@echo off
REM 以下为关闭部分服务的命令,不足之处请各位看官自行更改!

REM [关Alerter服务]
sc stop alerter
sc config alerter start= disabled

REM [关Application Layer Gateway Service服务]
sc stop ALG
sc config ALG start= demand

REM [关Application Management服务]
sc stop AppMgmt
sc config AppMgmt start= demand

REM [关Automatic Updates服务]
sc stop wuauserv
sc config wuauserv start= disabled

REM [关ClipBook服务]
sc stop ClipSrv
sc config ClipSrv start= demand

REM [关COM+ System Application服务]
sc stop COMSysApp
sc config COMSysApp start= demand

REM [关Distributed Transaction Coordinator服务]
sc stop MSDTC
sc config MSDTC start= demand

REM [关Error Reporting Service服务]
sc stop ERSvc
sc config ERsvc start= disabled

REM [关Fast User Switching Compatibility服务]
sc stop FastUserSwitchingCompatibility
sc config FastUserSwitchingCompatibility start= disabled

REM [关Help and Support服务]
sc stop helpsvc
sc config helpsvc start= disabled

REM [关Human Interface Device Access服务]
sc stop HidServ
sc config HidServ start= disabled

REM [关IMAPI CD-Burning COM Service服务]
sc stop ImapiService
sc config ImapiService start= demand

REM [关Indexing Service服务]
sc stop CiSvc
sc config CiSvc start= demand

REM [关Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS)服务]
sc stop ShareAccess
sc config ShareAccess start= demand

REM [关Logical Disk Manager Administrative Service服务]
sc stop dmadmin
sc config dmadmin start= demand

REM [关Messenger服务]
sc stop Messenger
sc config Messenger start= disabled

REM [关MS Software Shadow Copy Provider服务]
sc stop SwPrv
sc config SwPrv start= demand

REM [关Net Logon服务]
sc stop NetLogon
sc config NetLogon start= demand

REM [关NetMeeting Remote Desktop Sharing服务]
sc stop mnmsrvc
sc config mnmsrvc start= demand

REM [关Network DDE服务]
sc stop NetDDE
sc config NetDDE start= demand

REM [关Network DDE DSDM服务]
sc stop NetDDEdsdm
sc config NetDDEdsdm start= demand

REM [关NT LM Security Support Provider服务]
sc stop NtLmSsp
sc config NtLmSsp start= demand

REM [关Performance Logs and Alerts服务]
sc stop Sysmonlog
sc config Sysmonlog start= demand

REM [关Portable Media Serial Number Service服务]
sc stop WmdmPmSN
sc config WmdmPmSN start= demand

REM [关Print Spooler服务]
sc stop Spooler
sc config Spooler start= disabled

REM [关QoS RSVP服务]
sc stop RSVP
sc config RSVP start= demand

REM [关Remote Access Auto Connection Manager服务]
sc stop RasAuto
sc config RasAuto start= demand

REM [关Remote Access Connection Manager服务]
sc stop RasMan
sc config RasMan start= demand

REM [关Remote Desktop Help Session Manager服务]
sc stop RDSessMgr
sc config RDSessMgr start= demand

REM [关Remote Procedure Call (RPC) Locator服务]
sc stop RpcLocator
sc config RpcLocator start= demand

REM [关Remote Registry服务]
sc stop RemoteRegistry
sc config RemoteRegistry start= disabled

REM [关Removable Storage服务]
sc stop NtmsSvc
sc config NtmsSvc start= demand

REM [关Routing and Remote Access服务]
sc stop RemoteAccess
sc config RemoteAccess start= disabled

REM [关Smart Card服务]
sc stop SCardSvr
sc config SCardSvr start= demand

REM [关Smart Card Helper服务]
sc stop SCardDvr
sc config SCardDvr start= demand

REM [关SSDP Discovery Service服务]
sc stop SSDPSRV
sc config SSDPSRV start= disabled

REM [关System Restore Service服务]
sc stop srservice
sc config srservice start= disabled

REM [关Task Scheduler服务]
sc stop Schedule
sc config Schedule start= disabled

REM [关Telephony服务]
sc stop TapiSrv
sc config TapiSrv start= demand

REM [关Telnet服务]
sc stop TlntSvr
sc config TlntSvr start= disabled

REM [关Themes服务]
sc stop Themes
sc config Themes start= disabled

REM [关Uninterruptible Power Supply服务]
sc stop UPS
sc config TapiSrv start= disabled

REM [关Universal Plug and Play Device Host服务]
sc stop upnphost
sc config upnphost start= demand

REM [关Volume Shadow Copy服务]
sc stop VSS
sc config VSS start= demand

REM [关Windows Installer服务]
sc stop MSIServer
sc config MSIServer start= demand

REM [关Windows Management Instrumentation Driver Extensions服务]
sc stop Wmi
sc config Wmi start= demand

REM [关Wireless Zero Configuration服务]
sc stop WZCSVC
sc config WZCSVC start= disabled

REM [关WMI Performance Adapter服务]
sc stop WmiApSrv
sc config WmiApSrv start= demand

echo **************************************************

REM 以下为优化部分注册表的命令,不足之处请各位看官自行更改!

REM [优化关机及程序结束]
echo Windows Registry Editor Version 5.00 >>abc.reg
echo [HKEY_CURRENT_USER\Control Panel\Desktop] >>abc.reg
echo "AutoEndTasks"="1" >>abc.reg
echo "WaitToKillAppTimeout"="1000" >>abc.reg
echo "HungAppTimeout"="200" >>abc.reg
echo "MenuShowDelay"="0" >>abc.reg

REM [优化预读]
echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters] >>abc.reg
echo "EnablePrefetcher"=dword:00000003 >>abc.reg

REM [关闭IPC$,慎用]
echo [HEKY_LOCAL_MACHINE\YSTEM\CurrentControlSet\Control\Lsa] >>abc.reg
echo "restrictanonymous"="1" >>abc.reg

REM [不加载多余的DLL文件]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer] >>abc.reg
echo "AlwaysUnloadDLL"=dword:00000001 >>abc.reg

REM [加快局域网访问速度]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace] >>abc.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace\{2227A280-3AEA-1069-A2DE-08002B30309D}] >>abc.reg
echo @="Printers" >>abc.reg

REM [小键盘指示灯]
echo [HKEY_CURRENT_USER\Control Panel\Keyboard] >>abc.reg
echo "InitialKeyboardIndicators"="2" >>abc.reg

REM [关闭Drwtson]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug] >>abc.reg
echo "Auto"="0" >>abc.reg

REM [取消快捷方式的箭头]
echo [HKEY_CLASSES_ROOT\lnkfile] >>abc.reg
echo @="快捷方式" >>abc.reg
echo "EditFlags"=dword:00000001 >>abc.reg
echo "NeverShowExt"="" >>abc.reg

REM [关机时自动清除开始菜单的文档记录]
echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] >>abc.reg
echo "ClearRecentDocsOnEixt"=hex:01,00,00,00 >>abc.reg
echo "NeverShowExt"="" >>abc.reg

REM [去掉默认共享]
echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters] >>abc.reg
echo "AutoShareServer"=dword:00000000 >>abc.reg
echo "AutoShareWks"=dword:00000000 >>abc.reg

REM [屏蔽任务栏的锁定计算机和更改密码]
echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] >>abc.reg
echo "DisableLockWorkstation"=dword:00000001 >>abc.reg
echo "DisableChangePassword"=dword:00000001 >>abc.reg

REM [加快菜单显示速度]
echo [HKEY_CURRENT_USER\Control Panel\Desktop] >>abc.reg
echo "MenuShowDelay"="0" >>abc.reg

REM [关闭文件保护]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] >>abc.reg
echo "SFCDisable"=dword:ffffff9d >>abc.reg

REM [XP关机时自动清理页面文件]
echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management] >>abc.reg
echo "ClearPageFileAtShutdown"=dword:00000001 >>abc.reg

REM [关闭分组相似任务栏]
echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] >>abc.reg
echo "TaskbarGlomming"=dword:00000000 >>abc.reg

REM [关闭每60天桌面清理向导]
echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\CleanupWiz] >>abc.reg
echo "NoRun"=dword:00000001 >>abc.reg

REM [禁用欢迎屏幕并使用传统登录框]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] >>abc.reg
echo "LogonType"=dword:00000000 >>abc.reg

REM [禁用错误报告]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting] >>abc.reg
echo "DoReport"=dword:00000000 >>abc.reg

REM [禁用屏保]
echo [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Control Panel\Desktop] >>abc.reg
echo "ScreenSaveActive"="0" >>abc.reg

REM [禁用IE自动完成]
echo [HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel] >>abc.reg
echo "FormSuggest"=dword:00000001 >>abc.reg
echo "FormSuggest Passwords"=dword:00000001 >>abc.reg

echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] >>abc.reg
REM [关闭光盘和硬盘的AUTORUN]
echo "NoDriveTypeAutoRun"=dword:00000091 >>abc.reg
REM [在开始菜单显示“注销”]
echo "ForceStartMenuLogOff"=dword:00000001 >>abc.reg
REM [不显示“运行”]
echo "NoRun"=dword:00000001 >>abc.reg
REM [在开始菜单不显示“网上邻居”]
echo "NoStartMenuNetworkPlaces"=dword:00000001 >>abc.reg
REM [在开始菜单不显示“文档”]
echo "NoRecentDocsMenu"=dword:00000001 >>abc.reg
REM [在开始菜单不显示“查找”]
echo "NoFind"=dword:00000001 >>abc.reg
REM [在开始菜单不显示“收藏夹”]
echo "NoFavoritesMenu"=dword:00000001 >>abc.reg
REM [在开始菜单不显示“帮助”]
echo "NoSMHelp"=dword:00000001 >>abc.reg
REM [在开始菜单不显示“网络连接”]
echo "NoNetworkConnections"=dword:00000001 >>abc.reg
REM [在开始菜单不显示“控制面板”]
echo "NoSetFolders"=dword:00000001 >>abc.reg
REM [隐藏桌面网上邻居图标]
echo "NoNetHood"=dword:00000001 >>abc.reg
REM [隐藏桌面Internet Explorer图标]
echo "NoInternetIcon"=dword:00000001 >>abc.reg
REM [不将删除的文件移入回收站]
echo "NoRecycleFiles"=dword:00000001 >>abc.reg

REM [删除回收站]
echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum] >>abc.reg
echo "{645FF040-5081-101B-9F08-00AA002F954E}"=dword:00000001 >>abc.reg

REM [。。。。。。。。。。]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion] >>abc.reg
echo "RegisteredOrganization"="网吧" >>abc.reg
echo "RegisteredOwner"="轩辕" >>abc.reg

REM [添加网吧名称至时间前面]
echo [HKEY_CURRENT_USER\Control Panel\International] >>abc.reg
echo "sTimeFormat"="【网吧】H:mm:ss" >>abc.reg


REM [指定不运行的程序]
echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] >>abc.reg
echo "DisallowRun"=dword:00000001 >>abc.reg
echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowCpl] >>abc.reg
echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun] >>abc.reg
echo "1"="emule.exe" >>abc.reg
echo "2"="vagaa.exe" >>abc.reg
echo "3"="bt.exe" >>abc.reg
echo "4"="thunder.exe" >>abc.reg
echo "5"="thundershell.exe" >>abc.reg
echo "6"="bittorrent.exe" >>abc.reg
echo "7"="bitcomet.exe" >>abc.reg
echo "8"="flashget.exe" >>abc.reg
echo "9"="ilink.exe" >>abc.reg
echo "10"="pp.exe" >>abc.reg
echo "11"="pp2005.exe" >>abc.reg
echo "12"="dudu.exe" >>abc.reg
echo "13"="pcpop.exe" >>abc.reg
echo "14"="Robocop.exe" >>abc.reg
echo "15"="Ok.exe" >>abc.reg
echo "16"="fucksnow.exe" >>abc.reg
echo "17"="poco2004.exe" >>abc.reg
echo "18"="ilink2005.exe" >>abc.reg
echo "19"="ilink.exe" >>abc.reg

REM [屏蔽恶意插件]
REM [3721实名]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{B83FC273-3522-4CC6-92EC-75CC86678DA4}] >>abc.reg
echo "Compatibility Flags"=dword:00000400 >>abc.reg

REM [3721实名]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{4522DBFE-14CD-4A59-AC2A-54BADFDD6D53}] >>abc.reg
echo "Compatibility Flags"=dword:00000400 >>abc.reg

REM [3721上网助手]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{1B0E7716-898E-48CC-9690-4E338E8DE1D3}] >>abc.reg
echo "Compatibility Flags"=dword:00000400 >>abc.reg

REM [3721上网助手]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{7CA83CF1-3AEA-42D0-A4E3-1594FC6E48B2}] >>abc.reg
echo "Compatibility Flags"=dword:00000400 >>abc.reg

REM [3721中文邮]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{4EDBBAEA-F509-49F6-94D1-ECEC4BE5B686}] >>abc.reg
echo "Compatibility Flags"=dword:00000400 >>abc.reg

REM [3721升级包]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{8D898B17-976D-44c1-84E6-AF38842AC9EC}] >>abc.reg
echo "Compatibility Flags"=dword:00000400 >>abc.reg

REM [CNNIC通用域名]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{9A578C98-3C2F-4630-890B-FC04196EF420}] >>abc.reg
echo "Compatibility Flags"=dword:00000400 >>abc.reg

REM [DUDU]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{8135EF31-FE8C-4C6E-A18A-F59944C3A488}] >>abc.reg
echo "Compatibility Flags"=dword:00000400 >>abc.reg

REM [新浪IE通]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{98FA5667-513F-4F15-8A15-C171477B8847}] >>abc.reg
echo "Compatibility Flags"=dword:00000400 >>abc.reg

REM [新浪点点通]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{15DDE989-CD45-4561-BF99-D22C0D5C2B74}] >>abc.reg
echo "Compatibility Flags"=dword:00000400 >>abc.reg

REM [搜狐工具栏]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{484FF54A-CC44-467E-9C31-5B89FC753007}] >>abc.reg
echo "Compatibility Flags"=dword:00000400 >>abc.reg

REM [搜狐工具栏]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{CE7C3CF0-4B15-11D1-ABED-709549C10000}] >>abc.reg
echo "Compatibility Flags"=dword:00000400 >>abc.reg

REM [百度搜索伴侣]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{BC207F7D-3E63-4ACA-99B5-FB5F8428200C}] >>abc.reg
echo "Compatibility Flags"=dword:00000400 >>abc.reg

REM [百度搜霸]
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{9BBC1154-218D-453C-97F6-A06582224D81}] >>abc.reg
echo "Compatibility Flags"=dword:00000400 >>abc.reg


regedit /s abc.reg

@echo off
REM [D盘非法关机不扫描]
chntfs /x d: