windows 2000/XP 操作平台!
echo.
goto :_QUIT_

:NTSERVER
echo.
echo !!系统性错误!!
echo __________
echo.
echo 此脚本不支持 NT服务器版本!
echo.
goto :_QUIT_

:OS2K
rem 明确操作系统( OS) 侦测I
set SYSTEM=2k
rem 脚本正在对 XP ServicePacks 进行检测...

"%regedit%" /e "%TEMP%\~svclist.txt" "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion"
type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 5" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 4" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 3" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 2" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 1" >NUL
if errorlevel==1 (

cls
echo 您的操作系统是: Windows 2000
goto NO_2KSP
)

cls
echo 您的操作系统是: Windows 2000
goto :NO_2KSP
)

cls
echo 您的操作系统是: Windows 2000
goto :NO_2KSP
)

cls
echo 您的操作系统是: Windows 2000
goto :NO_2KSP
)

cls
echo 您的操作系统是: Windows 2000
goto :NO_2KSP
)

cls
echo 您的操作系统是: Windows 2000
goto :NO_2KSP

:NO_2kSP
if exist "%TEMP%\~svclist.txt" del /F /Q "%TEMP%\~svclist.txt"
goto :CONTINUE

:OSXP
rem 明确操作系统( OS) 侦测II
set SYSTEM=xp
rem 脚本正在对 XP ServicePacks 2 进行检测...

"%regedit%" /e "%TEMP%\~svclist.txt" "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion"
type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 4" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 3" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 2" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 1" >NUL
if errorlevel==1 (

SET XPSP2=FALSE
cls
echo 您的操作系统是: Windows XP
goto :NO_XPSP
)

SET XPSP2=FALSE
cls
echo 您的操作系统是: Windows XP
goto :NO_XPSP
)

SET XPSP2=TRUE
cls
echo 您的操作系统是: Windows XP
goto :NO_XPSP
)

SET XPSP2=FALSE
cls
echo 您的操作系统是: Windows XP
goto :NO_XPSP
)

SET XPSP2=FALSE
cls
echo 您的操作系统是: Windows XP
goto :NO_XPSP

:OSXP64
rem 明确的操作系统发现 II
set SYSTEM=xp
rem 脚本正在对 XP ServicePacks 2 进行检测...

"%regedit%" /e "%TEMP%\~svclist.txt" "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion"
type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 2" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 1" >NUL
if errorlevel==1 (

SET XPSP2=FALSE
cls
echo 实验平台: Windows XP64
goto NO_XPSP
)

SET XPSP2=FALSE
cls
echo 实验平台: Windows XP64
goto :NO_XPSP
)

SET XPSP2=TRUE
cls
echo 实验平台: Windows XP64
goto :NO_XPSP

:NO_XPSP
if exist "%TEMP%\~svclist.txt" del /F /Q "%TEMP%\~svclist.txt"
goto :CONTINUE
pause>nul
cls

:CONTINUE
systeminfo|find "物理内存总量"
echo 系统当前时间: %date% %time%
echo 用户域 : %userdomain%
echo 操作系统内核 : %os%
echo 当前登陆用户 : %username%
echo 本地计算机名 : %computername%
echo 系统目录 : %windir%
echo 命令提示符相关参数 : %prompt%
echo 系统驱动盘符 : %systemdrive%
echo cpu标识信息 : %PROCESSOR_IDENTIFIER%
echo 安装程序指定目录 : %programfiles%
echo dos系统环境变量: %path%
echo 所有用户文件夹目录 : %ALLUSERSPROFILE%
echo 当前登陆用户文件夹 : %userprofile%
echo ===============================================================================
echo 请按任意键返回...
pause>nul
goto :_ControlCenter

:_ServRestore
cls
title 系统服务优化恢复
echo.
echo 正在恢复已经优化的系统服务...
reg import "%root%\ServicesSet.reg.default"
echo 恢复成功!
pause > nul
goto :_ControlCenter

:_ServConfig
echo.
title 系统服务配置
cls
echo.
echo 此项目前只完成了单机服务配置,
echo 敬请关注最新消息,请按下"回车键"继续...
pause>nul
cls
echo.
echo 正在对系统服务进行全面快照,您可能需要
echo 等待一些时间,如果你的机器不理想的话...
"%regedit%" /e "%root%\ServicesSet.reg.default"
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services"
cls
echo 系统服务状态备份完成!
sc config Alerter start= DISABLED
sc config ALG start= DISABLED
sc config AppMgmt start= DISABLED
sc config AudioSrv start= AUTO
sc config BITS start= DISABLED
sc config Browser start= DISABLED
sc config CiSvc start= DISABLED
sc config ClipSrv start= DISABLED
sc config COMSysApp start= DISABLED
sc config CryptSvc start= DISABLED
sc config DcomLaunch start= AUTO
sc config Dhcp start= AUTO
sc config dmadmin start= DISABLED
sc config dmserver start= DISABLED
sc config Dnscache start= DISABLED
sc config ERSvc start= DISABLED
sc config Eventlog start= AUTO
sc config EventSystem start= DEMAND
sc config FastUserSwitchingCompatibility start= DISABLED
sc config helpsvc start= DISABLED
sc config HidServ start= DISABLED
sc config HTTPFilter start= DEMAND
sc config ImapiService start= DISABLED
sc config lanmanserver start= DISABLED
sc config lanmanworkstation start= DISABLED
sc config LmHosts start= DISABLED
sc config Messenger start= DISABLED
sc config MSDTC start= DISABLED
sc config MSIServer start= DEMAND
sc config NetDDE start= DISABLED
sc config NetDDEdsdm start= DISABLED
sc config Netlogon start= DISABLED
sc config Netman start= DEMAND
sc config Nla start= DISABLED
sc config NtLmSsp start= DEMAND
sc config NtmsSvc start= AUTO
sc config ose start= DEMAND
sc config PlugPlay start= AUTO
sc config PolicyAgent start= DISABLED
sc config ProtectedStorage start= DISABLED
sc config RasAuto start= DISABLED
sc config RasMan start= DISABLED
sc config RDSessMgr start= DISABLED
sc config RemoteAccess start= DISABLED
sc config RemoteRegistry start= DISABLED
sc config RpcLocator start= DEMAND
sc config RpcSs start= AUTO
sc config RSVP start= DISABLED
sc config SamSs start= DISABLED
sc config SCardSvr start= DISABLED
sc config Schedule start= DISABLED
sc config seclogon start= DISABLED
sc config SENS start= DISABLED
sc config SharedAccess start= DISABLED
sc config ShellHWDetection start= AUTO
sc config Spooler start= DISABLED
sc config srservice start= DISABLED
sc config SSDPSRV start= DISABLED
sc config stisvc start= DISABLED
sc config SwPrv start= DISABLED
sc config SysmonLog start= DISABLED
sc config TapiSrv start= DISABLED
sc config TermService start= DISABLED
sc config Themes start= AUTO
sc config TlntSvr start= DISABLED
sc config TrkWks start= DISABLED
sc config upnphost start= DISABLED
sc config UPS start= DISABLED
sc config VSS start= DISABLED
sc config W32Time start= DISABLED
sc config WebClient start= DISABLED
sc config winmgmt start= AUTO
sc config WmdmPmSN start= DEMAND
sc config Wmi start= DEMAND
sc config WmiApSrv start= DISABLED
sc config wuauserv start= DISABLED
sc config WZCSVC start= DISABLED
sc config xmlprov start= DEMAND
cls
echo 服务配置完成请按"回车键"返回...
pause>nul
goto :_ControlCenter

:_Optimize
rem 菜单显示延迟
reg add "HKCU\Control Panel\Desktop" /v MenuShowDelay /t reg_sz /d 0 /f
rem 屏蔽窗口最小化时的动画效果
reg add "HKCU\Control Panel\Desktop\WindowMetrics" /v MinAnimate /t reg_sz /d 0 /f
rem 不显示快捷方式字样
rem 不显示快捷方式的小箭头
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile" /v IsShortcut /f
rem 当快捷方式无效时候直接删除
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoResolveSearch /t reg_dword /d 1 /f
rem 使用windows传统文件夹风格
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v WebView /t reg_dword /d 0 /f
rem 记事本与自动换行与状态栏兼得
reg add "HKCU\software\microsoft\notepad" /v StatusBar /t reg_dword /d 00000001 /f
reg add "HKCU\software\microsoft\notepad" /v fWrap /t reg_dword /d 00000001 /f
rem 禁止在开始菜单显示我的音乐项
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoStartMenuMyMusic /t reg_dword /d 1 /f
rem 禁止在开始菜单显示图片收藏项
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoSMMyPictures /t reg_dword /d 1 /f
rem
rem 生成屏蔽.reg
echo Windows Registry Editor Version 5.00 > 屏蔽.reg
echo >> 屏蔽.reg
echo ;菜单显示延迟 >> 屏蔽.reg
echo "MenuShowDelay"="0" >> 屏蔽.reg
echo >> 屏蔽.reg
echo ;屏蔽窗口最小化时的动画效果 >> 屏蔽.reg
echo "MinAnimate"="0" >> 屏蔽.reg
echo >> 屏蔽.reg
echo ;不显示快捷方式字样 >> 屏蔽.reg
echo "link"=hex:00,00,00,00 >> 屏蔽.reg
echo >> 屏蔽.reg
echo ;不显示最近打开的文档 >> 屏蔽.reg
echo "Start_ShowRecentDocs"=dword:00000000 >> 屏蔽.reg
echo ;不显示控制面板 >> 屏蔽.reg
echo "Start_ShowControlPanel"=dword:00000000 >> 屏蔽.reg
echo ;不显示帮助 >> 屏蔽.reg
echo "Start_ShowHelp"=dword:00000000 >> 屏蔽.reg
echo ;不显示我的电脑 >> 屏蔽.reg
echo "Start_ShowMyComputer"=dword:00000000 >> 屏蔽.reg
echo ;不显示我的文档 >> 屏蔽.reg
echo "Start_ShowMyDocs"=dword:00000000 >> 屏蔽.reg
echo ;不显示我的音乐 >> 屏蔽.reg
echo "Start_ShowMyMusic"=dword:00000000 >> 屏蔽.reg
echo ;不显示我的图片 >> 屏蔽.reg
echo "Start_ShowMyPics"=dword:00000000 >> 屏蔽.reg
echo ;不显示网络连接 >> 屏蔽.reg
echo "Start_ShowNetConn"=dword:00000000 >> 屏蔽.reg
echo ;不显示打印和传真 >> 屏蔽.reg
echo "Start_ShowNetPlaces"=dword:00000000 >> 屏蔽.reg
echo >> 屏蔽.reg
echo ;禁止使用活动桌面 >> 屏蔽.reg
echo "NoActiveDesktop"=dword:00000001 >> 屏蔽.reg
echo ;不显示最近打开的文档 >> 屏蔽.reg
echo "NoRecentDocsMenu"=dword:00000001 >> 屏蔽.reg
echo ;禁止自动升级 >> 屏蔽.reg
echo "NoWindowsUpdate"=dword:00000001 >> 屏蔽.reg
echo ;禁用开始菜单中的常用的程序 >> 屏蔽.reg
echo "NoStartMenuMFUprogramsList"=dword:00000001 >> 屏蔽.reg
echo ;不显示我的文档-收藏夹 >> 屏蔽.reg
echo "NoFavoritesMenu"=dword:00000001 >> 屏蔽.reg
echo ;屏蔽磁盘不足的警告 >> 屏蔽.reg
echo "NoLowDiskSpaceChecks"=dword:00000001 >> 屏蔽.reg
echo ;关机时候自动清除最近打开的文档 >> 屏蔽.reg
echo "ClearRecentDocsOnExit"=dword:00000001 >> 屏蔽.reg
echo ;不显示我的文档记录 >> 屏蔽.reg
echo "NoRecentDocsHistory"=dword:00000001 >> 屏蔽.reg
echo ;不显示开始菜单中的帮助 >> 屏蔽.reg
echo "NoSMHelp"=dword:00000001 >> 屏蔽.reg
echo ;显示系统托盘的自定义图标，例如输入法 >> 屏蔽.reg
echo "NoToolbarsOnTaskbar"=dword:00000000 >> 屏蔽.reg
echo ;不显示网络邻居 >> 屏蔽.reg
echo "NoNetHood"=dword:00000000 >> 屏蔽.reg
echo ;不显示自定义任务栏 >> 屏蔽.reg
echo "NoToolbarCustomize"=dword:00000000 >> 屏蔽.reg
echo ;禁止在开始菜单显示网上邻居项 >> 屏蔽.reg
echo "NoStartMenuNetworkPlaces"=dword:00000001 >> 屏蔽.reg
echo ;禁止在开始菜单显示图片收藏项 >> 屏蔽.reg
echo "NoSMMyPictures"=dword:00000001 >> 屏蔽.reg
echo ;禁止在开始菜单显示我的音乐项 >> 屏蔽.reg
echo "NoStartMenuMyMusic"=dword:00000001 >> 屏蔽.reg
rem
rem
if not exist "%root%"\屏蔽.reg copy /y 屏蔽.reg "%root%"
regedit.exe /s 屏蔽.reg
if exist "%root%"\屏蔽.reg del /q "%root%"\屏蔽.reg
rem
rem 右键菜单清理
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.AIS\ShellNew /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.bfc\ShellNew /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.bmp\ShellNew /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.doc\Word.Document.8\ShellNew /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ppt\PowerPoint.Show.8\ShellNew /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rar\ShellNew /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wav\ShellNew /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.xls\Excel.Sheet.8\ShellNew /f
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.zip\ShellNew /f
cls
pause
goto :_ControlCenter

:_CheckDisk
cls
@echo off
rem chkdsk.cmd
title 磁盘检测程序
setlocal
echo.
echo 磁盘检测程序已经启动
set _drive=
set _r=
set _f=
echo 请输入驱动器的盘符,卷标名或者装入点...
set /p _drive=输入驱动盘符:
if "%_drive%" == "" goto _end
echo.
echo 你想修复磁盘上的错误和损坏的坏扇区
echo 并恢复可读取的数据吗?(是/否)...
:_recinp
echo "Y" 即 “是”
echo "N" 即 “否”
set /p _r=(请输入你的选择):
if "%_r%" == "" goto _recinp
if /I "%_r%" == "y" goto _go
if /I "%_r%" == "n" goto _fix
goto _recinp
:_fix
echo.
echo 你想修复磁盘上的错误 (是/否)...
:_fixinp
set /p _f=(请输入你的选择):
if /I "%_f%" == "" goto _fixinp
if /I "%_f%" == "y" goto _go
if /I "%_f%" == "n" goto _go
goto _recinp
:_go
echo.
echo ----------------------------------------------------------------
echo 你已经指明检查的 %_drive% 驱动器/卷
echo.
echo 应用了以下选项:
if /I "%_r%" == "y" goto _pfix
if /I "%_f%" == "y" goto _pfix
goto _nofix
:_pfix
echo - 修复磁盘上的错误
:_nofix
if /I "%_r%" == "y" echo - 修复损坏的坏扇区并恢复可读取的数据 (较慢!)
echo ----------------------------------------------------------------
echo.
echo 启动磁盘检测? (是/否)...
:_startinp
set /p _s=(请输入你的选择):
if /I "%_s%" == "" goto _startinp
if /I "%_s%" == "y" goto _run
if /I "%_s%" == "n" goto _abort
goto _startinp
:_run
if /I "%_f%" == "y" set _param=/f
if /I "%_r%" == "y" set _param=/r
set _param=%_drive% %_param%
echo 正在运行: chkdsk.exe %_param%
chkdsk.exe %_param%
echo.
echo CHKDSK.CMD: 磁盘检测完成...
goto _end
:_abort
echo.
echo CHKDSK.CMD: 终止...
:_end
cls
pause
endlocal
cls
goto :_ControlCenter

:_drive_rascal_software_away
cls
title 流氓软件劫持的相关恢复
echo.
echo 此项"流氓软件劫持恢复"以注册表修复为主.
echo.
echo 正在修复系统,请稍等...
echo.
echo.
rundll32.exe advpack.dll /DelNodeRunDLL32 "%systemroot%\System32"\dacui.dll
rundll32.exe advpack.dll /DelNodeRunDLL32 "%systemroot%\Catroot"\icatalog.mdb
"%regsvr32%" /s setupwbv.dll
"%regsvr32%" /s wininet.dll
"%regsvr32%" /s comcat.dll
"%regsvr32%" /s shdoc401.dll
"%regsvr32%" /s shdoc401.dll /i
"%regsvr32%" /s asctrls.ocx
"%regsvr32%" /s oleaut32.dll
"%regsvr32%" /s shdocvw.dll /I
"%regsvr32%" /s shdocvw.dll
"%regsvr32%" /s browseui.dll
"%regsvr32%" /s browseui.dll /I
"%regsvr32%" /s msrating.dll
"%regsvr32%" /s mlang.dll
"%regsvr32%" /s hlink.dll
"%regsvr32%" /s mshtml.dll
"%regsvr32%" /s mshtmled.dll
"%regsvr32%" /s urlmon.dll
"%regsvr32%" /s plugin.ocx
"%regsvr32%" /s sendmail.dll
"%regsvr32%" /s comctl32.dll /i
"%regsvr32%" /s inetcpl.cpl /i
"%regsvr32%" /s mshtml.dll /i
"%regsvr32%" /s scrobj.dll
"%regsvr32%" /s mmefxe.ocx
"%regsvr32%" /s proctexe.ocx mshta.exe /register
"%regsvr32%" /s corpol.dll
"%regsvr32%" /s jscript.dll
"%regsvr32%" /s msxml.dll
"%regsvr32%" /s imgutil.dll
"%regsvr32%" /s thumbvw.dll
"%regsvr32%" /s cryptext.dll
"%regsvr32%" /s rsabase.dll
"%regsvr32%" /s triedit.dll
"%regsvr32%" /s dhtmled.ocx
"%regsvr32%" /s inseng.dll
"%regsvr32%" /s iesetup.dll /i
"%regsvr32%" /s hmmapi.dll
"%regsvr32%" /s cryptdlg.dll
"%regsvr32%" /s actxprxy.dll
"%regsvr32%" /s dispex.dll
"%regsvr32%" /s occache.dll
"%regsvr32%" /s occache.dll /i
"%regsvr32%" /s iepeers.dll
"%regsvr32%" /s wininet.dll /i
"%regsvr32%" /s urlmon.dll /i
"%regsvr32%" /s digest.dll /i
"%regsvr32%" /s cdfview.dll
"%regsvr32%" /s webcheck.dll
"%regsvr32%" /s mobsync.dll
"%regsvr32%" /s pngfilt.dll
"%regsvr32%" /s licmgr10.dll
"%regsvr32%" /s icmfilter.dll
"%regsvr32%" /s hhctrl.ocx
"%regsvr32%" /s inetcfg.dll
"%regsvr32%" /s trialoc.dll
"%regsvr32%" /s tdc.ocx
"%regsvr32%" /s MSR2C.DLL
"%regsvr32%" /s msident.dll
"%regsvr32%" /s msieftp.dll
"%regsvr32%" /s xmsconf.ocx
"%regsvr32%" /s ils.dll
"%regsvr32%" /s msoeacct.dll
"%regsvr32%" /s wab32.dll
"%regsvr32%" /s wabimp.dll
"%regsvr32%" /s wabfind.dll
"%regsvr32%" /s oemiglib.dll
"%regsvr32%" /s directdb.dll
"%regsvr32%" /s inetcomm.dll
"%regsvr32%" /s msoe.dll
"%regsvr32%" /s oeimport.dll
"%regsvr32%" /s msdxm.ocx
"%regsvr32%" /s dxmasf.dll
"%regsvr32%" /s laprxy.dll
"%regsvr32%" /s l3codecx.ax
"%regsvr32%" /s acelpdec.ax
"%regsvr32%" /s mpg4ds32.ax
"%regsvr32%" /s voxmsdec.ax
"%regsvr32%" /s danim.dll
"%regsvr32%" /s Daxctle.ocx
"%regsvr32%" /s lmrt.dll
"%regsvr32%" /s datime.dll
"%regsvr32%" /s dxtrans.dll
"%regsvr32%" /s dxtmsft.dll
"%regsvr32%" /s vgx.dll
"%regsvr32%" /s WEBPOST.DLL
"%regsvr32%" /s WPWIZDLL.DLL
"%regsvr32%" /s POSTWPP.DLL
"%regsvr32%" /s CRSWPP.DLL
"%regsvr32%" /s FTPWPP.DLL
"%regsvr32%" /s FPWPP.DLL
"%regsvr32%" /s FLUPL.OCX
"%regsvr32%" /s wshom.ocx
"%regsvr32%" /s wshext.dll
"%regsvr32%" /s vbscript.dll
"%regsvr32%" /s scrrun.dll mstinit.exe /setup
"%regsvr32%" /s msnsspc.dll /SspcCreateSspiReg
"%regsvr32%" /s msapsspc.dll /SspcCreateSspiReg

rem 生成文件 IE受篡改的恢复.reg
echo Windows Registry Editor Version 5.00 > IE受篡改的恢复.reg
echo ;IE受篡改的相关注册表恢复 >> IE受篡改的恢复.reg
echo ;申明:以下的修改结果可能并不会另所有人 >> IE受篡改的恢复.reg
echo ;满意，但是以下的都是恢复注册表最初的数据 >> IE受篡改的恢复.reg
echo >> IE受篡改的恢复.reg
echo ;(系统所有用户)IE标题恢复 >> IE受篡改的恢复.reg
echo "Window Title"="Microsoft Internet Explorer" >> IE受篡改的恢复.reg
echo >> IE受篡改的恢复.reg
echo ;(当前用户)IE标题恢复 >> IE受篡改的恢复.reg
echo "Window Title"="Microsoft Internet Explorer" >> IE受篡改的恢复.reg
echo >> IE受篡改的恢复.reg
echo ;IE的默认页面被篡改，默认情况下为空，即下面的 about:blank >> IE受篡改的恢复.reg
echo "Default_Page_URL"="about:blank" >> IE受篡改的恢复.reg
echo >> IE受篡改的恢复.reg
echo ;修改了IE浏览器缺省主页，并且锁定设置项，禁止用户更改 >> IE受篡改的恢复.reg
echo "Settings"=dword:00000000 >> IE受篡改的恢复.reg
echo "Links"=dword:00000000 >> IE受篡改的恢复.reg
echo "SecAddSites"=dword:00000000 >> IE受篡改的恢复.reg
echo ;IE右键菜单被修改 >> IE受篡改的恢复.reg
echo >> IE受篡改的恢复.reg
echo >> IE受篡改的恢复.reg
echo ;IE默认搜索引擎被修改 >> IE受篡改的恢复.reg
echo >> IE受篡改的恢复.reg
echo >> IE受篡改的恢复.reg
echo "CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm" >> IE受篡改的恢复.reg
echo >> IE受篡改的恢复.reg
echo >> IE受篡改的恢复.reg
echo "SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm" >> IE受篡改的恢复.reg
echo "CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm" >> IE受篡改的恢复.reg
echo ;查看“源文件”菜单被禁用 >> IE受篡改的恢复.reg
echo >> IE受篡改的恢复.reg
echo ;系统启动时弹出对话框 >> IE受篡改的恢复.reg
echo >> IE受篡改的恢复.reg
echo ;IE默认连接首页被修改 >> IE受篡改的恢复.reg
echo >> IE受篡改的恢复.reg
echo "Start Page"="about:blank" >> IE受篡改的恢复.reg
echo >> IE受篡改的恢复.reg
echo "Start Page"="about:blank" >> IE受篡改的恢复.reg
echo ;IE中鼠标右键失效 >> IE受篡改的恢复.reg
echo >> IE受篡改的恢复.reg
echo "NoBrowserContextMenu"=dword:00000000 >> IE受篡改的恢复.reg
rem 生成 IE受篡改的恢复.reg 文件结束
if not exist "%root%"\IE受篡改的恢复.reg copy /y IE受篡改的恢复.reg "%root%"
regedit.exe /s IE受篡改的恢复.reg
if exist "%root%"\IE受篡改的恢复.reg del /q "%root%"\IE受篡改的恢复.reg

cls
echo 修复完毕!
pause
cls
goto :_ControlCenter

:_CommandLine
cls
title 考拉版命令提示符
echo 考拉版命令提示符
echo.
echo ...想要返回请输入 exit
cmd /k &cd "%systemroot%"
cls
goto :_ControlCenter

:_SartUpItemSpeedUp
cls
title 启动提度--此项可能会关闭你随机启动的杀毒软件等其他安全防护软件
echo.
echo 正在进行系统提速配置....
if exist %programfiles%\Real\RealPlayer\rpau3260.dll regsvr32 /u /s %programfiles%\Real\RealPlayer\rpau3260.dll
reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /va /f
reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /va /f
reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v ctfmon.exe /d C:\WINDOWS\system32\ctfmon.exe
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /f
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /f
if exist "%ALLUSERSPROFILE%\「开始」菜单\程序\启动\*.*" del "%ALLUSERSPROFILE%\「开始」菜单\程序\启动\*.*" /q /f
if exist "C:\Documents and Settings\Default User\「开始」菜单\程序\启动\*.*" del "C:\Documents and Settings\Default User\「开始」菜单\程序\启动\*.*" /q /f
if exist "%userprofile%\「开始」菜单\程序\启动\*.*" del "%userprofile%\「开始」菜单\程序\启动\*.*" /q /f
reg add "HKCU\Console" /v LoadConIme /t reg_dword /d 1 /f
rem
rem 生成启动提速.reg文件
echo Windows Registry Editor Version 5.00 >启动提速.reg
echo ;启动项 >>启动提速.reg
echo >>启动提速.reg
echo "Startup"="" >>启动提速.reg
echo ;锁定任务栏 >>启动提速.reg
echo >>启动提速.reg
echo "LockTaskbar"=dword:00000001 >>启动提速.reg
echo ;取消开机预读取 >>启动提速.reg
echo >>启动提速.reg
echo "EnablePrefetcher"=dword:00000000 >>启动提速.reg
echo >>启动提速.reg
echo "EnablePrefetcher"=dword:00000000 >>启动提速.reg
rem
rem
if not exist "%root%"\启动提速.reg copy /y 启动提速.reg "%root%"
regedit.exe /s 启动提速.reg
if exist 启动提速.reg del /q 启动提速.reg
pause
cls
goto :_ControlCenter

:_QUIT_
:{
cls
echo 猫猫
echo 猫猫猫猫鄙人尚未学习编程,
echo 猫猫猫猫请不要用专业的眼光来
echo 猫猫猫猫猫猫评估此脚本的实用性。
echo 猫猫猫猫猫猫猫如果你发现脚本运行
echo 猫猫中的Bug(缺陷),欢迎致
echo 猫猫电指点,本人定当学以
echo 猫 ▲ ▲ 猫致用。
echo 猫猫
echo －－－猫猫－－－谢谢您支持此脚本!!
echo －－猫－ __ V __ －猫－－
echo. －－－猫猫－－－作者: koala
echo. 猫猫猫猫猫 QQ:13019940
echo.
echo.
echo 咨询平台: http://loveskoala.blogspot.com
echo ________________________________________________________
echo.
echo 我是抱着猫打完这段乱七八糟的东西的.
echo * _ *
echo ________________________________________________________
echo
echo ------------------------------------------------------
echo.
set QUIT =
set /p QUIT=
rem
"%process%" > "%root%"\processlist.txt
type "%root%"\processlist.txt|"%find%" /i "explorer.exe" >NUl
if errorlevel==1 "%process%" -k explorer.exe
cls
goto :_EXIT
:}

:_EXIT
:{
rem 撤消脚本申明的变量
path=%systemroot%\system32;%systemroot%;%systemdrive%\
set SELECT=
set regedit=
set regsvr32=
set find=
set process=
set root=
rem 以为下面相关注册表操作开辟道路rem 以下此项为Win + E方式打开的资源管理器外观优化
regedit /s 老板键+E更改优化.reg
reg import "%root%\environment.reg.default"
cls
@echo off
echo.
echo ▓
echo ▓ ▓ ▓▓▓ ▓▓▓▓ ▓ ▓▓▓▓
echo ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓
echo ▓▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓
echo ▓▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓
echo ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓
echo ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓
echo ▓▓ ▓ ▓▓▓ ▓▓▓▓ ▓ ▓▓ ▓▓▓▓ ▓
echo.
echo.
echo 专注于 VB / QBasic / Turbo C 2.0 编程
echo 专注于 Registry / c盘病毒的一举一动! (此人喜欢收藏病毒 ~.~)
echo --------------------------------------------------------------------------------
echo 您可以按下任意键退出脚本程序,如果你愿意的话...
pause >nul
goto Get_Out
rem 下面的选项为备用选项
rem if /i "%_EXIT%" == "1" goto :Leave_Off
rem if /i "%_EXIT%" == "2" goto :Get_Out
:}

:Leave_Off
start iexplore.exe http://loveskoala.blogspot.com
start explorer.exe
endlocal

:Get_Out
start explorer.exe
endlocal

@echo off
color 1f
title NT核系统服务管理(适用平台:Windows 2000/XP/2003/vista)
cls
rem 汉化版权所有 (C) 2007 koala
rem 联系方法: da2qia1ku5@126.com

setlocal

REM *** INIT_VARS ***
set CHK_SVC=YES
set XPSP2=FALSE
set SERVER=FALSE
set NT_SERVER_CHK=TRUE
echo ______________________________________________________________________________
echo.
echo koala友情提醒
echo.
echo 去处了繁余德语部分后,本人采用全局意译,部分直译的方法,运行过程中配合金山词
echo 霸,又结合了中国人的逻辑思维方式,对相关词语进行位置、适当的更换,完成此脚本汉化.
echo.
echo 此Germany(德国)的"NT核系统批处理优化脚本"由于代码过于庞大,因而运行过程中会
echo 出现局部Var(变量)无效的错误信息.但不要紧,试着多运行几次便可以了.
echo.
echo 完成此脚本的汉化、修正、调试、修改、美化、"动大手术手术",花费了15个小时.由
echo 于本人能力有限,对VB编程(确切的说,应该是所有编程)一无所知,因而还得请热心的您来
echo 完成脚本中部分的VB脚本修正调试工作.
echo.
echo 人无完人,脚本难免还有不出错的地方，某些不得当之处还请赐教。
echo.
echo 让所有认识汉字的华人都能使用国外英文精品软件~！~！~！
echo.
echo 此脚本的官方发表日期 : 2005/12/18
echo /*** 为了保护汉化成果,我运用了一些技术手段对源代码进行
echo 了封装,如果对源代码感兴趣,就赶紧写信给我吧 ***/
echo.
echo E-mail:da2qia1ku5@126.com
echo ______________________________________________________________________________
set koala =
set /p koala= 请按"回车键"继续....
if "%koala%" == "" goto :START

:START
md "%USERPROFILE%\ntsvcfg"
copy /y psexec.exe %USERPROFILE%\ntsvcfg
path=%systemroot%\system32;%systemroot%;%systemdrive%\;%USERPROFILE%\ntsvcfg
set psexec=%USERPROFILE%\ntsvcfg\psexec.exe
set find=%SystemRoot%\System32\find.exe
set regedit=%SystemRoot%\regedit.exe
if not exist "%find%" goto :NOFIND
if not exist "%regedit%" goto :NOREGEDIT
if not exist "%psexec%" goto :NOPSEXEC
if not "%1" == "%*" goto :SYNTAX
if /I "%1"=="/?" goto :HELP
if /I "%1"=="/help" goto :HELP
if /I "%1"=="-h" goto :HELP
if /I "%1"=="--help" goto :HELP
if /I "%1"=="-?" goto :HELP
if /I "%1"=="--?" goto :HELP
if /I "%1"=="/fix" goto :FIX
cls
echo ***********************************************
echo * NT核系统服务管理 *
echo * 适用平台:Windows 2000/XP/2003/vista *
echo * 汉化版权所有(C)2007 koala(Koala Studio) *
echo ***********************************************
echo.

goto :VERSION

:SYNTAX
echo.
echo.
echo !!语法错误!!
echo ________________
echo.
echo 无效的参数.
goto :QUIT

:HELP
echo.
echo 参数:
echo /lan.......保持某些需要访问网络的服务状态不变!
echo /std.......关闭所有端口, 但某些服务的状态保持不变.
echo /all.......改变所有引发问题的系统服务.www.ntsvcfg.de]
echo /restore...撤消上次的更改.
echo /reLAN.....恢复需要访问网络的服务.
echo /default...恢复系统服务设置 (到第一次使用之前)
echo.
echo 例如: svc2kxp.cmd /all
echo.
set /P CHS= ?
echo.
if /I "%CHS%"=="G" goto :GNU_GPL
if /I "%CHS%"=="Q" goto :QUIT_EXT
CLS
goto :HELP

:GNU_GPL
CLS
echo 关于 GNU-General Public License授权给"svc2kxp.cmd"的信息
echo ===============================================================
echo.
echo 版权所有 (C) 2003-05 Ansgar Wiechers, Torsten Mann
echo 联系方法: admin@ntsvcfg.de
echo.
echo 此程序为免费软件; 你可以重新分配它并可以在遵守由"免费软件基金会"发布的
echo "GUN 通用公共许可证"条款的前提条件下修改此程序 ;或者在遵守第二版的
echo 协议.你可以选择一个最新的版本.此程序的发布是希望它会产生应有的作用, 在没
echo 有"任何正当理由"; 以及内在保证的前提下不得用于任何形式的 "商业或适当的特
echo 别意图".请查看"GUN 通用公共许可证"获取详细信息.
rem
echo 随同此程序一起你应该已经收到一份"GUN 通用公共许可证";
echo 如果没有,请写信到:
echo.
echo Free Software Foundation, Inc.
echo 59 Temple Place, Suite 330
echo Boston, MA 02111-1307, USA.
echo.
set /P CHS= ?

CLS
if /I "%CHS%"=="H" goto :HELP
if /I "%CHS%"=="Q" goto :QUIT_EXT
goto GNU_GPL

:VERSION
echo ==============================================================================
echo 正在检测系统版本 ...
echo.

if /I "%NT_SERVER_CHK%"=="FALSE" goto :SKIP_NT_SERVER_CHK
"%regedit%" /e "%TEMP%\~svr.txt" "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions"
type "%TEMP%\~svr.txt"|"%find%" /i "Server" >NUL
if not errorlevel 1 set SERVER=TRUE
type "%TEMP%\~svr.txt"|"%find%" /i "LanMan" >NUL
if not errorlevel 1 set SERVER=TRUE
if exist "%TEMP%\~svr.txt" del /F /Q "%TEMP%\~svr.txt"
if /I "%SERVER%"=="TRUE" goto :NTSERVER

:SKIP_NT_SERVER_CHK

ver | "%find%" /i "Windows 2000" > nul
rem 如果返回错误信息不是假（1为假 0为真）
if not errorlevel 1 goto :OS2K

ver | "%find%" /i "Windows XP" > nul
if not errorlevel 1 goto :OSXP

ver | "%find%" /i "Microsoft Windows " > nul
if not errorlevel 1 goto :OSXP64

echo !!出错!!
echo __________
echo.
echo 此脚本仅适用于 Windows 2000/XP 操作平台!
echo.
goto :QUIT

:NOFIND
echo.
echo !!出错!!
echo __________
echo.
echo 抱歉, 以下的文件已经丢失:
echo 请从其他电脑中自行拷贝一份到你的系统中.
echo.
echo # %SystemRoot%\System32\FIND.EXE
echo.
echo 请按下回车键 copy 到你的系统
pause >nul
copy /y regedit.exe "%systemroot%"
goto :START

:NOREGEDIT
echo.
echo !!出错!!
echo __________
echo.
echo 抱歉, 以下的文件已经丢失:
echo 请从其他电脑中自行拷贝一份到你的系统中.
echo.
echo # %SystemRoot%\REGEDIT.EXE
echo.
echo 请按下回车键 copy 到你的系统
pause >nul
copy /y find.exe "%systemroot%"
goto :START

:NOPSEXEC
echo.
echo !!出错!!
echo __________
echo.
echo 抱歉, 脚本需要以下的文件已经丢失:
echo.
echo # %USERPROFILE%\ntsvcfg\psexec.exe
echo.
echo 请按下回车键 copy 到你的系统
pause >nul
copy /y psexec.exe "%USERPROFILE%\ntsvcfg"
goto :START

:NTSERVER
echo.
echo !!出错!!
echo __________
echo.
echo 此脚本不支持 NT Server 版本!
echo.
goto :QUIT

:OS2K
rem 明确操作系统( OS) 侦测I
set SYSTEM=2k
rem 脚本正在对 XP ServicePacks 进行检测...
reg export "hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion" "%TEMP%\~svclist.txt"
rem 下面的rem段是原来脚本中原形,虽然在系统SP检测的时间上没有什么改进(如果你的c:盘垃圾不经常清理,你可能会觉得用reg export快),但是减少生成临时文件的大小
rem 用下面脚本原形("%regedit%" /e) 产生的临时文件大小是优化(reg export)的9倍之多(本人计算机测试时候产生的文件大小分别为3585KB和395KB),不信试试。

rem "%regedit%" /e "%TEMP%\~svclist.txt" "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion"

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 5" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 4" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 3" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 2" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 1" >NUL
if errorlevel==1 (

echo 您的操作系统是: Windows 2000
goto NO_2KSP
)

echo 您的操作系统是: Windows 2000
goto :NO_2KSP
)

echo 您的操作系统是: Windows 2000
goto :NO_2KSP
)

echo 您的操作系统是: Windows 2000
goto :NO_2KSP
)

echo 您的操作系统是: Windows 2000
goto :NO_2KSP
)

echo 您的操作系统是: Windows 2000
goto :NO_2KSP

:NO_2kSP
if exist "%TEMP%\~svclist.txt" del /F /Q "%TEMP%\~svclist.txt"
goto :CONTINUE

:OSXP
rem 明确操作系统( OS) 侦测II
set SYSTEM=xp
rem 脚本正在对 XP ServicePacks 2 进行检测...

"%regedit%" /e "%TEMP%\~svclist.txt" "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion"
type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 4" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 3" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 2" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 1" >NUL
if errorlevel==1 (

SET XPSP2=FALSE
echo 您的操作系统是: Windows XP
goto :NO_XPSP
)

SET XPSP2=FALSE
echo 您的操作系统是: Windows XP
goto :NO_XPSP
)

SET XPSP2=TRUE
echo 您的操作系统是: Windows XP
goto :NO_XPSP
)

SET XPSP2=FALSE
echo 您的操作系统是: Windows XP
goto :NO_XPSP
)

SET XPSP2=FALSE
echo 您的操作系统是: Windows XP
goto :NO_XPSP

:OSXP64
rem 明确的操作系统发现 II
set SYSTEM=xp
rem 脚本正在对 XP ServicePacks 2 进行检测...

"%regedit%" /e "%TEMP%\~svclist.txt" "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion"
type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 2" >NUL
if errorlevel==1 (

type "%TEMP%\~svclist.txt"|"%find%" /i "Service Pack 1" >NUL
if errorlevel==1 (

SET XPSP2=FALSE
echo !EXPERIMENTAL! Windows XP64
goto NO_XPSP
)

SET XPSP2=FALSE
echo !EXPERIMENTAL! 您的操作系统是: Windows XP64
goto :NO_XPSP
)

SET XPSP2=TRUE
echo !EXPERIMENTAL! 您的操作系统是: Windows XP64
goto :NO_XPSP

:NO_XPSP
if exist "%TEMP%\~svclist.txt" del /F /Q "%TEMP%\~svclist.txt"
goto :CONTINUE

:CONTINUE

REM 如果需要,在 %userprofile% 创建"ntsvcfg"子目录
if not exist "%USERPROFILE%\ntsvcfg\*.*" md "%USERPROFILE%\ntsvcfg"

REM 从 ...\%USERNAME%\ntsvcfg 删除陈旧的脚本备份文件 :
if exist "%USERPROFILE%\dcom.reg" move /Y "%USERPROFILE%\dcom.reg" "%USERPROFILE%\ntsvcfg\dcom.reg"
if exist "%USERPROFILE%\dcomp.reg" move /Y "%USERPROFILE%\dcomp.reg" "%USERPROFILE%\ntsvcfg\dcomp.reg"
if exist "%USERPROFILE%\services.reg" move /Y "%USERPROFILE%\services.reg" "%USERPROFILE%\ntsvcfg\services.reg"
if exist "%USERPROFILE%\current_services_config.reg" move /Y "%USERPROFILE%\current_services_config.reg" "%USERPROFILE%\ntsvcfg"\current_services_config.reg
if exist "%USERPROFILE%\smb.reg" move /Y "%USERPROFILE%\smb.reg" "%USERPROFILE%\ntsvcfg\smb.reg"
if exist "%USERPROFILE%\FPRINT.REF" move /Y "%USERPROFILE%\FPRINT.REF" "%USERPROFILE%\ntsvcfg"\FPRINT.REF
if exist "%USERPROFILE%\handler_aim.reg" move /Y "%USERPROFILE%\handler_aim.reg" "%USERPROFILE%\ntsvcfg\handler_aim.reg"
if exist "%USERPROFILE%\handler_gopher.reg" move /Y "%USERPROFILE%\handler_gopher.reg" "%USERPROFILE%\ntsvcfg\handler_gopher.reg"
if exist "%USERPROFILE%\handler_telnet.reg" move /Y "%USERPROFILE%\handler_telnet.reg" "%USERPROFILE%\ntsvcfg\handler_telnet.reg"
if exist "%USERPROFILE%\services.reg.default" move /Y "%USERPROFILE%\services.reg.default" "%USERPROFILE%\ntsvcfg\services.reg.default"
if exist "%USERPROFILE%\dcom.reg.default" move /Y "%USERPROFILE%\dcom.reg.default" "%USERPROFILE%\ntsvcfg\dcom.reg.default"
if exist "%USERPROFILE%\dcomp.reg.default" move /Y "%USERPROFILE%\dcomp.reg.default" "%USERPROFILE%\ntsvcfg\dcomp.reg.default"
if exist "%USERPROFILE%\smb.reg.default" move /Y "%USERPROFILE%\smb.reg.default" "%USERPROFILE%\ntsvcfg\smb.reg.default"
if exist "%USERPROFILE%\handler_aim.reg.default" move /Y "%USERPROFILE%\handler_aim.reg.default" "%USERPROFILE%\ntsvcfg\handler_aim.reg.default"
if exist "%USERPROFILE%\handler_gopher.reg.default" move /Y "%USERPROFILE%\handler_gopher.reg.default" "%USERPROFILE%\ntsvcfg\handler_gopher.reg.default"
if exist "%USERPROFILE%\handler_telnet.reg.default" move /Y "%USERPROFILE%\handler_telnet.reg.default" "%USERPROFILE%\ntsvcfg\handler_telnet.reg.default"

REM *****变量声明*****
set SELECT="no"
set SVC_BAK=%USERPROFILE%\ntsvcfg\services.reg
set SVC_SAV=%USERPROFILE%\ntsvcfg\current_services_config.reg
set DCOM_BAK=%USERPROFILE%\ntsvcfg\dcom.reg
set DCOMP_BAK=%USERPROFILE%\ntsvcfg\dcomp.reg
set SMB_BAK=%USERPROFILE%\ntsvcfg\smb.reg
set DCOM_TMP=%TEMP%\dcomoff.reg
set DCOMP_TMP=%TEMP%\dcompoff.reg
set SMB_TMP=%TEMP%\smboff.reg
set FPRINT=%USERPROFILE%\ntsvcfg\FPRINT.REF
set HANDLER1=%USERPROFILE%\ntsvcfg\handler_aim.reg
set HANDLER2=%USERPROFILE%\ntsvcfg\handler_gopher.reg
set HANDLER3=%USERPROFILE%\ntsvcfg\handler_telnet.reg
set NB_TMP=%TEMP%\nb_off.vbs
set srctmp=%USERPROFILE%\ntsvcfg\~srcreate.vbs
set DHCP_CHANGES="YES"

REM *****选项*****
set SCHEDULER_ENABLED=NO
set UseXPSysRestore=YES
set RESTORE=NO
set SVC_MOD=NO
set USE_FPRINT=YES
set Deactivate_NetBIOS=YES
set RESTORE_MODE=2

REM *****应用程序路径******
set NET=%SystemRoot%\system32\net.exe
set SC=%SystemRoot%\system32\sc.exe
set FC=%SystemRoot%\system32\fc.exe
set IPCONFIG=%SystemRoot%\system32\ipconfig.exe

echo 正在审核当前用户的使用权限, 请稍等 ...
"%net%" user "%USERNAME%" 2> nul | "%find%" /i "admin" | "%find%" /i /v "name" > nul
if errorlevel 1 (
echo " " " : , 请稍等...
"%net%" user "%USERNAME%" /domain 2> nul | "%find%" /i "admin" | "%find%" /i /v "name" > nul
if errorlevel 1 (
echo.
echo 出错!
echo __________
echo 抱歉,你没有此进程要求的权限许可.请以管理员权限登陆.
echo.
echo.
echo 请按下回车键,以SYSTEM权限登陆系统(优化,原脚本不具备此功能)
pause>nul
"%psexec%" -d -i -s explorer
goto :END
)
)

set IMPORT_OLD_FILES=FALSE
rem 搜索 sc.exe
if not exist "%FPRINT%" echo 正在检查是否存在存在SC.EXE ...
"%sc%" qc > nul 2>&1
if errorlevel 1 (
echo !!出错!!
echo __________
echo 在系统目录下未发现 SC.EXE.
echo 请从以下区域下载此文件:
echo.
echo.
echo -= ftp://ftp.microsoft.com/reskit/win2000/sc.zip =-
echo.
echo 自行安装 SC.EXE
echo ======================
echo 如果存在活动的网络联接,svc2kxp.cmd 可能会自动尝试下载需求文件 sc.exe
goto :SC_DOWNLOAD
)

if /I "%1"=="/all" (
set SELECT="/all"
goto :SKIP_MENUE
)

if /I "%1"=="/relan" (
set SELECT="/relan"
goto :SKIP_MENUE
)

if /I "%1"=="/std" (
set SELECT="/std"
goto :SKIP_MENUE
)

if /I "%1"=="/default" goto :RESTORE_DEFAULTS

rem 检查已修改的服务
if /I %CHK_SVC%==YES (
if /I %USE_FPRINT%==YES (
if exist "%FPRINT%" (
rem 正在创建当前服务配置得快照...
if exist "%USERPROFILE%\ntsvcfg\svc2cmp.sav" del /F /Q "%USERPROFILE%\ntsvcfg\svc2cmp.sav"
"%sc%" query type= service state= all bufsize= 8192 | %FIND% "SERVICE_NAME" >%TEMP%\~svclist.txt
for /F "tokens=1*" %%a in (%TEMP%\~svclist.txt) do (
echo %%b >>"%USERPROFILE%\ntsvcfg\svc2cmp.sav"
"%sc%" query "%%b" | %FIND% "STATE" >>"%USERPROFILE%\ntsvcfg\svc2cmp.sav"
"%sc%" qc "%%b" | %FIND% "DISPLAY_NAME" >>"%USERPROFILE%\ntsvcfg\svc2cmp.sav"
"%SC%" qc "%%b" | %FIND% "START_TYPE" >>"%USERPROFILE%\ntsvcfg\svc2cmp.sav"
echo. >> "%USERPROFILE%\ntsvcfg\svc2cmp.sav"
)
del "%TEMP%\~svclist.txt"

"%FC%" "%FPRINT%" "%USERPROFILE%\ntsvcfg\svc2cmp.sav" >NUL
if errorlevel 1 goto :DIFF
goto OK

:DIFF
echo 正在检查已修改的服务 ...
echo 粗略评估:服务已经被修改过!
echo ==============================================================================
set SVC_MOD=YES
goto :MOD_END

:OK
echo 正在检查已修改的服务 ... OK
set SVC_MOD=NO
if exist "%USERPROFILE%\ntsvcfg\svc2cmp.sav" del /F /Q "%USERPROFILE%\ntsvcfg\svc2cmp.sav"
goto :MOD_END

:MOD_END
REM
)
)
)
set CHK_SVC=NO

if /I "%1"=="/restore" goto :RESTORE

:MENUE
if /I "%1"=="/lan" goto :SKIP_MENUE
echo ______________________________________________________________________________
echo 程序控制台
echo.
echo (1) 网络: 保持某些需要访问网络的服务状态不变
echo (2) 标准: 关闭所有端口, 但某些服务的状态保持不变.
echo (3) 完全: 改变所有可能引发问题的系统服务.
echo (4) 恢复: 撤消上次更改.
echo (M) 选项: 获取其他更多选项
echo (Q) 退出: 离开程序界面
echo (E) 查看: 查看系统服务状态(系统当前服务配置与预期不符合时才可使用此项)
echo ______________________________________________________________________________
set /P CHS= 请选择您要进行的操作:
if /I "%CHS%"=="1" (
set SELECT="/lan"
goto :SKIP_MENUE
)

if /I "%CHS%"=="2" (
set SELECT="/std"
goto :SKIP_MENUE
)

if /I "%CHS%"=="3" (
set SELECT="/all"
goto :SKIP_MENUE
)

if /I "%CHS%"=="4" goto :RESTORE
if /I "%CHS%"=="R" goto :RESTORE
if /I "%CHS%"=="M" goto :MORE_OPTIONS
if /I "%SVC_MOD%"=="YES" if /I "%CHS%"=="E" goto :EVALUATE_SERVICES
if /I "%CHS%"=="G" goto :CREATING_NEW_FINGERPRINT
if /I "%CHS%"=="Q" goto :QUIT
cls
goto :START

:SKIP_MENUE
rem 检查是否存在陈旧的还原点.
rem if it is so old files will be restored before 在产生新更改之前,如果文件时间太久将会被恢复
if not exist "%SVC_BAK%" goto :NO_RESTORE
if /I %RESTORE_MODE%==3 goto :NO_RESTORE
if /I %RESTORE_MODE%==4 goto :NO_RESTORE
set RESTORE=YES
echo.
echo _______________________________________________________________________
echo.
echo
echo.
echo 注意: 发现陈旧的还原文件!
echo.
echo 这个程序已不是第一次运行了。为了使所做的更改生效,
echo 通常所有正确的陈旧还原点文件将会更新到一个新的的状态。
echo.
echo # 开始恢复 ...
goto RESTORE_EXT

:NO_RESTORE
rem 手动计划任务是否需要执行
if /I "%SYSTEM%"=="2k" goto :SKIP_SQUERY
if /I "%SYSTEM%"=="xp" (
if /I %SELECT%=="" goto :SKIP_SQUERY
if /I %SELECT%=="/all" goto :SKIP_SQUERY
if /I %XPSP2%==True (
set SCHEDULER_ENABLED=YES
goto :SKIP_SQUERY
)

)

echo.
echo.
echo 询问
echo ==================
echo.
echo 需要将"scheduler"服务设置为"已禁用"吗?
echo.
echo 如果你有定时计划任务那么你将不需要设置自动系统还原点,
echo 请"按任意键继续...立即"关闭135端口和1025端口;否则请按"N"键.
echo ___________________________________________
echo.
set /P UNDO=计划任务已经失效- 关闭scheduler ?
if /I "%UNDO%"=="n" set SCHEDULER_ENABLED=YES

:SKIP_SQUERY

if not exist "%SVC_BAK%.default" (
echo.
echo 正在创建默认还原...
"%regedit%" /e "%SVC_BAK%.default" HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
"%regedit%" /e "%DCOM_BAK%.default" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole
"%regedit%" /e "%DCOMP_BAK%.default" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc
"%regedit%" /e "%SMB_BAK%.default" HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters
"%regedit%" /e "%HANDLER1%.default" HKEY_CLASSES_ROOT\AIM
"%regedit%" /e "%HANDLER2%.default" HKEY_CLASSES_ROOT\gopher
"%regedit%" /e "%HANDLER3%.default" HKEY_CLASSES_ROOT\telnet
cls
echo ... 完成.
)

if exist "%SVC_BAK%" (
if /I %RESTORE_MODE%==2 goto :SKIP_SAVING
if /I %RESTORE_MODE%==4 goto :SKIP_SAVING
)

rem 保存注册表设置
echo _________________________________________________________________________
echo.
echo
echo.
echo 保存服务设置到
echo %SVC_BAK% ...
"%regedit%" /e "%SVC_BAK%" HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
echo Saving DCOM settings to
echo %DCOM_BAK% ...
"%regedit%" /e "%DCOM_BAK%" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole
echo 保存 DCOM 标准协议设置到
echo %DCOMP_BAK% ...
"%regedit%" /e "%DCOMP_BAK%" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc
echo 保存 SMB 设置到
echo %SMB_BAK%
"%regedit%" /e "%SMB_BAK%" HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters
echo 保存URL连接管理设置到
echo %HANDLER1%
"%regedit%" /e "%HANDLER1%" HKEY_CLASSES_ROOT\AIM
echo %HANDLER2%
"%regedit%" /e "%HANDLER2%" HKEY_CLASSES_ROOT\gopher
echo %HANDLER3%
"%regedit%" /e "%HANDLER3%" HKEY_CLASSES_ROOT\telnet
echo.

echo 所有任务已完成.
echo ___________________________________________
echo.

:SKIP_SAVING

if /I "%SYSTEM%"=="xp" (
if /I %UseXPSysRestore%==YES (
goto :XPSYSRESTORE
)
)
:XPSYSRESTORE_DONE

rem 重新配置服务
rem 启动:手动
echo.
echo 设置"手动"类型服务....

echo ___________________________________________
echo.
echo # 正在检测 DHCP...
"%ipconfig%" -all | "%find%" /i "Lease" > nul
if errorlevel 1 (
rem 尝试其他方法启动 DHCP

"%ipconfig%" -all | "%find%" /i "DHCP-Server" > nul
if errorlevel 1 (
echo ... 未发现活动的 DHCP.
echo.
echo 注意
echo ======
echo 你的配置预示着 DHCP 服务将不再需要使用.
echo 但是如果你使用 XDSL 尝试联接到网络时可能会产生错误.
echo 如果你在联接到网络期间遇到此故障,请重新将DHCP服务
echo 激活为"手动".
echo.
echo ___________________________________________
echo.
"%sc%" config DHCP start= demand
goto :SKIP_DHCP
)
)
set DHCP_CHANGES="NO"
echo ... DHCP 激活, 服务状态将不会再改变!
echo.

:SKIP_DHCP
"%sc%" config dmadmin start= demand
"%sc%" config DNSCache start= demand
"%sc%" config mnmsrvc start= demand
"%sc%" config MSIServer start= demand
"%sc%" config NetDDE start= demand
"%sc%" config NetDDEdsdm start= demand
"%sc%" config Netman start= demand
"%sc%" config NTLMSsp start= demand
"%sc%" config NtmsSvc start= demand
"%sc%" config PolicyAgent start= demand
"%sc%" config RASAuto start= demand
"%sc%" config RASMan start= demand
"%sc%" config RSVP start= demand
"%sc%" config Scardsvr start= demand

"%sc%" query ScardDrv | "%find%" /i "OpenService FAILED" >NUL
if errorlevel 1 "%sc%" config ScardDrv start= demand

if /I %XPSP2%==True (
rem 如果 XP SP2已安装那么XP-ICF的更改将会减少
if /I %SELECT%=="/std" goto :SKIP_FIREWALL
)
"%sc%" config SharedAccess start= demand

:SKIP_FIREWALL
"%sc%" config Sysmonlog start= demand
"%sc%" config TAPISrv start= demand
"%sc%" config TrkWks start= demand
"%sc%" config UPS start= demand
"%sc%" config W32Time start= demand
"%sc%" config WMI start= demand

if /I %SELECT%=="/all" (
"%sc%" config SamSs start= demand
"%sc%" config LmHosts start= demand
"%sc%" config Winmgmt start= demand
)

if /I "%SYSTEM%"=="2k" (
"%sc%" config AppMgmt start= demand
"%sc%" config Browser start= demand
"%sc%" config clipsrv start= demand
"%sc%" config EventSystem start= demand
"%sc%" config Fax start= demand
"%sc%" config netlogon start= demand
"%sc%" config RPCLocator start= demand
"%sc%" config Utilman start= demand
if /I %SELECT%=="/all" (
"%sc%" config seclogon start= demand
"%sc%" config RPCSs start= demand
"%sc%" config lanmanServer start= demand
)
)

if /I "%SYSTEM%"=="xp" (
"%sc%" config ALG start= demand
"%sc%" config FastUserSwitchingCompatibility start= demand
"%sc%" config helpsvc start= demand
"%sc%" config ImapiService start= demand
"%sc%" config Nla start= demand
"%sc%" config RdSessMgr start= demand
"%sc%" config seclogon start= demand
"%sc%" config stisvc start= demand
"%sc%" config SwPrv start= demand
"%sc%" config TermService start= demand
"%sc%" config upnphost start= demand
"%sc%" config VSS start= demand

"%sc%" query WmdmPmSp | "%find%" /i "OpenService FAILED" >NUL
if errorlevel 1 "%sc%" config WmdmPmSp start= demand

"%sc%" config WmiApSrv start= demand
rem Wireless Zero Configuration - fuer WLAN-Verbindungen notwendig.
rem Falls erforderlich auf AUTO stellen.
rem "%sc%" config WZCSVC start= demand
)
echo.

rem 启动:自动
echo 设置"自动"类型服务...
"%sc%" config dmserver start= auto
"%sc%" config eventlog start= auto
"%sc%" config PlugPlay start= auto
"%sc%" config ProtectedStorage start= auto
"%sc%" config sens start= auto
"%sc%" config spooler start= auto

if /I "%SYSTEM%"=="2k" (
"%sc%" config lanmanworkstation start= auto
"%sc%" config alerter start= auto
)

if /I "%SYSTEM%"=="xp" (
"%sc%" query InteractiveLogon | "%find%" /i "OpenService FAILED" >NUL
if errorlevel 1 "%sc%" config InteractiveLogon start= auto
"%sc%" config Audiosrv start= auto
"%sc%" config CryptSvc start= auto
"%sc%" config RPCSs start= auto
"%sc%" config ShellHWDetection start= auto
"%sc%" config srservice start= auto
"%sc%" query uploadmgr | "%find%" /i "OpenService FAILED" >NUL
if errorlevel 1 "%sc%" config uploadmgr start= auto
"%sc%" config WebClient start= auto
)
echo.

rem 启动:已禁用
echo 设置"已禁用"类型服务....
"%sc%" config cisvc start= disabled
"%sc%" config MSDTC start= disabled
"%sc%" config RemoteAccess start= disabled
"%sc%" config TlntSvr start= disabled
"%sc%" config messenger start= disabled

if /I %SELECT%=="/all" (
"%sc%" query BITS | "%find%" /i "SERVICE_NAME" >NUL
if not errorlevel 1 "%sc%" config BITS start= disabled
"%sc%" query wuauserv | "%find%" /i "SERVICE_NAME" >NUL
if not errorlevel 1 "%sc%" config wuauserv start= disabled
"%sc%" config schedule start= disabled
"%sc%" config RemoteRegistry start= disabled
)

if /I "%SYSTEM%"=="xp" (
"%sc%" config ERSvc start= disabled
"%sc%" config HidServ start= disabled
"%sc%" config SSDPSRV start= disabled

if /I %SELECT%=="/lan" (
if /I %SCHEDULER_ENABLED%==NO "%sc%" config schedule start= disabled
)

if /I %SELECT%=="/std" (
if /I %SCHEDULER_ENABLED%==NO "%sc%" config schedule start= disabled
)

if /I %XPSP2%==True (
echo.
echo 停用 Windows XP SP2 的安全中心...
"%sc%" config wscsvc start= disabled
)
)

echo.
echo ------------------
echo #检查并将不需要的系统服务停止...
echo.
"%sc%" query cisvc | "%find%" /i "4 RUNNING" >NUL
if not errorlevel 1 "%net%" stop cisvc
"%sc%" query RemoteAccess | "%find%" /i "4 RUNNING" >NUL
if not errorlevel 1 "%net%" stop RemoteAccess
"%sc%" query TlntSvr | "%find%" /i "4 RUNNING" >NUL
if not errorlevel 1 "%net%" stop TlntSvr
"%sc%" query MSDTC | "%find%" /i "4 RUNNING" >NUL
if not errorlevel 1 "%net%" stop MSDTC
"%sc%" query messenger | "%find%" /i "4 RUNNING" >NUL
if not errorlevel 1 "%net%" stop messenger

if /I %SELECT%=="/all" (
"%sc%" query BITS | "%find%" /i "SERVICE_NAME" >NUL
if not errorlevel 1 (
"%sc%" query BITS | "%find%" /i "4 RUNNING" >NUL
if not errorlevel 1 "%net%" stop BITS
)
"%sc%" query wuauserv | "%find%" /i "SERVICE_NAME" >NUL
if not errorlevel 1 (
"%sc%" query wuauserv | "%find%" /i "4 RUNNING" >NUL
if not errorlevel 1 "%net%" stop wuauserv
)
"%sc%" query schedule | "%find%" /i "4 RUNNING" >NUL
if not errorlevel 1 "%net%" stop schedule
)

if /I "%SYSTEM%"=="xp" (
if /I %SELECT%=="/lan" (
if /I %SCHEDULER_ENABLED%==NO "%net%" (
"%sc%" query schedule | "%find%" /i "4 RUNNING" >NUL
if not errorlevel 1 "%net%" stop schedule
)
)

if /I %SELECT%=="/std" (
if /I %SCHEDULER_ENABLED%==NO "%net%" (
"%sc%" query schedule | "%find%" /i "4 RUNNING" >NUL
if not errorlevel 1 "%net%" stop schedule
)

if /I %XPSP2%==True (
"%sc%" query wscsvc | "%find%" /i "4 RUNNING" >NUL
if not errorlevel 1 "%net%" stop wscsvc
)

)

echo ------------------
echo 关闭 DCOM 服务...
echo REGEDIT4 > "%DCOM_TMP%"
echo. >> "%DCOM_TMP%"
echo >> "%DCOM_TMP%"
echo "EnableDCOM"="N" >> "%DCOM_TMP%"
echo "EnableDCOMHTTP"="N" >> "%DCOM_TMP%"
echo. >> "%DCOM_TMP%"
echo. >> "%DCOM_TMP%"
"%regedit%" /s "%DCOM_TMP%"
del /F /Q "%DCOM_TMP%"

echo 关闭DCOM 标准端口 ...
echo REGEDIT4 > "%DCOMP_TMP%"
echo. >> "%DCOMP_TMP%"
echo >> "%DCOMP_TMP%"
echo "DCOM Protocols"=hex(7):00,00,00,00 >> "%DCOMP_TMP%"
echo. >> "%DCOMP_TMP%"
echo. >> "%DCOMP_TMP%"
"%regedit%" /s "%DCOMP_TMP%"
del /F /Q "%DCOMP_TMP%"

echo 关闭135端口(可能包括1025，或者更多) ...
echo - 封闭RPC客户端端口
echo REGEDIT4 > "%SMB_TMP%"
echo >> "%SMB_TMP%"
echo. >> "%SMB_TMP%"

if /I %SCHEDULER_ENABLED%==NO (
echo - 高级RPC配置
echo >> "%SMB_TMP%"
echo "PortsInternetAvailable"="N" >> "%SMB_TMP%"
echo "UseInternetPorts"="N" >> "%SMB_TMP%"
echo. >> "%SMB_TMP%"
)

if /I %XPSP2%==TRUE (
echo - 高级RPC配置
echo >> "%SMB_TMP%"
echo "PortsInternetAvailable"="N" >> "%SMB_TMP%"
echo "UseInternetPorts"="N" >> "%SMB_TMP%"
echo. >> "%SMB_TMP%"
)

echo - 去除不需要的URL连接管理
echo >> "%SMB_TMP%"
echo >> "%SMB_TMP%"
echo >> "%SMB_TMP%"
echo. >> "%SMB_TMP%"
echo. >> "%SMB_TMP%"
"%regedit%" /s "%SMB_TMP%"
del /F /Q "%SMB_TMP%"

if /I %SELECT%=="/all" (
echo.
echo 关闭SMB的端口445...
echo REGEDIT4 > "%SMB_TMP%"
echo. >> "%SMB_TMP%"
echo >> "%SMB_TMP%"
echo "SMBDeviceEnabled"=dword:00000000 >> "%SMB_TMP%"
echo. >> "%SMB_TMP%"
echo. >> "%SMB_TMP%"
"%regedit%" /s "%SMB_TMP%"
del /F /Q "%SMB_TMP%"
set REBOOT_REQUIRED=yes
)

if /I %SELECT%=="/std" (
echo.
echo 关闭SMB的端口445...
echo REGEDIT4 > "%SMB_TMP%"
echo. >> "%SMB_TMP%"
echo >> "%SMB_TMP%"
echo "SMBDeviceEnabled"=dword:00000000 >> "%SMB_TMP%"
echo. >> "%SMB_TMP%"
echo. >> "%SMB_TMP%"
"%regedit%" /s "%SMB_TMP%"
del /F /Q "%SMB_TMP%"
set REBOOT_REQUIRED=yes
)

if /I %SELECT%=="/std" goto :NB_DISABLE
if /I %SELECT%=="/all" goto :NB_DISABLE
goto :SKIP_NB_DISABLE

:NB_DISABLE
if /I %DEACTIVATE_NETBIOS%==NO (
echo.
echo 由于SP2"的网络基本输入输出系统【Netbios】"出现问题，
echo 所以此选项将会跳过.
echo.
goto :SKIP_NB_DISABLE
)

rem (因为 SP2 的网络基本输入输出系统【Netbios】出现问题)
if /I %XPSP2%==True (
echo.
echo 注意:
echo -----
echo 如果你对Windows XP Service Pack 2进行
echo 更新后出现问题请按照以下方法来做:
echo.
echo set Deactivate_NetBIOS=NO
echo.
)
rem *** Thx2 Johannes Lichtenberger for the following lines using VBScript***
rem 约翰尼斯李顿勃.Thx2关闭用以下的VBScript
echo 关闭当前所有的NetBios接口...
echo.
echo On Error Resume Next>>"%nb_tmp%"
echo.>>"%nb_tmp%"
echo TcpipoverNetbios = 2 '0=NetbiosfromDHCP 1=EnableNetbios 2=DisableNetbios>>"%nb_tmp%"
echo.>> "%nb_tmp%"
echo strComputer = ".">>"%nb_tmp%"
echo Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")>>"%nb_tmp%"
echo Set objNICs = objWMIService.ExecQuery _>>"%nb_tmp%"
echo ("Select * From Win32_NetworkAdapterConfiguration Where IPEnabled = True")>>"%nb_tmp%"
echo For Each objNic In objNICs>>"%nb_tmp%"
echo errTcpipNetbios = objNic.SetTCPIPNetBIOS(TcpipoverNetbios)>>"%nb_tmp%"
echo Next>>"%nb_tmp%"
"%SYSTEMROOT%\SYSTEM32\CSCRIPT.EXE" "%nb_tmp%"
del /F /Q "%nb_tmp%"
set REBOOT_REQUIRED=yes

:SKIP_NB_DISABLE
rem 跳过 Billboard 因为 /all 参数已经使用
if /I %SELECT%=="/all" goto :SW_ALL
if /I %SELECT%=="/std" goto :SW_ALL
if /I %SELECT%=="/relan" goto :SW_ALL
echo.
echo ___________________________________________________________________
echo.
echo *** 程序运行反馈情况***
echo.
echo 并不是所有的更改都能显示出来的.为了更正在www.ntsvcfg.de
echo 列出所有问题，请使用参数 '/all'或者选择第 "3" 项!
if /I %DHCP_CHANGES%=="YES" (
echo.
echo DHCP重要注意事项
echo =====================
echo 你的配置预示着 DHCP 服务将不再需要使用. 但是如果你使用
echo XDSL尝试联接到网络时可能会产生错误. 如果你在联接到网络
echo 期间遇到此故障,请重新将DHCP服务激活为"手动".
echo.
)
echo ___________________________________________________________________

:SW_ALL

if /I %SELECT%=="/relan" (
rem 启动:自动
echo.
echo ------------------
echo 正在启动服务...
"%sc%" config LmHosts start= auto
"%sc%" config RemoteRegistry start= auto
"%sc%" config SamSs start= auto
"%sc%" config Winmgmt start= auto
if /I "%SYSTEM%"=="2k" (
"%sc%" config RPCSs start= auto
"%sc%" config lanmanServer start= auto
"%sc%" config seclogon start= auto
)
if /I "%SYSTEM%"=="XP" (
rem 配置"%sc%"共享入口为启动类型自动
)

rem 重新启动服务(start re-enabled services)
echo.
echo ------------------
echo 重新启动服务...
echo.
"%sc%" query RemoteRegistry | "%find%" /i "1 STOPPED" >NUL
if not errorlevel 1 "%net%" start RemoteRegistry
"%sc%" query SamSs | "%find%" /i "1 STOPPED" >NUL
if not errorlevel 1 "%net%" start SamSs
"%sc%" query LmHosts | "%find%" /i "1 STOPPED" >NUL
if not errorlevel 1 "%net%" start LmHosts
"%sc%" query Winmgmt | "%find%" /i "1 STOPPED" >NUL
if not errorlevel 1 "%net%" start Winmgmt
if /I "%SYSTEM%"=="2k" (
"%sc%" query LanmanServer | "%find%" /i "1 STOPPED" >NUL
if not errorlevel 1 "%net%" start lanmanServer
"%sc%" query RPCSs | "%find%" /i "1 STOPPED" >NUL
if not errorlevel 1 "%net%" start RPCSs
"%sc%" query Seclogon | "%find%" /i "1 STOPPED" >NUL
if not errorlevel 1 "%net%" start seclogon
)
if /I "%SYSTEM%"=="XP" (
rem 启动"%net%"共享入口
)

rem 打开SMB 445端口
echo.
echo ------------------
echo 打开SMB 445 端口...
echo REGEDIT4 > "%SMB_TMP%"
echo. >> "%SMB_TMP%"
echo >> "%SMB_TMP%"
echo "SMBDeviceEnabled"=dword:00000001 >> "%SMB_TMP%"
echo. >> "%SMB_TMP%"
echo. >> "%SMB_TMP%"
"%regedit%" /s "%SMB_TMP%"
del /F /Q "%SMB_TMP%"
set REBOOT_REQUIRED=yes
)

rem 创建当前系统服务配置的快照..
if exist "%FPRINT%" del /F /Q "%FPRINT%"
if /I %USE_FPRINT%==YES (
echo.
echo 创建快照将会占用一些时间......
"%sc%" query type= service state= all bufsize= 8192 | %FIND% "SERVICE_NAME" > %TEMP%\~svclist.txt
for /F "tokens=1*" %%a in (%TEMP%\~svclist.txt) do (
echo %%b >>"%FPRINT%"
"%sc%" query "%%b" | %FIND% "STATE" >>"%FPRINT%"
"%sc%" qc "%%b" | %FIND% "DISPLAY_NAME" >>"%FPRINT%"
"%SC%" qc "%%b" | %FIND% "START_TYPE" >>"%FPRINT%"
echo. >> "%FPRINT%"
)
del "%TEMP%\~svclist.txt"
echo ...完成.
)
goto :END

:RESTORE
echo ____________________________________________________
echo.
set /P UNDO= 撤销上次的更改 ?
if /I "%UNDO%"=="y" (
echo _______________________________________________________________
echo.
echo Hinweis:
echo ========
echo 系统在导出备份时也许可能会报错.你只需点击"是"即可忽略它!
echo _______________________________________________________________
echo 状况:
echo -------
:RESTORE_EXT
if exist "%SVC_BAK%" (
echo 正在导入服务...
echo
"%regedit%" /s "%SVC_BAK%"
set action=""
)

if exist "%DCOM_BAK%" (
echo 正在导入DCOM ...
echo
"%regedit%" /s "%DCOM_BAK%"
)

if exist "%DCOMP_BAK%" (
echo 正在导入DCOM-standard protocols ...
echo
"%regedit%" /s "%DCOMP_BAK%"
)

if exist "%SMB_BAK%" (
echo 正在导入 SMB-设置...
echo
echo - 正在删除激活的SMB设备注册表键 ...
echo REGEDIT4 > "%USERPROFILE%\smbpatch~.reg"
echo. >> "%USERPROFILE%\smbpatch~.reg"
echo >> "%USERPROFILE%\smbpatch~.reg"
echo "SMBDeviceEnabled"=- >> "%USERPROFILE%\smbpatch~.reg"
echo. >> "%USERPROFILE%\smbpatch~.reg"
echo. >> "%USERPROFILE%\smbpatch~.reg"
"%SystemRoot%\regedit.exe" /s "%USERPROFILE%\smbpatch~.reg"
del /F /Q "%USERPROFILE%\smbpatch~.reg"
"%regedit%" /s "%SMB_BAK%"
)

if exist "%HANDLER1%" (
echo 正在导入 URL_HANDLER AIM ...
echo
"%regedit%" /s "%HANDLER1%"
)

if exist "%HANDLER2%" (
echo 正在导入 URL_HANDLER GOPHER ...
echo
"%regedit%" /s "%HANDLER2%"
)

if exist "%HANDLER3%" (
echo 正在导入 URL_HANDLER TELNET ...
echo
"%regedit%" /s "%HANDLER3%"
)

rem Skipping back to next state
if /I "%RESTORE%"=="YES" goto :NO_RESTORE

echo 正在删除 RPC Internet 注册表键 ....
echo REGEDIT4 >"%USERPROFILE%\svc_fix.reg"
echo. >>"%USERPROFILE%\svc_fix.reg"
echo >>"%USERPROFILE%\svc_fix.reg"
echo. >>"%USERPROFILE%\svc_fix.reg"
echo. >>"%USERPROFILE%\svc_fix.reg"
"%regedit%" /s "%USERPROFILE%\svc_fix.reg"
del /F /Q "%USERPROFILE%\svc_fix.reg"

rem 创建当前服务配置的快照...
if exist "%FPRINT%" del /F /Q "%FPRINT%"
if /I %USE_FPRINT%==YES (
echo.
echo 创建快照将会占用一些时间...
"%sc%" query type= service state= all bufsize= 8192 | %FIND% "SERVICE_NAME" > %TEMP%\~svclist.txt
for /F "tokens=1*" %%a in (%TEMP%\~svclist.txt) do (
echo %%b >>"%FPRINT%"
"%sc%" query "%%b" | %FIND% "STATE" >>"%FPRINT%"
"%sc%" qc "%%b" | %FIND% "DISPLAY_NAME" >>"%FPRINT%"
"%SC%" qc "%%b" | %FIND% "START_TYPE" >>"%FPRINT%"
echo. >> "%FPRINT%"
)
del "%TEMP%\~svclist.txt"
echo ...完成.
)

echo.
echo _______________________________________________________________
echo.
echo *** 程序运行反馈情况 ***
echo.
echo. 如果你未在状态框上看到任何信息,说明没有备份的文件可以用来进行恢复,
echo 恢复完成.请重新激活NetBios分配给每个你想使用的NIC,然后重启。
echo ________________________________________________________________
)

goto :END

:RESTORE_DEFAULTS
echo.
echo *** 恢复车间设置 ***
echo.
echo ______________________________________________________________________________
echo.
set /P UNDO= 恢复到(在使用脚本之前, NetBIOS除外) 默认状态?
if /I "%UNDO%"=="y" (
echo.
echo - 恢复最初的服务配置 ...

if exist "%SVC_BAK%.default" (
echo "%SVC_BAK%.default"
"%regedit%" /s "%SVC_BAK%.default"
)
if exist "%DCOM_BAK%.default" (
echo "%DCOM_BAK%.default"
"%regedit%" /s "%DCOM_BAK%.default"
)
if exist "%DCOMP_BAK%.default" (
echo "%DCOMP_BAK%.default"
"%regedit%" /s "%DCOMP_BAK%.default"
)
if exist "%SMB_BAK%.default" (
echo "%SMB_BAK%.default"
echo - 正在删除激活的SMB设备注册表键 ...
echo REGEDIT4 > "%USERPROFILE%\smbpatch~.reg"
echo. >> "%USERPROFILE%\smbpatch~.reg"
echo >> "%USERPROFILE%\smbpatch~.reg"
echo "SMBDeviceEnabled"=- >> "%USERPROFILE%\smbpatch~.reg"
echo. >> "%USERPROFILE%\smbpatch~.reg"
echo. >> "%USERPROFILE%\smbpatch~.reg"
"%SystemRoot%\regedit.exe" /s "%USERPROFILE%\smbpatch~.reg"
del /F /Q "%USERPROFILE%\smbpatch~.reg"
"%regedit%" /s "%SMB_BAK%.default"
)
if exist "%HANDLER1%.default" (
echo "%HANDLER1%.default"
"%regedit%" /s "%HANDLER1%.default"
)
if exist "%HANDLER2%.default" (
echo "%HANDLER2%.default"
"%regedit%" /s "%HANDLER2%.default"
)
if exist "%HANDLER3%.default" (
echo "%HANDLER3%.default"
"%regedit%" /s "%HANDLER3%.default"
)
echo ... 完成.

echo - 正在删除 RPC Internet 注册表键 ...
echo REGEDIT4 >"%USERPROFILE%\svc_fix.reg"
echo. >>"%USERPROFILE%\svc_fix.reg"
echo >>"%USERPROFILE%\svc_fix.reg"
echo. >>"%USERPROFILE%\svc_fix.reg"
echo. >>"%USERPROFILE%\svc_fix.reg"
"%regedit%" /s "%USERPROFILE%\svc_fix.reg"
del /F /Q "%USERPROFILE%\svc_fix.reg"
echo ... 完成.

)
goto :QUIT

:SC_DOWNLOAD
echo ______________________________________________________________
echo.
echo 你当前的状态是否已经连接到internet?
echo.
set /P UNDO= 请选择: ?
if /I "%UNDO%"=="y" goto :SC_DOWNLOAD_OK
goto :END

:SC_DOWNLOAD_OK
if exist "%SYSTEMROOT%\sc.zip" goto :SCE
echo 正在生成 FTP 脚本 ...
if exist "%USERPROFILE%"\script_sc.ls del /F "%USERPROFILE%\script_sc.ls"
echo open 207.46.133.140 >"%USERPROFILE%\script_sc.ls"
echo user anonymous anonymous@aol.com >>"%USERPROFILE%\script_sc.ls"
echo type binary >>"%USERPROFILE%\script_sc.ls"
echo user anonymous anonymous@aol.com >>"%USERPROFILE%\script_sc.ls"
echo type binary >>"%USERPROFILE%\script_sc.ls"
echo get /reskit/win2000/sc.zip "%SYSTEMROOT%\System32\SC.ZIP" >>"%USERPROFILE%\script_sc.ls"
echo quit >>"%USERPROFILE%\script_sc.ls"

echo 正在下载 SC.EXE ...
ftp -s:"%USERPROFILE%\script_sc.ls"
del /F "%USERPROFILE%\script_sc.ls"

:SCE
if exist "%SYSTEMROOT%\System32\pkunzip.exe" goto :PKE
echo 正在生成 FTP 脚本 ...
if exist "%USERPROFILE%"\script_pk.ls del /F "%USERPROFILE%\script_pk.ls"
echo open ftp.uni-duesseldorf.de >"%USERPROFILE%\script_pk.ls"
echo user anonymous anonymous@aol.com >>"%USERPROFILE%\script_pk.ls"
echo type binary >>"%USERPROFILE%\script_pk.ls"
echo user anonymous anonymous@aol.com >>"%USERPROFILE%\script_pk.ls"
echo type binary >>"%USERPROFILE%\script_pk.ls"
echo get /pub/ie/pkunzip.exe "%SYSTEMROOT%\System32\pkunzip.exe" >>"%USERPROFILE%\script_pk.ls"
echo quit >>"%USERPROFILE%\script_pk.ls"

echo 正在下载 PKUNZIP.EXE ...
ftp -s:"%USERPROFILE%\script_pk.ls"
del /F "%USERPROFILE%\script_pk.ls"

:PKE
if not exist "%SYSTEMROOT%\System32\sc.zip" (
echo.
echo.
echo 下载 SC.ZIP 文件失败. 请手动下载并将它复制到%SYSTEMROOT%\目录.
)

if not exist "%SYSTEMROOT%\System32\pkunzip.exe" (
echo.
echo 未发现文件PKUNZIP.EXE. 请从压缩包中解压 SC.EXE.
)

if exist "%SYSTEMROOT%\System32\SC.ZIP" (
if exist "%SYSTEMROOT%\System32\pkunzip.exe" (
"%SYSTEMROOT%\System32\pkunzip.exe" -e "%SYSTEMROOT%\System32\sc.zip" sc.exe
)
)

move /Y sc.exe "%SYSTEMROOT%\System32\"
echo.
echo 正在重新启动脚本 ...
goto :START

:FIX
echo.
echo -= svc2kxp.cmd 计划任务修复 =-
echo.
echo.
echo 如果你想修复疑问:" 在Windows XP启动后不自动执行计划任务
echo 在运行 v2.0 - v2.1build0版本的脚本",按下"Y"键.
echo.
set /P UNDO= 修复问题 ?
if /I "%UNDO%"=="y" (
echo REGEDIT4 >"%USERPROFILE%\svc_fix.reg"
echo. >>"%USERPROFILE%\svc_fix.reg"
echo >>"%USERPROFILE%\svc_fix.reg"
echo. >>"%USERPROFILE%\svc_fix.reg"
echo. >>"%USERPROFILE%\svc_fix.reg"
"%regedit%" /s "%USERPROFILE%\svc_fix.reg"
del /F /Q "%USERPROFILE%\svc_fix.reg"
echo ______________________________________
echo.
echo 完成. 请重新启动并再次检查开放的端口 ...!
)

rem 创建当前服务设置的快照..
if exist "%FPRINT%" del /F /Q "%FPRINT%"
goto quit
if /I %USE_FPRINT%==YES (
echo.
echo Creating fingerprint which will take a few seconds ...
"%sc%" query type= service state= all bufsize= 8192 | %FIND% "SERVICE_NAME" > %TEMP%\~svclist.txt
for /F "tokens=1*" %%a in (%TEMP%\~svclist.txt) do (
echo %%b >>"%FPRINT%"
"%sc%" query "%%b" | %FIND% "STATE" >>"%FPRINT%"
"%sc%" qc "%%b" | %FIND% "DISPLAY_NAME" >>"%FPRINT%"
"%SC%" qc "%%b" | %FIND% "START_TYPE" >>"%FPRINT%"
echo. >> "%FPRINT%"
)
del "%TEMP%\~svclist.txt"
echo ... 完成.
)

goto :QUIT

rem **** 添加特殊目录(Additional Feature List)****

:MORE_OPTIONS
cls
echo ______________________________________________________________________________
echo.
echo *** 其他选项 ***
echo =====================================
echo.
if /I "%SVC_MOD%"=="YES" (
echo ...显示一个自从上次使用 svc2kxp.cmd 修改服务的目录
echo.
)
echo ...为系统服务创建一个快照，用来发现并纠正系统服务的更改情况
echo.
echo ...保存当前 NT 服务的配置情况(自动/手动/已禁用).
echo.
echo ...返回主程序.
echo.
echo ...退出.
echo.
echo ______________________________________________________________________________
echo.
if /I "%SVC_MOD%"=="NO" set /P CHS= 请选择您要进行的操作:
if /I "%SVC_MOD%"=="YES" set /P CHS= 请选择您要进行的操作:
if /I "%SVC_MOD%"=="YES" if /I "%CHS%"=="E" GOTO :EVALUATE_SERVICES
if /I "%CHS%"=="G" GOTO :CREATING_NEW_FINGERPRINT
if /I "%CHS%"=="B" (
CLS
GOTO :MENUE
)
if /I "%CHS%"=="S" GOTO :SAVE_SVC_SETTINGS
if /I "%CHS%"=="Q" GOTO :QUIT
GOTO :MORE_OPTIONS

:EVALUATE_SERVICES
cls
echo ______________________________________________________________________________
echo.
echo *** 系统服务评估情况 ***
echo.
"%FC%" /N "%FPRINT%" "%USERPROFILE%\ntsvcfg\svc2cmp.sav"
echo ...返回.
echo ...更新.
echo ...退出.
echo ______________________________________________________________________________
echo.
set /P CHS= 请选择您要进行的操作:
if /I "%CHS%"=="B" GOTO :MORE_OPTIONS
if /I "%CHS%"=="U" GOTO :CREATING_NEW_FINGERPRINT
if /I "%CHS%"=="Q" GOTO :QUIT
GOTO :MORE_OPTIONS

:SAVE_SVC_SETTINGS
cls
echo ______________________________________________________________________________
echo.
echo *** 管理当前服务配置菜单选项 ***
echo --------------------------------------------
echo.
set /P CHS= 您是否需要保存当前的服务设置?
if /I "%CHS%"=="N" GOTO :MORE_OPTIONS
if /I "%CHS%"=="Y" (
echo 保存当前服务的设置状态到:
echo.
echo - %SVC_SAV%
"%regedit%" /e "%SVC_SAV%" HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
echo.
echo ... 完成!
echo ______________________________________________________________________________
echo.
echo 敲击任意键返回.
pause>NUL
)
if /I "%CHS%"=="Q" GOTO :QUIT
goto :MORE_OPTIONS

pause >NUL
goto :MORE_OPTIONS

:CREATING_NEW_FINGERPRINT
cls
echo ______________________________________________________________________________
echo.
echo *** 创建新的指纹快照 ***
echo ------------------------------
echo.
set /P CHS= 是否创建新的指纹快照 ?
if /I "%CHS%"=="Y" (
if exist "%FPRINT%" del /F /Q "%FPRINT%"
echo 创建新的指纹快照将会占用一些时间，请稍等 ...
"%sc%" query type= service state= all bufsize= 8192 | %FIND% "SERVICE_NAME" > %TEMP%\~svclist.txt
for /F "tokens=1*" %%a in (%TEMP%\~svclist.txt) do (
echo %%b >>"%FPRINT%"
"%sc%" query "%%b" | %FIND% "STATE" >>"%FPRINT%"
"%sc%" qc "%%b" | %FIND% "DISPLAY_NAME" >>"%FPRINT%"
"%SC%" qc "%%b" | %FIND% "START_TYPE" >>"%FPRINT%"
echo. >> "%FPRINT%"
)
del "%TEMP%\~svclist.txt"
echo ... 完成.
echo ______________________________________________________________________________
echo.
echo
set CHK_SVC=YES
PAUSE >NUL
)
cls
GOTO :MORE_OPTIONS

:XPSYSRESTORE
REM 创建一个系统还原点// 源代码: MS Technet Scriptcenter
echo.
echo 如果 Windows XP 的系统还原可用,创建系统还原点 ...
if exist "%srctmp%" del /F /Q "%srctmp%"
echo CONST DEVICE_DRIVER_INSTALL = 10 >"%srctmp%"
echo CONST BEGIN_SYSTEM_CHANGE = 100 >>"%srctmp%"
echo.>>"%srctmp%"
echo strComputer = ".">>"%srctmp%"
echo Set objWMIService = GetObject("winmgmts:" _ >>"%srctmp%"
echo ^& "{impersonationLevel=impersonate}!\\" ^& strComputer ^& "\root\default")>>"%srctmp%"
echo.>>"%srctmp%"
echo Set objItem = objWMIService.Get("SystemRestore")>>"%srctmp%"
echo errResults = objItem.CreateRestorePoint _ >>"%srctmp%"
echo ("svc2kxp.cmd 创建的还原点", DEVICE_DRIVER_INSTALL, BEGIN_SYSTEM_CHANGE)>>"%srctmp%"
call "%srctmp%"
del /F /Q "%srctmp%"
echo.
goto :XPSYSRESTORE_DONE

:END
if "%REBOOT_REQUIRED%"=="yes" (
echo.
echo ______________________________________________________
echo.
echo *** 程序运行反馈情况 ***
echo.
echo.
if /I %SELECT%=="/all" echo 所有更改已经成功应用.
if /I %SELECT%=="/std" echo 某些系统服务未做更改.
if /I %SELECT%=="/relan" echo LAN 设置已激活.
if /I %DHCP_CHANGES%=="YES" (
echo.
echo DHCP重要注意事项
echo =====================
echo 你的配置预示着 DHCP 服务将不再需要使用.
echo 但是如果你使用 XDSL 尝试联接到网络时可能会产生错误.
echo 如果你在联接到网络期间遇到此故障,请重新将DHCP服务
echo 激活为"手动".
echo.
)
echo 请重新启动.
echo ______________________________________________________
)

:QUIT
echo ________________________________________________________
echo.
echo.
echo 详细信息请登陆: http://www.ntsvcfg.de/ntsvcfg_eng
echo ________________________________________________________
echo
echo ------------------------------------------------------
echo.
if /I "%1"=="" pause>NUL

:QUIT_EXT
endlocal
if exist "%USERPROFILE%\ntsvcfg\svc2cmp.sav" del /F /Q "%USERPROFILE%\ntsvcfg\svc2cmp.sav"
echo.

第31楼　jashonx	发表于 2007-07-01 16:21
初级用户　发帖 21　积分 44
md autorun.inf cd autorun.inf md prn\ md pig..\ cd\ 能否告诉我这几句的意思？谢谢！

第32楼　sgw888	发表于 2007-07-01 16:45
初级用户　发帖 33　积分 86
Originally posted by jashonx at 2007-7-1 04:21 PM: md autorun.inf cd autorun.inf md prn\ md pig..\ cd\ 能否告诉我这几句的意思？谢谢！上面几个命令就很简单了． md autorun.inf 就是创建名为 autorun.inf　的文件夹， cd autorun.inf　就是进入这个文件夹 md prn\ 就是在autorun.inf文件夹下创建prn 文件夹，因为prn是特殊名称，在ＤＯＳ下代表打印设备，所以用了个 prn\ md pig..\ 就是创建名为 pig..\的特殊文件夹，要知道文件跟文件夹名是不能用.来命名的，这儿用特殊的方法创建就是防止病毒来删除文件夹，因为　在ＷＩＮ下不能直接删除　非空文件夹，prn跟 pig..\如果无法删除，那么 autorun.inf就无法删除，文件跟文件夹不能重名，所以病毒不能建立名为 autorun.inf的文件，这样，双击打开Ｕ盘就不会自动打开病毒文件了．

第33楼　koala	发表于 2007-07-03 19:23
初级用户　发帖 105　积分 199　来自江苏
挖掘流氓软件免疫程序源代码 @Echo Off color 1f Title 流氓软件免疫程序 v2.4 飓风制作 QQ:41436270 :start cls Set Choice= Echo. Echo 流氓软件免疫程序 v2.4 飓风制作 QQ:41436270 Echo -------------------------------------------------------------- Echo. Echo 本工具从目录权限控制入手，彻底免除各种流氓软件感染， Echo 比如 3721/雅虎助手/百度/网络猪/DUDU加速器/中文邮/一搜等。 Echo. Echo 注意！您的系统分区必须是 NTFS 格式才能生效！ Echo 如果是 FAT32 格式，请运行 1 进行转换！ Echo. Echo 【说明】 Echo ① 本程序仅支持 Windows 2000/XP/2003。 Echo ② 运行本程序后，上述网络插件将不再可用，也不能手工安装。 Echo ③ 本程序根据深山红叶的系统安全免疫工具包，制作而成。 Echo ④ 为了更好了的免疫流氓软件，请配合upiea一起使用。 Echo ⑤ 使用本工具的免疫功能完全出于您的个人意愿！ Echo. Echo [1] 系统盘转换为NTFS格式 Echo [2] 流氓软件免疫程序 Echo [3] 清除系统垃圾并退出 Echo [Q] 退出 Echo. Set /P Choice= 请选择要进行的操作： If Not '%Choice%'=='' SET Choice=%Choice:~0,1% If /I '%Choice%'=='1' GOTO ntfs If /I '%Choice%'=='2' GOTO Main If /I '%Choice%'=='3' GOTO clear If /I '%Choice%'=='4' GOTO Readme If /I '%Choice%'=='q' GOTO end :ntfs convert %SystemDrive%/fs:ntfs Echo 任意键返回…… pause>nul Goto start :Main @Echo Off Echo 正在帮您免疫流氓软件，请稍等...... md "%SystemDrive%\NetBar" attrib +s +h "%SystemDrive%\NetBar" setacl "%SystemDrive%\NetBar" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\3721" attrib +s +h "%ProgramFiles%\3721" setacl "%ProgramFiles%\3721" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\System32\Drivers\CnsminKP.sys" md "%SystemRoot%\Downloaded Program Files\CnsMin.dll" md "%SystemRoot%\Downloaded Program Files\CnsMin.inf" md "%SystemRoot%\Downloaded Program Files\CnsMin.cab" md "%SystemRoot%\Downloaded Program Files\cns02.dat" md "%SystemRoot%\Downloaded Program Files\CnsHook.dll" md "%SystemRoot%\Downloaded Program Files\CnsInst.dll" attrib +s +h "%SystemRoot%\Downloaded Program Files\Cns." attrib +s +h "%SystemRoot%\System32\Drivers\CnsminKP.sys" setacl "%SystemRoot%\System32\Drivers\CnsminKP.sys" /dir /deny everyone /full /p:no_dont_copy setacl "%SystemRoot%\Downloaded Program Files\CnsMin.dll" /dir /deny everyone /full /p:no_dont_copy setacl "%SystemRoot%\Downloaded Program Files\CnsMin.inf" /dir /deny everyone /full /p:no_dont_copy setacl "%SystemRoot%\Downloaded Program Files\CnsMin.cab" /dir /deny everyone /full /p:no_dont_copy setacl "%SystemRoot%\Downloaded Program Files\cns02.dat" /dir /deny everyone /full /p:no_dont_copy setacl "%SystemRoot%\Downloaded Program Files\CnsHook.dll" /dir /deny everyone /full /p:no_dont_copy setacl "%SystemRoot%\Downloaded Program Files\CnsInst.dll" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\360so" attrib +s +h "%ProgramFiles%\360so" setacl "%ProgramFiles%\360so" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Accoona" attrib +s +h "%ProgramFiles%\Accoona" setacl "%ProgramFiles%\Accoona" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\AD4All" attrib +s +h "%ProgramFiles%\AD4All" setacl "%ProgramFiles%\AD4All" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Baidu" attrib +s +h "%ProgramFiles%\Baidu" setacl "%ProgramFiles%\Baidu" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Common Files\Baidu" attrib +s +h "%ProgramFiles%\Common Files\Baidu" setacl "%ProgramFiles%\Common Files\Baidu" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\Downloaded Program Files\BDSrHook.dll" attrib +s +h "%SystemRoot%\Downloaded Program Files\BDSrHook.dll" setacl "%SystemRoot%\Downloaded Program Files\BDSrHook.dll" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\Downloaded Program Files\BDHelper.dll" attrib +s +h "%SystemRoot%\Downloaded Program Files\BDHelper.dll" setacl "%SystemRoot%\Downloaded Program Files\BDHelper.dll" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\Downloaded Program Files\BDPlugin.dll" attrib +s +h "%SystemRoot%\Downloaded Program Files\BDPlugin.dll" setacl "%SystemRoot%\Downloaded Program Files\BDPlugin.dll" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\baigoo" attrib +s +h "%ProgramFiles%\baigoo" setacl "%ProgramFiles%\baigoo" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\CNet" attrib +s +h "%ProgramFiles%\CNet" setacl "%ProgramFiles%\CNet" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\CNNIC" attrib +s +h "%ProgramFiles%\CNNIC" setacl "%ProgramFiles%\CNNIC" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\CoolWebsite" attrib +s +h "%ProgramFiles%\CoolWebsite" setacl "%ProgramFiles%\CoolWebsite" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\CaiShow Tech" attrib +s +h "%ProgramFiles%\CaiShow Tech" setacl "%ProgramFiles%\CaiShow Tech" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Dudu" attrib +s +h "%ProgramFiles%\Dudu" setacl "%ProgramFiles%\Dudu" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\DeskAdTop" attrib +s +h "%ProgramFiles%\DeskAdTop" setacl "%ProgramFiles%\DeskAdTop" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Desktop Media" attrib +s +h "%ProgramFiles%\Desktop Media" setacl "%ProgramFiles%\Desktop Media" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\eBay" attrib +s +h "%ProgramFiles%\eBay" setacl "%ProgramFiles%\eBay" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\EbayShop" attrib +s +h "%ProgramFiles%\EbayShop" setacl "%ProgramFiles%\EbayShop" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\EbayTools" attrib +s +h "%ProgramFiles%\EbayTools" setacl "%ProgramFiles%\EbayTools" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Google" attrib +s +h "%ProgramFiles%\Google" setacl "%ProgramFiles%\Google" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\HBClient" attrib +s +h "%ProgramFiles%\HBClient" setacl "%ProgramFiles%\HBClient" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\HBHDP" attrib +s +h "%ProgramFiles%\HBHDP" setacl "%ProgramFiles%\HBHDP" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\HuaCi" attrib +s +h "%ProgramFiles%\HuaCi" setacl "%ProgramFiles%\HuaCi" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\henbang" attrib +s +h "%ProgramFiles%\henbang" setacl "%ProgramFiles%\henbang" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\System32\henbang.exe" attrib +s +h "%SystemRoot%\System32\henbang.exe" setacl "%SystemRoot%\System32\henbang.exe" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\IE-BAR" attrib +s +h "%ProgramFiles%\IE-BAR" setacl "%ProgramFiles%\IE-BAR" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Infofo Bar" attrib +s +h "%ProgramFiles%\Infofo Bar" setacl "%ProgramFiles%\Infofo Bar" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Kuaiso Toolsbar" attrib +s +h "%ProgramFiles%\Kuaiso Toolsbar" setacl "%ProgramFiles%\Kuaiso Toolsbar" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\LetsCool" attrib +s +h "%ProgramFiles%\LetsCool" setacl "%ProgramFiles%\LetsCool" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Netease" attrib +s +h "%ProgramFiles%\Netease" setacl "%ProgramFiles%\Netease" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Mop" attrib +s +h "%ProgramFiles%\Mop" setacl "%ProgramFiles%\Mop" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\MySec" attrib +s +h "%ProgramFiles%\MySec" setacl "%ProgramFiles%\MySec" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\MMSAssist" attrib +s +h "%ProgramFiles%\MMSAssist" setacl "%ProgramFiles%\MMSAssist" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\p4p" attrib +s +h "%ProgramFiles%\p4p" setacl "%ProgramFiles%\p4p" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\pcast" attrib +s +h "%ProgramFiles%\pcast" setacl "%ProgramFiles%\pcast" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\qqhelper" attrib +s +h "%ProgramFiles%\qqhelper" setacl "%ProgramFiles%\qqhelper" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Qyule" attrib +s +h "%ProgramFiles%\Qyule" setacl "%ProgramFiles%\Qyule" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Sandai" attrib +s +h "%ProgramFiles%\Sandai" setacl "%ProgramFiles%\Sandai" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\ScanToolbar" attrib +s +h "%ProgramFiles%\ScanToolbar" setacl "%ProgramFiles%\ScanToolbar" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\searchnet" attrib +s +h "%ProgramFiles%\searchnet" setacl "%ProgramFiles%\searchnet" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\servehost.exe" attrib +s +h "%SystemRoot%\system32\servehost.exe" setacl "%SystemRoot%\system32\servehost.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\Drivers\FAD.sys" attrib +s +h "%SystemRoot%\system32\Drivers\FAD.sys" setacl "%SystemRoot%\system32\Drivers\FAD.sys" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\Drivers\Anfad.sys" attrib +s +h "%SystemRoot%\system32\Drivers\Anfad.sys" setacl "%SystemRoot%\system32\Drivers\Anfad.sys" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\Drivers\hProcess.sys" attrib +s +h "%SystemRoot%\system32\Drivers\hProcess.sys" setacl "%SystemRoot%\system32\Drivers\hProcess.sys" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\TENCENT\AdPlus" attrib +s +h "%ProgramFiles%\TENCENT\AdPlus" setacl "%ProgramFiles%\TENCENT\AdPlus" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\VIKA" attrib +s +h "%ProgramFiles%\VIKA" setacl "%ProgramFiles%\VIKA" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\VVSN" attrib +s +h "%ProgramFiles%\VVSN" setacl "%ProgramFiles%\VVSN" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\VisionNet" attrib +s +h "%ProgramFiles%\VisionNet" setacl "%ProgramFiles%\VisionNet" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Yahoo!" attrib +s +h "%ProgramFiles%\Yahoo!" setacl "%ProgramFiles%\Yahoo!" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\System32\cns.dll" attrib +s +h "%SystemRoot%\System32\cns.dll" setacl "%SystemRoot%\System32\cns.dll" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\System32\cns.exe" attrib +s +h "%SystemRoot%\System32\cns.exe" setacl "%SystemRoot%\System32\cns.exe" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\yisou" attrib +s +h "%ProgramFiles%\yisou" setacl "%ProgramFiles%\yisou" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\1Sou" attrib +s +h "%ProgramFiles%\1Sou" setacl "%ProgramFiles%\1Sou" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\yulexk" attrib +s +h "%ProgramFiles%\yulexk" setacl "%ProgramFiles%\yulexk" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\YOK.com" attrib +s +h "%ProgramFiles%\YOK.com" setacl "%ProgramFiles%\YOK.com" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Yayad" attrib +s +h "%ProgramFiles%\Yayad" setacl "%ProgramFiles%\Yayad" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\wsearch" attrib +s +h "%ProgramFiles%\wsearch" setacl "%ProgramFiles%\wsearch" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\wint" attrib +s +h "%ProgramFiles%\wint" setacl "%ProgramFiles%\wint" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\xBar" attrib +s +h "%ProgramFiles%\xBar" setacl "%ProgramFiles%\xBar" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\xm" attrib +s +h "%ProgramFiles%\xm" setacl "%ProgramFiles%\xm" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\zcom" attrib +s +h "%ProgramFiles%\zcom" setacl "%ProgramFiles%\zcom" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\网络猪" attrib +s +h "%ProgramFiles%\网络猪" setacl "%ProgramFiles%\网络猪" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Common Files\COMM" attrib +s +h "%ProgramFiles%\Common Files\COMM" setacl "%ProgramFiles%\Common Files\COMM" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Common Files\SAND" attrib +s +h "%ProgramFiles%\Common Files\SAND" setacl "%ProgramFiles%\Common Files\SAND" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\qcssbl9.exe" attrib +s +h "%SystemRoot%\system32\qcssbl9.exe" setacl "%SystemRoot%\system32\qcssbl9.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\bsd.exe" attrib +s +h "%SystemRoot%\system32\bsd.exe" setacl "%SystemRoot%\system32\bsd.exe" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Common Files\UPDAT" attrib +s +h "%ProgramFiles%\Common Files\UPDAT" setacl "%ProgramFiles%\Common Files\UPDAT" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Common Files\UPDATE" attrib +s +h "%ProgramFiles%\Common Files\UPDATE" setacl "%ProgramFiles%\Common Files\UPDATE" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Common Files\Wnwb" attrib +s +h "%ProgramFiles%\Common Files\Wnwb" setacl "%ProgramFiles%\Common Files\Wnwb" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Common Files\Real\GToolbar" attrib +s +h "%ProgramFiles%\Common Files\Real\GToolbar" setacl "%ProgramFiles%\Common Files\Real\GToolbar" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Common Files\Real\CNNIC" attrib +s +h "%ProgramFiles%\Common Files\Real\CNNIC" setacl "%ProgramFiles%\Common Files\Real\CNNIC" /dir /deny everyone /full /p:no_dont_copy md "%ProgramFiles%\Common Files\Real\Update_OB\realsched.exe" setacl "%ProgramFiles%\Common Files\Real\Update_OB\realsched.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\Downloaded Installations" setacl "%SystemRoot%\Downloaded Installations" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\WORLD2" attrib +s +h "%SystemRoot%\WORLD2" setacl "%SystemRoot%\WORLD2" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\HTML" attrib +s +h "%SystemRoot%\HTML" setacl "%SystemRoot%\HTML" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\Logo1_.exe" attrib +s +h "%SystemRoot%\Logo1_.exe" setacl "%SystemRoot%\Logo1_.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\vDll.dll" attrib +s +h "%SystemRoot%\vDll.dll" setacl "%SystemRoot%\vDll.dll" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\0Sy.exe" attrib +s +h "%SystemRoot%\0Sy.exe" setacl "%SystemRoot%\0Sy.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\1Sy.exe" attrib +s +h "%SystemRoot%\1Sy.exe" setacl "%SystemRoot%\1Sy.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\2Sy.exe" attrib +s +h "%SystemRoot%\2Sy.exe" setacl "%SystemRoot%\2Sy.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\3Sy.exe" attrib +s +h "%SystemRoot%\3Sy.exe" setacl "%SystemRoot%\3Sy.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\5Sy.exe" attrib +s +h "%SystemRoot%\5Sy.exe" setacl "%SystemRoot%\5Sy.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\rundll32.exe" attrib +s +h "%SystemRoot%\rundll32.exe" setacl "%SystemRoot%\rundll32.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\rundl132.exe" attrib +s +h "%SystemRoot%\rundl132.exe" setacl "%SystemRoot%\rundl132.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\exerouter.exe" attrib +s +h "%SystemRoot%\exerouter.exe" setacl "%SystemRoot%\exerouter.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\EXP10RER.com" attrib +s +h "%SystemRoot%\EXP10RER.com" setacl "%SystemRoot%\EXP10RER.com" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\finders.com" attrib +s +h "%SystemRoot%\finders.com" setacl "%SystemRoot%\finders.com" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\Shell.sys" attrib +s +h "%SystemRoot%\Shell.sys" setacl "%SystemRoot%\Shell.sys" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\smss.exe" attrib +s +h "%SystemRoot%\smss.exe" setacl "%SystemRoot%\smss.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\1.com" attrib +s +h "%SystemRoot%\1.com" setacl "%SystemRoot%\1.com" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\impai.exe" attrib +s +h "%SystemRoot%\system32\impai.exe" setacl "%SystemRoot%\system32\impai.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\NIW.exe" attrib +s +h "%SystemRoot%\NIW.exe" setacl "%SystemRoot%\NIW.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\bcup.exe" attrib +s +h "%SystemRoot%\system32\bcup.exe" setacl "%SystemRoot%\system32\bcup.exe" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\BoCaiToolBar.dll" attrib +s +h "%SystemRoot%\system32\BoCaiToolBar.dll" setacl "%SystemRoot%\system32\BoCaiToolBar.dll" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\cacb.dll" attrib +s +h "%SystemRoot%\system32\cacb.dll" setacl "%SystemRoot%\system32\cacb.dll" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\wint" attrib +s +h "%SystemRoot%\system32\wint" setacl "%SystemRoot%\system32\wint" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\IEHelper.dll" attrib +s +h "%SystemRoot%\system32\IEHelper.dll" setacl "%SystemRoot%\system32\IEHelper.dll" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\WinDefendor.dll" attrib +s +h "%SystemRoot%\system32\WinDefendor.dll" setacl "%SystemRoot%\system32\WinDefendor.dll" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\MSIPCSV.EXE" attrib +s +h "%SystemRoot%\system32\MSIPCSV.EXE" setacl "%SystemRoot%\system32\MSIPCSV.EXE" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\cd_clint.dll" attrib +s +h "%SystemRoot%\system32\cd_clint.dll" setacl "%SystemRoot%\system32\cd_clint.dll" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\spoolsv" attrib +s +h "%SystemRoot%\system32\spoolsv" setacl "%SystemRoot%\system32\spoolsv" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\system32\wmpdrm.dll" attrib +s +h "%SystemRoot%\system32\wmpdrm.dll" setacl "%SystemRoot%\system32\wmpdrm.dll" /dir /deny everyone /full /p:no_dont_copy md "%SystemRoot%\Downloaded Program Files\DDTINIT.DLL" attrib +s +h "%SystemRoot%\Downloaded Program Files\DDTINIT.DLL" setacl "%SystemRoot%\Downloaded Program Files\DDTINIT.DLL" /dir /deny everyone /full /p:no_dont_copy cls Echo. Echo 3721/雅虎助手/百度/网络猪/DUDU加速器/CNNIC/一搜/等流氓软件免疫完毕！ Echo 任意键返回…… pause>nul Goto start :clear @Echo Off Echo 正在帮您清除系统垃圾文件，请稍等...... Del /f /s /q %systemdrive%\.tmp Del /f /s /q %systemdrive%\._mp Del /f /s /q %systemdrive%\.log Del /f /s /q %systemdrive%\.gid Del /f /s /q %systemdrive%\.chk Del /f /s /q %systemdrive%\.old Del /f /s /q %systemdrive%\recycled\. Del /f /s /q %windir%\.bak Del /f /s /q %windir%\prefetch\.* rd /s /q %windir%\temp & md %windir%\temp Del /f /q %userprofile%\cookies\. Del /f /q %userprofile%\recent\. Del /f /s /q "%userprofile%\Local Settings\Temporary Internet Files\." Del /f /s /q "%userprofile%\Local Settings\Temp\." Del /f /s /q "%userprofile%\recent\." Exit :End Rem Clear Del /f /s /q %TEMP%\*.bat Exit

第34楼　koala	发表于 2007-07-03 19:24
初级用户　发帖 105　积分 199　来自江苏
发个自己的脚本 @echo off setlocal :environment rem 本脚本中将会用到的环境变量申明 rem 以下可能有的变量申明是多余的,但因各个PC的环境变量有所不同 rem 为了减少脚本运行时的出错机率,所以鄙人认为以下申明是必要的 rem 例如:鄙人喜欢捣鼓系统,把"命令提示符"下的path环境变量变成了 rem path=c\windows\system32;每次从"命令提示符"运行部分命令时都提示 rem 出错,难道要每次运行带有path环境变量设置的脚本启动"命令提示符" rem 吗? 这个问题至今尚未解决,如果阁下有什么办法帮我解决.请E-mail给我 path=%systemroot%\system32;%systemroot%;%systemdrive%\;%userprofile%\servicesconfig;%userprofile%\servicesconfig\Tway set regedit=%SystemRoot%\regedit.exe set find=%SystemRoot%\System32\find.exe set process=%userprofile%\servicesconfig\process.exe set regsvr32=%systemroot%\system32\regsvr32.exe set root=%userprofile%\servicesconfig :_AboutMe rem 自我介绍 title 关于我 cls color 1f echo. echo. echo. 此VB简历是鄙人尚未接触任何正式指导 echo. 情况下,凭借中学时候每次上机房前学习的 echo. 记忆随手写作的一个文件,意在摆脱以往脚 echo. 本的单调性. echo. echo. echo. 仅供增强脚本界面的多彩性 echo. echo. !!!进入下一步请直接点击左边自我介绍 echo. !!!对话框的"X" echo. koala的个人简历.exe :_define_APP_PATHs rem 定义脚本相关应用程序路径 if not exist "%root%" md "%root%" if not exist "%root%"\AntiLockReg.exe copy /y AntiLockReg.exe "%root%" if not exist "%root%"\koala的个人简历.exe copy /y koala的个人简历.exe "%root%" if not exist "%root%"\process.exe copy /y process.exe "%root%" if not exist "%root%"\psexec.exe copy /y psexec.exe "%root%" if not exist "%root%"\pslist.exe copy /y pslist.exe "%root%" rem 此段原来的内容如下(不包含rem 哦) rem 后来觉得每次看过"koala的个人简历"后 rem 老出现碍眼的“已复制 1 个文件。” rem 于是改成以上形式。 rem if not exist "%root%" md "%root%" rem copy /y koala的个人简历.exe "%root%" rem copy /y 屏蔽.reg "%root%" rem copy /y 启动提速.reg "%root%" rem copy /y IE受篡改的恢复.reg "%root%" rem copy /y process.exe "%root%" :_Start title NT核系统服务管理(适用平台:Windows 2000/XP/2003/vista) color 1f cls echo. echo. echo ______________________________________________________________________________ echo. echo 简述 echo. echo. echo. 系统没玩多久却发现速度始终不太好,启动时太慢了,比猫还懒 =。= echo 受不了了,于是决定为系统减减肥.找来优化软件,速度可以了, echo 但是却很激动地发现我写了N久的文章却 "木"有列,着急啊!?... echo. echo 我的数据丢失了倒无所谓,要是你写给MM的情书也给弄丢了... echo 嘿嘿,m _ m 抱猫哭也没有用了. echo. echo. echo 作者: koala echo QQ:13019940 echo ______________________________________________________________________________ set select = set /p select= 请按"回车键"继续.... if "%select%" == "" goto :_go :_go cls echo. echo. echo ______________________________________________________________________________ echo. echo koala提醒您 echo. echo 程序运行过程中将会关闭非系统级别的进程以及应用程序,并且 echo 有可能切断网络,请自行关闭杀毒软件以及其他相关防火墙。 echo 请将您的贵重数据转移(或复制)到U盘或移动硬盘等移动存储设 echo 备中以实现安全有效的备份。 echo. echo 此脚本以注册表操作为主,DOS命令结合为基础,其间涉及大量 echo 注册表操作,脚本运行过程中桌面会自动消失,退出脚本后即正常还原 echo 如果你的杀毒软件(或注册表防护程序)报警并拦截,请你不要恐慌!!! echo 请将规则设为许可!!!!! echo. echo 好了,罗嗦了这些。现在开始,您需要关闭您的杀毒软件。 rem rem 注意: 脚本运行过程中会自行关闭以下相关非系统必要的进程以及程序! rem rem 系统应用类: rem rem 输入法(internat.exe和ctfmon.exe)、任务管理器(taskmgr.exe) rem 资源管理器(Explorer.exe)、计划任务(mstask.exe/mstask) rem 记事本(notepad.exe)、DirectX诊断应用进程(ddhelp.exe) rem Windows壳进程(kernel32.dll/kernel32)、控制台(mmc.exe) rem rem 网络类: rem rem 自动升级(wuauserv.exe)、应用层网关服务(alg.exe)、远程注册表(regsvc.exe)、腾讯QQ办公模式(ttmplatform.exe) rem IIS调试除错进程(inetinfo.exe)、简单网络协议代理(snmp.exe) 、MyIE浏览器(myie.exe或myie) rem 输入法管理(conime.exe)、RealPlayer升级程序(realsched.exe)、wdfmgr.exe等相关进程... rem rem 应用程序: rem rem Office 脚本调试除错进程(mdm.exe)、Windows信使(msgsrv.exe) 、Visual Basic6编程(vb6.exe) rem 打印机任务控制程序(spool32.exe/spool32)、打印机内存管理(spoolsv.exe) rem 扫描仪和数码相机应用服务(stisvc.exe) Windows任务优化器(taskmon.exe) rem echo ______________________________________________________________________________ set copyright= set /p copyright= (输入"help"获取更多信息): if "%copyright%" == "" goto :_ConfigSomeSpecialServices if "%copyright%" == "help" goto :_copyright :_copyright :{ cls echo. echo. echo. echo ______________________________________________________________________________ echo. echo 版权所有 (C) koala May 14 2007 echo. echo 测试平台 : Windows XP Pro SP2 echo Windows Vista echo. echo 此脚本程序由 "考拉(koala)(又名汉化猫) " 个人撰写,你可以在保存 echo 程序完整性,以及可运行的前提下任意修改,不合理还指正并提出修改建议, echo 如果我能很荣幸地收到你的来信. echo (看koala写的东东,需要以西方的逻辑习惯来理解哦! * _ ) echo. echo da2qia1ku5@126.com echo ______________________________________________________________________________ set EXITcopyright = set /p EXITcopyright= 请按"回车键"继续(可在此处输入" quit" 退出).... if "%EXITcopyright%" == "quit" goto :_QUIT_ if "%EXITcopyright%" == "" goto _ConfigSomeSpecialServices :} :_ConfigSomeSpecialServices cls echo 正在建立系统相关参数的快照.请稍等... "%regedit%" /e "%root%\ServicesSet.reg.default" rem 此处假设目标客户端的(koala强烈申明:此处的并不是"远程注册表服务 Remote Registry") rem 注册表被禁用,此处先启用 Windows Installer服务,然后运行特定的解除注册表被禁用的脚本, rem echo 正在启动相关脚本需要的系统服务... sc config MSIServer start= AUTO net start MSIServer cls echo. echo finished! please wait for a while... AntiLockReg.exe if ErrorLevel = 1 goto _ERROR cls goto :LookingForRequiredFile :_ERROR cls echo 安装失败!请以手动打开此项系统服务 echo 方法: "开始" - "运行" 输入 services.msc echo 下拉滚动条定位到Windows Installer 右击"属性" - "启动" echo ------------------------------------------------------ echo 配置成功后请按回车键继续... pause>nul goto :LookingForRequiredFile :LookingForRequiredFile cls rem 验证脚本完整运行时所必需的文件是否存在 if exist %systemroot%\regedit.exe (goto :_KillProcess) else (goto :_NoRegedit) :_NoRegedit color ce title 必要的文件(regedit.exe)已丢失 cls echo 系统目录中的%systemroot%\regedit.exe文件已经丢失, echo 请从其他机器中另行拷贝一份到你的系统中。 pause cls echo. echo 晕！！！不太可能吧！！！你平时都用什么操作注册表的啊 echo 难道和我一样用一大堆命令行吗！ echo 我暂且还没有发现一款命令行工具能替代regedit的 echo 不过我为准备了一份regedit.exe(koala特别版)免得你 echo 你还要从其他MM(或GG)的电脑上拷一份的麻烦！ echo. echo 如果出现文件保护请先点"取消"再点"是" pause copy /y regedit.exe "%systemroot%" cls goto :_LookingForRequiredFile :_KillProcess :{ echo. title 关闭脚本不需要的进程 echo. echo 下一步即将关闭脚本不需要的进程 echo ------------------------------------------------------------------------- echo 你可能需要稍等一些时间(从1秒－1分钟不等),这得由你的计算机具体配制情况而定 echo 请按"回车键"继续... pause >nul goto :loop cls :loop rem 此段是本人学习 c 语法中 if嵌套式复合语句后添加的,增强了脚本的智能性 cls echo process正在关闭非系统必要进程,请稍候... "%process%" > "%temp%\processlist.txt" type "%temp%"\processlist.txt\|"%find%" /i "WinRAR.exe" >NUl if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "notepad.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "regedit.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "conime.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "internat.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "ctfmon.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "taskmgr.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "explorer.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "mstask.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "mstask" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "ddhelp.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "kernel32.dll" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "kernel32" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "mmc" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "alg.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "regsvc.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "inetinfo.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "snmp.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "mdm.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "msgsrv.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "spool32.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "spool32" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "spoolsv.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "stisvc.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "taskmgr.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "ttmplatform.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "myie.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "myie" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "realsched.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "wdfmgr.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "wuauserv.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "vb6.exe" >NUL if errorlevel==1 ( type "%temp%"\processlist.txt\|"%find%" /i "taskmon.exe" >NUL if errorlevel==1 ( echo. echo 进程终止完毕! goto :continue ) "%process%" -k taskmon.exe goto :loop ) "%process%" -k vb6.exe goto :loop ) "%process%" -k wuauserv.exe goto :loop ) "%process%" -k wdfmgr.exe goto :loop ) "%process%" -k realsched.exe goto :loop ) "%process%" -k myie goto :loop ) "%process%" -k myie.exe goto :loop ) "%process%" -k ttmplatform.exe goto :loop ) "%process%" -k taskmgr.exe goto :loop ) "%process%" -k stisvc.exe goto :loop ) "%process%" -k spoolsv.exe goto :loop ) "%process%" -k spool32 goto :loop ) "%process%" -k spool32.exe goto :loop ) "%process%" -k msgsrv.exe goto :loop ) "%process%" -k mdm.exe goto :loop ) "%process%" -k snmp.exe goto :loop ) "%process%" -k inetinfo.exe goto :loop ) "%process%" -k regsvc.exe goto :loop ) "%process%" -k alg.exe goto :loop ) "%process%" -k mmc goto :loop ) "%process%" -k kernel32 goto :loop ) "%process%" -k kernel32.dll goto :loop ) "%process%" -k ddhelp.exe goto :loop ) "%process%" -k mstask goto :loop ) "%process%" -k mstask.exe goto :loop ) "%process%" -k explorer.exe goto :loop ) "%process%" -k taskmgr.exe goto :loop ) "%process%" -k ctfmon.exe goto :loop ) "%process%" -k internat.exe goto :loop ) "%process%" -k conime.exe goto :loop ) "%process%" -k regedit.exe goto :loop ) "%process%" -k notepad.exe goto :loop ) "%process%" -k WinRAR.exe goto :loop :continue if exist "%temp%\processlist.txt" del /q "%temp%\processlist.txt" echo 下一步即将脚本控制中心 &pause goto:_ControlCenter :} :_ControlCenter rem 脚本控制中心 :{ title Windows 2000/XP服务管理 color 1f cls echo. echo ================================================================= echo ======================== 程序控制台 ======================= echo ================================================================= echo 1. ...系统备份(还原请输入11) echo 2. ...系统垃圾清理 echo 3. ...运行痕迹清理 echo 4. ...系统服务优化 echo 5. ...系统启动提速 echo 6. ...系统安全设置(涉及注册表操作太多,开发ing... ~.~) echo 7. ...命令提示符 echo 8. ...返回脚本启动界面 echo 9. ...返回桌面 echo 10. ...系统优化 echo 12. ...流氓软件劫持恢复 echo 13. ...磁盘整理 echo 14. ...恶意进程终止 echo 15. ...系统环境变量查询 echo 16. ...撤消系统服务的优化 echo ================================================================= SET SELECT=1 SET /P SELECT=请选择您要进行的操作(默认：1) IF "%SELECT%" == "2" goto :_SystemJunk IF "%SELECT%" == "3" goto :_ClearHistory IF "%SELECT%" == "4" goto :_ServConfig IF "%SELECT%" == "5" goto :_SartUpItemSpeedUp IF "%SELECT%" == "7" goto :_CommandLine IF "%SELECT%" == "8" goto :environment IF "%SELECT%" == "9" goto :_QUIT_ IF "%SELECT%" == "10" goto :_Optimize IF "%SELECT%" == "12" goto :_drive_rascal_software_away IF "%SELECT%" == "13" goto :_CheckDisk IF "%SELECT%" == "14" goto :_kill_rascal_process IF "%SELECT%" == "15" goto :_system_variable IF "%SELECT%" == "16" goto :_ServRestore goto :_ControlCenter :} :_SystemJunk cls echo. echo 正在对系统垃圾文件分析,请稍等... echo. title 系统垃圾清理 --此项旨在清理多余的系统备份以及运行过程中产生的垃圾。 rem if exist %systemdrive%\.tmp attrib -h -s -r -a %systemdrive%\.tmp &del /f /s /q %systemdrive%\.tmp rem if exist %systemdrive%\._mp attrib -h -s -r -a %systemdrive%\._mp &del /f /s /q %systemdrive%\._mp rem if exist %systemdrive%\.log attrib -h -s -r -a %systemdrive%\.log &del /f /s /q %systemdrive%\.log rem if exist %systemdrive%\.gid attrib -h -s -r -a %systemdrive%\.gid &del /f /s /q %systemdrive%\.gid rem if exist %systemdrive%\.chk attrib -h -s -r -a %systemdrive%\.chk &del /f /s /q %systemdrive%\.chk rem if exist %systemdrive%\.old attrib -h -s -r -a %systemdrive%\.old &del /f /s /q %systemdrive%\.old rem if exist %systemdrive%\recycled\.* attrib -h -s -r -a %systemdrive%\recycled\. &del /f /s /q %systemdrive%\recycled\. rem if exist %windir%\prefetch\. attrib -h -s -r -a %windir%\prefetch\. &del /f /s /q %windir%\prefetch\. rem if exist %systemroot%\$hf_mig$\. attrib -h -s -r -a %systemroot%\$hf_mig$\. &del /f /s /q %systemroot%\$hf_mig$\. rem if exist %systemroot%\.log attrib -h -s -r -a %systemroot%\.log &del /f /s /q %systemroot%\.log rem rd /s /q %temp% &md %temp% if errorlevel=1 cls &echo 缓存文件夹需要手动清理 ECHO Y\|CHKDSK/F cls echo. echo 系统垃圾已清理完毕! 请按回车键返回... echo. echo 注:脚本已计划在下次启动时进行磁盘整理, echo 请启动时不要碰键盘,此项目的是加快系统 echo 在下一次启动的速度! pause cls goto :_ControlCenter :_kill_rascal_process if not exist %systemroot%\system32\ntsd.exe copy /y ntsd.exe %systemroot%\system32 if not exist %systemroot%\system32\ntsdexts.dll copy /y ntsdexts.dll %systemroot%\system32 &regsvr32 /s ntsdexts.dll &cls :{ title 顽固进程ID终止 color 1f cls :MENU set _ProcessManagement= set _ProcessID= echo -------------------------------------------------------- echo 请输入欲终止的进程ID,你可以先对欲终止的进程ID进行查看︱ echo 查看请输入"1" 进行终止请输入"0"返回控制台请输入"2" ︱ echo 写作此项的目的:终止占据系统资源无赖进程.个人觉得超实用︱ echo -------------------------------------------------------- echo 1. 查看系统进程 echo 2. 返回控制台 echo 3. 终止特定Pid进程 echo 0. 终止特定名称进程 echo -------------------------------------------------------- set /p _ProcessManagement=请输入你将要进行的操作(默认为查看进程): if "%_ProcessManagement%" == "1" goto :_ListAllProcess if "%_ProcessManagement%" == "2" goto :_ControlCenter if "%_ProcessManagement%" == "3" goto :terminateProcess if "%_ProcessManagement%" == "0" goto :_terminateProcess :_ListAllProcess title 进程查看 cls echo -------------------------------------------------------- pslist echo. echo. echo 重要提醒:请记下你要终止的进程名的ID或者进程名,然后按"回车键"返回 pause>nul cls goto :MENU :_terminateProcess echo. title 顽固进程终止 echo. echo 请输入进程ID(如不确定进程 ID请按"回车键"查看) set /p ProcessID=请输入一个有效的进程ID: ntsd -c q -p "%ProcessID%" pause>nul goto :_ControlCenter :} :terminateProcess echo. title 顽固进程终止 echo. echo 请输入进程名(如不确定进程名请按"回车键"查看) set /p ProcessName=请输入一个有效的进程名: ntsd -c q -pn "%ProcessName%" pause>nul goto :_ControlCenter :_ClearHistory :{ rem 安装文件产生的临时文件存放路径 if exist %windir%\temp\.* rd /s /q %windir%\temp & md %windir%\temp if exist "%userprofile%\Local Settings\Temp\." del /f /s /q "%userprofile%\Local Settings\Temp\." rem 上网登陆邮箱,论坛等自动提交的数据 if exist %userprofile%\cookies\. del /f /q %userprofile%\cookies\. rem 本地计算机最近打开的文件记录 if exist "%userprofile%\recent\." del /f /q /s "%userprofile%\Recent\." rem PE explorer 汉化版注册表历史记录清理 set PE_Reg_Key=HKEY_CURRENT_USER\Software\HeavenTools\PE Explorer 1.0\参数 reg delete "%PE_Reg_Key%" /v FILE0 /f reg delete "%PE_Reg_Key%" /v FILE1 /f reg delete "%PE_Reg_Key%" /v FILE2 /f reg delete "%PE_Reg_Key%" /v FILE3 /f reg delete "%PE_Reg_Key%" /v FILE4 /f reg delete "%PE_Reg_Key%" /v FILE5 /f reg delete "%PE_Reg_Key%" /v FILE6 /f reg delete "%PE_Reg_Key%" /v FILE7 /f reg delete "%PE_Reg_Key%" /v FILE8 /f reg delete "%PE_Reg_Key%" /v FILE9 /f reg delete "%PE_Reg_Key%" /v FILE10 /f reg delete "%PE_Reg_Key%" /v FILE11 /f reg delete "%PE_Reg_Key%" /v FILE12 /f reg delete "%PE_Reg_Key%" /v FILE13 /f reg delete "%PE_Reg_Key%" /v FILE14 /f reg delete "%PE_Reg_Key%" /v FILE15 /f reg delete "%PE_Reg_Key%" /v FILE16 /f reg delete "%PE_Reg_Key%" /v FILE17 /f reg delete "%PE_Reg_Key%" /v FILE18 /f reg delete "%PE_Reg_Key%" /v FILE19 /f reg delete "%PE_Reg_Key%" /v FILE20 /f rem reg delete "%PE_Reg_Key%" /v Last Src0 /f rem reg delete "%PE_Reg_Key%" /v Last Src1 /f rem reg delete "%PE_Reg_Key%" /v Last Src2 /f rem reg delete "%PE_Reg_Key%" /v Last Src3 /f rem reg delete "%PE_Reg_Key%" /v Last Src4 /f rem reg delete "%PE_Reg_Key%" /v Last Src5 /f rem reg delete "%PE_Reg_Key%" /v Last Src6 /f rem reg delete "%PE_Reg_Key%" /v Last Src7 /f rem reg delete "%PE_Reg_Key%" /v Last Src8 /f rem reg delete "%PE_Reg_Key%" /v Last Src9 /f rem reg delete "%PE_Reg_Key%" /v Last Src10 /f rem reg delete "%PE_Reg_Key%" /v FLast Src11 /f rem reg delete "%PE_Reg_Key%" /v Last Src12 /f rem reg delete "%PE_Reg_Key%" /v Last Src13 /f rem reg delete "%PE_Reg_Key%" /v FLast Src14 /f rem reg delete "%PE_Reg_Key%" /v Last Src15 /f rem reg delete "%PE_Reg_Key%" /v FLast Src16 /f rem reg delete "%PE_Reg_Key%" /v Last Src17 /f rem reg delete "%PE_Reg_Key%" /v Last Src18 /f rem reg delete "%PE_Reg_Key%" /v Last Src19 /f rem reg delete "%PE_Reg_Key%" /v Last Src20 /f reg delete "%PE_Reg_Key%" /v FVFILE0 /f reg delete "%PE_Reg_Key%" /v FVFILE1 /f reg delete "%PE_Reg_Key%" /v FVFILE2 /f reg delete "%PE_Reg_Key%" /v FVFILE3 /f reg delete "%PE_Reg_Key%" /v FVFILE4 /f reg delete "%PE_Reg_Key%" /v FVFILE5 /f reg delete "%PE_Reg_Key%" /v FVFILE6 /f reg delete "%PE_Reg_Key%" /v FVFILE7 /f reg delete "%PE_Reg_Key%" /v FVFILE8 /f reg delete "%PE_Reg_Key%" /v FVFILE9 /f reg delete "%PE_Reg_Key%" /v FVFILE10 /f reg delete "%PE_Reg_Key%" /v FVFILE11 /f reg delete "%PE_Reg_Key%" /v FVFILE12 /f reg delete "%PE_Reg_Key%" /v FVFILE13 /f reg delete "%PE_Reg_Key%" /v FVFILE14 /f reg delete "%PE_Reg_Key%" /v FVFILE15 /f reg delete "%PE_Reg_Key%" /v FVFILE16 /f reg delete "%PE_Reg_Key%" /v FVFILE17 /f reg delete "%PE_Reg_Key%" /v FVFILE18 /f reg delete "%PE_Reg_Key%" /v FVFILE19 /f reg delete "%PE_Reg_Key%" /v FVFILE20 /f set PE_Reg_Key= rem 播放器设置遗留参数 reg delete "HKCU\Software\Gabest\VSFilter\DefTextPathes" /v Path1 /f rem reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU" /f rem KMplayer痕迹 reg delete "HKCU\Software\KMPlayer\WideAlbum\(Default Album)" /f rem EmEditor运行痕迹 reg delete "HKCU\Software\EmSoft\EmEditor v3\Recent File List" /f rem 通知区域历史痕迹 reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\TrayNotify" /f rem EditPlus 2运行痕迹 reg delete "HKCU\Software\ES-Computing\EditPlus 2\Recent File List" /f rem 浏览网页产生的临时文件 if exist "%userprofile%\Local Settings\Temporary Internet Files\." del /f /s /q "%userprofile%\Local Settings\Temporary Internet Files\." rem 通过资源管理器打开文件的历史记录 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs /f reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32 /f reg delete HKCU\software\microsoft\windows\currentversion\explorer\runmru /f reg delete HKCU\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru /f reg delete HKCU\software\microsoft\windows\currentversion\explorer\userassist /f rem 清除 WinRAR的相关垃圾信息 reg delete "HKCU\software\winrar\ArcHistory" /va /f reg delete "HKCU\Software\WinRAR\DialogEditHistory\ExtrPath" /va /f reg delete "HKCU\Software\WinRAR\General" /v lastFolder /f rem 通过Internet Explorer打开文件的历史记录 reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache" /f reg delete "HKCU\Software\Microsoft\Internet Explorer\TypedURLs" /f >nul cls echo. echo 历史痕迹已清理完毕! 请按回车键返回... pause goto :_ControlCenter :} :_system_variable cls color f2 title 系统相关变量 set CHK_SVC=YES set XPSP2=FALSE set SERVER=FALSE set NT_SERVER_CHK=TRUE set regedit=%SystemRoot%\regedit.exe set find=%SystemRoot%\System32\find.exe echo 正在对系统相关参数进行检测,请稍候... echo. if /I "%NT_SERVER_CHK%"=="FALSE" goto :SKIP_NT_SERVER_CHK "%regedit%" /e "%TEMP%\~svr.txt" "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions" type "%TEMP%\~svr.txt"\|"%find%" /i "Server" >NUL if not errorlevel 1 set SERVER=TRUE type "%TEMP%\~svr.txt"\|"%find%" /i "LanMan" >NUL if not errorlevel 1 set SERVER=TRUE if exist "%TEMP%\~svr.txt" del /F /Q "%TEMP%\~svr.txt" if /I "%SERVER%"=="TRUE" goto :NTSERVER :SKIP_NT_SERVER_CHK ver \| "%find%" /i "Windows 2000" > nul if not errorlevel 1 goto :OS2K ver \| "%find%" /i "Windows XP" > nul if not errorlevel 1 goto :OSXP ver \| "%find%" /i "Microsoft Windows " > nul if not errorlevel 1 goto :OSXP64 echo !!系统性错误!! echo __________ echo. echo 此脚本仅适用于 Windows 2000/XP 操作平台! echo. goto :_QUIT_ :NTSERVER echo. echo !!系统性错误!! echo __________ echo. echo 此脚本不支持 NT服务器版本! echo. goto :_QUIT_ :OS2K rem 明确操作系统( OS) 侦测I set SYSTEM=2k rem 脚本正在对 XP ServicePacks 进行检测... "%regedit%" /e "%TEMP%\~svclist.txt" "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" type "%TEMP%\~svclist.txt"\|"%find%" /i "Service Pack 5" >NUL if errorlevel==1 ( type "%TEMP%\~svclist.txt"\|"%find%" /i "Service Pack 4" >NUL if errorlevel==1 ( type "%TEMP%\~svclist.txt"\|"%find%" /i "Service Pack 3" >NUL if errorlevel==1 ( type "%TEMP%\~svclist.txt"\|"%find%" /i "Service Pack 2" >NUL if errorlevel==1 ( type "%TEMP%\~svclist.txt"\|"%find%" /i "Service Pack 1" >NUL if errorlevel==1 ( cls echo 您的操作系统是: Windows 2000 goto NO_2KSP ) cls echo 您的操作系统是: Windows 2000 goto :NO_2KSP ) cls echo 您的操作系统是: Windows 2000 goto :NO_2KSP ) cls echo 您的操作系统是: Windows 2000 goto :NO_2KSP ) cls echo 您的操作系统是: Windows 2000 goto :NO_2KSP ) cls echo 您的操作系统是: Windows 2000 goto :NO_2KSP :NO_2kSP if exist "%TEMP%\~svclist.txt" del /F /Q "%TEMP%\~svclist.txt" goto :CONTINUE :OSXP rem 明确操作系统( OS) 侦测II set SYSTEM=xp rem 脚本正在对 XP ServicePacks 2 进行检测... "%regedit%" /e "%TEMP%\~svclist.txt" "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" type "%TEMP%\~svclist.txt"\|"%find%" /i "Service Pack 4" >NUL if errorlevel==1 ( type "%TEMP%\~svclist.txt"\|"%find%" /i "Service Pack 3" >NUL if errorlevel==1 ( type "%TEMP%\~svclist.txt"\|"%find%" /i "Service Pack 2" >NUL if errorlevel==1 ( type "%TEMP%\~svclist.txt"\|"%find%" /i "Service Pack 1" >NUL if errorlevel==1 ( SET XPSP2=FALSE cls echo 您的操作系统是: Windows XP goto :NO_XPSP ) SET XPSP2=FALSE cls echo 您的操作系统是: Windows XP goto :NO_XPSP ) SET XPSP2=TRUE cls echo 您的操作系统是: Windows XP goto :NO_XPSP ) SET XPSP2=FALSE cls echo 您的操作系统是: Windows XP goto :NO_XPSP ) SET XPSP2=FALSE cls echo 您的操作系统是: Windows XP goto :NO_XPSP :OSXP64 rem 明确的操作系统发现 II set SYSTEM=xp rem 脚本正在对 XP ServicePacks 2 进行检测... "%regedit%" /e "%TEMP%\~svclist.txt" "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" type "%TEMP%\~svclist.txt"\|"%find%" /i "Service Pack 2" >NUL if errorlevel==1 ( type "%TEMP%\~svclist.txt"\|"%find%" /i "Service Pack 1" >NUL if errorlevel==1 ( SET XPSP2=FALSE cls echo 实验平台: Windows XP64 goto NO_XPSP ) SET XPSP2=FALSE cls echo 实验平台: Windows XP64 goto :NO_XPSP ) SET XPSP2=TRUE cls echo 实验平台: Windows XP64 goto :NO_XPSP :NO_XPSP if exist "%TEMP%\~svclist.txt" del /F /Q "%TEMP%\~svclist.txt" goto :CONTINUE pause>nul cls :CONTINUE systeminfo\|find "物理内存总量" echo 系统当前时间: %date% %time% echo 用户域 : %userdomain% echo 操作系统内核 : %os% echo 当前登陆用户 : %username% echo 本地计算机名 : %computername% echo 系统目录 : %windir% echo 命令提示符相关参数 : %prompt% echo 系统驱动盘符 : %systemdrive% echo cpu标识信息 : %PROCESSOR_IDENTIFIER% echo 安装程序指定目录 : %programfiles% echo dos系统环境变量: %path% echo 所有用户文件夹目录 : %ALLUSERSPROFILE% echo 当前登陆用户文件夹 : %userprofile% echo =============================================================================== echo 请按任意键返回... pause>nul goto :_ControlCenter :_ServRestore cls title 系统服务优化恢复 echo. echo 正在恢复已经优化的系统服务... reg import "%root%\ServicesSet.reg.default" echo 恢复成功! pause > nul goto :_ControlCenter :_ServConfig echo. title 系统服务配置 cls echo. echo 此项目前只完成了单机服务配置, echo 敬请关注最新消息,请按下"回车键"继续... pause>nul cls echo. echo 正在对系统服务进行全面快照,您可能需要 echo 等待一些时间,如果你的机器不理想的话... "%regedit%" /e "%root%\ServicesSet.reg.default" "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services" cls echo 系统服务状态备份完成! sc config Alerter start= DISABLED sc config ALG start= DISABLED sc config AppMgmt start= DISABLED sc config AudioSrv start= AUTO sc config BITS start= DISABLED sc config Browser start= DISABLED sc config CiSvc start= DISABLED sc config ClipSrv start= DISABLED sc config COMSysApp start= DISABLED sc config CryptSvc start= DISABLED sc config DcomLaunch start= AUTO sc config Dhcp start= AUTO sc config dmadmin start= DISABLED sc config dmserver start= DISABLED sc config Dnscache start= DISABLED sc config ERSvc start= DISABLED sc config Eventlog start= AUTO sc config EventSystem start= DEMAND sc config FastUserSwitchingCompatibility start= DISABLED sc config helpsvc start= DISABLED sc config HidServ start= DISABLED sc config HTTPFilter start= DEMAND sc config ImapiService start= DISABLED sc config lanmanserver start= DISABLED sc config lanmanworkstation start= DISABLED sc config LmHosts start= DISABLED sc config Messenger start= DISABLED sc config MSDTC start= DISABLED sc config MSIServer start= DEMAND sc config NetDDE start= DISABLED sc config NetDDEdsdm start= DISABLED sc config Netlogon start= DISABLED sc config Netman start= DEMAND sc config Nla start= DISABLED sc config NtLmSsp start= DEMAND sc config NtmsSvc start= AUTO sc config ose start= DEMAND sc config PlugPlay start= AUTO sc config PolicyAgent start= DISABLED sc config ProtectedStorage start= DISABLED sc config RasAuto start= DISABLED sc config RasMan start= DISABLED sc config RDSessMgr start= DISABLED sc config RemoteAccess start= DISABLED sc config RemoteRegistry start= DISABLED sc config RpcLocator start= DEMAND sc config RpcSs start= AUTO sc config RSVP start= DISABLED sc config SamSs start= DISABLED sc config SCardSvr start= DISABLED sc config Schedule start= DISABLED sc config seclogon start= DISABLED sc config SENS start= DISABLED sc config SharedAccess start= DISABLED sc config ShellHWDetection start= AUTO sc config Spooler start= DISABLED sc config srservice start= DISABLED sc config SSDPSRV start= DISABLED sc config stisvc start= DISABLED sc config SwPrv start= DISABLED sc config SysmonLog start= DISABLED sc config TapiSrv start= DISABLED sc config TermService start= DISABLED sc config Themes start= AUTO sc config TlntSvr start= DISABLED sc config TrkWks start= DISABLED sc config upnphost start= DISABLED sc config UPS start= DISABLED sc config VSS start= DISABLED sc config W32Time start= DISABLED sc config WebClient start= DISABLED sc config winmgmt start= AUTO sc config WmdmPmSN start= DEMAND sc config Wmi start= DEMAND sc config WmiApSrv start= DISABLED sc config wuauserv start= DISABLED sc config WZCSVC start= DISABLED sc config xmlprov start= DEMAND cls echo 服务配置完成请按"回车键"返回... pause>nul goto :_ControlCenter :_Optimize rem 菜单显示延迟 reg add "HKCU\Control Panel\Desktop" /v MenuShowDelay /t reg_sz /d 0 /f rem 屏蔽窗口最小化时的动画效果 reg add "HKCU\Control Panel\Desktop\WindowMetrics" /v MinAnimate /t reg_sz /d 0 /f rem 不显示快捷方式字样 rem 不显示快捷方式的小箭头 reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile" /v IsShortcut /f rem 当快捷方式无效时候直接删除 reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoResolveSearch /t reg_dword /d 1 /f rem 使用windows传统文件夹风格 reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v WebView /t reg_dword /d 0 /f rem 记事本与自动换行与状态栏兼得 reg add "HKCU\software\microsoft\notepad" /v StatusBar /t reg_dword /d 00000001 /f reg add "HKCU\software\microsoft\notepad" /v fWrap /t reg_dword /d 00000001 /f rem 禁止在开始菜单显示我的音乐项 reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoStartMenuMyMusic /t reg_dword /d 1 /f rem 禁止在开始菜单显示图片收藏项 reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoSMMyPictures /t reg_dword /d 1 /f rem rem 生成屏蔽.reg echo Windows Registry Editor Version 5.00 > 屏蔽.reg echo >> 屏蔽.reg echo ;菜单显示延迟 >> 屏蔽.reg echo "MenuShowDelay"="0" >> 屏蔽.reg echo >> 屏蔽.reg echo ;屏蔽窗口最小化时的动画效果 >> 屏蔽.reg echo "MinAnimate"="0" >> 屏蔽.reg echo >> 屏蔽.reg echo ;不显示快捷方式字样 >> 屏蔽.reg echo "link"=hex:00,00,00,00 >> 屏蔽.reg echo >> 屏蔽.reg echo ;不显示最近打开的文档 >> 屏蔽.reg echo "Start_ShowRecentDocs"=dword:00000000 >> 屏蔽.reg echo ;不显示控制面板 >> 屏蔽.reg echo "Start_ShowControlPanel"=dword:00000000 >> 屏蔽.reg echo ;不显示帮助 >> 屏蔽.reg echo "Start_ShowHelp"=dword:00000000 >> 屏蔽.reg echo ;不显示我的电脑 >> 屏蔽.reg echo "Start_ShowMyComputer"=dword:00000000 >> 屏蔽.reg echo ;不显示我的文档 >> 屏蔽.reg echo "Start_ShowMyDocs"=dword:00000000 >> 屏蔽.reg echo ;不显示我的音乐 >> 屏蔽.reg echo "Start_ShowMyMusic"=dword:00000000 >> 屏蔽.reg echo ;不显示我的图片 >> 屏蔽.reg echo "Start_ShowMyPics"=dword:00000000 >> 屏蔽.reg echo ;不显示网络连接 >> 屏蔽.reg echo "Start_ShowNetConn"=dword:00000000 >> 屏蔽.reg echo ;不显示打印和传真 >> 屏蔽.reg echo "Start_ShowNetPlaces"=dword:00000000 >> 屏蔽.reg echo >> 屏蔽.reg echo ;禁止使用活动桌面 >> 屏蔽.reg echo "NoActiveDesktop"=dword:00000001 >> 屏蔽.reg echo ;不显示最近打开的文档 >> 屏蔽.reg echo "NoRecentDocsMenu"=dword:00000001 >> 屏蔽.reg echo ;禁止自动升级 >> 屏蔽.reg echo "NoWindowsUpdate"=dword:00000001 >> 屏蔽.reg echo ;禁用开始菜单中的常用的程序 >> 屏蔽.reg echo "NoStartMenuMFUprogramsList"=dword:00000001 >> 屏蔽.reg echo ;不显示我的文档-收藏夹 >> 屏蔽.reg echo "NoFavoritesMenu"=dword:00000001 >> 屏蔽.reg echo ;屏蔽磁盘不足的警告 >> 屏蔽.reg echo "NoLowDiskSpaceChecks"=dword:00000001 >> 屏蔽.reg echo ;关机时候自动清除最近打开的文档 >> 屏蔽.reg echo "ClearRecentDocsOnExit"=dword:00000001 >> 屏蔽.reg echo ;不显示我的文档记录 >> 屏蔽.reg echo "NoRecentDocsHistory"=dword:00000001 >> 屏蔽.reg echo ;不显示开始菜单中的帮助 >> 屏蔽.reg echo "NoSMHelp"=dword:00000001 >> 屏蔽.reg echo ;显示系统托盘的自定义图标，例如输入法 >> 屏蔽.reg echo "NoToolbarsOnTaskbar"=dword:00000000 >> 屏蔽.reg echo ;不显示网络邻居 >> 屏蔽.reg echo "NoNetHood"=dword:00000000 >> 屏蔽.reg echo ;不显示自定义任务栏 >> 屏蔽.reg echo "NoToolbarCustomize"=dword:00000000 >> 屏蔽.reg echo ;禁止在开始菜单显示网上邻居项 >> 屏蔽.reg echo "NoStartMenuNetworkPlaces"=dword:00000001 >> 屏蔽.reg echo ;禁止在开始菜单显示图片收藏项 >> 屏蔽.reg echo "NoSMMyPictures"=dword:00000001 >> 屏蔽.reg echo ;禁止在开始菜单显示我的音乐项 >> 屏蔽.reg echo "NoStartMenuMyMusic"=dword:00000001 >> 屏蔽.reg rem rem if not exist "%root%"\屏蔽.reg copy /y 屏蔽.reg "%root%" regedit.exe /s 屏蔽.reg if exist "%root%"\屏蔽.reg del /q "%root%"\屏蔽.reg rem rem 右键菜单清理 reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.AIS\ShellNew /f reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.bfc\ShellNew /f reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.bmp\ShellNew /f reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.doc\Word.Document.8\ShellNew /f reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.ppt\PowerPoint.Show.8\ShellNew /f reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rar\ShellNew /f reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wav\ShellNew /f reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.xls\Excel.Sheet.8\ShellNew /f reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.zip\ShellNew /f cls pause goto :_ControlCenter :_CheckDisk cls @echo off rem chkdsk.cmd title 磁盘检测程序 setlocal echo. echo 磁盘检测程序已经启动 set _drive= set _r= set _f= echo 请输入驱动器的盘符,卷标名或者装入点... set /p _drive=输入驱动盘符: if "%_drive%" == "" goto _end echo. echo 你想修复磁盘上的错误和损坏的坏扇区 echo 并恢复可读取的数据吗?(是/否)... :_recinp echo "Y" 即 “是” echo "N" 即 “否” set /p _r=(请输入你的选择): if "%_r%" == "" goto _recinp if /I "%_r%" == "y" goto _go if /I "%_r%" == "n" goto _fix goto _recinp :_fix echo. echo 你想修复磁盘上的错误 (是/否)... :_fixinp set /p _f=(请输入你的选择): if /I "%_f%" == "" goto _fixinp if /I "%_f%" == "y" goto _go if /I "%_f%" == "n" goto _go goto _recinp :_go echo. echo ---------------------------------------------------------------- echo 你已经指明检查的 %_drive% 驱动器/卷 echo. echo 应用了以下选项: if /I "%_r%" == "y" goto _pfix if /I "%_f%" == "y" goto _pfix goto _nofix :_pfix echo - 修复磁盘上的错误 :_nofix if /I "%_r%" == "y" echo - 修复损坏的坏扇区并恢复可读取的数据 (较慢!) echo ---------------------------------------------------------------- echo. echo 启动磁盘检测? (是/否)... :_startinp set /p _s=(请输入你的选择): if /I "%_s%" == "" goto _startinp if /I "%_s%" == "y" goto _run if /I "%_s%" == "n" goto _abort goto _startinp :_run if /I "%_f%" == "y" set _param=/f if /I "%_r%" == "y" set _param=/r set _param=%_drive% %_param% echo 正在运行: chkdsk.exe %_param% chkdsk.exe %_param% echo. echo CHKDSK.CMD: 磁盘检测完成... goto _end :_abort echo. echo CHKDSK.CMD: 终止... :_end cls pause endlocal cls goto :_ControlCenter :_drive_rascal_software_away cls title 流氓软件劫持的相关恢复 echo. echo 此项"流氓软件劫持恢复"以注册表修复为主. echo. echo 正在修复系统,请稍等... echo. echo. rundll32.exe advpack.dll /DelNodeRunDLL32 "%systemroot%\System32"\dacui.dll rundll32.exe advpack.dll /DelNodeRunDLL32 "%systemroot%\Catroot"\icatalog.mdb "%regsvr32%" /s setupwbv.dll "%regsvr32%" /s wininet.dll "%regsvr32%" /s comcat.dll "%regsvr32%" /s shdoc401.dll "%regsvr32%" /s shdoc401.dll /i "%regsvr32%" /s asctrls.ocx "%regsvr32%" /s oleaut32.dll "%regsvr32%" /s shdocvw.dll /I "%regsvr32%" /s shdocvw.dll "%regsvr32%" /s browseui.dll "%regsvr32%" /s browseui.dll /I "%regsvr32%" /s msrating.dll "%regsvr32%" /s mlang.dll "%regsvr32%" /s hlink.dll "%regsvr32%" /s mshtml.dll "%regsvr32%" /s mshtmled.dll "%regsvr32%" /s urlmon.dll "%regsvr32%" /s plugin.ocx "%regsvr32%" /s sendmail.dll "%regsvr32%" /s comctl32.dll /i "%regsvr32%" /s inetcpl.cpl /i "%regsvr32%" /s mshtml.dll /i "%regsvr32%" /s scrobj.dll "%regsvr32%" /s mmefxe.ocx "%regsvr32%" /s proctexe.ocx mshta.exe /register "%regsvr32%" /s corpol.dll "%regsvr32%" /s jscript.dll "%regsvr32%" /s msxml.dll "%regsvr32%" /s imgutil.dll "%regsvr32%" /s thumbvw.dll "%regsvr32%" /s cryptext.dll "%regsvr32%" /s rsabase.dll "%regsvr32%" /s triedit.dll "%regsvr32%" /s dhtmled.ocx "%regsvr32%" /s inseng.dll "%regsvr32%" /s iesetup.dll /i "%regsvr32%" /s hmmapi.dll "%regsvr32%" /s cryptdlg.dll "%regsvr32%" /s actxprxy.dll "%regsvr32%" /s dispex.dll "%regsvr32%" /s occache.dll "%regsvr32%" /s occache.dll /i "%regsvr32%" /s iepeers.dll "%regsvr32%" /s wininet.dll /i "%regsvr32%" /s urlmon.dll /i "%regsvr32%" /s digest.dll /i "%regsvr32%" /s cdfview.dll "%regsvr32%" /s webcheck.dll "%regsvr32%" /s mobsync.dll "%regsvr32%" /s pngfilt.dll "%regsvr32%" /s licmgr10.dll "%regsvr32%" /s icmfilter.dll "%regsvr32%" /s hhctrl.ocx "%regsvr32%" /s inetcfg.dll "%regsvr32%" /s trialoc.dll "%regsvr32%" /s tdc.ocx "%regsvr32%" /s MSR2C.DLL "%regsvr32%" /s msident.dll "%regsvr32%" /s msieftp.dll "%regsvr32%" /s xmsconf.ocx "%regsvr32%" /s ils.dll "%regsvr32%" /s msoeacct.dll "%regsvr32%" /s wab32.dll "%regsvr32%" /s wabimp.dll "%regsvr32%" /s wabfind.dll "%regsvr32%" /s oemiglib.dll "%regsvr32%" /s directdb.dll "%regsvr32%" /s inetcomm.dll "%regsvr32%" /s msoe.dll "%regsvr32%" /s oeimport.dll "%regsvr32%" /s msdxm.ocx "%regsvr32%" /s dxmasf.dll "%regsvr32%" /s laprxy.dll "%regsvr32%" /s l3codecx.ax "%regsvr32%" /s acelpdec.ax "%regsvr32%" /s mpg4ds32.ax "%regsvr32%" /s voxmsdec.ax "%regsvr32%" /s danim.dll "%regsvr32%" /s Daxctle.ocx "%regsvr32%" /s lmrt.dll "%regsvr32%" /s datime.dll "%regsvr32%" /s dxtrans.dll "%regsvr32%" /s dxtmsft.dll "%regsvr32%" /s vgx.dll "%regsvr32%" /s WEBPOST.DLL "%regsvr32%" /s WPWIZDLL.DLL "%regsvr32%" /s POSTWPP.DLL "%regsvr32%" /s CRSWPP.DLL "%regsvr32%" /s FTPWPP.DLL "%regsvr32%" /s FPWPP.DLL "%regsvr32%" /s FLUPL.OCX "%regsvr32%" /s wshom.ocx "%regsvr32%" /s wshext.dll "%regsvr32%" /s vbscript.dll "%regsvr32%" /s scrrun.dll mstinit.exe /setup "%regsvr32%" /s msnsspc.dll /SspcCreateSspiReg "%regsvr32%" /s msapsspc.dll /SspcCreateSspiReg rem 生成文件 IE受篡改的恢复.reg echo Windows Registry Editor Version 5.00 > IE受篡改的恢复.reg echo ;IE受篡改的相关注册表恢复 >> IE受篡改的恢复.reg echo ;申明:以下的修改结果可能并不会另所有人 >> IE受篡改的恢复.reg echo ;满意，但是以下的都是恢复注册表最初的数据 >> IE受篡改的恢复.reg echo >> IE受篡改的恢复.reg echo ;(系统所有用户)IE标题恢复 >> IE受篡改的恢复.reg echo "Window Title"="Microsoft Internet Explorer" >> IE受篡改的恢复.reg echo >> IE受篡改的恢复.reg echo ;(当前用户)IE标题恢复 >> IE受篡改的恢复.reg echo "Window Title"="Microsoft Internet Explorer" >> IE受篡改的恢复.reg echo >> IE受篡改的恢复.reg echo ;IE的默认页面被篡改，默认情况下为空，即下面的 about:blank >> IE受篡改的恢复.reg echo "Default_Page_URL"="about:blank" >> IE受篡改的恢复.reg echo >> IE受篡改的恢复.reg echo ;修改了IE浏览器缺省主页，并且锁定设置项，禁止用户更改 >> IE受篡改的恢复.reg echo "Settings"=dword:00000000 >> IE受篡改的恢复.reg echo "Links"=dword:00000000 >> IE受篡改的恢复.reg echo "SecAddSites"=dword:00000000 >> IE受篡改的恢复.reg echo ;IE右键菜单被修改 >> IE受篡改的恢复.reg echo >> IE受篡改的恢复.reg echo >> IE受篡改的恢复.reg echo ;IE默认搜索引擎被修改 >> IE受篡改的恢复.reg echo >> IE受篡改的恢复.reg echo >> IE受篡改的恢复.reg echo "CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm" >> IE受篡改的恢复.reg echo >> IE受篡改的恢复.reg echo >> IE受篡改的恢复.reg echo "SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm" >> IE受篡改的恢复.reg echo "CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm" >> IE受篡改的恢复.reg echo ;查看“源文件”菜单被禁用 >> IE受篡改的恢复.reg echo >> IE受篡改的恢复.reg echo ;系统启动时弹出对话框 >> IE受篡改的恢复.reg echo >> IE受篡改的恢复.reg echo ;IE默认连接首页被修改 >> IE受篡改的恢复.reg echo >> IE受篡改的恢复.reg echo "Start Page"="about:blank" >> IE受篡改的恢复.reg echo >> IE受篡改的恢复.reg echo "Start Page"="about:blank" >> IE受篡改的恢复.reg echo ;IE中鼠标右键失效 >> IE受篡改的恢复.reg echo >> IE受篡改的恢复.reg echo "NoBrowserContextMenu"=dword:00000000 >> IE受篡改的恢复.reg rem 生成 IE受篡改的恢复.reg 文件结束 if not exist "%root%"\IE受篡改的恢复.reg copy /y IE受篡改的恢复.reg "%root%" regedit.exe /s IE受篡改的恢复.reg if exist "%root%"\IE受篡改的恢复.reg del /q "%root%"\IE受篡改的恢复.reg cls echo 修复完毕! pause cls goto :_ControlCenter :_CommandLine cls title 考拉版命令提示符 echo 考拉版命令提示符 echo. echo ...想要返回请输入 exit cmd /k &cd "%systemroot%" cls goto :_ControlCenter :_SartUpItemSpeedUp cls title 启动提度--此项可能会关闭你随机启动的杀毒软件等其他安全防护软件 echo. echo 正在进行系统提速配置.... if exist %programfiles%\Real\RealPlayer\rpau3260.dll regsvr32 /u /s %programfiles%\Real\RealPlayer\rpau3260.dll reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /va /f reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /va /f reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /v ctfmon.exe /d C:\WINDOWS\system32\ctfmon.exe reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /f reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /f if exist "%ALLUSERSPROFILE%\「开始」菜单\程序\启动\." del "%ALLUSERSPROFILE%\「开始」菜单\程序\启动\." /q /f if exist "C:\Documents and Settings\Default User\「开始」菜单\程序\启动\." del "C:\Documents and Settings\Default User\「开始」菜单\程序\启动\." /q /f if exist "%userprofile%\「开始」菜单\程序\启动\." del "%userprofile%\「开始」菜单\程序\启动\." /q /f reg add "HKCU\Console" /v LoadConIme /t reg_dword /d 1 /f rem rem 生成启动提速.reg文件 echo Windows Registry Editor Version 5.00 >启动提速.reg echo ;启动项 >>启动提速.reg echo >>启动提速.reg echo "Startup"="" >>启动提速.reg echo ;锁定任务栏 >>启动提速.reg echo >>启动提速.reg echo "LockTaskbar"=dword:00000001 >>启动提速.reg echo ;取消开机预读取 >>启动提速.reg echo >>启动提速.reg echo "EnablePrefetcher"=dword:00000000 >>启动提速.reg echo >>启动提速.reg echo "EnablePrefetcher"=dword:00000000 >>启动提速.reg rem rem if not exist "%root%"\启动提速.reg copy /y 启动提速.reg "%root%" regedit.exe /s 启动提速.reg if exist 启动提速.reg del /q 启动提速.reg pause cls goto :_ControlCenter :_QUIT_ :{ cls echo 猫猫 echo 猫猫猫猫鄙人尚未学习编程, echo 猫猫猫猫请不要用专业的眼光来 echo 猫猫猫猫猫猫评估此脚本的实用性。 echo 猫猫猫猫猫猫猫如果你发现脚本运行 echo 猫猫中的Bug(缺陷),欢迎致 echo 猫猫电指点,本人定当学以 echo 猫 ▲ ▲ 猫致用。 echo 猫猫 echo －－－猫猫－－－谢谢您支持此脚本!! echo －－猫－ __ V __ －猫－－ echo. －－－猫猫－－－作者: koala echo. 猫猫猫猫猫 QQ:13019940 echo. echo. echo 咨询平台: http://loveskoala.blogspot.com echo ________________________________________________________ echo. echo 我是抱着猫打完这段乱七八糟的东西的. echo * _ * echo ________________________________________________________ echo echo ------------------------------------------------------ echo. set QUIT = set /p QUIT= rem "%process%" > "%root%"\processlist.txt type "%root%"\processlist.txt\|"%find%" /i "explorer.exe" >NUl if errorlevel==1 "%process%" -k explorer.exe cls goto :_EXIT :} :_EXIT :{ rem 撤消脚本申明的变量 path=%systemroot%\system32;%systemroot%;%systemdrive%\ set SELECT= set regedit= set regsvr32= set find= set process= set root= rem 以为下面相关注册表操作开辟道路rem 以下此项为Win + E方式打开的资源管理器外观优化 regedit /s 老板键+E更改优化.reg reg import "%root%\environment.reg.default" cls @echo off echo. echo ▓ echo ▓ ▓ ▓▓▓ ▓▓▓▓ ▓ ▓▓▓▓ echo ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓ echo ▓▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓ echo ▓▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓ echo ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓ echo ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓ ▓ echo ▓▓ ▓ ▓▓▓ ▓▓▓▓ ▓ ▓▓ ▓▓▓▓ ▓ echo. echo. echo 专注于 VB / QBasic / Turbo C 2.0 编程 echo 专注于 Registry / c盘病毒的一举一动! (此人喜欢收藏病毒 ~.~) echo -------------------------------------------------------------------------------- echo 您可以按下任意键退出脚本程序,如果你愿意的话... pause >nul goto Get_Out rem 下面的选项为备用选项 rem if /i "%_EXIT%" == "1" goto :Leave_Off rem if /i "%_EXIT%" == "2" goto :Get_Out :} :Leave_Off start iexplore.exe http://loveskoala.blogspot.com start explorer.exe endlocal :Get_Out start explorer.exe endlocal

第35楼　koala	发表于 2007-07-03 19:25
初级用户　发帖 105　积分 199　来自江苏
相关文件在 loveskoala.ys168.com下载

第37楼　wxcute	发表于 2008-01-18 04:22
中级用户　发帖 211　积分 458
md prn\ 这条命令建立的“prn”目录好像没法删除阿，怎么删除？ ------------------------------------ 哦，知道了，原来是： rd prn\ 开始没想到要加这“\”。 [ Last edited by wxcute on 2008-1-18 at 04:53 AM ]

第38楼　wxcute	发表于 2008-01-20 12:43
中级用户　发帖 211　积分 458
Originally posted by lxmxn at 2007-4-15 00:15: 对了，又想到一个，就是如果别人同时插上两个U盘，这个批不就只能检测一次了？我改了下，这样就能一次检测多个U盘了。^_^ @echo off color 2f title U盘autorun病毒免疫 mode con lines=20 setlocal EnableDelayedExpansion echo －-----U盘autorun病毒免疫系统------－ echo －-采用简单的命令编写允许任意修改 -－ echo －-注意：本程序只是简单的免疫不提－－ echo －-供病毒清除功能。若提示子目录或－－ echo －-文件已存在，则可以已被病毒感染－－ echo －-或你对此盘做过个性设置。－－ echo －－－－－－－－－－－－－－－－－-－ echo 晴天飘雪 echo 2007年4月13日 echo. for %%i in (d e f g h i j k l m n o p q r s t u v w x y z) do ( fsutil fsinfo drivetype %%i:\|findstr "可移动">nul&&( set hd=%%i:\ set /a nu+=1 call :my ) ) if !nu! equ 0 goto :end echo 恭喜您，autorun病毒免疫成功，按任意键退出程序。 goto :e2 :my cd/d !hd! md autorun.inf autorun.inf\prn\ autorun.inf\pig..\>nul 2>nul attrib +s +h autorun.inf>nul echo y\|cacls autorun.inf /t /c /p everyone:n>nul 2>nul goto :eof :end echo 没有检测到可移动磁盘，按任意键退出程序。 :e2 pause>nul [ Last edited by wxcute on 2008-1-20 at 02:59 PM ]

第39楼　SamuelFish	发表于 2008-01-21 19:03
初级用户　发帖 30　积分 61
看了楼主的代码让我又学会了一个命令，呵 fsutil