Added d7II config files (from 2018-08)

This commit is contained in:
2Shirt 2018-10-08 23:12:35 -06:00
parent 4afbc1a0a4
commit 73654b2213
180 changed files with 7684 additions and 0 deletions

View file

@ -0,0 +1,11 @@
pushd "%~dp0"
cd..
set d7IIpath=%cd%
pushd "%~dp0"
echo %d7IIpath%\>HMP_Excludes.txt
echo %programfiles%\dSupportSuite\>>HMP_Excludes.txt
echo %programfiles(x86)%\dSupportSuite\>>HMP_Excludes.txt
echo %programfiles%\CryptoPrevent\>>HMP_Excludes.txt
echo %programfiles(x86)%\CryptoPrevent\>>HMP_Excludes.txt
echo %programfiles%\Foolish IT\CryptoPrevent\>>HMP_Excludes.txt
echo %programfiles(x86)%\Foolish IT\CryptoPrevent\>>HMP_Excludes.txt

View file

@ -0,0 +1,17 @@
@echo off&pushd "%~dp0"
start /wait JRT.exe -y -nr
pushd "%temp%\jrt"
if not exist "get.bat" pushd %systemdrive%\JRT
if not exist "get.bat" goto :eof
findstr /v /i "pause" get.bat>tmp.txt
findstr /v /i /b "notepad" tmp.txt>get.bat
echo.>>"%temp%\jrt\wl_services.cfg"
echo d7iisvc>>"%temp%\jrt\wl_services.cfg"
echo dSSEventSvc>>"%temp%\jrt\wl_services.cfg"
echo CryptoPreventEventSvc>>"%temp%\jrt\wl_services.cfg"
echo.>>"%temp%\jrt\wl_processes.cfg"
echo d7ii>>"%temp%\jrt\wl_processes.cfg"
echo dfunk>>"%temp%\jrt\wl_processes.cfg"
echo dSupportSuite>>"%temp%\jrt\wl_processes.cfg"
echo CryptoPrevent>>"%temp%\jrt\wl_processes.cfg"
start /wait cmd.exe /c get.bat

View file

@ -0,0 +1,27 @@
@echo off
setlocal
pushd "%~dp0"
rem Remove stale marker if present
if exist "%SYSTEMDRIVE%\1201\Preserve-MBAM.marker" (
del /f "%SYSTEMDRIVE%\1201\Preserve-MBAM.marker"
)
rem Set marker to prevent unintended MBAM removal
if exist "%PROGRAMFILES%\Malwarebytes\Anti-Malware\mbam.exe" (
echo Previous Malwarebytes installation detected.
echo. > "%SYSTEMDRIVE%\1201\Preserve-MBAM.marker"
)
if exist "%PROGRAMFILES(X86)%\Malwarebytes Anti-Malware\mbam.exe" (
rem MBAM v2 installation
echo Previous Malwarebytes [v2] installation detected.
echo. > "%SYSTEMDRIVE%\1201\Preserve-MBAM.marker"
)
rem Install/Upgrade MBAM
echo Installing Malwarebytes...
start "" /wait mbam-setup.exe /VERYSILENT /NORESTART
popd
endlocal

View file

@ -0,0 +1,63 @@
@echo off
setlocal
pushd "%~dp0"
:GetDate
:: Credit to SS64.com Code taken from http://ss64.com/nt/syntax-getdate.html
:: Use WMIC to retrieve date and time in ISO 8601 format.
for /f "skip=1 tokens=1-6" %%G in ('WMIC Path Win32_LocalTime Get Day^,Hour^,Minute^,Month^,Second^,Year /Format:table') do (
if "%%~L"=="" goto s_done
set _yyyy=%%L
set _mm=00%%J
set _dd=00%%G
set _hour=00%%H
set _minute=00%%I
)
:s_done
:: Pad digits with leading zeros
set _mm=%_mm:~-2%
set _dd=%_dd:~-2%
set _hour=%_hour:~-2%
set _minute=%_minute:~-2%
set iso_date=%_yyyy%-%_mm%-%_dd%
rem Get uninstaller path from registry
set "uninstaller="
for /f usebackq^ tokens^=2^ delims^=^" %%s in (
`reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1" /v UninstallString`
) do (
set "uninstaller=%%s"
)
rem Copy logs to 1201 folder
echo "Copying logs..."
robocopy /e "%PROGRAMDATA%\Malwarebytes\MBAMService\LOGS" "%SYSTEMDRIVE%\1201\Info\%iso_date%\MBAM Logs" >nul
robocopy /e "%PROGRAMDATA%\Malwarebytes\MBAMService\ScanResults" "%SYSTEMDRIVE%\1201\Info\%iso_date%\MBAM Logs" >nul
if exist "%SYSTEMDRIVE%\1201\Preserve-MBAM.marker" (
rem Keep MBAM
echo Previous Malwarebytes installation detected.
) else (
rem Move Quarantine to 1201 folder
move "%PROGRAMDATA%\Malwarebytes\Malwarebytes Anti-Malware\Quarantine" "%SYSTEMDRIVE%\1201\Quarantine\MBAM_%iso_date%_%_hour%%_minute%"
rem Remove MBAM
echo No previous Malwarebytes installation detected.
if exist "%uninstaller%" (
echo "Uninstalling Malwarebytes..."
start "" /wait "%uninstaller%" /VERYSILENT /NORESTART /LOG
) else (
color 4e
echo "Malwarebytes installation not found."
echo ""
echo "Press any key to exit... "
pause >nul
)
)
rem Remove marker
del /f "%SYSTEMDRIVE%\1201\Preserve-MBAM.marker"
popd
endlocal

View file

@ -0,0 +1,14 @@
:: Launch WizardKit item
@echo off
setlocal
pushd "%~dp0\..\..\.."
rem Run WizardKit Launcher
call "%*"
rem Sleep for 5 sec so d7II can wait for launched proc
"%systemroot%\System32\ping.exe" -n 5 127.0.0.1>nul
popd
endlocal

View file

@ -0,0 +1,5 @@
pushd "%~dp0"
cd..
set d7IIpath=%cd%
pushd "%~dp0"
echo %d7IIpath%\d7II.exe>rkill_Excludes.txt

View file

@ -0,0 +1,39 @@
[ShortDesc]
Autoruns=Manages Startup Items
Autoruns_Copy=Manages Startup Items
Autoruns (Verify and Log)=Manages Startup Items
Google Chrome Software Removal Tool=Remove add-ons, extensions, toolbars, and other software that may interfere with the operation of Google Chrome.
VipreRescueScanner (Deep Scan)=Virus scanner (Designed for both the Malware Removal and the Offline Operations tab)
VipreRescueScanner (Quick Scan)=Virus scanner (Designed for both the Malware Removal and the Offline Operations tab)
=Install software bundle
[ReportDesc]
Autoruns=Examined Windows startup items and removed unnecessary entries.
Autoruns_Copy=Examined Windows startup items and removed unnecessary entries.
Autoruns (Verify and Log)=Examined Windows startup items and removed unnecessary entries.
Google Chrome Software Removal Tool=Scanned for and removed any toolbars/extensions/add-ons that may interfere with the operation of Google Chrome.
VipreRescueScanner (Deep Scan)=Ran virus scans (Vipre)
VipreRescueScanner (Quick Scan)=Ran virus scans (Vipre)
28=Created a System Restore point.
32=Ran a Zero Access malware scan.
2=Uninstalled unnecessary applications
41=Re-wrote the default Safe Mode services to prevent potential issues with blue screens when entering Safe Mode.
33=Backed up all Registry Hives.
1=Uninstalled unnecessary applications
9=Repaired file associations for executable files.
10=Removed restrictive Windows policy settings.
11=Cleared proxy settings.
18=Scanned for known malware files and registry entries and removed anything found.
12=Deleted unnecessary temporary files from user profiles and temporary files used by Windows.
13=Deleted temporary internet cache from user profiles.
34=Scanned for viruses/malware with Microsoft Security Essentials / Windows Defender.
49=Scanned for Windows system component corruption to repair any issues found.
24=Repaired the built-in Windows firewall.
31=Set all network adapters to DHCP.
75=Apply static DNS settings to all NICs.
21=Ran repair and reset procedures on networking components.
25=Reset all settings to defaults for the built-in Windows firewall.
36=Manually examined the HOSTS file for hijacks or other issues.
22=Repaired the Windows Update services responsible for Windows Update functionality.
38=Performed repair routines to ensure the Winsock is operating properly.
83=Examined internet speed/bandwidth.
=Installed or updated commonly used applications (Adobe Reader, Google Chrome, etc)

View file

@ -0,0 +1,42 @@
[Autoruns]
PostRunApp=
AlwaysAttemptDownload=1
DLafterXdays=7
EmailBeforeExecution=0
PriorAlert=1
[Autoruns_Copy]
PostRunApp=
AlwaysAttemptDownload=1
DLafterXdays=7
EmailBeforeExecution=0
PriorAlert=1
[Autoruns (Verify and Log)]
PostRunApp=
AlwaysAttemptDownload=1
DLafterXdays=7
EmailBeforeExecution=0
PriorAlert=0
[Google Chrome Software Removal Tool]
PostRunApp=
AlwaysAttemptDownload=1
DLafterXdays=0
EmailBeforeExecution=0
PriorAlert=1
[VipreRescueScanner (Deep Scan)]
PostRunApp=
AlwaysAttemptDownload=1
DLafterXdays=1
EmailBeforeExecution=0
PriorAlert=0
[VipreRescueScanner (Quick Scan)]
PostRunApp=
AlwaysAttemptDownload=1
DLafterXdays=1
EmailBeforeExecution=0
PriorAlert=0
[]
PostRunApp=
AlwaysAttemptDownload=0
DLafterXdays=5
EmailBeforeExecution=0
PriorAlert=0

View file

@ -0,0 +1,37 @@
[Config]
LastEditDate=8/13/2018 5:54:29 PM
PostRunApp=
AppWebsite=https://www.malwarebytes.com/adwcleaner/
AppDLPage=https://downloads.malwarebytes.com/file/adwcleaner
AppDesc=Toolbar Remover
App=AdwCleaner.exe
UseFTPServer=0
AppURL=https://downloads.malwarebytes.com/file/adwcleaner
AppDLName=AdwCleaner.exe
AlwaysAttemptDownload=0
DLafterXdays=.5
AppWait=1
EmailBeforeExecution=0
PriorAlert=1
ServiceWait=1
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsLoc=%systemdrive%\AdwCleaner\AdwCleaner*.txt
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Removed unnecessary internet browser add-ins (e.g. Toolbars) [AdwCleaner]
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LastDownload=8/14/2018

View file

@ -0,0 +1,45 @@
[Config]
Author=2Shirt
LastEditDate=8/19/2018 3:48:33 PM
PostRunApp=
AppWebsite=http://www.surfright.nl/en/hitmanpro/
AppDLPage=http://www.surfright.nl/en/downloads/
AppDesc=Malware scanner
App=HitmanPro.exe
App64=HitmanPro_x64.exe
AppParms=/clean /noinstall /excludelist="%3rdpath%\HMP_Excludes.txt" /logtype=txt /log="%malreportdir%\HitmanPro_Scan_Log_%date%.txt"
AppURL64=https://dl.surfright.nl/HitmanPro_x64.exe
AppURL64B=http://dl.surfright.nl/FoolishIT/HitmanPro_x64.exe
AppDLName64=HitmanPro_x64.exe
UseFTPServer=0
AppURL=https://dl.surfright.nl/HitmanPro.exe
AppURLB=http://dl.surfright.nl/FoolishIT/HitmanPro.exe
AppDLName=HitmanPro.exe
AlwaysAttemptDownload=1
DLafterXdays=3
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=1
AppWaitTime=60
AppRandomize=1
CopyConfigFirst=HMP.cmd
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Ran Malware Scans (HitmanPro)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1
LastDownload=8/19/2018

View file

@ -0,0 +1,34 @@
[Config]
LastEditDate=8/25/2018 3:50:11 PM
PostRunApp=
App=WizardKit Launcher.cmd
UseFTPServer=0
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
EmailBeforeExecution=0
PriorAlert=1
ServiceWait=0
AppMsgBox=1
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LogVerbiage=Uninstalled unnecessary / junk programs.
AppDesc=Application uninstaller and cleanup utility
AppParms=Uninstallers\IObit Uninstaller.cmd
WaitOnProcesses=IObitUninstallerPortable.exe
AppWaitTime=60

View file

@ -0,0 +1,34 @@
[Config]
LastEditDate=8/30/2018 10:49:46 AM
PostRunApp=
AppParms=.bin\Scripts\launchers_for_d7\Install SW Bundle.cmd
UseFTPServer=0
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=1
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
App=WizardKit Launcher.cmd
AutoFlag=0
WaitOnProcesses=ConEmu.exe;ConEmuC.exe;ConEmu64.exe;ConEmuC64.exe;python.exe;Ninite.exe
AppDesc=Install software bundle
LogVerbiage=Installed or updated commonly used applications (Adobe Reader, Google Chrome, etc)
AppWaitTime=60

View file

@ -0,0 +1,35 @@
[Config]
LastEditDate=8/18/2018 6:36:00 PM
PostRunApp=
AppWebsite=https://www.malwarebytes.com/
AppDLPage=https://downloads.malwarebytes.com/file/mb3/
AppDesc=Download MBAM setup
UseFTPServer=0
AppURL=https://downloads.malwarebytes.com/file/mb3/
AppDLName=mbam-setup.exe
AlwaysAttemptDownload=1
DLafterXdays=0
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=1
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1
App=exit
LastDownload=8/31/2018

View file

@ -0,0 +1,34 @@
[Config]
LastEditDate=8/25/2018 3:50:23 PM
PostRunApp=
App=MBAM_Install.cmd
UseFTPServer=0
AlwaysAttemptDownload=0
DLafterXdays=0
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=1
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1
AppDesc=Install/Upgrade MBAM
LogVerbiage=Malwarebytes installed successfully.
LastDownload=8/18/2018
Author=2Shirt
AppWaitTime=30

View file

@ -0,0 +1,34 @@
[Config]
LastEditDate=8/13/2018 4:48:53 PM
PostRunApp=
AppWebsite=https://www.malwarebytes.com/
AppDLPage=https://downloads.malwarebytes.com/file/mb3/
AppDesc=Malwarebytes Execution
App=%programfiles%\Malwarebytes\Anti-Malware\mbam.exe
App64=%programfiles%\Malwarebytes\Anti-Malware\mbam.exe
UseFTPServer=0
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
EmailBeforeExecution=0
PriorAlert=1
ServiceWait=0
AppMsgBox=0
AppRandomize=1
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Malwarebytes ran successfully.
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0

View file

@ -0,0 +1,30 @@
[Config]
LastEditDate=8/13/2018 7:32:30 PM
PostRunApp=
App=MBAM_Uninstall.cmd
UseFTPServer=0
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1
AppDesc=Uninstall MBAM (if not previously installed)

View file

@ -0,0 +1,40 @@
[Config]
Author=2Shirt
LastEditDate=8/19/2018 3:31:04 PM
PostRunApp=
AppWebsite=http://www.bleepingcomputer.com/forums/t/308364/rkill-what-it-does-and-what-it-doesnt-a-brief-introduction-to-the-program/
AppDLPage=http://www.bleepingcomputer.com/download/rkill/
AppDesc=Anti-Malware app.
App=rkill.exe
AppParms=-s -w "%3rdpath%\rkill_Excludes.txt"
UseFTPServer=0
AppURL=https://download.bleepingcomputer.com/grinler/rkill.exe
AppDLName=rkill.exe
AlwaysAttemptDownload=1
DLafterXdays=0
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=1
CopyConfigFirst=rkill.cmd
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsLoc=%userprofile%\Desktop\rkill*.txt
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Ran Malware Scan (RKill)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1
LastDownload=8/31/2018

View file

@ -0,0 +1,35 @@
[Config]
Author=2Shirt
LastEditDate=8/25/2018 3:50:41 PM
PostRunApp=
AppDesc=WizardKit browser reset script (d7II mode)
App=WizardKit Launcher.cmd
AppParms=.bin\Scripts\launchers_for_d7\Browser Reset.cmd
UseFTPServer=0
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
WaitOnProcesses=ConEmu.exe;ConEmuC.exe;ConEmu64.exe;ConEmuC64.exe;python.exe
EmailBeforeExecution=0
PriorAlert=1
ServiceWait=0
AppMsgBox=1
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Reset web browsers to safe defaults and removed any malicous addons found.
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
AppWaitTime=30

View file

@ -0,0 +1,35 @@
[Config]
Author=2Shirt
LastEditDate=8/25/2018 3:50:50 PM
PostRunApp=
AppDesc=WizardKit system checklist script (d7II mode)
App=WizardKit Launcher.cmd
AppParms=.bin\Scripts\launchers_for_d7\System Checklist.cmd
UseFTPServer=0
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
WaitOnProcesses=ConEmu.exe;ConEmuC.exe;ConEmu64.exe;ConEmuC64.exe;python.exe
EmailBeforeExecution=0
PriorAlert=1
ServiceWait=0
AppMsgBox=1
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LogVerbiage=Examined and verified system-wide settings (available updates, drivers, activation, etc)
AppWaitTime=60

View file

@ -0,0 +1,35 @@
[Config]
Author=2Shirt
LastEditDate=8/25/2018 3:49:49 PM
PostRunApp=
AppDesc=WizardKit system diagnostics script (d7II mode)
App=WizardKit Launcher.cmd
AppParms=.bin\Scripts\launchers_for_d7\System Diagnostics.cmd
UseFTPServer=0
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
WaitOnProcesses=ConEmu.exe;ConEmuC.exe;ConEmu64.exe;ConEmuC64.exe;python.exe
EmailBeforeExecution=0
PriorAlert=1
ServiceWait=0
AppMsgBox=1
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LogVerbiage=Ran OS built-in repairs and backed up system information
AppWaitTime=60

View file

@ -0,0 +1,35 @@
[Config]
Author=2Shirt
LastEditDate=8/25/2018 3:50:59 PM
PostRunApp=
AppDesc=WizardKit user checklist script (d7II mode)
App=WizardKit Launcher.cmd
AppParms=.bin\Scripts\launchers_for_d7\User Checklist.cmd
UseFTPServer=0
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
WaitOnProcesses=ConEmu.exe;ConEmuC.exe;ConEmu64.exe;ConEmuC64.exe;python.exe;firefox.exe;chrome.exe
EmailBeforeExecution=0
PriorAlert=1
ServiceWait=0
AppMsgBox=1
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Verified web browser settings and functionality
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
AppWaitTime=60

View file

@ -0,0 +1,11 @@
pushd "%~dp0"
cd..
set d7IIpath=%cd%
pushd "%~dp0"
echo %d7IIpath%\>HMP_Excludes.txt
echo %programfiles%\dSupportSuite\>>HMP_Excludes.txt
echo %programfiles(x86)%\dSupportSuite\>>HMP_Excludes.txt
echo %programfiles%\CryptoPrevent\>>HMP_Excludes.txt
echo %programfiles(x86)%\CryptoPrevent\>>HMP_Excludes.txt
echo %programfiles%\Foolish IT\CryptoPrevent\>>HMP_Excludes.txt
echo %programfiles(x86)%\Foolish IT\CryptoPrevent\>>HMP_Excludes.txt

View file

@ -0,0 +1,17 @@
@echo off&pushd "%~dp0"
start /wait JRT.exe -y -nr
pushd "%temp%\jrt"
if not exist "get.bat" pushd %systemdrive%\JRT
if not exist "get.bat" goto :eof
findstr /v /i "pause" get.bat>tmp.txt
findstr /v /i /b "notepad" tmp.txt>get.bat
echo.>>"%temp%\jrt\wl_services.cfg"
echo d7iisvc>>"%temp%\jrt\wl_services.cfg"
echo dSSEventSvc>>"%temp%\jrt\wl_services.cfg"
echo CryptoPreventEventSvc>>"%temp%\jrt\wl_services.cfg"
echo.>>"%temp%\jrt\wl_processes.cfg"
echo d7ii>>"%temp%\jrt\wl_processes.cfg"
echo dfunk>>"%temp%\jrt\wl_processes.cfg"
echo dSupportSuite>>"%temp%\jrt\wl_processes.cfg"
echo CryptoPrevent>>"%temp%\jrt\wl_processes.cfg"
start /wait cmd.exe /c get.bat

View file

@ -0,0 +1,26 @@
[Options]
AutoSync=1
AutoExit=1
Retry=1
[Servers]
0="time-a.nist.gov"
1="time-a.timefreq.bldrdoc.gov"
2="time-b.nist.gov"
3="time-b.timefreq.bldrdoc.gov"
4="time-c.timefreq.bldrdoc.gov"
5="us.pool.ntp.org"
6="1.us.pool.ntp.org"
7="2.us.pool.ntp.org"
8="3.us.pool.ntp.org"
9="pubts1-sj.witime.net"
10="pubts2-sj.witime.net"
11="rolex.usg.edu"
12="timekeeper.isi.edu"
13="nist1.symmetricom.com"
14="clock.via.net"
15="nist1.aol-ca.truetime.com"
16="nist.expertsmi.com"
17="nist1-dc.WiTime.net"
18="nist1-sj.WiTime.net"
19="utcnist.colorado.edu"

View file

@ -0,0 +1,5 @@
pushd "%~dp0"
cd..
set d7IIpath=%cd%
pushd "%~dp0"
echo %d7IIpath%\d7II.exe>rkill_Excludes.txt

View file

@ -0,0 +1,35 @@
[Config]
DisableCloudShare=0
AppURL=http://www.alex-is.de/PHP/fusion/downloads.php?cat_id=4&file_id=9
AppDLName=AS SSD Benchmark.zip
AlwaysAttemptDownload=1
AppWait=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
App=AS SSD Benchmark\AS SSD Benchmark.exe
UseFTPServer=0
DLafterXdays=7
PriorAlert=0
LogVerbiage=Ran SSD testing/benchmark
LastDownload=10/27/2017
AppWebsite=www.alex-is.de/PHP/fusion/downloads.php?cat_id=4&download_id=9
Author=FoolishTech
LastEditDate=2/7/2014 9:45:12 AM
NonDirectURLs=0
AppDLPage=www.alex-is.de/PHP/fusion/downloads.php?cat_id=4&download_id=9
AppDesc=SSD Benchmark Utility
AutoFlag=0

View file

@ -0,0 +1,36 @@
[Config]
Author=FoolishTech
LastEditDate=7/21/2014 11:16:06 AM
AppWebsite=http://www.bleepingcomputer.com/download/adwcleaner/
AppDLPage=http://www.bleepingcomputer.com/download/adwcleaner/
AppDesc=Toolbar Remover
App=AdwCleaner.exe
UseFTPServer=0
AppURL=http://download.bleepingcomputer.com/Xplode/AdwCleaner.exe
AppURLB=http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner
AppDLName=AdwCleaner.exe
AlwaysAttemptDownload=1
DLafterXdays=.5
AppWait=1
PriorAlert=1
ServiceWait=1
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsLoc=%systemdrive%\AdwCleaner\AdwCleaner*.txt
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Removed unnecessary internet browser add-ins (e.g. Toolbars) [AdwCleaner]
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
LastDownload=10/27/2017
AutoFlag=0

View file

@ -0,0 +1,34 @@
[Config]
DisableCloudShare=0
AppWebsite=http://www.auslogics.com/en/software/disk-defrag/command-line/
App=ausdiskdefragportable.exe
AppURL=http://www.auslogics.com/en/downloads/disk-defrag/ausdiskdefragportable.exe
AppDLName=ausdiskdefragportable.exe
AlwaysAttemptDownload=1
AppWait=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=0
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=0
UseFTPServer=0
DLafterXdays=7
PriorAlert=1
LogVerbiage=Defragmented file system (Auslogics)
Author=FoolishTech
LastEditDate=2/7/2014 9:45:41 AM
NonDirectURLs=0
AppDesc=Disk Defragmenter
AppDLPage=http://www.auslogics.com/en/software/disk-defrag/
AutoFlag=0

View file

@ -0,0 +1,36 @@
[Config]
App=autoruns\autoruns.exe
AppURL=http://download.sysinternals.com/files/Autoruns.zip
AppDLName=autoruns.zip
AppWait=1
AppMsgBox=0
AppRandomize=1
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
AppParms=-accepteula
DisableCloudShare=0
UseFTPServer=0
AlwaysAttemptDownload=1
DLafterXdays=7
PriorAlert=1
ServiceWait=0
SaveConfigAfter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
AppWebsite=http://technet.microsoft.com/en-us/sysinternals/bb963902
LogVerbiage=Examined Windows startup items and removed unnecessary entries.
LastDownload=10/27/2017
Author=FoolishTech
LastEditDate=2/7/2014 9:46:37 AM
NonDirectURLs=0
AppDLPage=http://technet.microsoft.com/en-us/sysinternals/bb963902
AppDesc=Manages Startup Items
AutoFlag=0

View file

@ -0,0 +1,33 @@
[Config]
App=aswMBR.exe
AppURL=http://public.avast.com/~gmerek/aswMBR.exe
AppWait=1
AppMsgBox=0
AppRandomize=1
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
AppDLName=aswMBR.exe
DisableCloudShare=0
UseFTPServer=0
AlwaysAttemptDownload=0
PriorAlert=1
ServiceWait=0
SaveConfigAfter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
AppWebsite=http://public.avast.com/~gmerek/aswMBR.htm
LogVerbiage=Checked MBR for infections and scanned for additional malicious items (Avast!).
Author=FoolishTech
LastEditDate=2/7/2014 9:46:53 AM
AppDLPage=http://public.avast.com/~gmerek/aswMBR.htm
AppDesc=MBR Checker and Virus Scanner
NonDirectURLs=0
AutoFlag=0

View file

@ -0,0 +1,34 @@
[Config]
DisableCloudShare=0
App=batteryinfoview.exe
AppURL=http://www.nirsoft.net/panel/batteryinfoview.exe
AppDLName=batteryinfoview.exe
AlwaysAttemptDownload=0
AppWait=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=0
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
AppWebsite=www.nirsoft.net/utils/battery_information_view.html
UseFTPServer=0
PriorAlert=0
LogVerbiage=Checked battery life and wear level.
Author=FoolishTech
LastEditDate=2/7/2014 9:47:17 AM
AppDLPage=www.nirsoft.net/utils/battery_information_view.html
AppDesc=Detailed info on installed batteries
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,36 @@
[Config]
Author=FoolishTech
LastEditDate=2/7/2014 9:49:58 AM
App=advisorinstaller.exe
AppParms=/silent
UseFTPServer=0
AppURL=http://www.belarc.com/Programs/advisorinstaller.exe
AppDLName=advisorinstaller.exe
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
WaitOnProcesses=Belarc~1.exe
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsLoc=%programfiles(x86)%\Belarc\BelarcAdvisor\System\tmp\(%computername%).html
SnatchReportsToMalwareLogs=0
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AppWebsite=http://www.belarc.com/free_download.html
AppDLPage=http://www.belarc.com/free_download.html
AppDesc=System Information Utility (Not 'Portable' - Installation Necessary)
AutoFlag=1
LastDownload=10/27/2017

View file

@ -0,0 +1,38 @@
[Config]
DisableCloudShare=0
App=BootkitRemoval_x86.exe
App64=BootkitRemoval_x64.exe
AppURL64=http://download.bitdefender.com/removal_tools/BootkitRemoval_x64.exe
AppDLName64=BootkitRemoval_x64.exe
UseFTPServer=0
AppURL=http://download.bitdefender.com/removal_tools/BootkitRemoval_x86.exe
AppDLName=BootkitRemoval_x86.exe
AlwaysAttemptDownload=1
DLafterXdays=5
AppWait=1
PriorAlert=1
ServiceWait=0
AppMsgBox=0
AppRandomize=1
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
AppWebsite=http://labs.bitdefender.com/projects/rootkit-remover/rootkit-remover/
LogVerbiage=Performed additional rootkit scanning. (BRR)
Author=FoolishTech
LastEditDate=2/7/2014 9:50:38 AM
AppDLPage=http://labs.bitdefender.com/projects/rootkit-remover/rootkit-remover/
AppDesc=Bitdefender Rootkit Remover
NonDirectURLs=0
AutoFlag=0
LastDownload=8/13/2018

View file

@ -0,0 +1,34 @@
[Config]
DisableCloudShare=0
App=bluescreenview.exe
AppURL=http://www.nirsoft.net/panel/bluescreenview.exe
AppDLName=bluescreenview.exe
AlwaysAttemptDownload=0
AppWait=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=0
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
UseFTPServer=0
PriorAlert=0
LogVerbiage=Checked for previous blue screens / crash dumps.
AppWebsite=www.nirsoft.net/utils/blue_screen_view.html
Author=FoolishTech
LastEditDate=2/7/2014 9:51:06 AM
AppDLPage=www.nirsoft.net/utils/blue_screen_view.html
AppDesc=Analyze blue screens / memory dumps created by Windows
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,39 @@
[Config]
Author=FoolishIT
LastEditDate=12/8/2015 9:51:43 AM
PostRunApp=
AppWebsite=http://www.cpuid.com/softwares/cpu-z.html
AppDLPage=http://www.cpuid.com/softwares/cpu-z.html
App=cpu-z\cpuz_x32.exe
App64=cpu-z\cpuz_x64.exe
UseFTPServer=0
AppURL=http://download.cpuid.com/cpu-z/cpu-z_1.74-en.zip
AppDLName=cpu-z.zip
AlwaysAttemptDownload=1
DLafterXdays=5
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=1
MoveSnatchReports=0
SnatchReportsToMalwareLogs=0
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
AppDesc=Display hardware information (CPU, RAM, MB)
LogVerbiage=Reviewed hardware information of the system.
LastDownload=12/8/2015
CopyConfigFirst=cpuz.ini

View file

@ -0,0 +1,33 @@
[Config]
App=combofix.exe
AppParms=/uninstall
AppURL=http://download.bleepingcomputer.com/sUBs/ComboFix.exe
AppDLName=combofix.exe
AppWait=1
AppMsgBox=0
AppRandomize=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
32=1
64=1
XP=1
Vista=1
7=1
8=0
AlwaysAttemptDownload=0
SaveConfigAfter=0
DisableCloudShare=0
UseFTPServer=0
PriorAlert=1
ServiceWait=1
RunWithSystemAccess=0
IsDLInstaller=0
Servers=1
AppWebsite=http://www.bleepingcomputer.com/download/combofix/
Author=FoolishTech
LastEditDate=2/7/2014 9:51:39 AM
AppDLPage=http://www.bleepingcomputer.com/download/combofix/
AppDesc=Uninstalls Combofix, cleaning up any leftover files/settings.
NonDirectURLs=0
AutoFlag=0

View file

@ -0,0 +1,34 @@
[Config]
App=combofix.exe
AppURL=http://download.bleepingcomputer.com/sUBs/ComboFix.exe
AppDLName=combofix.exe
AppWait=1
AppMsgBox=0
AppRandomize=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
AlwaysAttemptDownload=1
SaveConfigAfter=0
32=1
64=1
XP=1
Vista=1
7=1
8=0
DisableCloudShare=0
UseFTPServer=0
DLafterXdays=.5
PriorAlert=1
ServiceWait=1
RunWithSystemAccess=0
IsDLInstaller=0
Servers=1
AppWebsite=http://www.bleepingcomputer.com/download/combofix/
LogVerbiage=Ran malware scans (Combofix)
Author=FoolishTech
LastEditDate=2/7/2014 9:52:03 AM
AppDLPage=http://www.bleepingcomputer.com/download/combofix/
AppDesc=Malware removal tool.
NonDirectURLs=0
AutoFlag=0

View file

@ -0,0 +1,33 @@
[Config]
Author=FoolishTech
LastEditDate=3/15/2014 3:49:54 PM
AppWebsite=www.crowdstrike.com
AppDLPage=www.crowdstrike.com/crowdinspect/
AppDesc=Analyze running processes against VirusTotal, Web of Trust, and the Malware Hash Project.
App=CrowdInspect\CrowdInspect.exe
UseFTPServer=0
AppURL=http://download.crowdstrike.com/crowdinspect/CrowdInspect.zip
AppDLName=CrowdInspect.zip
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
PriorAlert=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,37 @@
[Config]
Author=FoolishTech
LastEditDate=4/1/2016 12:41:03 PM
PostRunApp=
AppWebsite=http://crystalmark.info/software/CrystalDiskInfo/index-e.html
AppDLPage=http://crystalmark.info/software/CrystalDiskInfo/index-e.html
AppDesc=Hard drive diagnostics / information.
App=CrystalDiskInfo\DiskInfo.exe
App64=CrystalDiskInfo\DiskInfoX64.exe
UseFTPServer=0
AppURL=https://osdn.jp/frs/redir.php?m=tcpdiag&f=%2Fcrystaldiskinfo%2F65634%2FCrystalDiskInfo6_8_2.zip
AppDLName=CrystalDiskInfo.zip
AlwaysAttemptDownload=0
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Examined Hard Drive health (CrystalDiskInfo)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,39 @@
[Config]
Author=dSupportOnline
LastEditDate=11/6/2014 10:33:04 PM
PostRunApp=
AppWebsite=http://www.nirsoft.net/utils/cports.html
AppDLPage=http://www.nirsoft.net/utils/cports.html
AppDesc=Displays current ports in use on system and by which process
App=cports\cports.exe
AppURLSpoof=http://www.nirsoft.net/utils/cports.html
UseFTPServer=0
AppURL=http://www.nirsoft.net/utils/cports.zip
AppDLName=cports.zip
AlwaysAttemptDownload=1
DLafterXdays=5
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
CopyConfigFirst=cports.cfg
SaveConfigAfter=1
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Reviewed current ports in use by various applications on the system
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,36 @@
[Config]
DisableCloudShare=0
App=esetsmartinstaller_enu.exe
AppURL=http://download.eset.com/special/eos/esetsmartinstaller_enu.exe
AppDLName=esetsmartinstaller_enu.exe
AlwaysAttemptDownload=1
AppWait=1
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
UseFTPServer=0
DLafterXdays=7
PriorAlert=1
ServiceWait=0
IsDLInstaller=0
Servers=1
AppWebsite=http://www.eset.com/int/online-scanner-popup/
LogVerbiage=Ran Virus/Malware scans (ESET)
LastDownload=9/28/2013
WaitOnProcesses=onlinescannerapp.exe
NonDirectURLs=0
Author=FoolishTech
LastEditDate=2/7/2014 9:53:54 AM
AppDLPage=http://www.eset.com/int/online-scanner-popup/
AppDesc=Online Virus Scanner
AutoFlag=0

View file

@ -0,0 +1,42 @@
[Config]
Author=FoolishTech
LastEditDate=2/3/2017 5:45:31 PM
PostRunApp=
AppWebsite=http://www.emsisoft.com/en/software/cmd/
AppDLPage=http://www.emsisoft.com/en/software/cmd/
AppDesc=Virus Scanner (configured for scanning from the Offline Operations tab)
AppParms=/f=%tdrive% /deep /rk /pup /a /n /ac /dq /la="%malreportdir%\a2cmd_deep_log_offline_%date%.txt"
AppURL64=http://dl.emsisoft.com/EmsisoftCommandlineScanner64.exe
AppDLName64=Emsisoft_a2cmd\EmsisoftCommandlineScanner64.exe
UseFTPServer=0
AppURL=http://dl.emsisoft.com/EmsisoftCommandlineScanner32.exe
AppDLName=Emsisoft_a2cmd\EmsisoftCommandlineScanner32.exe
AlwaysAttemptDownload=1
DLafterXdays=1
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Ran deep virus scans (Emsisoft)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1
App=Emsisoft_a2cmd\a2cmd.cmd
CopyConfigFirst=a2cmd.cmd
WaitOnProcesses=a2cmd.exe
LastDownload=10/27/2017

View file

@ -0,0 +1,42 @@
[Config]
Author=FoolishTech
LastEditDate=2/3/2017 5:45:31 PM
PostRunApp=
AppWebsite=http://www.emsisoft.com/en/software/cmd/
AppDLPage=http://www.emsisoft.com/en/software/cmd/
AppDesc=Virus Scanner - Scans all files on all hard disks thoroughly. (does not need prior update)
AppParms=/f=%tdrive% /deep /rk /m /t /c /pup /a /n /ac /d /wl="%systemdrive%\EmsisoftCmd\a2cmd_Whitelist.txt" /la="%malreportdir%\a2cmd_deep_log_%date%.txt"
AppURL64=http://dl.emsisoft.com/EmsisoftCommandlineScanner64.exe
AppDLName64=Emsisoft_a2cmd\EmsisoftCommandlineScanner64.exe
UseFTPServer=0
AppURL=http://dl.emsisoft.com/EmsisoftCommandlineScanner32.exe
AppDLName=Emsisoft_a2cmd\EmsisoftCommandlineScanner32.exe
AlwaysAttemptDownload=1
DLafterXdays=1
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Ran deep virus scans (Emsisoft)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1
App=Emsisoft_a2cmd\a2cmd.cmd
CopyConfigFirst=a2cmd.cmd
WaitOnProcesses=a2cmd.exe
LastDownload=8/31/2018

View file

@ -0,0 +1,41 @@
[Config]
Author=FoolishTech
LastEditDate=2/3/2017 5:45:31 PM
PostRunApp=
AppWebsite=http://www.emsisoft.com/en/software/cmd/
AppDLPage=http://www.emsisoft.com/en/software/cmd/
AppDesc=Virus Scanner - Scans all active programs, malware traces (registry, files) and Tracking Cookies. Skips ADS, archive files, and some cookies. (does not need prior update)
AppParms=/f=%tdrive% /quick /rk /m /t /pup /ac /d /wl="%systemdrive%\EmsisoftCmd\a2cmd_Whitelist.txt" /la="%malreportdir%\a2cmd_quick_log_%date%.txt"
AppURL64=http://dl.emsisoft.com/EmsisoftCommandlineScanner64.exe
AppDLName64=Emsisoft_a2cmd\EmsisoftCommandlineScanner64.exe
UseFTPServer=0
AppURL=http://dl.emsisoft.com/EmsisoftCommandlineScanner32.exe
AppDLName=Emsisoft_a2cmd\EmsisoftCommandlineScanner32.exe
AlwaysAttemptDownload=1
DLafterXdays=1
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Ran virus scans (Emsisoft)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1
App=Emsisoft_a2cmd\a2cmd.cmd
CopyConfigFirst=a2cmd.cmd
WaitOnProcesses=a2cmd.exe

View file

@ -0,0 +1,41 @@
[Config]
Author=FoolishTech
LastEditDate=2/3/2017 5:45:31 PM
PostRunApp=
AppWebsite=http://www.emsisoft.com/en/software/cmd/
AppDLPage=http://www.emsisoft.com/en/software/cmd/
AppDesc=Virus Scanner - Scans the Windows and program files folders in addition to everything scanned by the quick scan. Skips ADS, archive files, and some cookies. (does not need prior update)
AppParms=/f=%tdrive% /smart /rk /m /t /pup /ac /d /wl="%systemdrive%\EmsisoftCmd\a2cmd_Whitelist.txt" /la="%malreportdir%\a2cmd_smart_log_%date%.txt"
AppURL64=http://dl.emsisoft.com/EmsisoftCommandlineScanner64.exe
AppDLName64=Emsisoft_a2cmd\EmsisoftCommandlineScanner64.exe
UseFTPServer=0
AppURL=http://dl.emsisoft.com/EmsisoftCommandlineScanner32.exe
AppDLName=Emsisoft_a2cmd\EmsisoftCommandlineScanner32.exe
AlwaysAttemptDownload=1
DLafterXdays=1
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Ran virus scans (Emsisoft)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1
App=Emsisoft_a2cmd\a2cmd.cmd
CopyConfigFirst=a2cmd.cmd
WaitOnProcesses=a2cmd.exe

View file

@ -0,0 +1,39 @@
[Config]
Author=dSupportOnline
LastEditDate=10/9/2014 1:20:00 PM
PostRunApp=
AppWebsite=http://www.voidtools.com/support/everything/
AppDLPage=http://www.voidtools.com/downloads/
App=everything32\Everything.exe
App64=everything64\Everything.exe
AppURL64=http://www.voidtools.com/Everything-1.3.4.686.x64.zip
AppDLName64=everything64.zip
UseFTPServer=0
AppURL=http://www.voidtools.com/Everything-1.3.4.686.x86.zip
AppDLName=everything32.zip
AlwaysAttemptDownload=0
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
CopyConfigFirst=Everything.ini
SaveConfigAfter=1
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
AppDesc=Quickly searches files and folders
LogVerbiage=Searched system for files and folders to further inspect or remove.

View file

@ -0,0 +1,34 @@
[Config]
App=gmer\gmer.exe
AppURL=http://www2.gmer.net/gmer.zip
AppDLName=gmer.zip
AppWait=1
AppMsgBox=0
AppRandomize=1
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
DisableCloudShare=0
UseFTPServer=0
AlwaysAttemptDownload=1
DLafterXdays=7
PriorAlert=1
ServiceWait=0
SaveConfigAfter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
AppWebsite=http://www.gmer.net/
LogVerbiage=Manually scanned for rootkit activity.
Author=FoolishTech
LastEditDate=2/7/2014 9:54:39 AM
AppDLPage=http://www.gmer.net/
AppDesc=Rootkit / Malware Scanner
NonDirectURLs=0
AutoFlag=0

View file

@ -0,0 +1,37 @@
[Config]
Author=Proctor Foolish IT
LastEditDate=3/2/2016 5:09:19 PM
PostRunApp=
AppWebsite=https://www.techpowerup.com/gpuz/
AppDesc=Reported on Graphis Adapter Information
LogVerbiage=Reviewed hardware information of the system.
UseFTPServer=0
AppURL=https://www.techpowerup.com/downloads/2627/techpowerup-gpu-z-v0-8-7/start?server=6
AppDLName=GPU-Z.exe
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsToMalwareLogs=0
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1
AppParms=-dump gpu-z.xml
SnatchReportsLoc=gpu-z.xml
App=GPU-Z.exe

View file

@ -0,0 +1,35 @@
[Config]
Author=Proctor Foolish IT
LastEditDate=3/2/2016 4:24:41 PM
PostRunApp=GPU-Z Report
AppWebsite=https://www.techpowerup.com/gpuz/
App64=GPU-Z.exe
UseFTPServer=0
AppURL=https://www.techpowerup.com/downloads/2627/techpowerup-gpu-z-v0-8-7/start?server=6
AppDLName=GPU-Z.exe
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1
AppDesc=Review Graphis Adapter Information
LogVerbiage=Reviewed hardware information of the system.

View file

@ -0,0 +1,36 @@
[Config]
LastEditDate=10/13/2014 6:35:14 AM
PostRunApp=
AppWebsite=https://support.google.com/chrome/answer/6086368?p=ui_software_removal_tool&rd=1
AppDLPage=https://www.google.com/chrome/srt/
App=software_removal_tool.exe
UseFTPServer=0
AppURL=https://dl.google.com/dl/softwareremovaltool/win/software_removal_tool.exe
AppDLName=software_removal_tool.exe
AlwaysAttemptDownload=1
DLafterXdays=0
AppWait=1
EmailBeforeExecution=0
PriorAlert=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
Author=FoolishTech
AppDesc=Remove add-ons, extensions, toolbars, and other software that may interfere with the operation of Google Chrome.
LogVerbiage=Scanned for and removed any toolbars/extensions/add-ons that may interfere with the operation of Google Chrome.

View file

@ -0,0 +1,39 @@
[Config]
Author=Foolish IT
LastEditDate=3/30/2016 11:11:09 AM
PostRunApp=
AppWebsite=https://www.jam-software.de/heavyload/
AppDLPage=https://www.jam-software.de/heavyload/
App=HeavyLoadx86\HeavyLoad.exe
UseFTPServer=0
AppURL=http://www.jam-software.com/heavyload/HeavyLoad-x86.zip
AppDLName=HeavyLoadx86.zip
AlwaysAttemptDownload=1
DLafterXdays=5
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
AppURL64=http://www.jam-software.com/heavyload/HeavyLoad-x64.zip
AppDLName64=HeavyLoadx64.zip
App64=HeavyLoadx64\HeavyLoad.exe
AppDesc=Stress Testing Application
LogVerbiage=Stress Tested System

View file

@ -0,0 +1,44 @@
[Config]
Author=FoolishTech
LastEditDate=10/10/2014 4:14:36 AM
PostRunApp=
AppWebsite=http://www.surfright.nl/en/hitmanpro/
AppDLPage=http://www.surfright.nl/en/downloads/
AppDesc=Malware scanner (Manual removal)
App=HitmanPro.exe
App64=HitmanPro_x64.exe
AppParms=/noinstall /excludelist="%3rdpath%\HMP_Excludes.txt" /log="%malreportdir%\HitmanPro_Scan_Log_%date%.txt"
AppURL64=http://dl.surfright.nl/HitmanPro_x64.exe
AppURL64B=http://dl.surfright.nl/FoolishIT/HitmanPro_x64.exe
AppDLName64=HitmanPro_x64.exe
UseFTPServer=0
AppURL=http://dl.surfright.nl/HitmanPro.exe
AppURLB=http://dl.surfright.nl/FoolishIT/HitmanPro.exe
AppDLName=HitmanPro.exe
AlwaysAttemptDownload=1
DLafterXdays=4
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=1
AppWaitTime=60
AppRandomize=1
CopyConfigFirst=HMP.cmd
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Ran Malware Scans and manually investigated results (HitmanPro)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0

View file

@ -0,0 +1,45 @@
[Config]
Author=FoolishTech
LastEditDate=7/13/2015 10:52:20 AM
PostRunApp=
AppWebsite=http://www.surfright.nl/en/hitmanpro/
AppDLPage=http://www.surfright.nl/en/downloads/
AppDesc=Malware scanner
App=HitmanPro.exe
App64=HitmanPro_x64.exe
AppParms=/clean /noinstall /excludelist="%3rdpath%\HMP_Excludes.txt" /log="%malreportdir%\HitmanPro_Scan_Log_%date%.txt"
AppURL64=http://dl.surfright.nl/HitmanPro_x64.exe
AppURL64B=http://dl.surfright.nl/FoolishIT/HitmanPro_x64.exe
AppDLName64=HitmanPro_x64.exe
UseFTPServer=0
AppURL=http://dl.surfright.nl/HitmanPro.exe
AppURLB=http://dl.surfright.nl/FoolishIT/HitmanPro.exe
AppDLName=HitmanPro.exe
AlwaysAttemptDownload=1
DLafterXdays=3
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=1
AppWaitTime=60
AppRandomize=1
CopyConfigFirst=HMP.cmd
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Ran Malware Scans (HitmanPro)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1
LastDownload=8/31/2018

View file

@ -0,0 +1,42 @@
[Config]
Author=FoolishTech
LastEditDate=7/13/2015 9:38:52 AM
PostRunApp=
AppWebsite=http://thisisudax.org/
AppDLPage=http://thisisudax.org/
AppDesc=Junkware Removal Tool - toolbar remover.
App=JRT.exe
AppParms=-y -om1 -nr
UseFTPServer=0
AppURL=http://thisisudax.org/downloads/JRT.exe
AppDLName=JRT.exe
AlwaysAttemptDownload=1
DLafterXdays=1
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
CopyConfigFirst=JRT_Auto.cmd
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsLoc=%userprofile%\Desktop\JRT.txt
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Removed unnecessary internet browser add-ins (e.g. Toolbars) [JRT]
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1
WaitOnProcesses=wget.dat,jq.dat,nircmd.dat,sed.dat,grep.dat,cut.dat,reg.exe
LastDownload=8/19/2018
AppWaitTime=30

View file

@ -0,0 +1,35 @@
[Config]
Author=FoolishTech
LastEditDate=5/27/2014 1:45:37 PM
AppWebsite=http://support.kaspersky.com/5350
AppDLPage=http://support.kaspersky.com/viruses/disinfection/5350
AppDesc=TDSS / Rootkit scanner
App=TDSSKiller.exe
AppParms=-accepteula -accepteulaksn -l "%malreportdir%\TDSSKiller_Report_%date%.txt" -tdlfs -dcexact -silent
UseFTPServer=0
AppURL=http://media.kaspersky.com/utilities/VirusUtilities/EN/tdsskiller.exe
AppDLName=tdsskiller.exe
AlwaysAttemptDownload=1
DLafterXdays=3
AppWait=1
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=1
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Scanned for MBR infections / rootkits (TDSSKiller)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=2
LastDownload=8/31/2018

View file

@ -0,0 +1,35 @@
[Config]
Author=FoolishTech
LastEditDate=5/27/2014 1:45:26 PM
AppWebsite=http://support.kaspersky.com/5350
AppDLPage=http://support.kaspersky.com/viruses/disinfection/5350
AppDesc=TDSS / Rootkit scanner
App=TDSSKiller.exe
AppParms=-accepteula -accepteulaksn -l "%malreportdir%\TDSSKiller_Report_%date%.txt" -tdlfs -dcexact
UseFTPServer=0
AppURL=http://media.kaspersky.com/utilities/VirusUtilities/EN/tdsskiller.exe
AppDLName=tdsskiller.exe
AlwaysAttemptDownload=1
DLafterXdays=3
AppWait=1
PriorAlert=1
ServiceWait=0
AppMsgBox=0
AppRandomize=1
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Scanned for MBR infections / rootkits (TDSSKiller)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,36 @@
[Config]
Author=Foolish IT
LastEditDate=1/28/2016 3:33:42 PM
PostRunApp=
AppWebsite=https://www.foolishit.com/d7x/killemall/
AppDLPage=https://www.foolishit.com/d7x/killemall/
UseFTPServer=0
AppURL=http://download.foolishit.com/killemall/KillEmAll_Portable.zip
AppDLName=KillEmAll_Portable.zip
AlwaysAttemptDownload=1
DLafterXdays=5
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
App=KillEmAll_Portable\KillEmAll.exe
AutoFlag=0
AppDesc=Kills non-essential processes
LastDownload=5/17/2016

View file

@ -0,0 +1,36 @@
[Config]
DisableCloudShare=0
App=MBRCheck.exe
AppURL=http://ad13.geekstogo.com/MBRCheck.exe
AppDLName=MBRCheck.exe
AlwaysAttemptDownload=1
AppWait=1
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsLoc=%userprofile%\Desktop\MBRCheck*.txt
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
UseFTPServer=0
DLafterXdays=7
PriorAlert=1
ServiceWait=0
IsDLInstaller=0
AppWebsite=http://www.majorgeeks.com/files/details/mbrcheck.html
LogVerbiage=Checked MBR for infections.
Author=FoolishTech
LastEditDate=2/7/2014 9:59:38 AM
AppDLPage=http://www.majorgeeks.com/files/details/mbrcheck.html
AppDesc=MBR scanner, this profile is intended to be used from the Offline Operations page.
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,38 @@
[Config]
Author=FoolishTech
LastEditDate=9/28/2014 4:13:43 PM
PostRunApp=Autoruns_Copy
AppWebsite=http://www.majorgeeks.com/files/details/mbrcheck.html
AppDLPage=http://www.majorgeeks.com/files/details/mbrcheck.html
AppDesc=MBR scanner - use as a second opinion, not reliable especially to repair any damage.
App=MBRCheck.exe
UseFTPServer=0
AppURL=http://ad13.geekstogo.com/MBRCheck.exe
AppDLName=MBRCheck.exe
AlwaysAttemptDownload=1
DLafterXdays=7
AppWait=1
EmailBeforeExecution=0
PriorAlert=1
ServiceWait=0
AppMsgBox=0
AppRandomize=1
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsLoc=%userprofile%\Desktop\MBRCheck*.txt
SnatchReportsToMalwareLogs=1
RunInCMD=1
SendEnter=1
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Checked MBR for infections.
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=2
LastDownload=9/28/2014

View file

@ -0,0 +1,36 @@
[Config]
DisableCloudShare=0
App=MBRCheck.exe
AppURL=http://ad13.geekstogo.com/MBRCheck.exe
AppDLName=MBRCheck.exe
AlwaysAttemptDownload=1
AppWait=1
AppMsgBox=0
AppRandomize=1
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsLoc=%userprofile%\Desktop\MBRCheck*.txt
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
UseFTPServer=0
DLafterXdays=7
PriorAlert=1
ServiceWait=0
IsDLInstaller=0
AppWebsite=http://www.majorgeeks.com/files/details/mbrcheck.html
LogVerbiage=Checked MBR for infections.
Author=FoolishTech
LastEditDate=2/7/2014 10:00:33 AM
AppDLPage=http://www.majorgeeks.com/files/details/mbrcheck.html
AppDesc=MBR scanner - use as a second opinion, not reliable especially to repair any damage.
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,35 @@
[Config]
Author=FoolishTech
LastEditDate=2/8/2014 1:17:11 AM
AppWebsite=http://support.microsoft.com/kb/2812744
AppDLPage=http://www.microsoft.com/en-us/download/details.aspx?id=36852
AppDesc=Fixes a wide variety of issues with Microsoft Office - Installer version
App=%programfiles(x86)%\Microsoft OffCAT\OffCAT.exe
UseFTPServer=0
InstallerParms=/passive
InstallerName=OffCAT.msi
AppURL=http://go.microsoft.com/fwlink/?LinkID=286211
AppDLName=OffCAT.msi
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
PriorAlert=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=1
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,32 @@
[Config]
Author=FoolishTech
LastEditDate=2/8/2014 1:17:02 AM
AppWebsite=http://support.microsoft.com/kb/2812744
AppDLPage=http://www.microsoft.com/en-us/download/details.aspx?id=36852
AppDesc=Fixes a wide variety of issues with Microsoft Office - Portable Version
App=OffCAT\OffCAT.exe
UseFTPServer=0
AppURL=http://go.microsoft.com/fwlink/?LinkID=286208
AppDLName=OffCAT.zip
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
PriorAlert=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0

View file

@ -0,0 +1,37 @@
[Config]
DisableCloudShare=0
App=mbar\mbar\mbar.exe
AppURL=http://downloads.malwarebytes.org/file/mbar
AppDLName=mbar.7z
AlwaysAttemptDownload=1
AppWait=1
AppMsgBox=0
AppRandomize=1
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsToMalwareLogs=1
RunInCMD=1
RunWithSystemAccess=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
ServiceWait=0
SnatchReportsLoc=%3rdpath%\system-log.txt
IsDLInstaller=0
Servers=1
UseFTPServer=0
DLafterXdays=7
PriorAlert=1
LogVerbiage=Scanned for MBR infections / rootkits (MBAR)
AppWebsite=http://www.malwarebytes.org/products/mbar/
LastDownload=11/3/2013
NonDirectURLs=0
WaitOnProcesses=mbar.exe
Author=FoolishTech
LastEditDate=2/7/2014 9:59:08 AM
AppDLPage=http://www.malwarebytes.org/products/mbar/
AppDesc=Rootkit scanner
AutoFlag=0

View file

@ -0,0 +1,39 @@
[Config]
Author=FoolishTech
LastEditDate=1/26/2015 3:38:04 PM
PostRunApp=
AppWebsite=http://www.malwarebytes.org/products/malwarebytes_free/
AppDLPage=http://www.malwarebytes.org/products/malwarebytes_free/
AppDesc=Malware scanner
App=%programfiles(x86)%\Malwarebytes Anti-Malware\mbam.exe
UseFTPServer=0
InstallerParms=/silent /suppressmsgboxes /norestart /nocancel /lang=1033
InstallerName=mbam2-setup.exe
AppURL=http://downloads.malwarebytes.org/file/mbam/
AppDLName=mbam2-setup.exe
AlwaysAttemptDownload=1
DLafterXdays=0
AppWait=1
EmailBeforeExecution=0
PriorAlert=1
ServiceWait=0
AppMsgBox=0
AppRandomize=1
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsLoc=%programdata%\Malwarebytes\Malwarebytes Anti-Malware\Logs\*.xml
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=1
LogVerbiage=Scanned for Malware (MBAM)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0

View file

@ -0,0 +1,38 @@
[Config]
DisableCloudShare=0
App=stinger32.exe
App64=stinger64.exe
AppParms=--go --repair --noprocess --noregistry --scanpath=%tdrive% --reportpath="%malreportdir%"
AppURL64=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger64.exe
AppDLName64=stinger64.exe
AppURL=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger32.exe
AppDLName=stinger32.exe
AlwaysAttemptDownload=1
AppWait=1
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
ServiceWait=1
AppWebsite=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
UseFTPServer=0
PriorAlert=1
IsDLInstaller=0
LogVerbiage=Ran virus scans (McAfee Stinger)
Author=FoolishTech
LastEditDate=2/7/2014 10:01:11 AM
AppDLPage=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
AppDesc=Virus scanner - meant to be used from the Offline Operations tab.
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,37 @@
[Config]
Author=FoolishTech
LastEditDate=5/27/2014 1:47:06 PM
AppWebsite=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
AppDLPage=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
AppDesc=Virus scanner
App=stinger32.exe
App64=stinger64.exe
AppParms=--silent --go --repair --adl --reportpath="%malreportdir%"
AppURL64=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger64.exe
AppDLName64=stinger64.exe
UseFTPServer=0
AppURL=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger32.exe
AppDLName=stinger32.exe
AlwaysAttemptDownload=1
DLafterXdays=3
AppWait=1
PriorAlert=0
ServiceWait=1
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Ran virus scans (McAfee Stinger)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=2

View file

@ -0,0 +1,38 @@
[Config]
DisableCloudShare=0
AppWebsite=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
App=stinger32.exe
App64=stinger64.exe
AppParms=--silent --go --repair --noprocess --noregistry --scanpath=%tdrive% --reportpath="%malreportdir%"
AppURL64=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger64.exe
AppDLName64=stinger64.exe
UseFTPServer=0
AppURL=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger32.exe
AppDLName=stinger32.exe
AlwaysAttemptDownload=1
AppWait=1
PriorAlert=0
ServiceWait=1
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Ran virus scans (McAfee Stinger)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
Author=FoolishTech
LastEditDate=2/7/2014 10:01:42 AM
AppDLPage=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
AppDesc=Virus scanner - meant to be used from the Offline Operations tab.
NonDirectURLs=0
AutoFlag=2
LastDownload=10/27/2017

View file

@ -0,0 +1,38 @@
[Config]
Author=FoolishTech
LastEditDate=5/27/2014 1:46:41 PM
AppWebsite=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
AppDLPage=http://www.mcafee.com/us/downloads/free-tools/stinger.aspx
AppDesc=Virus scanner
App=stinger32.exe
App64=stinger64.exe
AppParms=--go --repair --adl --reportpath="%malreportdir%"
AppURL64=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger64.exe
AppDLName64=stinger64.exe
UseFTPServer=0
AppURL=http://downloadcenter.mcafee.com/products/mcafee-avert/Stinger/stinger32.exe
AppDLName=stinger32.exe
AlwaysAttemptDownload=1
DLafterXdays=3
AppWait=1
PriorAlert=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Ran virus scans (McAfee Stinger)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,35 @@
[Config]
Author=Microsoft
LastEditDate=6/20/2016 2:00:27 PM
PostRunApp=
AppWebsite=https://support.microsoft.com/en-us/kb/2698555
AppDLPage=http://go.microsoft.com/fwlink/?LinkID=246062
App=NetFxRepairTool.exe
UseFTPServer=0
AppURL=https://download.microsoft.com/download/2/B/D/2BDE5459-2225-48B8-830C-AE19CAF038F1/NetFxRepairTool.exe
AlwaysAttemptDownload=0
DLafterXdays=30
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=1
LastDownload=6/20/2016
AppDLName=NetFxRepairTool.exe
AutoFlag=0

View file

@ -0,0 +1,34 @@
[Config]
LastEditDate=2/8/2014 12:42:30 AM
AppWebsite=www.microsoft.com
AppDLPage=http://go.microsoft.com/?linkid=9775982
AppDesc=Fix a wide variety of Windows issues all in one portable MS FixIT
App=MicrosoftFixit-portable.exe
UseFTPServer=0
AppURL=http://download.microsoft.com/download/E/2/3/E237A32D-E0A9-4863-B864-9E820C1C6F9A/MicrosoftFixit-portable.exe
AppDLName=MicrosoftFixit-portable.exe
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
PriorAlert=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Fixed misc. broken Windows functions with %app%
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=0
NonDirectURLs=0
Author=FoolishTech
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,34 @@
[Config]
Author=FoolishTech
LastEditDate=2/8/2014 1:20:09 AM
AppWebsite=http://support.microsoft.com/kb/971058/en-US
AppDLPage=http://go.microsoft.com/?linkid=9665683
AppDesc=MS FixIt 50202 fixes issues with Windows Update - This will reboot!
App=MicrosoftFixIt50202.msi
AppParms=/passive
UseFTPServer=0
AppURL=http://go.microsoft.com/?linkid=9665683
AppDLName=MicrosoftFixIt50202.msi
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
LastDownload=10/27/2017
AutoFlag=1

View file

@ -0,0 +1,34 @@
[Config]
Author=FoolishTech
LastEditDate=2/8/2014 1:03:54 AM
AppWebsite=http://support.microsoft.com/kb/811259
AppDLPage=http://go.microsoft.com/?linkid=9662461
AppDesc=Microsoft FixIt 50203 fixes Winsock corruption issues - This will reboot!
App=MicrosoftFixit50203.msi
AppParms=/passive
UseFTPServer=0
AppURL=http://go.microsoft.com/?linkid=9662461
AppDLName=MicrosoftFixit50203.msi
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1
LastDownload=10/27/2017

View file

@ -0,0 +1,38 @@
[Config]
Author=Microsoft
LastEditDate=7/11/2016 1:23:26 PM
PostRunApp=
AppWebsite=https://www.microsoft.com/security/scanner/en-us/default.aspx
AppDLPage=https://www.microsoft.com/security/scanner/en-us/default.aspx
App=msert.exe
App64=msert.exe
AppURL64=http://definitionupdates.microsoft.com/download/definitionupdates/safetyscanner/amd64/msert.exe
AppDLName64=msert.exe
UseFTPServer=0
AppURL=http://definitionupdates.microsoft.com/download/definitionupdates/safetyscanner/x86/msert.exe
AppDLName=msert.exe
AlwaysAttemptDownload=1
DLafterXdays=9
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LastDownload=7/11/2016

View file

@ -0,0 +1,35 @@
[Config]
DisableCloudShare=0
AppWebsite=http://keir.net/neutron.html
App=neutron\Neutron.exe
UseFTPServer=0
AppURL=http://keir.net/download/neutron.zip
AppDLName=neutron.zip
AlwaysAttemptDownload=0
AppWait=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
CopyConfigFirst=neutron.ini
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
PriorAlert=0
LogVerbiage=Synced Windows time with the atomic clock.
Author=FoolishTech
LastEditDate=2/7/2014 10:03:42 AM
AppDLPage=http://keir.net/neutron.html
AppDesc=Sync time with an internet time server
NonDirectURLs=0
AutoFlag=1
LastDownload=10/27/2017

View file

@ -0,0 +1,34 @@
[Config]
App=OTL.exe
AppURL=http://oldtimer.geekstogo.com/OTL.exe
AppDLName=OTL.exe
AppWait=1
AppMsgBox=0
AppRandomize=1
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
DisableCloudShare=0
UseFTPServer=0
AlwaysAttemptDownload=1
DLafterXdays=7
PriorAlert=1
ServiceWait=0
SaveConfigAfter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
AppWebsite=http://www.geekstogo.com/forum/topic/277391-otl-tutorial-how-to-use-oldtimer-listit/
LogVerbiage=Performed manual inspection for viruses/malware.
Author=FoolishTech
LastEditDate=2/7/2014 10:05:19 AM
AppDLPage=http://www.geekstogo.com/forum/topic/277391-otl-tutorial-how-to-use-oldtimer-listit/
AppDesc=Malware scanner and startup manager.
NonDirectURLs=0
AutoFlag=0

View file

@ -0,0 +1,34 @@
[Config]
DisableCloudShare=0
App=openhardwaremonitor\OpenHardwareMonitor\OpenHardwareMonitor.exe
AppURL=http://openhardwaremonitor.org/files/openhardwaremonitor-v0.6.0-beta.zip
AppDLName=openhardwaremonitor.zip
AlwaysAttemptDownload=0
AppWait=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=0
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
AppWebsite=http://openhardwaremonitor.org/
UseFTPServer=0
PriorAlert=0
LogVerbiage=Checked hardware temperatures / fan speeds.
Author=FoolishTech
LastEditDate=2/7/2014 10:04:27 AM
AppDLPage=http://openhardwaremonitor.org/downloads/
AppDesc=Detailed hardware information
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,42 @@
[Config]
Author=dSupportOnline
LastEditDate=10/29/2014 9:41:55 AM
PostRunApp=
AppWebsite=http://www.nirsoft.net/utils/opened_files_view.html
AppDLPage=http://www.nirsoft.net/utils/opened_files_view.html
AppDesc=Shows currently opened files in use by the system
App=ofview\OpenedFilesView.exe
App64=ofview-x64\OpenedFilesView.exe
AppURL64=http://www.nirsoft.net/utils/ofview-x64.zip
AppDLName64=ofview-x64.zip
AppURLSpoof=http://www.nirsoft.net/utils/opened_files_view.html
UseFTPServer=0
AppURL=http://www.nirsoft.net/utils/ofview.zip
AppDLName=ofview.zip
AlwaysAttemptDownload=1
DLafterXdays=5
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=1
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Detected currently open files and manipulated as necessary.
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017
CopyConfigFirst=OpenedFilesView.cfg

View file

@ -0,0 +1,24 @@
[General]
ToolTipTimeAutoPop=-1
ToolTipTimeInitial=10
ToolTipTimeReshow=10
TrayIcon=0
ShowGridLines=0
ShowOpenedFiles=1
ShowOpenedDirectories=0
ShowNetworkFiles=0
SortOnRefresh=0
HideWindowsFiles=0
HideSystemProcessFiles=0
HideSvchostFiles=0
AddExportHeaderLine=0
ShowInfoTip=1
AutoRefresh=0
SaveFilterIndex=0
ConvertToLongPath=0
MarkModifiedFilenames=1
MarkPositionChange=1
MarkOddEvenRows=0
WinPos=2C 00 00 00 00 00 00 00 01 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 80 02 00 00 E0 01 00 00
Columns=82 00 00 00 2C 01 01 00 3C 00 02 00 78 00 03 00 78 00 04 00 46 00 05 00 64 00 06 00 3C 00 07 00 3C 00 08 00 3C 00 09 00 3C 00 0A 00 3C 00 0B 00 3C 00 0C 00 50 00 0D 00 50 00 0E 00 50 00 0F 00 78 00 10 00 FA 00 11 00 50 00 12 00 50 00 13 00
Sort=0

View file

@ -0,0 +1,37 @@
[Config]
Author=FoolishTech
LastEditDate=5/27/2014 1:45:01 PM
AppWebsite=www.patchmypc.net
AppDLPage=www.patchmypc.net
AppDesc=Windows and misc application updater
App=PatchMyPC.exe
AppParms=/auto /update
UseFTPServer=0
AppURL=https://patchmypc.net/freeupdater/PatchMyPC.exe
AppDLName=PatchMyPC.exe
AlwaysAttemptDownload=1
DLafterXdays=3
AppWait=1
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
CopyConfigFirst=PatchMyPC.reg
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsLoc=%systemdrive%\%computername%.rtf
SnatchReportsToMalwareLogs=0
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Installed updates Windows and commonly used applications.
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1
LastDownload=10/27/2017

View file

@ -0,0 +1,37 @@
[Config]
Author=FoolishTech
LastEditDate=5/27/2014 1:44:22 PM
AppWebsite=www.patchmypc.net
AppDLPage=www.patchmypc.net
AppDesc=Windows and misc application updater
App=PatchMyPC.exe
UseFTPServer=0
AppURL=http://www.patchmypc.net/PatchMyPC.exe
AppDLName=PatchMyPC.exe
AlwaysAttemptDownload=1
DLafterXdays=3
AppWait=1
PriorAlert=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
CopyConfigFirst=PatchMyPC.reg
ExportRegAfter=HKLM\Software\Patch My PC\Options
SaveConfigAfter=1
MoveSnatchReports=1
SnatchReportsLoc=%systemdrive%\%computername%.rtf
SnatchReportsToMalwareLogs=0
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Installed updates Windows and commonly used applications.
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,36 @@
[Config]
Author=Foolish Proctor
LastEditDate=4/13/2016 3:12:07 PM
PostRunApp=
AppWebsite=http://rmprepusb.blogspot.co.uk/2016/04/petya-whole-disk-encryption-fix.html
AppDLPage=http://rmprepusb.blogspot.co.uk/2016/04/petya-whole-disk-encryption-fix.html
App=PetyaExtractor\PetyaExtractor.exe
UseFTPServer=0
AppURL=http://download.bleepingcomputer.com/fabian-wosar/PetyaExtractor.zip
AppDLName=PetyaExtractor.zip
AlwaysAttemptDownload=1
DLafterXdays=7
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
AppDesc=Decrypt Disk with Petya malware infection
LogVerbiage=Decrypt Disk infected with Petya malware

View file

@ -0,0 +1,38 @@
[Config]
App=ccleaner\CCleaner.exe
App64=ccleaner\CCleaner64.exe
AppParms=/auto
AppURL=http://www.piriform.com/ccleaner/download/portable/downloadfile
AppDLName=ccleaner.zip
AppWait=0
AppMsgBox=0
AppRandomize=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
AlwaysAttemptDownload=1
CopyConfigFirst=CCleaner.ini
SaveConfigAfter=0
DisableCloudShare=0
UseFTPServer=0
DLafterXdays=7
PriorAlert=0
ServiceWait=0
RunWithSystemAccess=0
IsDLInstaller=0
Servers=1
AppWebsite=www.piriform.com/ccleaner
LogVerbiage=Scanned registry for unnecessary data and removed.
Author=FoolishTech
LastEditDate=2/7/2014 10:06:48 AM
AppDLPage=http://www.piriform.com/ccleaner/builds
AppDesc=Temp file remover and registry cleaner
NonDirectURLs=0
AutoFlag=1
LastDownload=8/13/2018

View file

@ -0,0 +1,37 @@
[Config]
App=ccleaner\CCleaner.exe
App64=ccleaner\CCleaner64.exe
AppURL=http://www.piriform.com/ccleaner/download/portable/downloadfile
AppDLName=ccleaner.zip
AppWait=0
AppMsgBox=0
AppRandomize=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
AlwaysAttemptDownload=1
CopyConfigFirst=CCleaner.ini
SaveConfigAfter=1
DisableCloudShare=0
UseFTPServer=0
DLafterXdays=7
PriorAlert=1
ServiceWait=0
RunWithSystemAccess=0
IsDLInstaller=0
Servers=1
AppWebsite=www.piriform.com/ccleaner
LogVerbiage=Scanned registry for unnecessary data and removed.
LastEditDate=2/7/2014 10:07:10 AM
AppDLPage=http://www.piriform.com/ccleaner/builds
NonDirectURLs=0
Author=FoolishTech
AppDesc=Temp file remover and registry cleaner
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,38 @@
[Config]
App=defraggler\df.exe
App64=defraggler\df64.exe
AppParms=%systemdrive%
AppURL=http://www.piriform.com/defraggler/download/portable/downloadfile
AppDLName=defraggler.zip
AppWait=1
AppMsgBox=0
AppRandomize=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
AlwaysAttemptDownload=1
CopyConfigFirst=Defraggler.ini
SaveConfigAfter=0
DisableCloudShare=0
UseFTPServer=0
DLafterXdays=7
PriorAlert=0
ServiceWait=0
RunWithSystemAccess=0
IsDLInstaller=0
Servers=1
AppWebsite=www.piriform.com/defraggler
LogVerbiage=Defragmented file system (Defraggler)
Author=FoolishTech
LastEditDate=2/7/2014 10:07:50 AM
AppDLPage=http://www.piriform.com/defraggler/builds
AppDesc=Disk defragmenter
NonDirectURLs=0
AutoFlag=1
LastDownload=10/27/2017

View file

@ -0,0 +1,37 @@
[Config]
App=Defraggler\Defraggler.exe
App64=Defraggler\Defraggler64.exe
AppURL=http://www.piriform.com/defraggler/download/portable/downloadfile
AppDLName=defraggler.zip
AppWait=1
AppMsgBox=0
AppRandomize=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
AlwaysAttemptDownload=1
CopyConfigFirst=Defraggler.ini
SaveConfigAfter=1
DisableCloudShare=0
UseFTPServer=0
DLafterXdays=7
PriorAlert=1
ServiceWait=0
RunWithSystemAccess=0
IsDLInstaller=0
Servers=1
AppWebsite=www.piriform.com/defraggler
LogVerbiage=Defragmented file system (Defraggler)
Author=FoolishTech
LastEditDate=2/7/2014 10:08:05 AM
AppDLPage=http://www.piriform.com/defraggler/builds
AppDesc=Disk defragmenter
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,33 @@
[Config]
DisableCloudShare=0
App=recuva\recuva.exe
App64=recuva\recuva64.exe
AppURL=http://www.piriform.com/recuva/download/portable/downloadfile
AppDLName=recuva.zip
AlwaysAttemptDownload=0
AppWait=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=0
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
AppWebsite=www.piriform.com/recuva
UseFTPServer=0
PriorAlert=0
Author=FoolishTech
LastEditDate=2/7/2014 10:08:40 AM
AppDLPage=http://www.piriform.com/recuva/builds
AppDesc=File undelete utility
NonDirectURLs=0
AutoFlag=0

View file

@ -0,0 +1,35 @@
[Config]
DisableCloudShare=0
App=speccy\Speccy.exe
App64=speccy\Speccy64.exe
AppURL=http://www.piriform.com/speccy/download/portable/downloadfile
AppDLName=speccy.zip
AlwaysAttemptDownload=0
AppWait=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=0
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
AppWebsite=www.piriform.com/speccy
UseFTPServer=0
PriorAlert=0
LogVerbiage=Gathered information on system specs.
Author=FoolishTech
LastEditDate=2/7/2014 10:09:08 AM
AppDLPage=http://www.piriform.com/speccy/builds
AppDesc=System information utility.
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,39 @@
[Config]
LastEditDate=7/14/2016 4:49:58 PM
PostRunApp=
AppWebsite=http://www.nirsoft.net/utils/previous_files_recovery.html
AppDLPage=http://www.nirsoft.net/utils/previous_files_recovery.html
AppDesc=Recover Previous Files
App=previousfilesrecovery\PreviousFilesRecovery.exe
App64=previousfilesrecovery-x64\PreviousFilesRecovery.exe
AppURL64=http://www.nirsoft.net/utils/previousfilesrecovery-x64.zip
AppDLName64=previousfilesrecovery-x64.zip
UseFTPServer=0
AppURL=http://www.nirsoft.net/utils/previousfilesrecovery.zip
AppDLName=previousfilesrecovery.zip
AlwaysAttemptDownload=1
DLafterXdays=30
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Recover Previous Files
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
Author=FoolishProctor

View file

@ -0,0 +1,39 @@
[Config]
Author=dSupportOnline
LastEditDate=10/29/2014 9:50:53 AM
PostRunApp=
AppWebsite=http://www.nirsoft.net/utils/reg_file_from_application.html
AppDLPage=http://www.nirsoft.net/utils/reg_file_from_application.html
AppDesc=Shows registry entries created by a selected process
App=regfromapp\RegFromApp.exe
AppURLSpoof=http://www.nirsoft.net/utils/reg_file_from_application.html
UseFTPServer=0
AppURL=http://www.nirsoft.net/utils/regfromapp.zip
AppDLName=regfromapp.zip
AlwaysAttemptDownload=1
DLafterXdays=5
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
CopyConfigFirst=RegFromApp.cfg
SaveConfigAfter=1
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Detected registry entries created by 32-bit application.
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,39 @@
[Config]
Author=dSupportOnline
LastEditDate=10/29/2014 9:52:31 AM
PostRunApp=
AppWebsite=http://www.nirsoft.net/utils/reg_file_from_application.html
AppDLPage=http://www.nirsoft.net/utils/reg_file_from_application.html
AppDesc=Shows registry entries created by a selected 64-bit process
App=regfromapp-x64\RegFromApp.exe
AppURLSpoof=http://www.nirsoft.net/utils/reg_file_from_application.html
UseFTPServer=0
AppURL=http://www.nirsoft.net/utils/regfromapp-x64.zip
AppDLName=regfromapp-x64.zip
AlwaysAttemptDownload=1
DLafterXdays=5
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
CopyConfigFirst=RegFromApp.cfg
SaveConfigAfter=1
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Detected registry entries created by 64-bit application.
32=0
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,9 @@
[General]
RegFileVersion=5
AddOnlyModifiedValues=1
DisplayMode=1
ProcessPath=
ProcessParams=
StartImmediately=0
ListViewSortProcess=0
WinPos=2C 00 00 00 00 00 00 00 01 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 80 02 00 00 E0 01 00 00

View file

@ -0,0 +1,38 @@
[Config]
Author=FoolishTech
LastEditDate=8/30/2016 3:23:42 PM
PostRunApp=
AppWebsite=http://www.revouninstaller.com/
AppDLPage=http://www.revouninstaller.com/download-free-portable.php
AppDesc=Application uninstaller and cleanup utility
App=revouninstaller\RevoUninstaller_Portable\x86\RevoUn.exe
App64=revouninstaller\RevoUninstaller_Portable\x64\RevoUn.exe
UseFTPServer=0
AppURL=http://www.revouninstaller.com/download/revouninstaller.zip
AppDLName=revouninstaller.zip
AlwaysAttemptDownload=1
DLafterXdays=7
AppWait=1
EmailBeforeExecution=0
PriorAlert=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Uninstalled unnecessary / junk programs.
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,41 @@
[Config]
Author=FoolishTech
LastEditDate=6/19/2015 4:06:02 PM
PostRunApp=
AppWebsite=http://www.adlice.com/softwares/roguekiller/
AppDLPage=http://www.adlice.com/softwares/roguekiller/
AppDesc=Rogue malware remover.
App=RogueKiller.exe
App64=RogueKillerX64.exe
AppURL64=http://download.adlice.com/RogueKiller/RogueKillerX64.exe
AppDLName64=RogueKillerX64.exe
UseFTPServer=0
AppURL=http://download.adlice.com/RogueKiller/RogueKiller.exe
AppDLName=RogueKiller.exe
AlwaysAttemptDownload=1
DLafterXdays=3
AppWait=1
EmailBeforeExecution=0
PriorAlert=1
ServiceWait=1
AppMsgBox=0
AppRandomize=1
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsLoc=%programdata%\RogueKiller\Logs\RKreport*.txt
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Scanned for rogue applications and malware (RogueKiller)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=0
NonDirectURLs=0
AutoFlag=0
LastDownload=6/19/2015

View file

@ -0,0 +1,39 @@
[Config]
Author=Proctor Foolish IT LLC
LastEditDate=6/27/2016 9:46:36 AM
PostRunApp=
AppWebsite=http://www.nirsoft.net/utils/shadow_copy_view.html
AppDLPage=http://www.nirsoft.net/utils/shadow_copy_view.html
App=shadowcopyview\ShadowCopyView.exe
App64=shadowcopyview-x64\ShadowCopyView.exe
AppURL64=http://www.nirsoft.net/utils/shadowcopyview-x64.zip
AppDLName64=shadowcopyview-x64.zip
UseFTPServer=0
AppURL=http://www.nirsoft.net/utils/shadowcopyview.zip
AppDLName=shadowcopyview.zip
AlwaysAttemptDownload=1
DLafterXdays=30
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AppDesc=Manage Shadow Copy files
LogVerbiage=Manage Shadow Copy files
LastDownload=6/27/2016

View file

@ -0,0 +1,33 @@
[Config]
Author=dSupportOnline
LastEditDate=10/9/2014 1:41:32 PM
PostRunApp=
AppWebsite=http://www.shouldiremoveit.com
App=%WINDIR%\System32\MsiExec.exe
App64=%WINDIR%\SysWow64\MsiExec.exe
AppParms=/X{4E62123C-4C0D-4123-A8A2-C0103B92D7EA} /qn
UseFTPServer=0
AlwaysAttemptDownload=0
DLafterXdays=5
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=0
NonDirectURLs=0
AutoFlag=1

View file

@ -0,0 +1,39 @@
[Config]
LastEditDate=10/9/2014 2:12:59 PM
AppWebsite=http://www.shouldiremoveit.com
AppDLPage=http://www.shouldiremoveit.com/download.aspx
UseFTPServer=0
InstallerParms=/qn
InstallerName=ShouldIRemoveIt_Setup.exe
AppURL=http://www.shouldiremoveit.com/installers/ShouldIRemoveIt_Setup.exe
AppDLName=ShouldIRemoveIt_Setup.exe
AlwaysAttemptDownload=1
DLafterXdays=5
AppWait=1
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=1
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=0
NonDirectURLs=0
App=%programfiles(x86)%\Reason\Should I Remove It\ShouldIRemoveIt.exe
Author=dSupportOnline
PostRunApp=Should I Remove It (Uninstall)
EmailBeforeExecution=0
SendEnter=0
AutoFlag=0
LastDownload=10/27/2017
AppDesc=Crowdsource installed programs to determine if they are malicious.
LogVerbiage=Verified installed programs against crowdsource rating system.

View file

@ -0,0 +1,39 @@
[Config]
Author=FoolishTech
LastEditDate=3/30/2016 11:12:26 AM
PostRunApp=
AppWebsite=http://www.sophos.com/en-us/products/free-tools/virus-removal-tool/download.aspx
AppDLPage=http://www.sophos.com/en-us/products/free-tools/virus-removal-tool/download.aspx
AppDesc=Virus scanner
App=%programfiles(x86)%\Sophos\Sophos Virus Removal Tool\SVRTcli.exe
AppParms=-reboot -uninstall -yes
UseFTPServer=0
InstallerName=SophosVRT.exe
AppURL=http://downloads.sophos.com/tools/withides/Sophos%20Virus%20Removal%20Tool.exe
AppDLName=SophosVRT.exe
AlwaysAttemptDownload=1
DLafterXdays=5
AppWait=1
EmailBeforeExecution=0
PriorAlert=0
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=1
SnatchReportsLoc=%programdata%\Sophos\Sophos Virus Removal Tool\Logs\SophosVirusRemovalTool.log
SnatchReportsToMalwareLogs=1
RunInCMD=0
SendEnter=0
RunWithSystemAccess=0
IsDLInstaller=1
LogVerbiage=Scanned for viruses/malware (Sophos)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=1

View file

@ -0,0 +1,33 @@
[Config]
DisableCloudShare=0
App=spacesniffer_1_1_4_0\SpaceSniffer.exe
AppURL=http://www.uderzo.it/main_products/space_sniffer/files/spacesniffer_1_1_4_0.zip
AppDLName=spacesniffer_1_1_4_0.zip
AlwaysAttemptDownload=0
AppWait=1
ServiceWait=0
AppMsgBox=0
AppRandomize=0
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=0
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
AppWebsite=www.uderzo.it/main_products/space_sniffer
UseFTPServer=0
PriorAlert=0
Author=FoolishTech
LastEditDate=2/7/2014 10:13:36 AM
AppDLPage=www.uderzo.it/main_products/space_sniffer
AppDesc=Useful to determine where all your disk space is being used!
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,35 @@
[Config]
App=StartUpLite.exe
AppURL=http://www.malwarebytes.org/StartUpLite.exe
AppDLName=StartUpLite.exe
AppWait=1
AppMsgBox=0
AppRandomize=0
MoveSnatchReports=0
SnatchReportsToMalwareLogs=1
RunInCMD=0
DisableCloudShare=0
UseFTPServer=0
AlwaysAttemptDownload=1
DLafterXdays=7
PriorAlert=1
ServiceWait=0
SaveConfigAfter=0
RunWithSystemAccess=0
IsDLInstaller=0
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
AppWebsite=http://www.malwarebytes.org/products/startuplite/
LogVerbiage=Removed unnecessary Windows startup entries.
Author=FoolishTech
LastEditDate=2/7/2014 10:14:03 AM
AppDLPage=http://www.malwarebytes.org/products/startuplite/
AppDesc=Startup entry manager by MalwareBytes
NonDirectURLs=0
AutoFlag=0
LastDownload=10/27/2017

View file

@ -0,0 +1,36 @@
[Config]
Author=FoolishTech
LastEditDate=5/27/2014 1:48:26 PM
AppWebsite=http://www.superantispyware.com/
AppDLPage=http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE
AppDesc=Malware scanner
App=sas.com
AppURLSpoof=
UseFTPServer=0
AppURL=http://www.superantispyware.com/sasportable.php
AppDLName=sas.com
AlwaysAttemptDownload=1
DLafterXdays=3
AppWait=1
WaitOnProcesses=program.com;program64.com;superantispyware.exe
PriorAlert=1
ServiceWait=0
AppMsgBox=0
AppRandomize=1
SaveConfigAfter=0
MoveSnatchReports=0
SnatchReportsLoc=%temp%\SAS_SelfExtract\Logs\SUPERAntiSpyware*.log
SnatchReportsToMalwareLogs=1
RunInCMD=0
RunWithSystemAccess=0
IsDLInstaller=0
LogVerbiage=Scanned for ad/spy/malware (SAS)
32=1
64=1
XP=1
Vista=1
7=1
8=1
Servers=1
NonDirectURLs=0
AutoFlag=0

Some files were not shown because too many files have changed in this diff Show more