Typical batch collection for Internet cafes

The black box used to hide the boot is also disabled for a long time.
Dim objshell
Set objshell = wscript. Createobject ("wscript. Shell ")
Wscript. Sleep (10000)
Ireturn = objshell. Run ("cmd.exe/C \ Server \ Start $ \ Start. Bat", 0, true)
------- Bind the local IP address and MAC address
@ Echo off
If exist ipconfig.txt del ipconfig.txt
Ipconfig/All> ipconfig.txt
If exist phyaddr.txt del phyaddr.txt
Find "physical address" ipconfig.txt> phyaddr.txt
For/F "Skip = 2 tokens = 12" % m in (phyaddr.txt) do set MAC = % m
If exist ipaddr.txt del ipaddr.txt
Find "ip address" ipconfig.txt> ipaddr.txt
For/F "Skip = 2 tokens = 15" % I in (ipaddr.txt) do set IP = % I
ARP-S % IP % Mac %
Del ipaddr.txt
Del ipconfig.txt
Del phyaddr.txt
----------- Bind the gateway and Mac
ARP-s 192.168.0.1 00-0e-a0-00-21-82
---------- Illegal Program And Software
Copy \ Server \ Start $ \ netbar. dll c: \ windows \ Cao
Copy \ Server \ Start $ \ assumer.exe c: \ windows \ Cao
Cd c: \ WINDOWS \ Cao
Start assumer.exe
This software is very interesting to prevent some guests from searching for pornographic, reactionary, and other filter word information. If he uses the QQ name, these filter words will also be disabled.
---------- Block illegal websites
Copy \ Server \ Start $ \ hosts c: \ windows \ system32 \ drivers \ etc
----------- Install freezing point after synchronization time
Net time \ Server/set/y
Start \ Server \ Start $ \ deepfreeze.exe/install/PW = ***/freeze = C:, D :,
--------- Automatic Installation Program
Start \ Server \ Start $ \ install.exe/Parameter
---------- Modify the Home Page
@ Reg Delete "HKEY_CURRENT_USER \ Software \ Microsoft \ Internet Explorer \ main"/V "start page"/F
@ Reg Add "HKEY_CURRENT_USER \ Software \ Microsoft \ Internet Explorer \ main"/V "start page"/D ""/F
----- Modify it to a real gateway (enter the pseudo gateway in the local connection first) to prevent ARP attacks.
Route Delete 0.0.0.0
Route add 0.0.0.0 mask 0.0.0.0 192.168.0. * Metric 1
Route change 0.0.0.0 mask 0.0.0.0 192.168.0. * Metric 1
-------- Load the virtual Optical Drive
C: \ progra ~ 1 \ D-tools \ daemon.exe-mount 0, mininbalive06_2.mds
Start/Wait/High nbalive06.exe
C: \ progra ~ 1 \ D-tools \ daemon.exe-unmount 0
---------- Modify the mask, gateway, and DNS (remember to enable the Remote Registry Service. Someone will not enable it, which is shown below .)
Netsh interface IP Set address name = "Local Connection" Source = static mask = 255.255.255.0.0 (mask) gateway = 192. 168. *. * (GATEWAY) gwmetric = 1
Netsh interface IP Set DNS name = "Local Connection" Source = static ADDR = 1st DNS
Netsh interface IP add DNS name = "Local Connection" ADDR = 2nd DNS indexes = 2
----------- Start the service (to be specific)
Net start "Remote Registry"
---------- Delete the EXE file (the logo is not afraid, pay attention to changing the path)
Del E: \ online game \ *. EXE/f/S/Q/
Combined with the script for deleting the specified file and flash, the game disk is not protected, updated, and saved (viruses like to drill into the EXE)
------- Restore the EXE file
Xcopy/S/y/C \ Server \ online game \ *. exe e: \ online game
------- Delete all files outside the specified file
Cacls E: \ online game/e/P everyone: N
RD/S/q e:
Cacls E: \ online game/e/R everyone
----------- Add a desktop icon shortcut
Copy \ Server \ Start $ \ guest disk. lnk c: \ docume ~ 1 \ your login USERNAME \ Desktop
Exit
------ You can also use taskkill WMIC to close the process. This feature is too powerful, so it is quite di complex.
WMIC process where name = "notepad.exe" Delete
-------- Change the desktop background
Set regadd = reg Add "HKEY_CURRENT_USER \ Control Panel \ Desktop"
% Regadd % "/V tilewallpaper/D" 0 "/F
% Regadd % "/V wallpaper/D" \ update \ dd $ \ flashup \ wallpaper. BMP "/F
% Regadd % "/V wallpaperstyle/D" 3 "/F
Rundll32.exe user32.dll, updateperusersystemparameters
Gpupdate/Force