Start::
CreateRestorePoint:
GroupPolicy: Ограничение ? <==== ВНИМАНИЕ
Policies: C:\ProgramData\NTUSER.pol: Ограничение <==== ВНИМАНИЕ
Task: {12C68AD3-A9CC-408D-BC1C-0D80824679BC} - отсутствует путь к файлу
Task: {2B42CA6C-BEEA-458D-8EB1-2A05D3E5375F} - отсутствует путь к файлу
Task: {60595D97-86B3-40D9-A059-5CF6F5C83C5F} - отсутствует путь к файлу
Task: {91CC8D94-1E2A-43A0-AA9B-FB12E9BC56A9} - отсутствует путь к файлу
Task: {D3B06ABF-C20D-4AEF-9AC0-91F49BB05B6F} - отсутствует путь к файлу
Task: {F763F902-2BD4-4DB7-A547-3899313A390B} - отсутствует путь к файлу
CHR HKU\S-1-5-21-357339448-118313797-1441548400-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gndelhfhcfbdhndfpcinebijfcjpmpec]
2023-03-17 13:23 - 2022-12-11 03:50 - 000000000 ____D C:\Program Files (x86)\Panda Security
StartPowerShell:
## Function to manage Windows Defender, remove exclusions, run scan, report on status
  Function Manage-WindowsDefender {
    Get-MpComputerStatus
    echo "Listing of exclusions"
    Get-MpPreference | Select-Object -Expand ExclusionPath  | Out-String -width 4096
    $Paths=(Get-MpPreference).ExclusionPath
    $Extensions=(Get-MpPreference).ExclusionExtension
    $Processes=(Get-MpPreference).ExclusionProcess
    foreach ($Path in $Paths) { Remove-MpPreference -ExclusionPath $Path -Force}
    foreach ($Extension in $Extensions) { Remove-MpPreference -ExclusionExtension $Extension -Force}
    foreach ($Process in $Processes) { Remove-MpPreference -ExclusionProcess $Process -Force}
    Set-MpPreference -DisableAutoExclusions $true -Force
    Set-MpPreference -CheckForSignaturesBeforeRunningScan $true -Force
    Set-MpPreference -DisableArchiveScanning $false -Force
    Set-MpPreference -DisableBehaviorMonitoring $false -Force
    Set-MpPreference -DisableEmailScanning $False -Force
    Set-MpPreference -DisableIOAVProtection $false -Force
    Set-MpPreference -DisablePrivacyMode $true -Force
    Set-MpPreference -DisableRealtimeMonitoring $false -Force
    Set-MpPreference -MAPSReporting Advanced -Force
    Set-MpPreference -PUAProtection enabled -Force
    Set-MpPreference -SignatureScheduleDay Everyday -Force
    Set-MpPreference -DisableRemovableDriveScanning $false -Force
    Set-MpPreference -SubmitSamplesConsent SendSafeSamples
    # Reset and check Secure Health status
    Get-AppxPackage Microsoft.SecHealthUI -AllUsers | Reset-AppxPackage
    Get-AppxPackage Microsoft.SecHealthUI -AllUsers|select Name, Status
    # Check if these services are running
    Get-Service Windefend, SecurityHealthService, wscsvc, mpsdrv, mpssvc, WdNisSvc | Select Name,DisplayName, Status
      # Check for signature updates
      Update-MpSignature
      Start-MpScan -ScanType QuickScan
      Remove-MpThreat
    # Check computer status again after setting to make sure changes were applied
    Get-MpComputerStatus
    Get-MpPreference
    Get-MpThreatDetection
  }
EndPowerShell:
StartBatch:
del /s /q C:\Windows\SoftwareDistribution\download\*.*
del /s /q "%userprofile%\AppData\Local\Google\Chrome\User Data\Default\Cache\*.*"
del /s /q "%userprofile%\AppData\Local\Opera Software\Opera Stable\Cache\Cache_Data\*.*"
del /s /q C:\Windows\Temp\*.*
del /s /q "%userprofile%\AppData\Local\temp\*.*"
ipconfig /flushdns
endbatch:
Reboot:
End::