start::
Hosts:
Removeproxy:
CreateRestorePoint:
CloseProcesses:
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
S3 BraveElevationService; "C:\Program Files\BraveSoftware\Brave-Browser\Application\116.1.57.62\elevation_service.exe" [X]
S2 DFWSIDService; C:\Program Files (x86)\Wondershare\drfone\WsidService.exe [X]
S2 ElevationService; C:\Program Files (x86)\Wondershare\drfone\Addins\Transfer\ElevationService.exe [X]
2023-09-10 09:32 - 2023-09-10 09:32 - 003511456 _____ (Nicolas Coolman) C:\Users\nicol\Downloads\ZHPSuite.exe
2023-09-04 08:55 - 2023-09-04 17:30 - 000000760 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2023-09-10 10:05 - 2022-02-10 18:11 - 000000000 ____D C:\Users\nicol\AppData\Roaming\ZHP
2023-09-10 09:33 - 2022-10-01 11:00 - 000000000 ____D C:\Users\nicol\AppData\Local\ZHP
2023-08-31 10:40 - 2023-06-01 12:12 - 000000000 ____D C:\Program Files (x86)\Glary Utilities 5
2023-08-31 10:39 - 2023-06-01 12:12 - 000023568 _____ (Glarysoft Ltd) C:\WINDOWS\system32\Drivers\GUBootStartup.sys
2023-08-31 10:39 - 2023-06-01 12:12 - 000001161 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
C:\Program Files (x86)\Glary Utilities 5
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1206.2 - AVAST Software) Hidden
FirewallRules: [{46A240A9-F46B-4E27-BD45-5CDC79AA086D}] => (Allow) C:\Users\nicol\AppData\Local\Temp\7zS1C8A\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{29CE2AC3-4DFF-41DC-AE05-024A8B30A1AA}] => (Allow) C:\Users\nicol\AppData\Local\Temp\7zS1C8A\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{449E9A34-6B3B-412F-892D-5A9DB89CBCB7}] => (Allow) C:\Users\nicol\AppData\Local\Temp\7zS3E73\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{CFBE3150-CA3B-4022-84CD-CC9E19425EBF}] => (Allow) C:\Users\nicol\AppData\Local\Temp\7zS3E73\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{9369C569-537A-48B9-B1D7-6F4DF741DCE7}] => (Allow) C:\Users\nicol\AppData\Local\Temp\7zS5E96\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{7320A38C-1826-4259-8864-7E253BC57940}] => (Allow) C:\Users\nicol\AppData\Local\Temp\7zS5E96\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{32055888-2DF4-4419-B0E3-C0EC9D480ABC}] => (Allow) C:\Users\nicol\AppData\Local\Temp\7zS6C1D\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{09CDCE47-36C3-49C1-BC59-E89BCD87AAE2}] => (Allow) C:\Users\nicol\AppData\Local\Temp\7zS6C1D\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{A746FFBE-C8A3-4D03-B09A-61DD34188476}] => (Allow) C:\Users\nicol\AppData\Local\Temp\7zS5037\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{6DA5122F-F0D5-41C2-8551-D857F9A24F5C}] => (Allow) C:\Users\nicol\AppData\Local\Temp\7zS5037\HPDiagnosticCoreUI.exe => Pas de fichier
StartBatch:
For /D %%d In ("%userprofile%\AppData\Local\Mozilla\Firefox\Profiles\*") Do (If Exist "%%d\Cache2" Del /s /q "%%d\Cache2\*.*")
del /s /q "%userprofile%\AppData\Local\Google\Chrome\User Data\Default\Cache\*.*"
del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Cache\*.*"
For /D %%d In ("%userprofile%\AppData\Local\Thunderbird\Profiles\*") Do (If Exist "%%d\Cache2" Del /s /q "%%d\Cache2\*.*")
For /D %%d In ("%userprofile%\AppData\Roaming\Mozilla\Firefox\Profiles\*") Do (If Exist "%%d\cookies.sqlite" Del /s /q "%%d\cookies.sqlite")
del /s /q "%userprofile%\AppData\Local\Google\Chrome\User Data\Default\History"
del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\History"
Endbatch:
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh winsock reset
cmd: sfc /scannow
EmptyEventLogs:
EmptyTemp:
end::