Added d7II config files (from 2018-08)
This commit is contained in:
parent
4afbc1a0a4
commit
73654b2213
180 changed files with 7684 additions and 0 deletions
11
.bin/d7ii/3rd Party Tools/HMP.cmd
Normal file
11
.bin/d7ii/3rd Party Tools/HMP.cmd
Normal file
|
|
@ -0,0 +1,11 @@
|
|||
pushd "%~dp0"
|
||||
cd..
|
||||
set d7IIpath=%cd%
|
||||
pushd "%~dp0"
|
||||
echo %d7IIpath%\>HMP_Excludes.txt
|
||||
echo %programfiles%\dSupportSuite\>>HMP_Excludes.txt
|
||||
echo %programfiles(x86)%\dSupportSuite\>>HMP_Excludes.txt
|
||||
echo %programfiles%\CryptoPrevent\>>HMP_Excludes.txt
|
||||
echo %programfiles(x86)%\CryptoPrevent\>>HMP_Excludes.txt
|
||||
echo %programfiles%\Foolish IT\CryptoPrevent\>>HMP_Excludes.txt
|
||||
echo %programfiles(x86)%\Foolish IT\CryptoPrevent\>>HMP_Excludes.txt
|
||||
17
.bin/d7ii/3rd Party Tools/JRT_Auto.cmd
Normal file
17
.bin/d7ii/3rd Party Tools/JRT_Auto.cmd
Normal file
|
|
@ -0,0 +1,17 @@
|
|||
@echo off&pushd "%~dp0"
|
||||
start /wait JRT.exe -y -nr
|
||||
pushd "%temp%\jrt"
|
||||
if not exist "get.bat" pushd %systemdrive%\JRT
|
||||
if not exist "get.bat" goto :eof
|
||||
findstr /v /i "pause" get.bat>tmp.txt
|
||||
findstr /v /i /b "notepad" tmp.txt>get.bat
|
||||
echo.>>"%temp%\jrt\wl_services.cfg"
|
||||
echo d7iisvc>>"%temp%\jrt\wl_services.cfg"
|
||||
echo dSSEventSvc>>"%temp%\jrt\wl_services.cfg"
|
||||
echo CryptoPreventEventSvc>>"%temp%\jrt\wl_services.cfg"
|
||||
echo.>>"%temp%\jrt\wl_processes.cfg"
|
||||
echo d7ii>>"%temp%\jrt\wl_processes.cfg"
|
||||
echo dfunk>>"%temp%\jrt\wl_processes.cfg"
|
||||
echo dSupportSuite>>"%temp%\jrt\wl_processes.cfg"
|
||||
echo CryptoPrevent>>"%temp%\jrt\wl_processes.cfg"
|
||||
start /wait cmd.exe /c get.bat
|
||||
27
.bin/d7ii/3rd Party Tools/MBAM_Install.cmd
Normal file
27
.bin/d7ii/3rd Party Tools/MBAM_Install.cmd
Normal file
|
|
@ -0,0 +1,27 @@
|
|||
@echo off
|
||||
|
||||
setlocal
|
||||
pushd "%~dp0"
|
||||
|
||||
rem Remove stale marker if present
|
||||
if exist "%SYSTEMDRIVE%\1201\Preserve-MBAM.marker" (
|
||||
del /f "%SYSTEMDRIVE%\1201\Preserve-MBAM.marker"
|
||||
)
|
||||
|
||||
rem Set marker to prevent unintended MBAM removal
|
||||
if exist "%PROGRAMFILES%\Malwarebytes\Anti-Malware\mbam.exe" (
|
||||
echo Previous Malwarebytes installation detected.
|
||||
echo. > "%SYSTEMDRIVE%\1201\Preserve-MBAM.marker"
|
||||
)
|
||||
if exist "%PROGRAMFILES(X86)%\Malwarebytes Anti-Malware\mbam.exe" (
|
||||
rem MBAM v2 installation
|
||||
echo Previous Malwarebytes [v2] installation detected.
|
||||
echo. > "%SYSTEMDRIVE%\1201\Preserve-MBAM.marker"
|
||||
)
|
||||
|
||||
rem Install/Upgrade MBAM
|
||||
echo Installing Malwarebytes...
|
||||
start "" /wait mbam-setup.exe /VERYSILENT /NORESTART
|
||||
|
||||
popd
|
||||
endlocal
|
||||
63
.bin/d7ii/3rd Party Tools/MBAM_Uninstall.cmd
Normal file
63
.bin/d7ii/3rd Party Tools/MBAM_Uninstall.cmd
Normal file
|
|
@ -0,0 +1,63 @@
|
|||
@echo off
|
||||
|
||||
setlocal
|
||||
pushd "%~dp0"
|
||||
|
||||
:GetDate
|
||||
:: Credit to SS64.com Code taken from http://ss64.com/nt/syntax-getdate.html
|
||||
:: Use WMIC to retrieve date and time in ISO 8601 format.
|
||||
for /f "skip=1 tokens=1-6" %%G in ('WMIC Path Win32_LocalTime Get Day^,Hour^,Minute^,Month^,Second^,Year /Format:table') do (
|
||||
if "%%~L"=="" goto s_done
|
||||
set _yyyy=%%L
|
||||
set _mm=00%%J
|
||||
set _dd=00%%G
|
||||
set _hour=00%%H
|
||||
set _minute=00%%I
|
||||
)
|
||||
:s_done
|
||||
:: Pad digits with leading zeros
|
||||
set _mm=%_mm:~-2%
|
||||
set _dd=%_dd:~-2%
|
||||
set _hour=%_hour:~-2%
|
||||
set _minute=%_minute:~-2%
|
||||
set iso_date=%_yyyy%-%_mm%-%_dd%
|
||||
|
||||
rem Get uninstaller path from registry
|
||||
set "uninstaller="
|
||||
for /f usebackq^ tokens^=2^ delims^=^" %%s in (
|
||||
`reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1" /v UninstallString`
|
||||
) do (
|
||||
set "uninstaller=%%s"
|
||||
)
|
||||
|
||||
rem Copy logs to 1201 folder
|
||||
echo "Copying logs..."
|
||||
robocopy /e "%PROGRAMDATA%\Malwarebytes\MBAMService\LOGS" "%SYSTEMDRIVE%\1201\Info\%iso_date%\MBAM Logs" >nul
|
||||
robocopy /e "%PROGRAMDATA%\Malwarebytes\MBAMService\ScanResults" "%SYSTEMDRIVE%\1201\Info\%iso_date%\MBAM Logs" >nul
|
||||
|
||||
if exist "%SYSTEMDRIVE%\1201\Preserve-MBAM.marker" (
|
||||
rem Keep MBAM
|
||||
echo Previous Malwarebytes installation detected.
|
||||
) else (
|
||||
rem Move Quarantine to 1201 folder
|
||||
move "%PROGRAMDATA%\Malwarebytes\Malwarebytes Anti-Malware\Quarantine" "%SYSTEMDRIVE%\1201\Quarantine\MBAM_%iso_date%_%_hour%%_minute%"
|
||||
|
||||
rem Remove MBAM
|
||||
echo No previous Malwarebytes installation detected.
|
||||
if exist "%uninstaller%" (
|
||||
echo "Uninstalling Malwarebytes..."
|
||||
start "" /wait "%uninstaller%" /VERYSILENT /NORESTART /LOG
|
||||
) else (
|
||||
color 4e
|
||||
echo "Malwarebytes installation not found."
|
||||
echo ""
|
||||
echo "Press any key to exit... "
|
||||
pause >nul
|
||||
)
|
||||
)
|
||||
|
||||
rem Remove marker
|
||||
del /f "%SYSTEMDRIVE%\1201\Preserve-MBAM.marker"
|
||||
|
||||
popd
|
||||
endlocal
|
||||
14
.bin/d7ii/3rd Party Tools/WizardKit Launcher.cmd
Normal file
14
.bin/d7ii/3rd Party Tools/WizardKit Launcher.cmd
Normal file
|
|
@ -0,0 +1,14 @@
|
|||
:: Launch WizardKit item
|
||||
@echo off
|
||||
|
||||
setlocal
|
||||
pushd "%~dp0\..\..\.."
|
||||
|
||||
rem Run WizardKit Launcher
|
||||
call "%*"
|
||||
|
||||
rem Sleep for 5 sec so d7II can wait for launched proc
|
||||
"%systemroot%\System32\ping.exe" -n 5 127.0.0.1>nul
|
||||
|
||||
popd
|
||||
endlocal
|
||||
5
.bin/d7ii/3rd Party Tools/rkill.cmd
Normal file
5
.bin/d7ii/3rd Party Tools/rkill.cmd
Normal file
|
|
@ -0,0 +1,5 @@
|
|||
pushd "%~dp0"
|
||||
cd..
|
||||
set d7IIpath=%cd%
|
||||
pushd "%~dp0"
|
||||
echo %d7IIpath%\d7II.exe>rkill_Excludes.txt
|
||||
39
.bin/d7ii/Config/AltText.ini
Normal file
39
.bin/d7ii/Config/AltText.ini
Normal file
|
|
@ -0,0 +1,39 @@
|
|||
[ShortDesc]
|
||||
Autoruns=Manages Startup Items
|
||||
Autoruns_Copy=Manages Startup Items
|
||||
Autoruns (Verify and Log)=Manages Startup Items
|
||||
Google Chrome Software Removal Tool=Remove add-ons, extensions, toolbars, and other software that may interfere with the operation of Google Chrome.
|
||||
VipreRescueScanner (Deep Scan)=Virus scanner (Designed for both the Malware Removal and the Offline Operations tab)
|
||||
VipreRescueScanner (Quick Scan)=Virus scanner (Designed for both the Malware Removal and the Offline Operations tab)
|
||||
=Install software bundle
|
||||
[ReportDesc]
|
||||
Autoruns=Examined Windows startup items and removed unnecessary entries.
|
||||
Autoruns_Copy=Examined Windows startup items and removed unnecessary entries.
|
||||
Autoruns (Verify and Log)=Examined Windows startup items and removed unnecessary entries.
|
||||
Google Chrome Software Removal Tool=Scanned for and removed any toolbars/extensions/add-ons that may interfere with the operation of Google Chrome.
|
||||
VipreRescueScanner (Deep Scan)=Ran virus scans (Vipre)
|
||||
VipreRescueScanner (Quick Scan)=Ran virus scans (Vipre)
|
||||
28=Created a System Restore point.
|
||||
32=Ran a Zero Access malware scan.
|
||||
2=Uninstalled unnecessary applications
|
||||
41=Re-wrote the default Safe Mode services to prevent potential issues with blue screens when entering Safe Mode.
|
||||
33=Backed up all Registry Hives.
|
||||
1=Uninstalled unnecessary applications
|
||||
9=Repaired file associations for executable files.
|
||||
10=Removed restrictive Windows policy settings.
|
||||
11=Cleared proxy settings.
|
||||
18=Scanned for known malware files and registry entries and removed anything found.
|
||||
12=Deleted unnecessary temporary files from user profiles and temporary files used by Windows.
|
||||
13=Deleted temporary internet cache from user profiles.
|
||||
34=Scanned for viruses/malware with Microsoft Security Essentials / Windows Defender.
|
||||
49=Scanned for Windows system component corruption to repair any issues found.
|
||||
24=Repaired the built-in Windows firewall.
|
||||
31=Set all network adapters to DHCP.
|
||||
75=Apply static DNS settings to all NICs.
|
||||
21=Ran repair and reset procedures on networking components.
|
||||
25=Reset all settings to defaults for the built-in Windows firewall.
|
||||
36=Manually examined the HOSTS file for hijacks or other issues.
|
||||
22=Repaired the Windows Update services responsible for Windows Update functionality.
|
||||
38=Performed repair routines to ensure the Winsock is operating properly.
|
||||
83=Examined internet speed/bandwidth.
|
||||
=Installed or updated commonly used applications (Adobe Reader, Google Chrome, etc)
|
||||
42
.bin/d7ii/Config/AppOverrides.ini
Normal file
42
.bin/d7ii/Config/AppOverrides.ini
Normal file
|
|
@ -0,0 +1,42 @@
|
|||
[Autoruns]
|
||||
PostRunApp=
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=7
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=1
|
||||
[Autoruns_Copy]
|
||||
PostRunApp=
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=7
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=1
|
||||
[Autoruns (Verify and Log)]
|
||||
PostRunApp=
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=7
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
[Google Chrome Software Removal Tool]
|
||||
PostRunApp=
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=0
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=1
|
||||
[VipreRescueScanner (Deep Scan)]
|
||||
PostRunApp=
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
[VipreRescueScanner (Quick Scan)]
|
||||
PostRunApp=
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
[]
|
||||
PostRunApp=
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
37
.bin/d7ii/Config/CustomApps/AdwCleaner (Updated).cfg
Normal file
37
.bin/d7ii/Config/CustomApps/AdwCleaner (Updated).cfg
Normal file
|
|
@ -0,0 +1,37 @@
|
|||
[Config]
|
||||
LastEditDate=8/13/2018 5:54:29 PM
|
||||
PostRunApp=
|
||||
AppWebsite=https://www.malwarebytes.com/adwcleaner/
|
||||
AppDLPage=https://downloads.malwarebytes.com/file/adwcleaner
|
||||
AppDesc=Toolbar Remover
|
||||
App=AdwCleaner.exe
|
||||
UseFTPServer=0
|
||||
AppURL=https://downloads.malwarebytes.com/file/adwcleaner
|
||||
AppDLName=AdwCleaner.exe
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=.5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=1
|
||||
ServiceWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsLoc=%systemdrive%\AdwCleaner\AdwCleaner*.txt
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Removed unnecessary internet browser add-ins (e.g. Toolbars) [AdwCleaner]
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=8/14/2018
|
||||
45
.bin/d7ii/Config/CustomApps/HitmanPro (Auto).cfg
Normal file
45
.bin/d7ii/Config/CustomApps/HitmanPro (Auto).cfg
Normal file
|
|
@ -0,0 +1,45 @@
|
|||
[Config]
|
||||
Author=2Shirt
|
||||
LastEditDate=8/19/2018 3:48:33 PM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.surfright.nl/en/hitmanpro/
|
||||
AppDLPage=http://www.surfright.nl/en/downloads/
|
||||
AppDesc=Malware scanner
|
||||
App=HitmanPro.exe
|
||||
App64=HitmanPro_x64.exe
|
||||
AppParms=/clean /noinstall /excludelist="%3rdpath%\HMP_Excludes.txt" /logtype=txt /log="%malreportdir%\HitmanPro_Scan_Log_%date%.txt"
|
||||
AppURL64=https://dl.surfright.nl/HitmanPro_x64.exe
|
||||
AppURL64B=http://dl.surfright.nl/FoolishIT/HitmanPro_x64.exe
|
||||
AppDLName64=HitmanPro_x64.exe
|
||||
UseFTPServer=0
|
||||
AppURL=https://dl.surfright.nl/HitmanPro.exe
|
||||
AppURLB=http://dl.surfright.nl/FoolishIT/HitmanPro.exe
|
||||
AppDLName=HitmanPro.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=3
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=1
|
||||
AppWaitTime=60
|
||||
AppRandomize=1
|
||||
CopyConfigFirst=HMP.cmd
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Ran Malware Scans (HitmanPro)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
LastDownload=8/19/2018
|
||||
34
.bin/d7ii/Config/CustomApps/IObit Uninstaller.cfg
Normal file
34
.bin/d7ii/Config/CustomApps/IObit Uninstaller.cfg
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
[Config]
|
||||
LastEditDate=8/25/2018 3:50:11 PM
|
||||
PostRunApp=
|
||||
App=WizardKit Launcher.cmd
|
||||
UseFTPServer=0
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=1
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LogVerbiage=Uninstalled unnecessary / junk programs.
|
||||
AppDesc=Application uninstaller and cleanup utility
|
||||
AppParms=Uninstallers\IObit Uninstaller.cmd
|
||||
WaitOnProcesses=IObitUninstallerPortable.exe
|
||||
AppWaitTime=60
|
||||
34
.bin/d7ii/Config/CustomApps/Install SW Bundle.cfg
Normal file
34
.bin/d7ii/Config/CustomApps/Install SW Bundle.cfg
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
[Config]
|
||||
LastEditDate=8/30/2018 10:49:46 AM
|
||||
PostRunApp=
|
||||
AppParms=.bin\Scripts\launchers_for_d7\Install SW Bundle.cmd
|
||||
UseFTPServer=0
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=1
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
App=WizardKit Launcher.cmd
|
||||
AutoFlag=0
|
||||
WaitOnProcesses=ConEmu.exe;ConEmuC.exe;ConEmu64.exe;ConEmuC64.exe;python.exe;Ninite.exe
|
||||
AppDesc=Install software bundle
|
||||
LogVerbiage=Installed or updated commonly used applications (Adobe Reader, Google Chrome, etc)
|
||||
AppWaitTime=60
|
||||
35
.bin/d7ii/Config/CustomApps/Malwarebytes Download.cfg
Normal file
35
.bin/d7ii/Config/CustomApps/Malwarebytes Download.cfg
Normal file
|
|
@ -0,0 +1,35 @@
|
|||
[Config]
|
||||
LastEditDate=8/18/2018 6:36:00 PM
|
||||
PostRunApp=
|
||||
AppWebsite=https://www.malwarebytes.com/
|
||||
AppDLPage=https://downloads.malwarebytes.com/file/mb3/
|
||||
AppDesc=Download MBAM setup
|
||||
UseFTPServer=0
|
||||
AppURL=https://downloads.malwarebytes.com/file/mb3/
|
||||
AppDLName=mbam-setup.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=0
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=1
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
App=exit
|
||||
LastDownload=8/31/2018
|
||||
34
.bin/d7ii/Config/CustomApps/Malwarebytes Install.cfg
Normal file
34
.bin/d7ii/Config/CustomApps/Malwarebytes Install.cfg
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
[Config]
|
||||
LastEditDate=8/25/2018 3:50:23 PM
|
||||
PostRunApp=
|
||||
App=MBAM_Install.cmd
|
||||
UseFTPServer=0
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=0
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=1
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
AppDesc=Install/Upgrade MBAM
|
||||
LogVerbiage=Malwarebytes installed successfully.
|
||||
LastDownload=8/18/2018
|
||||
Author=2Shirt
|
||||
AppWaitTime=30
|
||||
34
.bin/d7ii/Config/CustomApps/Malwarebytes Scan.cfg
Normal file
34
.bin/d7ii/Config/CustomApps/Malwarebytes Scan.cfg
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
[Config]
|
||||
LastEditDate=8/13/2018 4:48:53 PM
|
||||
PostRunApp=
|
||||
AppWebsite=https://www.malwarebytes.com/
|
||||
AppDLPage=https://downloads.malwarebytes.com/file/mb3/
|
||||
AppDesc=Malwarebytes Execution
|
||||
App=%programfiles%\Malwarebytes\Anti-Malware\mbam.exe
|
||||
App64=%programfiles%\Malwarebytes\Anti-Malware\mbam.exe
|
||||
UseFTPServer=0
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=1
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Malwarebytes ran successfully.
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
30
.bin/d7ii/Config/CustomApps/Malwarebytes Uninstall.cfg
Normal file
30
.bin/d7ii/Config/CustomApps/Malwarebytes Uninstall.cfg
Normal file
|
|
@ -0,0 +1,30 @@
|
|||
[Config]
|
||||
LastEditDate=8/13/2018 7:32:30 PM
|
||||
PostRunApp=
|
||||
App=MBAM_Uninstall.cmd
|
||||
UseFTPServer=0
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
AppDesc=Uninstall MBAM (if not previously installed)
|
||||
40
.bin/d7ii/Config/CustomApps/RKill (Auto).cfg
Normal file
40
.bin/d7ii/Config/CustomApps/RKill (Auto).cfg
Normal file
|
|
@ -0,0 +1,40 @@
|
|||
[Config]
|
||||
Author=2Shirt
|
||||
LastEditDate=8/19/2018 3:31:04 PM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.bleepingcomputer.com/forums/t/308364/rkill-what-it-does-and-what-it-doesnt-a-brief-introduction-to-the-program/
|
||||
AppDLPage=http://www.bleepingcomputer.com/download/rkill/
|
||||
AppDesc=Anti-Malware app.
|
||||
App=rkill.exe
|
||||
AppParms=-s -w "%3rdpath%\rkill_Excludes.txt"
|
||||
UseFTPServer=0
|
||||
AppURL=https://download.bleepingcomputer.com/grinler/rkill.exe
|
||||
AppDLName=rkill.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=0
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=1
|
||||
CopyConfigFirst=rkill.cmd
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsLoc=%userprofile%\Desktop\rkill*.txt
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Ran Malware Scan (RKill)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
LastDownload=8/31/2018
|
||||
35
.bin/d7ii/Config/CustomApps/WizardKit Browser Reset.cfg
Normal file
35
.bin/d7ii/Config/CustomApps/WizardKit Browser Reset.cfg
Normal file
|
|
@ -0,0 +1,35 @@
|
|||
[Config]
|
||||
Author=2Shirt
|
||||
LastEditDate=8/25/2018 3:50:41 PM
|
||||
PostRunApp=
|
||||
AppDesc=WizardKit browser reset script (d7II mode)
|
||||
App=WizardKit Launcher.cmd
|
||||
AppParms=.bin\Scripts\launchers_for_d7\Browser Reset.cmd
|
||||
UseFTPServer=0
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
WaitOnProcesses=ConEmu.exe;ConEmuC.exe;ConEmu64.exe;ConEmuC64.exe;python.exe
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=1
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Reset web browsers to safe defaults and removed any malicous addons found.
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
AppWaitTime=30
|
||||
35
.bin/d7ii/Config/CustomApps/WizardKit System Checklist.cfg
Normal file
35
.bin/d7ii/Config/CustomApps/WizardKit System Checklist.cfg
Normal file
|
|
@ -0,0 +1,35 @@
|
|||
[Config]
|
||||
Author=2Shirt
|
||||
LastEditDate=8/25/2018 3:50:50 PM
|
||||
PostRunApp=
|
||||
AppDesc=WizardKit system checklist script (d7II mode)
|
||||
App=WizardKit Launcher.cmd
|
||||
AppParms=.bin\Scripts\launchers_for_d7\System Checklist.cmd
|
||||
UseFTPServer=0
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
WaitOnProcesses=ConEmu.exe;ConEmuC.exe;ConEmu64.exe;ConEmuC64.exe;python.exe
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=1
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LogVerbiage=Examined and verified system-wide settings (available updates, drivers, activation, etc)
|
||||
AppWaitTime=60
|
||||
35
.bin/d7ii/Config/CustomApps/WizardKit System Diagnostics.cfg
Normal file
35
.bin/d7ii/Config/CustomApps/WizardKit System Diagnostics.cfg
Normal file
|
|
@ -0,0 +1,35 @@
|
|||
[Config]
|
||||
Author=2Shirt
|
||||
LastEditDate=8/25/2018 3:49:49 PM
|
||||
PostRunApp=
|
||||
AppDesc=WizardKit system diagnostics script (d7II mode)
|
||||
App=WizardKit Launcher.cmd
|
||||
AppParms=.bin\Scripts\launchers_for_d7\System Diagnostics.cmd
|
||||
UseFTPServer=0
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
WaitOnProcesses=ConEmu.exe;ConEmuC.exe;ConEmu64.exe;ConEmuC64.exe;python.exe
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=1
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LogVerbiage=Ran OS built-in repairs and backed up system information
|
||||
AppWaitTime=60
|
||||
35
.bin/d7ii/Config/CustomApps/WizardKit User Checklist.cfg
Normal file
35
.bin/d7ii/Config/CustomApps/WizardKit User Checklist.cfg
Normal file
|
|
@ -0,0 +1,35 @@
|
|||
[Config]
|
||||
Author=2Shirt
|
||||
LastEditDate=8/25/2018 3:50:59 PM
|
||||
PostRunApp=
|
||||
AppDesc=WizardKit user checklist script (d7II mode)
|
||||
App=WizardKit Launcher.cmd
|
||||
AppParms=.bin\Scripts\launchers_for_d7\User Checklist.cmd
|
||||
UseFTPServer=0
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
WaitOnProcesses=ConEmu.exe;ConEmuC.exe;ConEmu64.exe;ConEmuC64.exe;python.exe;firefox.exe;chrome.exe
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=1
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Verified web browser settings and functionality
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
AppWaitTime=60
|
||||
11
.bin/d7ii/Config/CustomApps_d7II/3rd Party Configs/HMP.cmd
Normal file
11
.bin/d7ii/Config/CustomApps_d7II/3rd Party Configs/HMP.cmd
Normal file
|
|
@ -0,0 +1,11 @@
|
|||
pushd "%~dp0"
|
||||
cd..
|
||||
set d7IIpath=%cd%
|
||||
pushd "%~dp0"
|
||||
echo %d7IIpath%\>HMP_Excludes.txt
|
||||
echo %programfiles%\dSupportSuite\>>HMP_Excludes.txt
|
||||
echo %programfiles(x86)%\dSupportSuite\>>HMP_Excludes.txt
|
||||
echo %programfiles%\CryptoPrevent\>>HMP_Excludes.txt
|
||||
echo %programfiles(x86)%\CryptoPrevent\>>HMP_Excludes.txt
|
||||
echo %programfiles%\Foolish IT\CryptoPrevent\>>HMP_Excludes.txt
|
||||
echo %programfiles(x86)%\Foolish IT\CryptoPrevent\>>HMP_Excludes.txt
|
||||
|
|
@ -0,0 +1,17 @@
|
|||
@echo off&pushd "%~dp0"
|
||||
start /wait JRT.exe -y -nr
|
||||
pushd "%temp%\jrt"
|
||||
if not exist "get.bat" pushd %systemdrive%\JRT
|
||||
if not exist "get.bat" goto :eof
|
||||
findstr /v /i "pause" get.bat>tmp.txt
|
||||
findstr /v /i /b "notepad" tmp.txt>get.bat
|
||||
echo.>>"%temp%\jrt\wl_services.cfg"
|
||||
echo d7iisvc>>"%temp%\jrt\wl_services.cfg"
|
||||
echo dSSEventSvc>>"%temp%\jrt\wl_services.cfg"
|
||||
echo CryptoPreventEventSvc>>"%temp%\jrt\wl_services.cfg"
|
||||
echo.>>"%temp%\jrt\wl_processes.cfg"
|
||||
echo d7ii>>"%temp%\jrt\wl_processes.cfg"
|
||||
echo dfunk>>"%temp%\jrt\wl_processes.cfg"
|
||||
echo dSupportSuite>>"%temp%\jrt\wl_processes.cfg"
|
||||
echo CryptoPrevent>>"%temp%\jrt\wl_processes.cfg"
|
||||
start /wait cmd.exe /c get.bat
|
||||
|
|
@ -0,0 +1,26 @@
|
|||
[Options]
|
||||
AutoSync=1
|
||||
AutoExit=1
|
||||
Retry=1
|
||||
|
||||
[Servers]
|
||||
0="time-a.nist.gov"
|
||||
1="time-a.timefreq.bldrdoc.gov"
|
||||
2="time-b.nist.gov"
|
||||
3="time-b.timefreq.bldrdoc.gov"
|
||||
4="time-c.timefreq.bldrdoc.gov"
|
||||
5="us.pool.ntp.org"
|
||||
6="1.us.pool.ntp.org"
|
||||
7="2.us.pool.ntp.org"
|
||||
8="3.us.pool.ntp.org"
|
||||
9="pubts1-sj.witime.net"
|
||||
10="pubts2-sj.witime.net"
|
||||
11="rolex.usg.edu"
|
||||
12="timekeeper.isi.edu"
|
||||
13="nist1.symmetricom.com"
|
||||
14="clock.via.net"
|
||||
15="nist1.aol-ca.truetime.com"
|
||||
16="nist.expertsmi.com"
|
||||
17="nist1-dc.WiTime.net"
|
||||
18="nist1-sj.WiTime.net"
|
||||
19="utcnist.colorado.edu"
|
||||
|
|
@ -0,0 +1,5 @@
|
|||
pushd "%~dp0"
|
||||
cd..
|
||||
set d7IIpath=%cd%
|
||||
pushd "%~dp0"
|
||||
echo %d7IIpath%\d7II.exe>rkill_Excludes.txt
|
||||
35
.bin/d7ii/Config/CustomApps_d7II/AS SSD Benchmark.cfg
Normal file
35
.bin/d7ii/Config/CustomApps_d7II/AS SSD Benchmark.cfg
Normal file
|
|
@ -0,0 +1,35 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
AppURL=http://www.alex-is.de/PHP/fusion/downloads.php?cat_id=4&file_id=9
|
||||
AppDLName=AS SSD Benchmark.zip
|
||||
AlwaysAttemptDownload=1
|
||||
AppWait=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
App=AS SSD Benchmark\AS SSD Benchmark.exe
|
||||
UseFTPServer=0
|
||||
DLafterXdays=7
|
||||
PriorAlert=0
|
||||
LogVerbiage=Ran SSD testing/benchmark
|
||||
LastDownload=10/27/2017
|
||||
AppWebsite=www.alex-is.de/PHP/fusion/downloads.php?cat_id=4&download_id=9
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 9:45:12 AM
|
||||
NonDirectURLs=0
|
||||
AppDLPage=www.alex-is.de/PHP/fusion/downloads.php?cat_id=4&download_id=9
|
||||
AppDesc=SSD Benchmark Utility
|
||||
AutoFlag=0
|
||||
36
.bin/d7ii/Config/CustomApps_d7II/AdwCleaner.cfg
Normal file
36
.bin/d7ii/Config/CustomApps_d7II/AdwCleaner.cfg
Normal file
|
|
@ -0,0 +1,36 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=7/21/2014 11:16:06 AM
|
||||
AppWebsite=http://www.bleepingcomputer.com/download/adwcleaner/
|
||||
AppDLPage=http://www.bleepingcomputer.com/download/adwcleaner/
|
||||
AppDesc=Toolbar Remover
|
||||
App=AdwCleaner.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://download.bleepingcomputer.com/Xplode/AdwCleaner.exe
|
||||
AppURLB=http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner
|
||||
AppDLName=AdwCleaner.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=.5
|
||||
AppWait=1
|
||||
PriorAlert=1
|
||||
ServiceWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsLoc=%systemdrive%\AdwCleaner\AdwCleaner*.txt
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Removed unnecessary internet browser add-ins (e.g. Toolbars) [AdwCleaner]
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
LastDownload=10/27/2017
|
||||
AutoFlag=0
|
||||
34
.bin/d7ii/Config/CustomApps_d7II/Auslogics DD Portable.cfg
Normal file
34
.bin/d7ii/Config/CustomApps_d7II/Auslogics DD Portable.cfg
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
AppWebsite=http://www.auslogics.com/en/software/disk-defrag/command-line/
|
||||
App=ausdiskdefragportable.exe
|
||||
AppURL=http://www.auslogics.com/en/downloads/disk-defrag/ausdiskdefragportable.exe
|
||||
AppDLName=ausdiskdefragportable.exe
|
||||
AlwaysAttemptDownload=1
|
||||
AppWait=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=0
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=0
|
||||
UseFTPServer=0
|
||||
DLafterXdays=7
|
||||
PriorAlert=1
|
||||
LogVerbiage=Defragmented file system (Auslogics)
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 9:45:41 AM
|
||||
NonDirectURLs=0
|
||||
AppDesc=Disk Defragmenter
|
||||
AppDLPage=http://www.auslogics.com/en/software/disk-defrag/
|
||||
AutoFlag=0
|
||||
36
.bin/d7ii/Config/CustomApps_d7II/Autoruns.cfg
Normal file
36
.bin/d7ii/Config/CustomApps_d7II/Autoruns.cfg
Normal file
|
|
@ -0,0 +1,36 @@
|
|||
[Config]
|
||||
App=autoruns\autoruns.exe
|
||||
AppURL=http://download.sysinternals.com/files/Autoruns.zip
|
||||
AppDLName=autoruns.zip
|
||||
AppWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=1
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
AppParms=-accepteula
|
||||
DisableCloudShare=0
|
||||
UseFTPServer=0
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=7
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
SaveConfigAfter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
AppWebsite=http://technet.microsoft.com/en-us/sysinternals/bb963902
|
||||
LogVerbiage=Examined Windows startup items and removed unnecessary entries.
|
||||
LastDownload=10/27/2017
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 9:46:37 AM
|
||||
NonDirectURLs=0
|
||||
AppDLPage=http://technet.microsoft.com/en-us/sysinternals/bb963902
|
||||
AppDesc=Manages Startup Items
|
||||
AutoFlag=0
|
||||
33
.bin/d7ii/Config/CustomApps_d7II/Avast! aswMBR.cfg
Normal file
33
.bin/d7ii/Config/CustomApps_d7II/Avast! aswMBR.cfg
Normal file
|
|
@ -0,0 +1,33 @@
|
|||
[Config]
|
||||
App=aswMBR.exe
|
||||
AppURL=http://public.avast.com/~gmerek/aswMBR.exe
|
||||
AppWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=1
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
AppDLName=aswMBR.exe
|
||||
DisableCloudShare=0
|
||||
UseFTPServer=0
|
||||
AlwaysAttemptDownload=0
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
SaveConfigAfter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
AppWebsite=http://public.avast.com/~gmerek/aswMBR.htm
|
||||
LogVerbiage=Checked MBR for infections and scanned for additional malicious items (Avast!).
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 9:46:53 AM
|
||||
AppDLPage=http://public.avast.com/~gmerek/aswMBR.htm
|
||||
AppDesc=MBR Checker and Virus Scanner
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
34
.bin/d7ii/Config/CustomApps_d7II/BatteryInfoView.cfg
Normal file
34
.bin/d7ii/Config/CustomApps_d7II/BatteryInfoView.cfg
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
App=batteryinfoview.exe
|
||||
AppURL=http://www.nirsoft.net/panel/batteryinfoview.exe
|
||||
AppDLName=batteryinfoview.exe
|
||||
AlwaysAttemptDownload=0
|
||||
AppWait=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=0
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
AppWebsite=www.nirsoft.net/utils/battery_information_view.html
|
||||
UseFTPServer=0
|
||||
PriorAlert=0
|
||||
LogVerbiage=Checked battery life and wear level.
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 9:47:17 AM
|
||||
AppDLPage=www.nirsoft.net/utils/battery_information_view.html
|
||||
AppDesc=Detailed info on installed batteries
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
|
|
@ -0,0 +1,36 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 9:49:58 AM
|
||||
App=advisorinstaller.exe
|
||||
AppParms=/silent
|
||||
UseFTPServer=0
|
||||
AppURL=http://www.belarc.com/Programs/advisorinstaller.exe
|
||||
AppDLName=advisorinstaller.exe
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
WaitOnProcesses=Belarc~1.exe
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsLoc=%programfiles(x86)%\Belarc\BelarcAdvisor\System\tmp\(%computername%).html
|
||||
SnatchReportsToMalwareLogs=0
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AppWebsite=http://www.belarc.com/free_download.html
|
||||
AppDLPage=http://www.belarc.com/free_download.html
|
||||
AppDesc=System Information Utility (Not 'Portable' - Installation Necessary)
|
||||
AutoFlag=1
|
||||
LastDownload=10/27/2017
|
||||
|
|
@ -0,0 +1,38 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
App=BootkitRemoval_x86.exe
|
||||
App64=BootkitRemoval_x64.exe
|
||||
AppURL64=http://download.bitdefender.com/removal_tools/BootkitRemoval_x64.exe
|
||||
AppDLName64=BootkitRemoval_x64.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://download.bitdefender.com/removal_tools/BootkitRemoval_x86.exe
|
||||
AppDLName=BootkitRemoval_x86.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=1
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
AppWebsite=http://labs.bitdefender.com/projects/rootkit-remover/rootkit-remover/
|
||||
LogVerbiage=Performed additional rootkit scanning. (BRR)
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 9:50:38 AM
|
||||
AppDLPage=http://labs.bitdefender.com/projects/rootkit-remover/rootkit-remover/
|
||||
AppDesc=Bitdefender Rootkit Remover
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=8/13/2018
|
||||
34
.bin/d7ii/Config/CustomApps_d7II/BluescreenView.cfg
Normal file
34
.bin/d7ii/Config/CustomApps_d7II/BluescreenView.cfg
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
App=bluescreenview.exe
|
||||
AppURL=http://www.nirsoft.net/panel/bluescreenview.exe
|
||||
AppDLName=bluescreenview.exe
|
||||
AlwaysAttemptDownload=0
|
||||
AppWait=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=0
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
UseFTPServer=0
|
||||
PriorAlert=0
|
||||
LogVerbiage=Checked for previous blue screens / crash dumps.
|
||||
AppWebsite=www.nirsoft.net/utils/blue_screen_view.html
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 9:51:06 AM
|
||||
AppDLPage=www.nirsoft.net/utils/blue_screen_view.html
|
||||
AppDesc=Analyze blue screens / memory dumps created by Windows
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
39
.bin/d7ii/Config/CustomApps_d7II/CPU-Z.cfg
Normal file
39
.bin/d7ii/Config/CustomApps_d7II/CPU-Z.cfg
Normal file
|
|
@ -0,0 +1,39 @@
|
|||
[Config]
|
||||
Author=FoolishIT
|
||||
LastEditDate=12/8/2015 9:51:43 AM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.cpuid.com/softwares/cpu-z.html
|
||||
AppDLPage=http://www.cpuid.com/softwares/cpu-z.html
|
||||
App=cpu-z\cpuz_x32.exe
|
||||
App64=cpu-z\cpuz_x64.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://download.cpuid.com/cpu-z/cpu-z_1.74-en.zip
|
||||
AppDLName=cpu-z.zip
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=1
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=0
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
AppDesc=Display hardware information (CPU, RAM, MB)
|
||||
LogVerbiage=Reviewed hardware information of the system.
|
||||
LastDownload=12/8/2015
|
||||
CopyConfigFirst=cpuz.ini
|
||||
33
.bin/d7ii/Config/CustomApps_d7II/ComboFix (Uninstall).cfg
Normal file
33
.bin/d7ii/Config/CustomApps_d7II/ComboFix (Uninstall).cfg
Normal file
|
|
@ -0,0 +1,33 @@
|
|||
[Config]
|
||||
App=combofix.exe
|
||||
AppParms=/uninstall
|
||||
AppURL=http://download.bleepingcomputer.com/sUBs/ComboFix.exe
|
||||
AppDLName=combofix.exe
|
||||
AppWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=0
|
||||
AlwaysAttemptDownload=0
|
||||
SaveConfigAfter=0
|
||||
DisableCloudShare=0
|
||||
UseFTPServer=0
|
||||
PriorAlert=1
|
||||
ServiceWait=1
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
Servers=1
|
||||
AppWebsite=http://www.bleepingcomputer.com/download/combofix/
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 9:51:39 AM
|
||||
AppDLPage=http://www.bleepingcomputer.com/download/combofix/
|
||||
AppDesc=Uninstalls Combofix, cleaning up any leftover files/settings.
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
34
.bin/d7ii/Config/CustomApps_d7II/ComboFix.cfg
Normal file
34
.bin/d7ii/Config/CustomApps_d7II/ComboFix.cfg
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
[Config]
|
||||
App=combofix.exe
|
||||
AppURL=http://download.bleepingcomputer.com/sUBs/ComboFix.exe
|
||||
AppDLName=combofix.exe
|
||||
AppWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
AlwaysAttemptDownload=1
|
||||
SaveConfigAfter=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=0
|
||||
DisableCloudShare=0
|
||||
UseFTPServer=0
|
||||
DLafterXdays=.5
|
||||
PriorAlert=1
|
||||
ServiceWait=1
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
Servers=1
|
||||
AppWebsite=http://www.bleepingcomputer.com/download/combofix/
|
||||
LogVerbiage=Ran malware scans (Combofix)
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 9:52:03 AM
|
||||
AppDLPage=http://www.bleepingcomputer.com/download/combofix/
|
||||
AppDesc=Malware removal tool.
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
33
.bin/d7ii/Config/CustomApps_d7II/CrowdInspect.cfg
Normal file
33
.bin/d7ii/Config/CustomApps_d7II/CrowdInspect.cfg
Normal file
|
|
@ -0,0 +1,33 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=3/15/2014 3:49:54 PM
|
||||
AppWebsite=www.crowdstrike.com
|
||||
AppDLPage=www.crowdstrike.com/crowdinspect/
|
||||
AppDesc=Analyze running processes against VirusTotal, Web of Trust, and the Malware Hash Project.
|
||||
App=CrowdInspect\CrowdInspect.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://download.crowdstrike.com/crowdinspect/CrowdInspect.zip
|
||||
AppDLName=CrowdInspect.zip
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
37
.bin/d7ii/Config/CustomApps_d7II/CrystalDiskInfo.cfg
Normal file
37
.bin/d7ii/Config/CustomApps_d7II/CrystalDiskInfo.cfg
Normal file
|
|
@ -0,0 +1,37 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=4/1/2016 12:41:03 PM
|
||||
PostRunApp=
|
||||
AppWebsite=http://crystalmark.info/software/CrystalDiskInfo/index-e.html
|
||||
AppDLPage=http://crystalmark.info/software/CrystalDiskInfo/index-e.html
|
||||
AppDesc=Hard drive diagnostics / information.
|
||||
App=CrystalDiskInfo\DiskInfo.exe
|
||||
App64=CrystalDiskInfo\DiskInfoX64.exe
|
||||
UseFTPServer=0
|
||||
AppURL=https://osdn.jp/frs/redir.php?m=tcpdiag&f=%2Fcrystaldiskinfo%2F65634%2FCrystalDiskInfo6_8_2.zip
|
||||
AppDLName=CrystalDiskInfo.zip
|
||||
AlwaysAttemptDownload=0
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Examined Hard Drive health (CrystalDiskInfo)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
39
.bin/d7ii/Config/CustomApps_d7II/CurrPorts.cfg
Normal file
39
.bin/d7ii/Config/CustomApps_d7II/CurrPorts.cfg
Normal file
|
|
@ -0,0 +1,39 @@
|
|||
[Config]
|
||||
Author=dSupportOnline
|
||||
LastEditDate=11/6/2014 10:33:04 PM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.nirsoft.net/utils/cports.html
|
||||
AppDLPage=http://www.nirsoft.net/utils/cports.html
|
||||
AppDesc=Displays current ports in use on system and by which process
|
||||
App=cports\cports.exe
|
||||
AppURLSpoof=http://www.nirsoft.net/utils/cports.html
|
||||
UseFTPServer=0
|
||||
AppURL=http://www.nirsoft.net/utils/cports.zip
|
||||
AppDLName=cports.zip
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
CopyConfigFirst=cports.cfg
|
||||
SaveConfigAfter=1
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Reviewed current ports in use by various applications on the system
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
36
.bin/d7ii/Config/CustomApps_d7II/ESET Smart Installer.cfg
Normal file
36
.bin/d7ii/Config/CustomApps_d7II/ESET Smart Installer.cfg
Normal file
|
|
@ -0,0 +1,36 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
App=esetsmartinstaller_enu.exe
|
||||
AppURL=http://download.eset.com/special/eos/esetsmartinstaller_enu.exe
|
||||
AppDLName=esetsmartinstaller_enu.exe
|
||||
AlwaysAttemptDownload=1
|
||||
AppWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
UseFTPServer=0
|
||||
DLafterXdays=7
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
IsDLInstaller=0
|
||||
Servers=1
|
||||
AppWebsite=http://www.eset.com/int/online-scanner-popup/
|
||||
LogVerbiage=Ran Virus/Malware scans (ESET)
|
||||
LastDownload=9/28/2013
|
||||
WaitOnProcesses=onlinescannerapp.exe
|
||||
NonDirectURLs=0
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 9:53:54 AM
|
||||
AppDLPage=http://www.eset.com/int/online-scanner-popup/
|
||||
AppDesc=Online Virus Scanner
|
||||
AutoFlag=0
|
||||
|
|
@ -0,0 +1,42 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/3/2017 5:45:31 PM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.emsisoft.com/en/software/cmd/
|
||||
AppDLPage=http://www.emsisoft.com/en/software/cmd/
|
||||
AppDesc=Virus Scanner (configured for scanning from the Offline Operations tab)
|
||||
AppParms=/f=%tdrive% /deep /rk /pup /a /n /ac /dq /la="%malreportdir%\a2cmd_deep_log_offline_%date%.txt"
|
||||
AppURL64=http://dl.emsisoft.com/EmsisoftCommandlineScanner64.exe
|
||||
AppDLName64=Emsisoft_a2cmd\EmsisoftCommandlineScanner64.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://dl.emsisoft.com/EmsisoftCommandlineScanner32.exe
|
||||
AppDLName=Emsisoft_a2cmd\EmsisoftCommandlineScanner32.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=1
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Ran deep virus scans (Emsisoft)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
App=Emsisoft_a2cmd\a2cmd.cmd
|
||||
CopyConfigFirst=a2cmd.cmd
|
||||
WaitOnProcesses=a2cmd.exe
|
||||
LastDownload=10/27/2017
|
||||
|
|
@ -0,0 +1,42 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/3/2017 5:45:31 PM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.emsisoft.com/en/software/cmd/
|
||||
AppDLPage=http://www.emsisoft.com/en/software/cmd/
|
||||
AppDesc=Virus Scanner - Scans all files on all hard disks thoroughly. (does not need prior update)
|
||||
AppParms=/f=%tdrive% /deep /rk /m /t /c /pup /a /n /ac /d /wl="%systemdrive%\EmsisoftCmd\a2cmd_Whitelist.txt" /la="%malreportdir%\a2cmd_deep_log_%date%.txt"
|
||||
AppURL64=http://dl.emsisoft.com/EmsisoftCommandlineScanner64.exe
|
||||
AppDLName64=Emsisoft_a2cmd\EmsisoftCommandlineScanner64.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://dl.emsisoft.com/EmsisoftCommandlineScanner32.exe
|
||||
AppDLName=Emsisoft_a2cmd\EmsisoftCommandlineScanner32.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=1
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Ran deep virus scans (Emsisoft)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
App=Emsisoft_a2cmd\a2cmd.cmd
|
||||
CopyConfigFirst=a2cmd.cmd
|
||||
WaitOnProcesses=a2cmd.exe
|
||||
LastDownload=8/31/2018
|
||||
|
|
@ -0,0 +1,41 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/3/2017 5:45:31 PM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.emsisoft.com/en/software/cmd/
|
||||
AppDLPage=http://www.emsisoft.com/en/software/cmd/
|
||||
AppDesc=Virus Scanner - Scans all active programs, malware traces (registry, files) and Tracking Cookies. Skips ADS, archive files, and some cookies. (does not need prior update)
|
||||
AppParms=/f=%tdrive% /quick /rk /m /t /pup /ac /d /wl="%systemdrive%\EmsisoftCmd\a2cmd_Whitelist.txt" /la="%malreportdir%\a2cmd_quick_log_%date%.txt"
|
||||
AppURL64=http://dl.emsisoft.com/EmsisoftCommandlineScanner64.exe
|
||||
AppDLName64=Emsisoft_a2cmd\EmsisoftCommandlineScanner64.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://dl.emsisoft.com/EmsisoftCommandlineScanner32.exe
|
||||
AppDLName=Emsisoft_a2cmd\EmsisoftCommandlineScanner32.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=1
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Ran virus scans (Emsisoft)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
App=Emsisoft_a2cmd\a2cmd.cmd
|
||||
CopyConfigFirst=a2cmd.cmd
|
||||
WaitOnProcesses=a2cmd.exe
|
||||
|
|
@ -0,0 +1,41 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/3/2017 5:45:31 PM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.emsisoft.com/en/software/cmd/
|
||||
AppDLPage=http://www.emsisoft.com/en/software/cmd/
|
||||
AppDesc=Virus Scanner - Scans the Windows and program files folders in addition to everything scanned by the quick scan. Skips ADS, archive files, and some cookies. (does not need prior update)
|
||||
AppParms=/f=%tdrive% /smart /rk /m /t /pup /ac /d /wl="%systemdrive%\EmsisoftCmd\a2cmd_Whitelist.txt" /la="%malreportdir%\a2cmd_smart_log_%date%.txt"
|
||||
AppURL64=http://dl.emsisoft.com/EmsisoftCommandlineScanner64.exe
|
||||
AppDLName64=Emsisoft_a2cmd\EmsisoftCommandlineScanner64.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://dl.emsisoft.com/EmsisoftCommandlineScanner32.exe
|
||||
AppDLName=Emsisoft_a2cmd\EmsisoftCommandlineScanner32.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=1
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Ran virus scans (Emsisoft)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
App=Emsisoft_a2cmd\a2cmd.cmd
|
||||
CopyConfigFirst=a2cmd.cmd
|
||||
WaitOnProcesses=a2cmd.exe
|
||||
|
|
@ -0,0 +1,39 @@
|
|||
[Config]
|
||||
Author=dSupportOnline
|
||||
LastEditDate=10/9/2014 1:20:00 PM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.voidtools.com/support/everything/
|
||||
AppDLPage=http://www.voidtools.com/downloads/
|
||||
App=everything32\Everything.exe
|
||||
App64=everything64\Everything.exe
|
||||
AppURL64=http://www.voidtools.com/Everything-1.3.4.686.x64.zip
|
||||
AppDLName64=everything64.zip
|
||||
UseFTPServer=0
|
||||
AppURL=http://www.voidtools.com/Everything-1.3.4.686.x86.zip
|
||||
AppDLName=everything32.zip
|
||||
AlwaysAttemptDownload=0
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
CopyConfigFirst=Everything.ini
|
||||
SaveConfigAfter=1
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
AppDesc=Quickly searches files and folders
|
||||
LogVerbiage=Searched system for files and folders to further inspect or remove.
|
||||
34
.bin/d7ii/Config/CustomApps_d7II/GMER.cfg
Normal file
34
.bin/d7ii/Config/CustomApps_d7II/GMER.cfg
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
[Config]
|
||||
App=gmer\gmer.exe
|
||||
AppURL=http://www2.gmer.net/gmer.zip
|
||||
AppDLName=gmer.zip
|
||||
AppWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=1
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
DisableCloudShare=0
|
||||
UseFTPServer=0
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=7
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
SaveConfigAfter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
AppWebsite=http://www.gmer.net/
|
||||
LogVerbiage=Manually scanned for rootkit activity.
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 9:54:39 AM
|
||||
AppDLPage=http://www.gmer.net/
|
||||
AppDesc=Rootkit / Malware Scanner
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
37
.bin/d7ii/Config/CustomApps_d7II/GPU-Z Report.cfg
Normal file
37
.bin/d7ii/Config/CustomApps_d7II/GPU-Z Report.cfg
Normal file
|
|
@ -0,0 +1,37 @@
|
|||
[Config]
|
||||
Author=Proctor Foolish IT
|
||||
LastEditDate=3/2/2016 5:09:19 PM
|
||||
PostRunApp=
|
||||
AppWebsite=https://www.techpowerup.com/gpuz/
|
||||
AppDesc=Reported on Graphis Adapter Information
|
||||
LogVerbiage=Reviewed hardware information of the system.
|
||||
UseFTPServer=0
|
||||
AppURL=https://www.techpowerup.com/downloads/2627/techpowerup-gpu-z-v0-8-7/start?server=6
|
||||
AppDLName=GPU-Z.exe
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsToMalwareLogs=0
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
AppParms=-dump gpu-z.xml
|
||||
SnatchReportsLoc=gpu-z.xml
|
||||
App=GPU-Z.exe
|
||||
35
.bin/d7ii/Config/CustomApps_d7II/GPU-Z.cfg
Normal file
35
.bin/d7ii/Config/CustomApps_d7II/GPU-Z.cfg
Normal file
|
|
@ -0,0 +1,35 @@
|
|||
[Config]
|
||||
Author=Proctor Foolish IT
|
||||
LastEditDate=3/2/2016 4:24:41 PM
|
||||
PostRunApp=GPU-Z Report
|
||||
AppWebsite=https://www.techpowerup.com/gpuz/
|
||||
App64=GPU-Z.exe
|
||||
UseFTPServer=0
|
||||
AppURL=https://www.techpowerup.com/downloads/2627/techpowerup-gpu-z-v0-8-7/start?server=6
|
||||
AppDLName=GPU-Z.exe
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
AppDesc=Review Graphis Adapter Information
|
||||
LogVerbiage=Reviewed hardware information of the system.
|
||||
|
|
@ -0,0 +1,36 @@
|
|||
[Config]
|
||||
LastEditDate=10/13/2014 6:35:14 AM
|
||||
PostRunApp=
|
||||
AppWebsite=https://support.google.com/chrome/answer/6086368?p=ui_software_removal_tool&rd=1
|
||||
AppDLPage=https://www.google.com/chrome/srt/
|
||||
App=software_removal_tool.exe
|
||||
UseFTPServer=0
|
||||
AppURL=https://dl.google.com/dl/softwareremovaltool/win/software_removal_tool.exe
|
||||
AppDLName=software_removal_tool.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=0
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
Author=FoolishTech
|
||||
AppDesc=Remove add-ons, extensions, toolbars, and other software that may interfere with the operation of Google Chrome.
|
||||
LogVerbiage=Scanned for and removed any toolbars/extensions/add-ons that may interfere with the operation of Google Chrome.
|
||||
39
.bin/d7ii/Config/CustomApps_d7II/HeavyLoad.cfg
Normal file
39
.bin/d7ii/Config/CustomApps_d7II/HeavyLoad.cfg
Normal file
|
|
@ -0,0 +1,39 @@
|
|||
[Config]
|
||||
Author=Foolish IT
|
||||
LastEditDate=3/30/2016 11:11:09 AM
|
||||
PostRunApp=
|
||||
AppWebsite=https://www.jam-software.de/heavyload/
|
||||
AppDLPage=https://www.jam-software.de/heavyload/
|
||||
App=HeavyLoadx86\HeavyLoad.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://www.jam-software.com/heavyload/HeavyLoad-x86.zip
|
||||
AppDLName=HeavyLoadx86.zip
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
AppURL64=http://www.jam-software.com/heavyload/HeavyLoad-x64.zip
|
||||
AppDLName64=HeavyLoadx64.zip
|
||||
App64=HeavyLoadx64\HeavyLoad.exe
|
||||
AppDesc=Stress Testing Application
|
||||
LogVerbiage=Stress Tested System
|
||||
44
.bin/d7ii/Config/CustomApps_d7II/HitmanPro (Manual).cfg
Normal file
44
.bin/d7ii/Config/CustomApps_d7II/HitmanPro (Manual).cfg
Normal file
|
|
@ -0,0 +1,44 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=10/10/2014 4:14:36 AM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.surfright.nl/en/hitmanpro/
|
||||
AppDLPage=http://www.surfright.nl/en/downloads/
|
||||
AppDesc=Malware scanner (Manual removal)
|
||||
App=HitmanPro.exe
|
||||
App64=HitmanPro_x64.exe
|
||||
AppParms=/noinstall /excludelist="%3rdpath%\HMP_Excludes.txt" /log="%malreportdir%\HitmanPro_Scan_Log_%date%.txt"
|
||||
AppURL64=http://dl.surfright.nl/HitmanPro_x64.exe
|
||||
AppURL64B=http://dl.surfright.nl/FoolishIT/HitmanPro_x64.exe
|
||||
AppDLName64=HitmanPro_x64.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://dl.surfright.nl/HitmanPro.exe
|
||||
AppURLB=http://dl.surfright.nl/FoolishIT/HitmanPro.exe
|
||||
AppDLName=HitmanPro.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=4
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=1
|
||||
AppWaitTime=60
|
||||
AppRandomize=1
|
||||
CopyConfigFirst=HMP.cmd
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Ran Malware Scans and manually investigated results (HitmanPro)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
45
.bin/d7ii/Config/CustomApps_d7II/HitmanPro.cfg
Normal file
45
.bin/d7ii/Config/CustomApps_d7II/HitmanPro.cfg
Normal file
|
|
@ -0,0 +1,45 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=7/13/2015 10:52:20 AM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.surfright.nl/en/hitmanpro/
|
||||
AppDLPage=http://www.surfright.nl/en/downloads/
|
||||
AppDesc=Malware scanner
|
||||
App=HitmanPro.exe
|
||||
App64=HitmanPro_x64.exe
|
||||
AppParms=/clean /noinstall /excludelist="%3rdpath%\HMP_Excludes.txt" /log="%malreportdir%\HitmanPro_Scan_Log_%date%.txt"
|
||||
AppURL64=http://dl.surfright.nl/HitmanPro_x64.exe
|
||||
AppURL64B=http://dl.surfright.nl/FoolishIT/HitmanPro_x64.exe
|
||||
AppDLName64=HitmanPro_x64.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://dl.surfright.nl/HitmanPro.exe
|
||||
AppURLB=http://dl.surfright.nl/FoolishIT/HitmanPro.exe
|
||||
AppDLName=HitmanPro.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=3
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=1
|
||||
AppWaitTime=60
|
||||
AppRandomize=1
|
||||
CopyConfigFirst=HMP.cmd
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Ran Malware Scans (HitmanPro)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
LastDownload=8/31/2018
|
||||
42
.bin/d7ii/Config/CustomApps_d7II/JRT.cfg
Normal file
42
.bin/d7ii/Config/CustomApps_d7II/JRT.cfg
Normal file
|
|
@ -0,0 +1,42 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=7/13/2015 9:38:52 AM
|
||||
PostRunApp=
|
||||
AppWebsite=http://thisisudax.org/
|
||||
AppDLPage=http://thisisudax.org/
|
||||
AppDesc=Junkware Removal Tool - toolbar remover.
|
||||
App=JRT.exe
|
||||
AppParms=-y -om1 -nr
|
||||
UseFTPServer=0
|
||||
AppURL=http://thisisudax.org/downloads/JRT.exe
|
||||
AppDLName=JRT.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=1
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
CopyConfigFirst=JRT_Auto.cmd
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsLoc=%userprofile%\Desktop\JRT.txt
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Removed unnecessary internet browser add-ins (e.g. Toolbars) [JRT]
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
WaitOnProcesses=wget.dat,jq.dat,nircmd.dat,sed.dat,grep.dat,cut.dat,reg.exe
|
||||
LastDownload=8/19/2018
|
||||
AppWaitTime=30
|
||||
|
|
@ -0,0 +1,35 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=5/27/2014 1:45:37 PM
|
||||
AppWebsite=http://support.kaspersky.com/5350
|
||||
AppDLPage=http://support.kaspersky.com/viruses/disinfection/5350
|
||||
AppDesc=TDSS / Rootkit scanner
|
||||
App=TDSSKiller.exe
|
||||
AppParms=-accepteula -accepteulaksn -l "%malreportdir%\TDSSKiller_Report_%date%.txt" -tdlfs -dcexact -silent
|
||||
UseFTPServer=0
|
||||
AppURL=http://media.kaspersky.com/utilities/VirusUtilities/EN/tdsskiller.exe
|
||||
AppDLName=tdsskiller.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=3
|
||||
AppWait=1
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=1
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Scanned for MBR infections / rootkits (TDSSKiller)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=2
|
||||
LastDownload=8/31/2018
|
||||
35
.bin/d7ii/Config/CustomApps_d7II/Kaspersky TDSSKiller.cfg
Normal file
35
.bin/d7ii/Config/CustomApps_d7II/Kaspersky TDSSKiller.cfg
Normal file
|
|
@ -0,0 +1,35 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=5/27/2014 1:45:26 PM
|
||||
AppWebsite=http://support.kaspersky.com/5350
|
||||
AppDLPage=http://support.kaspersky.com/viruses/disinfection/5350
|
||||
AppDesc=TDSS / Rootkit scanner
|
||||
App=TDSSKiller.exe
|
||||
AppParms=-accepteula -accepteulaksn -l "%malreportdir%\TDSSKiller_Report_%date%.txt" -tdlfs -dcexact
|
||||
UseFTPServer=0
|
||||
AppURL=http://media.kaspersky.com/utilities/VirusUtilities/EN/tdsskiller.exe
|
||||
AppDLName=tdsskiller.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=3
|
||||
AppWait=1
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=1
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Scanned for MBR infections / rootkits (TDSSKiller)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
36
.bin/d7ii/Config/CustomApps_d7II/KillEmAll v5.cfg
Normal file
36
.bin/d7ii/Config/CustomApps_d7II/KillEmAll v5.cfg
Normal file
|
|
@ -0,0 +1,36 @@
|
|||
[Config]
|
||||
Author=Foolish IT
|
||||
LastEditDate=1/28/2016 3:33:42 PM
|
||||
PostRunApp=
|
||||
AppWebsite=https://www.foolishit.com/d7x/killemall/
|
||||
AppDLPage=https://www.foolishit.com/d7x/killemall/
|
||||
UseFTPServer=0
|
||||
AppURL=http://download.foolishit.com/killemall/KillEmAll_Portable.zip
|
||||
AppDLName=KillEmAll_Portable.zip
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
App=KillEmAll_Portable\KillEmAll.exe
|
||||
AutoFlag=0
|
||||
AppDesc=Kills non-essential processes
|
||||
LastDownload=5/17/2016
|
||||
36
.bin/d7ii/Config/CustomApps_d7II/MBRCheck (Offline).cfg
Normal file
36
.bin/d7ii/Config/CustomApps_d7II/MBRCheck (Offline).cfg
Normal file
|
|
@ -0,0 +1,36 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
App=MBRCheck.exe
|
||||
AppURL=http://ad13.geekstogo.com/MBRCheck.exe
|
||||
AppDLName=MBRCheck.exe
|
||||
AlwaysAttemptDownload=1
|
||||
AppWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsLoc=%userprofile%\Desktop\MBRCheck*.txt
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
UseFTPServer=0
|
||||
DLafterXdays=7
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
IsDLInstaller=0
|
||||
AppWebsite=http://www.majorgeeks.com/files/details/mbrcheck.html
|
||||
LogVerbiage=Checked MBR for infections.
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 9:59:38 AM
|
||||
AppDLPage=http://www.majorgeeks.com/files/details/mbrcheck.html
|
||||
AppDesc=MBR scanner, this profile is intended to be used from the Offline Operations page.
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
38
.bin/d7ii/Config/CustomApps_d7II/MBRCheck (Report Only).cfg
Normal file
38
.bin/d7ii/Config/CustomApps_d7II/MBRCheck (Report Only).cfg
Normal file
|
|
@ -0,0 +1,38 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=9/28/2014 4:13:43 PM
|
||||
PostRunApp=Autoruns_Copy
|
||||
AppWebsite=http://www.majorgeeks.com/files/details/mbrcheck.html
|
||||
AppDLPage=http://www.majorgeeks.com/files/details/mbrcheck.html
|
||||
AppDesc=MBR scanner - use as a second opinion, not reliable especially to repair any damage.
|
||||
App=MBRCheck.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://ad13.geekstogo.com/MBRCheck.exe
|
||||
AppDLName=MBRCheck.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=7
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=1
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsLoc=%userprofile%\Desktop\MBRCheck*.txt
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=1
|
||||
SendEnter=1
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Checked MBR for infections.
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=2
|
||||
LastDownload=9/28/2014
|
||||
36
.bin/d7ii/Config/CustomApps_d7II/MBRCheck.cfg
Normal file
36
.bin/d7ii/Config/CustomApps_d7II/MBRCheck.cfg
Normal file
|
|
@ -0,0 +1,36 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
App=MBRCheck.exe
|
||||
AppURL=http://ad13.geekstogo.com/MBRCheck.exe
|
||||
AppDLName=MBRCheck.exe
|
||||
AlwaysAttemptDownload=1
|
||||
AppWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=1
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsLoc=%userprofile%\Desktop\MBRCheck*.txt
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
UseFTPServer=0
|
||||
DLafterXdays=7
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
IsDLInstaller=0
|
||||
AppWebsite=http://www.majorgeeks.com/files/details/mbrcheck.html
|
||||
LogVerbiage=Checked MBR for infections.
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 10:00:33 AM
|
||||
AppDLPage=http://www.majorgeeks.com/files/details/mbrcheck.html
|
||||
AppDesc=MBR scanner - use as a second opinion, not reliable especially to repair any damage.
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
|
|
@ -0,0 +1,35 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/8/2014 1:17:11 AM
|
||||
AppWebsite=http://support.microsoft.com/kb/2812744
|
||||
AppDLPage=http://www.microsoft.com/en-us/download/details.aspx?id=36852
|
||||
AppDesc=Fixes a wide variety of issues with Microsoft Office - Installer version
|
||||
App=%programfiles(x86)%\Microsoft OffCAT\OffCAT.exe
|
||||
UseFTPServer=0
|
||||
InstallerParms=/passive
|
||||
InstallerName=OffCAT.msi
|
||||
AppURL=http://go.microsoft.com/fwlink/?LinkID=286211
|
||||
AppDLName=OffCAT.msi
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=1
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
|
|
@ -0,0 +1,32 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/8/2014 1:17:02 AM
|
||||
AppWebsite=http://support.microsoft.com/kb/2812744
|
||||
AppDLPage=http://www.microsoft.com/en-us/download/details.aspx?id=36852
|
||||
AppDesc=Fixes a wide variety of issues with Microsoft Office - Portable Version
|
||||
App=OffCAT\OffCAT.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://go.microsoft.com/fwlink/?LinkID=286208
|
||||
AppDLName=OffCAT.zip
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
|
|
@ -0,0 +1,37 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
App=mbar\mbar\mbar.exe
|
||||
AppURL=http://downloads.malwarebytes.org/file/mbar
|
||||
AppDLName=mbar.7z
|
||||
AlwaysAttemptDownload=1
|
||||
AppWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=1
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=1
|
||||
RunWithSystemAccess=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
ServiceWait=0
|
||||
SnatchReportsLoc=%3rdpath%\system-log.txt
|
||||
IsDLInstaller=0
|
||||
Servers=1
|
||||
UseFTPServer=0
|
||||
DLafterXdays=7
|
||||
PriorAlert=1
|
||||
LogVerbiage=Scanned for MBR infections / rootkits (MBAR)
|
||||
AppWebsite=http://www.malwarebytes.org/products/mbar/
|
||||
LastDownload=11/3/2013
|
||||
NonDirectURLs=0
|
||||
WaitOnProcesses=mbar.exe
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 9:59:08 AM
|
||||
AppDLPage=http://www.malwarebytes.org/products/mbar/
|
||||
AppDesc=Rootkit scanner
|
||||
AutoFlag=0
|
||||
39
.bin/d7ii/Config/CustomApps_d7II/Malwarebytes v2.cfg
Normal file
39
.bin/d7ii/Config/CustomApps_d7II/Malwarebytes v2.cfg
Normal file
|
|
@ -0,0 +1,39 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=1/26/2015 3:38:04 PM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.malwarebytes.org/products/malwarebytes_free/
|
||||
AppDLPage=http://www.malwarebytes.org/products/malwarebytes_free/
|
||||
AppDesc=Malware scanner
|
||||
App=%programfiles(x86)%\Malwarebytes Anti-Malware\mbam.exe
|
||||
UseFTPServer=0
|
||||
InstallerParms=/silent /suppressmsgboxes /norestart /nocancel /lang=1033
|
||||
InstallerName=mbam2-setup.exe
|
||||
AppURL=http://downloads.malwarebytes.org/file/mbam/
|
||||
AppDLName=mbam2-setup.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=0
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=1
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsLoc=%programdata%\Malwarebytes\Malwarebytes Anti-Malware\Logs\*.xml
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=1
|
||||
LogVerbiage=Scanned for Malware (MBAM)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
|
|
@ -0,0 +1,38 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
App=stinger32.exe
|
||||
App64=stinger64.exe
|
||||
AppParms=--go --repair --noprocess --noregistry --scanpath=%tdrive% --reportpath="%malreportdir%"
|
||||
AppURL64=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger64.exe
|
||||
AppDLName64=stinger64.exe
|
||||
AppURL=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger32.exe
|
||||
AppDLName=stinger32.exe
|
||||
AlwaysAttemptDownload=1
|
||||
AppWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
ServiceWait=1
|
||||
AppWebsite=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
|
||||
UseFTPServer=0
|
||||
PriorAlert=1
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Ran virus scans (McAfee Stinger)
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 10:01:11 AM
|
||||
AppDLPage=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
|
||||
AppDesc=Virus scanner - meant to be used from the Offline Operations tab.
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
37
.bin/d7ii/Config/CustomApps_d7II/McAfee Stinger (Silent).cfg
Normal file
37
.bin/d7ii/Config/CustomApps_d7II/McAfee Stinger (Silent).cfg
Normal file
|
|
@ -0,0 +1,37 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=5/27/2014 1:47:06 PM
|
||||
AppWebsite=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
|
||||
AppDLPage=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
|
||||
AppDesc=Virus scanner
|
||||
App=stinger32.exe
|
||||
App64=stinger64.exe
|
||||
AppParms=--silent --go --repair --adl --reportpath="%malreportdir%"
|
||||
AppURL64=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger64.exe
|
||||
AppDLName64=stinger64.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger32.exe
|
||||
AppDLName=stinger32.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=3
|
||||
AppWait=1
|
||||
PriorAlert=0
|
||||
ServiceWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Ran virus scans (McAfee Stinger)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=2
|
||||
|
|
@ -0,0 +1,38 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
AppWebsite=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
|
||||
App=stinger32.exe
|
||||
App64=stinger64.exe
|
||||
AppParms=--silent --go --repair --noprocess --noregistry --scanpath=%tdrive% --reportpath="%malreportdir%"
|
||||
AppURL64=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger64.exe
|
||||
AppDLName64=stinger64.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger32.exe
|
||||
AppDLName=stinger32.exe
|
||||
AlwaysAttemptDownload=1
|
||||
AppWait=1
|
||||
PriorAlert=0
|
||||
ServiceWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Ran virus scans (McAfee Stinger)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 10:01:42 AM
|
||||
AppDLPage=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
|
||||
AppDesc=Virus scanner - meant to be used from the Offline Operations tab.
|
||||
NonDirectURLs=0
|
||||
AutoFlag=2
|
||||
LastDownload=10/27/2017
|
||||
38
.bin/d7ii/Config/CustomApps_d7II/McAfee Stinger.cfg
Normal file
38
.bin/d7ii/Config/CustomApps_d7II/McAfee Stinger.cfg
Normal file
|
|
@ -0,0 +1,38 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=5/27/2014 1:46:41 PM
|
||||
AppWebsite=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
|
||||
AppDLPage=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
|
||||
AppDesc=Virus scanner
|
||||
App=stinger32.exe
|
||||
App64=stinger64.exe
|
||||
AppParms=--go --repair --adl --reportpath="%malreportdir%"
|
||||
AppURL64=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger64.exe
|
||||
AppDLName64=stinger64.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger32.exe
|
||||
AppDLName=stinger32.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=3
|
||||
AppWait=1
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Ran virus scans (McAfee Stinger)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
|
|
@ -0,0 +1,35 @@
|
|||
[Config]
|
||||
Author=Microsoft
|
||||
LastEditDate=6/20/2016 2:00:27 PM
|
||||
PostRunApp=
|
||||
AppWebsite=https://support.microsoft.com/en-us/kb/2698555
|
||||
AppDLPage=http://go.microsoft.com/fwlink/?LinkID=246062
|
||||
App=NetFxRepairTool.exe
|
||||
UseFTPServer=0
|
||||
AppURL=https://download.microsoft.com/download/2/B/D/2BDE5459-2225-48B8-830C-AE19CAF038F1/NetFxRepairTool.exe
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=30
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=1
|
||||
LastDownload=6/20/2016
|
||||
AppDLName=NetFxRepairTool.exe
|
||||
AutoFlag=0
|
||||
|
|
@ -0,0 +1,34 @@
|
|||
[Config]
|
||||
LastEditDate=2/8/2014 12:42:30 AM
|
||||
AppWebsite=www.microsoft.com
|
||||
AppDLPage=http://go.microsoft.com/?linkid=9775982
|
||||
AppDesc=Fix a wide variety of Windows issues all in one portable MS FixIT
|
||||
App=MicrosoftFixit-portable.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://download.microsoft.com/download/E/2/3/E237A32D-E0A9-4863-B864-9E820C1C6F9A/MicrosoftFixit-portable.exe
|
||||
AppDLName=MicrosoftFixit-portable.exe
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Fixed misc. broken Windows functions with %app%
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=0
|
||||
NonDirectURLs=0
|
||||
Author=FoolishTech
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
|
|
@ -0,0 +1,34 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/8/2014 1:20:09 AM
|
||||
AppWebsite=http://support.microsoft.com/kb/971058/en-US
|
||||
AppDLPage=http://go.microsoft.com/?linkid=9665683
|
||||
AppDesc=MS FixIt 50202 fixes issues with Windows Update - This will reboot!
|
||||
App=MicrosoftFixIt50202.msi
|
||||
AppParms=/passive
|
||||
UseFTPServer=0
|
||||
AppURL=http://go.microsoft.com/?linkid=9665683
|
||||
AppDLName=MicrosoftFixIt50202.msi
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
LastDownload=10/27/2017
|
||||
AutoFlag=1
|
||||
|
|
@ -0,0 +1,34 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/8/2014 1:03:54 AM
|
||||
AppWebsite=http://support.microsoft.com/kb/811259
|
||||
AppDLPage=http://go.microsoft.com/?linkid=9662461
|
||||
AppDesc=Microsoft FixIt 50203 fixes Winsock corruption issues - This will reboot!
|
||||
App=MicrosoftFixit50203.msi
|
||||
AppParms=/passive
|
||||
UseFTPServer=0
|
||||
AppURL=http://go.microsoft.com/?linkid=9662461
|
||||
AppDLName=MicrosoftFixit50203.msi
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
LastDownload=10/27/2017
|
||||
|
|
@ -0,0 +1,38 @@
|
|||
[Config]
|
||||
Author=Microsoft
|
||||
LastEditDate=7/11/2016 1:23:26 PM
|
||||
PostRunApp=
|
||||
AppWebsite=https://www.microsoft.com/security/scanner/en-us/default.aspx
|
||||
AppDLPage=https://www.microsoft.com/security/scanner/en-us/default.aspx
|
||||
App=msert.exe
|
||||
App64=msert.exe
|
||||
AppURL64=http://definitionupdates.microsoft.com/download/definitionupdates/safetyscanner/amd64/msert.exe
|
||||
AppDLName64=msert.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://definitionupdates.microsoft.com/download/definitionupdates/safetyscanner/x86/msert.exe
|
||||
AppDLName=msert.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=9
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=7/11/2016
|
||||
35
.bin/d7ii/Config/CustomApps_d7II/Neutron (Sync Time).cfg
Normal file
35
.bin/d7ii/Config/CustomApps_d7II/Neutron (Sync Time).cfg
Normal file
|
|
@ -0,0 +1,35 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
AppWebsite=http://keir.net/neutron.html
|
||||
App=neutron\Neutron.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://keir.net/download/neutron.zip
|
||||
AppDLName=neutron.zip
|
||||
AlwaysAttemptDownload=0
|
||||
AppWait=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
CopyConfigFirst=neutron.ini
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
PriorAlert=0
|
||||
LogVerbiage=Synced Windows time with the atomic clock.
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 10:03:42 AM
|
||||
AppDLPage=http://keir.net/neutron.html
|
||||
AppDesc=Sync time with an internet time server
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
LastDownload=10/27/2017
|
||||
34
.bin/d7ii/Config/CustomApps_d7II/OTL.cfg
Normal file
34
.bin/d7ii/Config/CustomApps_d7II/OTL.cfg
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
[Config]
|
||||
App=OTL.exe
|
||||
AppURL=http://oldtimer.geekstogo.com/OTL.exe
|
||||
AppDLName=OTL.exe
|
||||
AppWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=1
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
DisableCloudShare=0
|
||||
UseFTPServer=0
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=7
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
SaveConfigAfter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
AppWebsite=http://www.geekstogo.com/forum/topic/277391-otl-tutorial-how-to-use-oldtimer-listit/
|
||||
LogVerbiage=Performed manual inspection for viruses/malware.
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 10:05:19 AM
|
||||
AppDLPage=http://www.geekstogo.com/forum/topic/277391-otl-tutorial-how-to-use-oldtimer-listit/
|
||||
AppDesc=Malware scanner and startup manager.
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
34
.bin/d7ii/Config/CustomApps_d7II/OpenHardwareMonitor.cfg
Normal file
34
.bin/d7ii/Config/CustomApps_d7II/OpenHardwareMonitor.cfg
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
App=openhardwaremonitor\OpenHardwareMonitor\OpenHardwareMonitor.exe
|
||||
AppURL=http://openhardwaremonitor.org/files/openhardwaremonitor-v0.6.0-beta.zip
|
||||
AppDLName=openhardwaremonitor.zip
|
||||
AlwaysAttemptDownload=0
|
||||
AppWait=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=0
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
AppWebsite=http://openhardwaremonitor.org/
|
||||
UseFTPServer=0
|
||||
PriorAlert=0
|
||||
LogVerbiage=Checked hardware temperatures / fan speeds.
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 10:04:27 AM
|
||||
AppDLPage=http://openhardwaremonitor.org/downloads/
|
||||
AppDesc=Detailed hardware information
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
42
.bin/d7ii/Config/CustomApps_d7II/Opened Files View.cfg
Normal file
42
.bin/d7ii/Config/CustomApps_d7II/Opened Files View.cfg
Normal file
|
|
@ -0,0 +1,42 @@
|
|||
[Config]
|
||||
Author=dSupportOnline
|
||||
LastEditDate=10/29/2014 9:41:55 AM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.nirsoft.net/utils/opened_files_view.html
|
||||
AppDLPage=http://www.nirsoft.net/utils/opened_files_view.html
|
||||
AppDesc=Shows currently opened files in use by the system
|
||||
App=ofview\OpenedFilesView.exe
|
||||
App64=ofview-x64\OpenedFilesView.exe
|
||||
AppURL64=http://www.nirsoft.net/utils/ofview-x64.zip
|
||||
AppDLName64=ofview-x64.zip
|
||||
AppURLSpoof=http://www.nirsoft.net/utils/opened_files_view.html
|
||||
UseFTPServer=0
|
||||
AppURL=http://www.nirsoft.net/utils/ofview.zip
|
||||
AppDLName=ofview.zip
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=1
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Detected currently open files and manipulated as necessary.
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
CopyConfigFirst=OpenedFilesView.cfg
|
||||
24
.bin/d7ii/Config/CustomApps_d7II/OpenedFilesView.cfg
Normal file
24
.bin/d7ii/Config/CustomApps_d7II/OpenedFilesView.cfg
Normal file
|
|
@ -0,0 +1,24 @@
|
|||
[General]
|
||||
ToolTipTimeAutoPop=-1
|
||||
ToolTipTimeInitial=10
|
||||
ToolTipTimeReshow=10
|
||||
TrayIcon=0
|
||||
ShowGridLines=0
|
||||
ShowOpenedFiles=1
|
||||
ShowOpenedDirectories=0
|
||||
ShowNetworkFiles=0
|
||||
SortOnRefresh=0
|
||||
HideWindowsFiles=0
|
||||
HideSystemProcessFiles=0
|
||||
HideSvchostFiles=0
|
||||
AddExportHeaderLine=0
|
||||
ShowInfoTip=1
|
||||
AutoRefresh=0
|
||||
SaveFilterIndex=0
|
||||
ConvertToLongPath=0
|
||||
MarkModifiedFilenames=1
|
||||
MarkPositionChange=1
|
||||
MarkOddEvenRows=0
|
||||
WinPos=2C 00 00 00 00 00 00 00 01 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 80 02 00 00 E0 01 00 00
|
||||
Columns=82 00 00 00 2C 01 01 00 3C 00 02 00 78 00 03 00 78 00 04 00 46 00 05 00 64 00 06 00 3C 00 07 00 3C 00 08 00 3C 00 09 00 3C 00 0A 00 3C 00 0B 00 3C 00 0C 00 50 00 0D 00 50 00 0E 00 50 00 0F 00 78 00 10 00 FA 00 11 00 50 00 12 00 50 00 13 00
|
||||
Sort=0
|
||||
37
.bin/d7ii/Config/CustomApps_d7II/PatchMyPC (Auto).cfg
Normal file
37
.bin/d7ii/Config/CustomApps_d7II/PatchMyPC (Auto).cfg
Normal file
|
|
@ -0,0 +1,37 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=5/27/2014 1:45:01 PM
|
||||
AppWebsite=www.patchmypc.net
|
||||
AppDLPage=www.patchmypc.net
|
||||
AppDesc=Windows and misc application updater
|
||||
App=PatchMyPC.exe
|
||||
AppParms=/auto /update
|
||||
UseFTPServer=0
|
||||
AppURL=https://patchmypc.net/freeupdater/PatchMyPC.exe
|
||||
AppDLName=PatchMyPC.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=3
|
||||
AppWait=1
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
CopyConfigFirst=PatchMyPC.reg
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsLoc=%systemdrive%\%computername%.rtf
|
||||
SnatchReportsToMalwareLogs=0
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Installed updates Windows and commonly used applications.
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
LastDownload=10/27/2017
|
||||
37
.bin/d7ii/Config/CustomApps_d7II/PatchMyPC.cfg
Normal file
37
.bin/d7ii/Config/CustomApps_d7II/PatchMyPC.cfg
Normal file
|
|
@ -0,0 +1,37 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=5/27/2014 1:44:22 PM
|
||||
AppWebsite=www.patchmypc.net
|
||||
AppDLPage=www.patchmypc.net
|
||||
AppDesc=Windows and misc application updater
|
||||
App=PatchMyPC.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://www.patchmypc.net/PatchMyPC.exe
|
||||
AppDLName=PatchMyPC.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=3
|
||||
AppWait=1
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
CopyConfigFirst=PatchMyPC.reg
|
||||
ExportRegAfter=HKLM\Software\Patch My PC\Options
|
||||
SaveConfigAfter=1
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsLoc=%systemdrive%\%computername%.rtf
|
||||
SnatchReportsToMalwareLogs=0
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Installed updates Windows and commonly used applications.
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
36
.bin/d7ii/Config/CustomApps_d7II/Petya Encryption Fix.cfg
Normal file
36
.bin/d7ii/Config/CustomApps_d7II/Petya Encryption Fix.cfg
Normal file
|
|
@ -0,0 +1,36 @@
|
|||
[Config]
|
||||
Author=Foolish Proctor
|
||||
LastEditDate=4/13/2016 3:12:07 PM
|
||||
PostRunApp=
|
||||
AppWebsite=http://rmprepusb.blogspot.co.uk/2016/04/petya-whole-disk-encryption-fix.html
|
||||
AppDLPage=http://rmprepusb.blogspot.co.uk/2016/04/petya-whole-disk-encryption-fix.html
|
||||
App=PetyaExtractor\PetyaExtractor.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://download.bleepingcomputer.com/fabian-wosar/PetyaExtractor.zip
|
||||
AppDLName=PetyaExtractor.zip
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=7
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
AppDesc=Decrypt Disk with Petya malware infection
|
||||
LogVerbiage=Decrypt Disk infected with Petya malware
|
||||
|
|
@ -0,0 +1,38 @@
|
|||
[Config]
|
||||
App=ccleaner\CCleaner.exe
|
||||
App64=ccleaner\CCleaner64.exe
|
||||
AppParms=/auto
|
||||
AppURL=http://www.piriform.com/ccleaner/download/portable/downloadfile
|
||||
AppDLName=ccleaner.zip
|
||||
AppWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
AlwaysAttemptDownload=1
|
||||
CopyConfigFirst=CCleaner.ini
|
||||
SaveConfigAfter=0
|
||||
DisableCloudShare=0
|
||||
UseFTPServer=0
|
||||
DLafterXdays=7
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
Servers=1
|
||||
AppWebsite=www.piriform.com/ccleaner
|
||||
LogVerbiage=Scanned registry for unnecessary data and removed.
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 10:06:48 AM
|
||||
AppDLPage=http://www.piriform.com/ccleaner/builds
|
||||
AppDesc=Temp file remover and registry cleaner
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
LastDownload=8/13/2018
|
||||
37
.bin/d7ii/Config/CustomApps_d7II/Piriform CCleaner.cfg
Normal file
37
.bin/d7ii/Config/CustomApps_d7II/Piriform CCleaner.cfg
Normal file
|
|
@ -0,0 +1,37 @@
|
|||
[Config]
|
||||
App=ccleaner\CCleaner.exe
|
||||
App64=ccleaner\CCleaner64.exe
|
||||
AppURL=http://www.piriform.com/ccleaner/download/portable/downloadfile
|
||||
AppDLName=ccleaner.zip
|
||||
AppWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
AlwaysAttemptDownload=1
|
||||
CopyConfigFirst=CCleaner.ini
|
||||
SaveConfigAfter=1
|
||||
DisableCloudShare=0
|
||||
UseFTPServer=0
|
||||
DLafterXdays=7
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
Servers=1
|
||||
AppWebsite=www.piriform.com/ccleaner
|
||||
LogVerbiage=Scanned registry for unnecessary data and removed.
|
||||
LastEditDate=2/7/2014 10:07:10 AM
|
||||
AppDLPage=http://www.piriform.com/ccleaner/builds
|
||||
NonDirectURLs=0
|
||||
Author=FoolishTech
|
||||
AppDesc=Temp file remover and registry cleaner
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
|
|
@ -0,0 +1,38 @@
|
|||
[Config]
|
||||
App=defraggler\df.exe
|
||||
App64=defraggler\df64.exe
|
||||
AppParms=%systemdrive%
|
||||
AppURL=http://www.piriform.com/defraggler/download/portable/downloadfile
|
||||
AppDLName=defraggler.zip
|
||||
AppWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
AlwaysAttemptDownload=1
|
||||
CopyConfigFirst=Defraggler.ini
|
||||
SaveConfigAfter=0
|
||||
DisableCloudShare=0
|
||||
UseFTPServer=0
|
||||
DLafterXdays=7
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
Servers=1
|
||||
AppWebsite=www.piriform.com/defraggler
|
||||
LogVerbiage=Defragmented file system (Defraggler)
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 10:07:50 AM
|
||||
AppDLPage=http://www.piriform.com/defraggler/builds
|
||||
AppDesc=Disk defragmenter
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
LastDownload=10/27/2017
|
||||
37
.bin/d7ii/Config/CustomApps_d7II/Piriform Defraggler.cfg
Normal file
37
.bin/d7ii/Config/CustomApps_d7II/Piriform Defraggler.cfg
Normal file
|
|
@ -0,0 +1,37 @@
|
|||
[Config]
|
||||
App=Defraggler\Defraggler.exe
|
||||
App64=Defraggler\Defraggler64.exe
|
||||
AppURL=http://www.piriform.com/defraggler/download/portable/downloadfile
|
||||
AppDLName=defraggler.zip
|
||||
AppWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
AlwaysAttemptDownload=1
|
||||
CopyConfigFirst=Defraggler.ini
|
||||
SaveConfigAfter=1
|
||||
DisableCloudShare=0
|
||||
UseFTPServer=0
|
||||
DLafterXdays=7
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
Servers=1
|
||||
AppWebsite=www.piriform.com/defraggler
|
||||
LogVerbiage=Defragmented file system (Defraggler)
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 10:08:05 AM
|
||||
AppDLPage=http://www.piriform.com/defraggler/builds
|
||||
AppDesc=Disk defragmenter
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
33
.bin/d7ii/Config/CustomApps_d7II/Piriform Recuva.cfg
Normal file
33
.bin/d7ii/Config/CustomApps_d7II/Piriform Recuva.cfg
Normal file
|
|
@ -0,0 +1,33 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
App=recuva\recuva.exe
|
||||
App64=recuva\recuva64.exe
|
||||
AppURL=http://www.piriform.com/recuva/download/portable/downloadfile
|
||||
AppDLName=recuva.zip
|
||||
AlwaysAttemptDownload=0
|
||||
AppWait=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=0
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
AppWebsite=www.piriform.com/recuva
|
||||
UseFTPServer=0
|
||||
PriorAlert=0
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 10:08:40 AM
|
||||
AppDLPage=http://www.piriform.com/recuva/builds
|
||||
AppDesc=File undelete utility
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
35
.bin/d7ii/Config/CustomApps_d7II/Piriform Speccy.cfg
Normal file
35
.bin/d7ii/Config/CustomApps_d7II/Piriform Speccy.cfg
Normal file
|
|
@ -0,0 +1,35 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
App=speccy\Speccy.exe
|
||||
App64=speccy\Speccy64.exe
|
||||
AppURL=http://www.piriform.com/speccy/download/portable/downloadfile
|
||||
AppDLName=speccy.zip
|
||||
AlwaysAttemptDownload=0
|
||||
AppWait=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=0
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
AppWebsite=www.piriform.com/speccy
|
||||
UseFTPServer=0
|
||||
PriorAlert=0
|
||||
LogVerbiage=Gathered information on system specs.
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 10:09:08 AM
|
||||
AppDLPage=http://www.piriform.com/speccy/builds
|
||||
AppDesc=System information utility.
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
39
.bin/d7ii/Config/CustomApps_d7II/PreviousFilesRecovery.cfg
Normal file
39
.bin/d7ii/Config/CustomApps_d7II/PreviousFilesRecovery.cfg
Normal file
|
|
@ -0,0 +1,39 @@
|
|||
[Config]
|
||||
LastEditDate=7/14/2016 4:49:58 PM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.nirsoft.net/utils/previous_files_recovery.html
|
||||
AppDLPage=http://www.nirsoft.net/utils/previous_files_recovery.html
|
||||
AppDesc=Recover Previous Files
|
||||
App=previousfilesrecovery\PreviousFilesRecovery.exe
|
||||
App64=previousfilesrecovery-x64\PreviousFilesRecovery.exe
|
||||
AppURL64=http://www.nirsoft.net/utils/previousfilesrecovery-x64.zip
|
||||
AppDLName64=previousfilesrecovery-x64.zip
|
||||
UseFTPServer=0
|
||||
AppURL=http://www.nirsoft.net/utils/previousfilesrecovery.zip
|
||||
AppDLName=previousfilesrecovery.zip
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=30
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Recover Previous Files
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
Author=FoolishProctor
|
||||
39
.bin/d7ii/Config/CustomApps_d7II/RegFromApp-x32.cfg
Normal file
39
.bin/d7ii/Config/CustomApps_d7II/RegFromApp-x32.cfg
Normal file
|
|
@ -0,0 +1,39 @@
|
|||
[Config]
|
||||
Author=dSupportOnline
|
||||
LastEditDate=10/29/2014 9:50:53 AM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.nirsoft.net/utils/reg_file_from_application.html
|
||||
AppDLPage=http://www.nirsoft.net/utils/reg_file_from_application.html
|
||||
AppDesc=Shows registry entries created by a selected process
|
||||
App=regfromapp\RegFromApp.exe
|
||||
AppURLSpoof=http://www.nirsoft.net/utils/reg_file_from_application.html
|
||||
UseFTPServer=0
|
||||
AppURL=http://www.nirsoft.net/utils/regfromapp.zip
|
||||
AppDLName=regfromapp.zip
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
CopyConfigFirst=RegFromApp.cfg
|
||||
SaveConfigAfter=1
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Detected registry entries created by 32-bit application.
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
39
.bin/d7ii/Config/CustomApps_d7II/RegFromApp-x64.cfg
Normal file
39
.bin/d7ii/Config/CustomApps_d7II/RegFromApp-x64.cfg
Normal file
|
|
@ -0,0 +1,39 @@
|
|||
[Config]
|
||||
Author=dSupportOnline
|
||||
LastEditDate=10/29/2014 9:52:31 AM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.nirsoft.net/utils/reg_file_from_application.html
|
||||
AppDLPage=http://www.nirsoft.net/utils/reg_file_from_application.html
|
||||
AppDesc=Shows registry entries created by a selected 64-bit process
|
||||
App=regfromapp-x64\RegFromApp.exe
|
||||
AppURLSpoof=http://www.nirsoft.net/utils/reg_file_from_application.html
|
||||
UseFTPServer=0
|
||||
AppURL=http://www.nirsoft.net/utils/regfromapp-x64.zip
|
||||
AppDLName=regfromapp-x64.zip
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
CopyConfigFirst=RegFromApp.cfg
|
||||
SaveConfigAfter=1
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Detected registry entries created by 64-bit application.
|
||||
32=0
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
9
.bin/d7ii/Config/CustomApps_d7II/RegFromApp.cfg
Normal file
9
.bin/d7ii/Config/CustomApps_d7II/RegFromApp.cfg
Normal file
|
|
@ -0,0 +1,9 @@
|
|||
[General]
|
||||
RegFileVersion=5
|
||||
AddOnlyModifiedValues=1
|
||||
DisplayMode=1
|
||||
ProcessPath=
|
||||
ProcessParams=
|
||||
StartImmediately=0
|
||||
ListViewSortProcess=0
|
||||
WinPos=2C 00 00 00 00 00 00 00 01 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 80 02 00 00 E0 01 00 00
|
||||
38
.bin/d7ii/Config/CustomApps_d7II/Revo Uninstaller.cfg
Normal file
38
.bin/d7ii/Config/CustomApps_d7II/Revo Uninstaller.cfg
Normal file
|
|
@ -0,0 +1,38 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=8/30/2016 3:23:42 PM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.revouninstaller.com/
|
||||
AppDLPage=http://www.revouninstaller.com/download-free-portable.php
|
||||
AppDesc=Application uninstaller and cleanup utility
|
||||
App=revouninstaller\RevoUninstaller_Portable\x86\RevoUn.exe
|
||||
App64=revouninstaller\RevoUninstaller_Portable\x64\RevoUn.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://www.revouninstaller.com/download/revouninstaller.zip
|
||||
AppDLName=revouninstaller.zip
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=7
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Uninstalled unnecessary / junk programs.
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
41
.bin/d7ii/Config/CustomApps_d7II/Rogue Killer.cfg
Normal file
41
.bin/d7ii/Config/CustomApps_d7II/Rogue Killer.cfg
Normal file
|
|
@ -0,0 +1,41 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=6/19/2015 4:06:02 PM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.adlice.com/softwares/roguekiller/
|
||||
AppDLPage=http://www.adlice.com/softwares/roguekiller/
|
||||
AppDesc=Rogue malware remover.
|
||||
App=RogueKiller.exe
|
||||
App64=RogueKillerX64.exe
|
||||
AppURL64=http://download.adlice.com/RogueKiller/RogueKillerX64.exe
|
||||
AppDLName64=RogueKillerX64.exe
|
||||
UseFTPServer=0
|
||||
AppURL=http://download.adlice.com/RogueKiller/RogueKiller.exe
|
||||
AppDLName=RogueKiller.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=3
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=1
|
||||
ServiceWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=1
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsLoc=%programdata%\RogueKiller\Logs\RKreport*.txt
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Scanned for rogue applications and malware (RogueKiller)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=0
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=6/19/2015
|
||||
39
.bin/d7ii/Config/CustomApps_d7II/ShadowCopyView.cfg
Normal file
39
.bin/d7ii/Config/CustomApps_d7II/ShadowCopyView.cfg
Normal file
|
|
@ -0,0 +1,39 @@
|
|||
[Config]
|
||||
Author=Proctor Foolish IT LLC
|
||||
LastEditDate=6/27/2016 9:46:36 AM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.nirsoft.net/utils/shadow_copy_view.html
|
||||
AppDLPage=http://www.nirsoft.net/utils/shadow_copy_view.html
|
||||
App=shadowcopyview\ShadowCopyView.exe
|
||||
App64=shadowcopyview-x64\ShadowCopyView.exe
|
||||
AppURL64=http://www.nirsoft.net/utils/shadowcopyview-x64.zip
|
||||
AppDLName64=shadowcopyview-x64.zip
|
||||
UseFTPServer=0
|
||||
AppURL=http://www.nirsoft.net/utils/shadowcopyview.zip
|
||||
AppDLName=shadowcopyview.zip
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=30
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AppDesc=Manage Shadow Copy files
|
||||
LogVerbiage=Manage Shadow Copy files
|
||||
LastDownload=6/27/2016
|
||||
|
|
@ -0,0 +1,33 @@
|
|||
[Config]
|
||||
Author=dSupportOnline
|
||||
LastEditDate=10/9/2014 1:41:32 PM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.shouldiremoveit.com
|
||||
App=%WINDIR%\System32\MsiExec.exe
|
||||
App64=%WINDIR%\SysWow64\MsiExec.exe
|
||||
AppParms=/X{4E62123C-4C0D-4123-A8A2-C0103B92D7EA} /qn
|
||||
UseFTPServer=0
|
||||
AlwaysAttemptDownload=0
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=0
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
39
.bin/d7ii/Config/CustomApps_d7II/Should I Remove It.cfg
Normal file
39
.bin/d7ii/Config/CustomApps_d7II/Should I Remove It.cfg
Normal file
|
|
@ -0,0 +1,39 @@
|
|||
[Config]
|
||||
LastEditDate=10/9/2014 2:12:59 PM
|
||||
AppWebsite=http://www.shouldiremoveit.com
|
||||
AppDLPage=http://www.shouldiremoveit.com/download.aspx
|
||||
UseFTPServer=0
|
||||
InstallerParms=/qn
|
||||
InstallerName=ShouldIRemoveIt_Setup.exe
|
||||
AppURL=http://www.shouldiremoveit.com/installers/ShouldIRemoveIt_Setup.exe
|
||||
AppDLName=ShouldIRemoveIt_Setup.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=1
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=0
|
||||
NonDirectURLs=0
|
||||
App=%programfiles(x86)%\Reason\Should I Remove It\ShouldIRemoveIt.exe
|
||||
Author=dSupportOnline
|
||||
PostRunApp=Should I Remove It (Uninstall)
|
||||
EmailBeforeExecution=0
|
||||
SendEnter=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
AppDesc=Crowdsource installed programs to determine if they are malicious.
|
||||
LogVerbiage=Verified installed programs against crowdsource rating system.
|
||||
|
|
@ -0,0 +1,39 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=3/30/2016 11:12:26 AM
|
||||
PostRunApp=
|
||||
AppWebsite=http://www.sophos.com/en-us/products/free-tools/virus-removal-tool/download.aspx
|
||||
AppDLPage=http://www.sophos.com/en-us/products/free-tools/virus-removal-tool/download.aspx
|
||||
AppDesc=Virus scanner
|
||||
App=%programfiles(x86)%\Sophos\Sophos Virus Removal Tool\SVRTcli.exe
|
||||
AppParms=-reboot -uninstall -yes
|
||||
UseFTPServer=0
|
||||
InstallerName=SophosVRT.exe
|
||||
AppURL=http://downloads.sophos.com/tools/withides/Sophos%20Virus%20Removal%20Tool.exe
|
||||
AppDLName=SophosVRT.exe
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=5
|
||||
AppWait=1
|
||||
EmailBeforeExecution=0
|
||||
PriorAlert=0
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=1
|
||||
SnatchReportsLoc=%programdata%\Sophos\Sophos Virus Removal Tool\Logs\SophosVirusRemovalTool.log
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
SendEnter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=1
|
||||
LogVerbiage=Scanned for viruses/malware (Sophos)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=1
|
||||
33
.bin/d7ii/Config/CustomApps_d7II/SpaceSniffer.cfg
Normal file
33
.bin/d7ii/Config/CustomApps_d7II/SpaceSniffer.cfg
Normal file
|
|
@ -0,0 +1,33 @@
|
|||
[Config]
|
||||
DisableCloudShare=0
|
||||
App=spacesniffer_1_1_4_0\SpaceSniffer.exe
|
||||
AppURL=http://www.uderzo.it/main_products/space_sniffer/files/spacesniffer_1_1_4_0.zip
|
||||
AppDLName=spacesniffer_1_1_4_0.zip
|
||||
AlwaysAttemptDownload=0
|
||||
AppWait=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=0
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
AppWebsite=www.uderzo.it/main_products/space_sniffer
|
||||
UseFTPServer=0
|
||||
PriorAlert=0
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 10:13:36 AM
|
||||
AppDLPage=www.uderzo.it/main_products/space_sniffer
|
||||
AppDesc=Useful to determine where all your disk space is being used!
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
35
.bin/d7ii/Config/CustomApps_d7II/StartUpLite.cfg
Normal file
35
.bin/d7ii/Config/CustomApps_d7II/StartUpLite.cfg
Normal file
|
|
@ -0,0 +1,35 @@
|
|||
[Config]
|
||||
App=StartUpLite.exe
|
||||
AppURL=http://www.malwarebytes.org/StartUpLite.exe
|
||||
AppDLName=StartUpLite.exe
|
||||
AppWait=1
|
||||
AppMsgBox=0
|
||||
AppRandomize=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
DisableCloudShare=0
|
||||
UseFTPServer=0
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=7
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
SaveConfigAfter=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
AppWebsite=http://www.malwarebytes.org/products/startuplite/
|
||||
LogVerbiage=Removed unnecessary Windows startup entries.
|
||||
Author=FoolishTech
|
||||
LastEditDate=2/7/2014 10:14:03 AM
|
||||
AppDLPage=http://www.malwarebytes.org/products/startuplite/
|
||||
AppDesc=Startup entry manager by MalwareBytes
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
LastDownload=10/27/2017
|
||||
36
.bin/d7ii/Config/CustomApps_d7II/SuperAntiSpyware.cfg
Normal file
36
.bin/d7ii/Config/CustomApps_d7II/SuperAntiSpyware.cfg
Normal file
|
|
@ -0,0 +1,36 @@
|
|||
[Config]
|
||||
Author=FoolishTech
|
||||
LastEditDate=5/27/2014 1:48:26 PM
|
||||
AppWebsite=http://www.superantispyware.com/
|
||||
AppDLPage=http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE
|
||||
AppDesc=Malware scanner
|
||||
App=sas.com
|
||||
AppURLSpoof=
|
||||
UseFTPServer=0
|
||||
AppURL=http://www.superantispyware.com/sasportable.php
|
||||
AppDLName=sas.com
|
||||
AlwaysAttemptDownload=1
|
||||
DLafterXdays=3
|
||||
AppWait=1
|
||||
WaitOnProcesses=program.com;program64.com;superantispyware.exe
|
||||
PriorAlert=1
|
||||
ServiceWait=0
|
||||
AppMsgBox=0
|
||||
AppRandomize=1
|
||||
SaveConfigAfter=0
|
||||
MoveSnatchReports=0
|
||||
SnatchReportsLoc=%temp%\SAS_SelfExtract\Logs\SUPERAntiSpyware*.log
|
||||
SnatchReportsToMalwareLogs=1
|
||||
RunInCMD=0
|
||||
RunWithSystemAccess=0
|
||||
IsDLInstaller=0
|
||||
LogVerbiage=Scanned for ad/spy/malware (SAS)
|
||||
32=1
|
||||
64=1
|
||||
XP=1
|
||||
Vista=1
|
||||
7=1
|
||||
8=1
|
||||
Servers=1
|
||||
NonDirectURLs=0
|
||||
AutoFlag=0
|
||||
Some files were not shown because too many files have changed in this diff Show more
Loading…
Reference in a new issue