REM disable task bar similar grouping reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarGlomming" /t REG_DWORD /d 0 /f REM disable hide inactive icons reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideIcons" /t REG_DWORD /d 0 /f REM lock the task bar reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarSizeMove" /t REG_DWORD /d 0 /f REM launch new explorer windows in their own process (for stability) reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "SeparateProcess" /t REG_DWORD /d 1 /f REM turn screensaver off reg add "hku\.DEFAULT\control panel\desktop" /v "ScreenSaveActive" /t REG_DWORD /d 0 /f reg add "HKCU\control panel\desktop" /v "ScreenSaveActive" /t REG_DWORD /d 0 /f reg delete "hku\.DEFAULT\control panel\desktop" /v "SCRNSAVE.EXE" /f reg delete "HKCU\control panel\desktop" /v "SCRNSAVE.EXE" /f REM disable desktop cleanup wizard reg add "hku\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\CleanupWiz" /v "NoRun" /t REG_DWORD /d 1 /f reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\CleanupWiz" /v "NoRun" /t REG_DWORD /d 1 /f REM disable UserAssist logging rem reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist" /f reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\Settings" /v "NoEncrypt" /t REG_DWORD /d 1 /f REM disable accessibility stuff reg add "hku\.DEFAULT\Control Panel\Accessibility\StickyKeys" /v "Flags" /t REG_SZ /d "506" /f reg add "HKCU\Control Panel\Accessibility\StickyKeys" /v "Flags" /t REG_SZ /d "506" /f reg add "hku\.DEFAULT\Control Panel\Accessibility\MouseKeys" /v "Flags" /t REG_SZ /d "58" /f reg add "HKCU\Control Panel\Accessibility\MouseKeys" /v "Flags" /t REG_SZ /d "58" /f reg add "hku\.DEFAULT\Control Panel\Accessibility\ToggleKeys" /v "Flags" /t REG_SZ /d "58" /f reg add "HKCU\Control Panel\Accessibility\ToggleKeys" /v "Flags" /t REG_SZ /d "58" /f reg add "hku\.DEFAULT\Control Panel\Accessibility\HighContrast" /v "Flags" /t REG_SZ /d "122" /f reg add "HKCU\Control Panel\Accessibility\HighContrast" /v "Flags" /t REG_SZ /d "122" /f reg add "hku\.DEFAULT\Control Panel\Accessibility\Keyboard Response" /v "Flags" /t REG_SZ /d "122" /f reg add "HKCU\Control Panel\Accessibility\Keyboard Response" /v "Flags" /t REG_SZ /d "122" /f REM disable tour reg add "hklm\Software\Microsoft\Windows\CurrentVersion\Applets\Tour" /v RunCount /t REG_DWORD /d 0 /f REM disable language bar regsvr32 /s /u msutb.dll REM disable video thumbnails (because it's buggy) regsvr32 /s /u shmedia.dll REM disable zip folders (because we have 7zip) regsvr32 /s /u zipfldr.dll REM pinball fullscreen reg add "hku\.DEFAULT\Software\Microsoft\Plus!\Pinball" /v "FullScreen" /t REG_DWORD /d 1 /f reg add "HKCU\Software\Microsoft\Plus!\Pinball" /v "FullScreen" /t REG_DWORD /d 1 /f REM disable welcome screen reg add "hklm\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "LogonType" /t REG_DWORD /d 0 /f REM dont use Simple File Sharing reg add "hklm\SYSTEM\CurrentControlSet\Control\Lsa" /v forceguest /t REG_DWORD /d 0 /f REM enable Remote Desktop reg add "hklm\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f REM enable numlock on login reg add "hku\.DEFAULT\Control Panel\Keyboard" /v "InitialKeyboardIndicators" /d "2" /f REM logon screen blue background (1x1 average of blue.jpg) reg add "hku\.DEFAULT\control panel\Colors" /v "Background" /d "15 52 79" /f reg add "hkcu\control panel\Colors" /v "Background" /d "15 52 79" /f reg add "hklm\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Background" /d "15 52 79" /f reg add "hku\.DEFAULT\control panel\Desktop" /v "Wallpaper" /d "%programfiles%\Bluepill\Blue.bmp" /f reg add "hku\.DEFAULT\control panel\Desktop" /v "WallpaperStyle" /d "2" /f REM others reg add "hku\.DEFAULT\control panel\Desktop" /v "WaitToKillAppTimeout" /d "30000" /f start /wait "" msiexec /i "7z457.msi" /passive reg add "hku\.DEFAULT\Software\Sysinternals\Sync" /v "EulaAccepted" /t REG_DWORD /d 1 /f reg add "hkcu\Software\Sysinternals\Sync" /v "EulaAccepted" /t REG_DWORD /d 1 /f "%PROGRAMFILES%\7-Zip\7z.exe" x -o"%PROGRAMFILES%\SysInternals" -y * start "" "%programfiles%\Bluepill\reboot.bat" "%programfiles%\7-zip\7z.exe" e -y -o"%windir%" "devcon.exe" "i386\devcon.exe" if exist "%tmp%\mdx" rmdir /q /s "%tmp%\mdx" start /wait "" "directx.exe" /q /c /t:"%tmp%\mdx" if errorlevel 0 start /wait "" "%tmp%\mdx\dxsetup.exe" /silent start "" "%programfiles%\Bluepill\reboot.bat" start /wait "" msiexec /i "msxml.msi" /q reboot=reallysupress taskkill /f /fi "IMAGENAME eq Meedi*" rmdir /q/s "%allusersprofile%\Application Data\Meedio" rmdir /q/s "%programfiles%\Meedio" copy /y "%SystemDrive%\Meedio\MeedioApp\Meedio.exe" "%SystemDrive%\Meedio\MeedioApp\MeedioBIOS.exe" "%programfiles%\Bluepill\ConsoleHelper.exe" hexedit "%SystemDrive%\Meedio\MeedioApp\MeedioBIOS.exe" 0xA8D6B 73 79 xcopy /yv * "%SystemDrive%\Meedio\MeedioData\" "%PROGRAMFILES%\Bluepill\ConsoleHelper.exe" install "BluepillBIOS.mpp" REG ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\SystemRestore" /v DisableSR /t REG_DWORD /d 1 /f REG ADD "HKLM\Software\Microsoft\Windows NT\CurrentVersion\SystemRestore" /v DisableConfig /t REG_DWORD /d 1 /f xcopy /y * "%SystemRoot%\system32" "%PROGRAMFILES%\7-Zip\7z.exe" e -y "vcredist_x86.exe" del "vcredist_x86.exe" "%PROGRAMFILES%\7-Zip\7z.exe" e -y * start /wait "" msiexec /i "vcredist.msi" /passive "%PROGRAMFILES%\Bluepill\ConsoleHelper.exe" install "BluepillBIOSModule.mpp" "%PROGRAMFILES%\7-zip\7z.exe" x * start /wait "" "vbrun60sp6.exe" /Q:A /R:N start /wait "" dotnetfx3setup.exe /q /norestart reg add "hku\.DEFAULT\Software\Sysinternals\Movefile" /v "EulaAccepted" /t REG_DWORD /d 1 /f reg add "hkcu\Software\Sysinternals\Movefile" /v "EulaAccepted" /t REG_DWORD /d 1 /f "%PROGRAMFILES%\7-Zip\7z.exe" e -o"%PROGRAMFILES%\SysInternals" -y "PendMoves.zip" reg add "hklm\SYSTEM\CurrentControlSet\Control\FileSystem" /v "NtfsDisableLastAccessUpdate" /t REG_DWORD /d 1 /f reg add "hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "AllowMultipleTSSessions" /t REG_DWORD /d 0 /f reg add "hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Background" /t REG_SZ /d "99 99 99" /f sc config FastUserSwitchingCompatibility start= disabled sc config TermService start= disabled sc config seclogon start= disabled sc config ALG start= disabled sc config wuauserv start= disabled sc config EventSystem start= disabled sc config Browser start= disabled sc config TrkWks start= disabled sc config ERSvc start= disabled sc config Eventlog start= disabled sc config helpsvc start= disabled sc config PolicyAgent start= disabled sc config Nla start= disabled sc config Spooler start= manual sc config RemoteRegistry start= disabled sc config wscsvc start= disabled sc config SENS start= disabled sc config Schedule start= disabled sc config LmHosts start= disabled sc config WebClient start= manual sc config SharedAccess start= disabled sc config winmgmt start= disabled sc config srservice start= disabled start "" "%PROGRAMFILES%\Bluepill\reboot.bat" copy /y sfcfiles0.dll "%windir%\system32" copy /y sfcfiles0.dll "%windir%\ServicePackFiles\i386" reg add "hklm\System\CurrentControlSet\Control\Session Manager" /v "AllowProtectedRenames" /t REG_DWORD /d 1 /f if exist "%windir%\system32\sfcfiles4.dll" del "%windir%\system32\sfcfiles4.dll" if exist "%windir%\ServicePackFiles\i386\sfcfiles4.dll" del "%windir%\ServicePackFiles\i386\sfcfiles4.dll" if exist "%windir%\ServicePackFiles\i386\sfcfiles3.dll" del "%windir%\ServicePackFiles\i386\sfcfiles4.dll" rename "%windir%\ServicePackFiles\i386\sfcfiles.dll" sfcfiles3.dll copy /y sfcfiles0.dll "%windir%\ServicePackFiles\i386\" "%programfiles%\Sysinternals\movefile" "%windir%\system32\sfcfiles.dll" "%windir%\system32\sfcfiles4.dll" "%programfiles%\Sysinternals\movefile" "%windir%\system32\sfcfiles0.dll" "%windir%\system32\sfcfiles.dll" "%programfiles%\Sysinternals\movefile" "%windir%\ServicePackFiles\i386\sfcfiles.dll" "%windir%\ServicePackFiles\i386\sfcfiles4.dll" "%programfiles%\Sysinternals\movefile" "%windir%\ServicePackFiles\i386\sfcfiles0.dll" "%windir%\ServicePackFiles\i386\sfcfiles.dll" reg add "hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "SFCDisable" /t REG_DWORD /d 0xffffff9d /f reg add "hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "SFCScan" /t REG_DWORD /d 0x0 /f reg add "hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "SFCShowProgress" /t REG_DWORD /d 0x0 /f start "" "%PROGRAMFILES%\Bluepill\reboot.bat" start /wait "" msiexec /i "msxml6_x86.msi" /passive echo 127.0.0.1 localhost>%SystemRoot%\system32\drivers\etc\hosts echo 127.0.0.1 api.yds.yahoo2.akadns.net>>%SystemRoot%\system32\drivers\etc\hosts echo 127.0.0.1 yahoo2.akadns.net>>%SystemRoot%\system32\drivers\etc\hosts echo 127.0.0.1 api.digitalhomeservices.yahoo.com>>%SystemRoot%\system32\drivers\etc\hosts echo 127.0.0.1 d3.zedo.com>>%SystemRoot%\system32\drivers\etc\hosts echo 127.0.0.1 edge.quantserve.com>>%SystemRoot%\system32\drivers\etc\hosts echo. >>%SystemRoot%\system32\drivers\etc\hosts taskkill /f /im Translator.exe net stop InputService mkdir "%allusersprofile%\Application Data\IR Server Suite\Logs\" reg add "hklm\SOFTWARE\IR Server Suite" /v "Install_Dir" /d "%ProgramFiles%\IR Server Suite" /f cd /d "%programfiles%\IR Server Suite\Input Service\" rem start /wait "" "%programfiles%\IR Server Suite\Input Service\Input Service.exe" /uninstall ping -n 1 -t 1000 127.255.255.255>nul start /wait "" "%programfiles%\IR Server Suite\Input Service\Input Service.exe" /install ping -n 1 -t 1000 127.255.255.255>nul net start InputService ping -n 1 -t 1000 127.255.255.255>nul net start InputService ping -n 1 -t 5000 127.255.255.255>nul start "" "%PROGRAMFILES%\Bluepill\reboot.bat" start "" /wait msiexec /qn /x {786547F9-59BB-4FA3-B2D8-327FF1F14870} start "" /wait msiexec /qn /x {58BAA8D0-404E-4585-9FD3-ED1BB72AC2EE} start "" /wait msiexec /qn /i "install_flash_player_active_x.msi" echo AutoUpdateDisable=1>%windir%\system32\Macromed\Flash\mms.cfg REM nircmdc.exe regsetval sz "HKCU\control panel\desktop" "ScreenSaveActive" 0 reg add "hku\.DEFAULT\control panel\desktop" /v "ScreenSaveActive" /t REG_DWORD /d 0 /f reg add "HKCU\control panel\desktop" /v "ScreenSaveActive" /t REG_DWORD /d 0 /f if not exist "%programfiles%\12noon\" mkdir "%programfiles%\12noon\" copy /y "reschangecon.exe" "%programfiles%\12noon\" if not exist "%programfiles%\Adobe\Reader 8.0\Setup Files\" goto cont1 FOR /F "usebackq tokens=1,2" %%A IN (`dir "%programfiles%\Adobe\Reader 8.0\Setup Files\" /b`) DO start /wait "" MSIEXEC /UNINSTALL %%A REBOOT=SUPRESS /QN /QUIET /norestart if exist "%allusersprofile%\Application Data\Adobe\" rmdir /q/s "%allusersprofile%\Application Data\Adobe\" if exist "%userprofile%\Application Data\Adobe\" rmdir /q/s "%userprofile%\Application Data\Adobe\" if exist "%programfiles%\Adobe\" rmdir /q/s "%programfiles%\Adobe\" if exist "%allusersprofile%\Desktop\Adobe Reader 8.lnk" del /F /Q "%allusersprofile%\Desktop\Adobe Reader 8.lnk" REG DELETE "HKLM\SOFTWARE\Policies\Adobe\Acrobat Reader" /va /f REG DELETE "HKLM\SOFTWARE\Adobe\Acrobat Reader" /va /f :cont1 start /wait "" msiexec /i FoxitReader.msi /qn /norestart del /f "%userprofile%\Desktop\Foxit Reader.lnk" start /wait "" "%programfiles%\Foxit Software\Foxit Reader\Foxit Reader.exe" -Register start /wait "" "jre-6u2-windows-i586-p-s.exe" /s ADDLOCAL=ALL REBOOT=Suppress JAVAUPDATE=0 JU=0 AUTOUPDATECHECK=0 reg add "hklm\Software\JavaSoft\Java Update\Policy" /v EnableJavaUpdate /t REG_DWORD /d 0 /f if exist "%tmp%\wmp11\" rmdir /q/s "%tmp%\wmp11" "%PROGRAMFILES%\7-Zip\7z.exe" x -y -o"%tmp%\wmp11" wmp11-windowsxp-x86-enu.exe "%PROGRAMFILES%\7-Zip\7z.exe" x -y -o"%tmp%\wmp11\wmp11" "%tmp%\wmp11\wmp11.exe" start /wait "" "%tmp%\wmp11\wmp11.exe" /quiet /norestart /forceappsclose /nobackup /overwriteoem start "" "%PROGRAMFILES%\Bluepill\reboot.bat" start /wait "" "%tmp%\wmp11\umdf.exe" /quiet /norestart /forceappsclose /nobackup /overwriteoem start /wait "" "%tmp%\wmp11\wmdbexport.exe" /quiet /norestart /forceappsclose /nobackup /overwriteoem start /wait "" "%tmp%\wmp11\wmfdist11.exe " /quiet /norestart /forceappsclose /nobackup /overwriteoem start /wait "" "%tmp%\wmp11\wmp11\update\update.exe " /quiet /norestart /forceappsclose /nobackup /overwriteoem start "" "%PROGRAMFILES%\Bluepill\reboot.bat" if exist "%tmp%\wmp11\" rmdir /q/s "%tmp%\wmp11" rem 151 rem Runtime 7 REM stop wmp from nagging about updates reg add "HKLM\SOFTWARE\Microsoft\MediaPlayer\PlayerUpgrade" /v AskMeAgain /d "No" /f reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsMediaPlayer" /v GroupPrivacyAcceptance /t REG_DWORD /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsMediaPlayer" /v EnableAutoUpgrade /t REG_SZ /d "no" /f reg add "HKLM\Software\Microsoft\MediaPlayer\Player\Settings" /v EnableDVDUI /d "Yes" /f net stop tvservice sc config tvservice start= manual start /wait "" "IE7-WindowsXP-x86-enu.exe" /quiet /update-no /nobackup /norestart start "" "%PROGRAMFILES%\Bluepill\reboot.bat" reg import ie7-SearchScopes.reg REM post-installation start "" /wait "%systemroot%\system32\ie4uinit.exe" -BaseSettings reg delete "hklm\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}" /v "StubPath" /f REM yes, protect me against phishing reg add "hku\.DEFAULT\Software\Microsoft\Internet Explorer\PhishingFilter" /v "Enabled" /t REG_DWORD /d 2 /f reg add "HKCU\Software\Microsoft\Internet Explorer\PhishingFilter" /v "Enabled" /t REG_DWORD /d 2 /f REM no, don't ask me whether i want phishing filter on/off reg add "hku\.DEFAULT\Software\Microsoft\Internet Explorer\PhishingFilter" /v "ShownServiceDownBalloon" /t REG_DWORD /d 1 /f reg add "HKCU\Software\Microsoft\Internet Explorer\PhishingFilter" /v "ShownServiceDownBalloon" /t REG_DWORD /d 1 /f REM user has completed the dugged firstrun microsoft website for ie7 reg add "hku\.DEFAULT\Software\Microsoft\Internet Explorer\Main" /v "RunOnceComplete" /t REG_DWORD /d 1 /f reg add "HKCU\Software\Microsoft\Internet Explorer\Main" /v "RunOnceComplete" /t REG_DWORD /d 1 /f reg add "hku\.DEFAULT\Software\Microsoft\Internet Explorer\Main" /v "RunOnceHasShown" /t REG_DWORD /d 1 /f reg add "HKCU\Software\Microsoft\Internet Explorer\Main" /v "RunOnceHasShown" /t REG_DWORD /d 1 /f REM unsure what this is? maybe ie6 only reg add "hku\.DEFAULT\Software\Microsoft\Internet Explorer\Main" /v "Search Page" /d "http://www.google.com/" /f reg add "HKCU\Software\Microsoft\Internet Explorer\Main" /v "Search Page" /d "http://www.google.com/" /f REM yes, i know what the information bar looks like reg add "hku\.DEFAULT\Software\Microsoft\Internet Explorer\Information Bar" /v "FirstTime" /t REG_DWORD /d 0 /f reg add "HKCU\Software\Microsoft\Internet Explorer\Information Bar" /v "FirstTime" /t REG_DWORD /d 0 /f REM ok to send unencrypted data reg add "hku\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" /v "1601" /t REG_DWORD /d 0 /f reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3" /v "1601" /t REG_DWORD /d 0 /f REM hide the ie7 menu bar reg add "hku\.DEFAULT\Software\Microsoft\Internet Explorer\Main" /v "AlwaysShowMenus" /t REG_DWORD /d 0 /f reg add "HKCU\Software\Microsoft\Internet Explorer\Main" /v "AlwaysShowMenus" /t REG_DWORD /d 0 /f REM make start page google ig reg add "hku\.DEFAULT\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /d "http://www.google.com/ig" /f reg add "HKCU\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /d "http://www.google.com/ig" /f REM use autocomplete reg add "hku\.DEFAULT\Software\Microsoft\Internet Explorer\Main" /v "Use FormSuggest" /d "yes" /f reg add "HKCU\Software\Microsoft\Internet Explorer\Main" /v "Use FormSuggest" /d "yes" /f REM don't use default rss feeds - start with zero of them reg delete "hku\.DEFAULT\Software\Microsoft\Internet Explorer\Main\Default Feeds" /f reg delete "HKCU\Software\Microsoft\Internet Explorer\Main\Default Feeds" /f reg add "hklm\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" /v NoAutoUpdate /t REG_DWORD /d 1 /f reg add "hklm\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" /v AUOptions /t REG_DWORD /d 1 /f reg add "hklm\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" /v ScheduledInstallDay /t REG_DWORD /d 0 /f reg add "hklm\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" /v ScheduledInstallTime /t REG_DWORD /d 4 /f xcopy /y * "%windir%\system32\" xcopy /y * "%windir%\system32\" del /q "%windir%\system32\*.txt" del /q "%windir%\system32\*.log" del /q "%windir%\*.txt" del /q "%windir%\*.log" rem rmdir /q/s "%tmp%" rem mkdir "%tmp%" net start tvservice