+hp + bing + prog64 files +whitelist

furtivex · Dec 10, 2024 · 0aca137 · 0aca137
1 parent 5c93b6f
commit 0aca137
Show file tree

Hide file tree

Showing 5 changed files with 37 additions and 4 deletions.
diff --git a/PrivWindoze.bat b/PrivWindoze.bat
@@ -137,7 +137,7 @@ TIMEOUT /T 2 /NOBREAK >NUL
 TASKLIST /FO CSV /NH 2>NUL|GREP -Es "\.exe" >temp00
 SED -r "s/^\x22(.*\.exe)\x22.*/\1/" <temp00 >temp01
 SORT_ -f -u <temp01 >temp02
-GREP -Eivs "^(audiodg|cmd|conhost|csrss|ctfmon|dllhost|dwm|fontdrvhost|iphlpsvc|LsaIso|lsass|MpDefenderCoreService|MsMpEng|MsSense|NisSrv|OpenConsole|RuntimeBroker|Search(host|Indexer)|services|SecurityHealthService|ShellExperienceHost|sihost|smartscreen|smss|spoolsv|StartMenuExperienceHost|svchost|task(kill|hostw)|TextInputHost|WindowsTerminal|wininit|winlogon|WmiPrvSE|WUDFHost)\.exe$" <temp02 >temp03
+GREP -Eivs "^(audiodg|cmd|conhost|csrss|ctfmon|dllhost|dwm|fontdrvhost|iphlpsvc|LsaIso|lsass|MpDefenderCoreService|MsMpEng|MsSense|NisSrv|OpenConsole|RuntimeBroker|Search(host|Indexer)|services|SecHealthUI|SecurityHealthService|ShellExperienceHost|sihost|smartscreen|smss|spoolsv|StartMenuExperienceHost|svchost|task(kill|hostw)|TextInputHost|WindowsTerminal|wininit|winlogon|WmiPrvSE|WUDFHost)\.exe$" <temp02 >temp03
 @FOR /F "TOKENS=*" %%G IN ( temp03 ) DO @TASKKILL /F /IM "%%G" >NUL 2>&1
 DEL /F/Q temp0? >NUL 2>&1
 
@@ -607,9 +607,16 @@ FOR %%G in (
 "%ALLUSERSPROFILE%\Microsoft\Windows\OneSettings\CortanaUWP.json"
 "%ALLUSERSPROFILE%\Package Cache\{A59BC4A0-0F57-4F97-95E4-641AB5C3A9B0}\HPOneAgent.exe"
 "%APPDATA%\Slate Digital Connect\SDACollector\sdaCollector.vbs"
+"%LOCALA%\Microsoft\BingWallpaperApp\BingWallpaperApp.exe"
 "%PROGFILES32%\Dell\DellDataVault\DDVCollectorSvcApi.exe"
 "%PROGFILES32%\Dell\DellDataVault\DDVDataCollector.exe"
 "%PROGFILES32%\Dell\DTP\AnalyticsSubAgent\Dell.TechHub.Analytics.SubAgent.exe"
+"%PROGFILES32%\HP\HP Enabling Services\AppHelperCap.exe"
+"%PROGFILES32%\HP\HP Enabling Services\DiagsCap.exe"
+"%PROGFILES32%\HP\HP Enabling Services\NetworkCap.exe"
+"%PROGFILES32%\HP\HP Enabling Services\SysInfoCap.exe"
+"%PROGFILES32%\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe"
+"%PROGFILES32%\HPCommRecovery\HPCommRecovery.exe"
 "%STARTMENUAUP%\Adobe offers.lnk"
 "%SYS32%\drivers\Intel\ICPS\IntelAnalyticsService.exe"
 "%SYS32%\drivers\Lenovo\udc\Service\UDClientService.exe"
@@ -646,8 +653,10 @@ FOR %%G in (
 "%LOCALA%\Blizzard Entertainment\Telemetry"
 "%LOCALA%\GameAnalytics"
 "%LOCALA%\Microsoft\BGAHelperLib"
+"%LOCALA%\Microsoft\BingWallpaperApp"
 "%PROGFILES32%\Acer\User Experience Improvement Program Service"
 "%PROGFILES32%\Dell\DTP\AnalyticsSubAgent"
+"%PROGFILES32%\HP\HP Enabling Services"
 "%PROGFILES32%\HP\HP One Agent"
 "%PROGFILES32%\HP\OmenInstallMonitor"
 "%PROGFILES32%\HP\SystemOptimizer"
@@ -675,7 +684,19 @@ FOR %%G in (
     )
   )
 )
-
+
+IF EXIST "%PROGFILES64%" (
+FOR %%G in (
+"%PROGFILES64%\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe"
+"%PROGFILES64%\HP\HP System Event\HPWMISVC.exe"
+) DO @(
+  IF EXIST "%%G" (
+    ECHO.%%G ^(File^)>>"%TEMP%\001"
+    DEL /F/Q %%G >NUL 2>&1
+   )
+  )
+)
+
 :DoLog
 set h=%TIME:~0,2%
 set m=%TIME:~3,2%
@@ -686,7 +707,7 @@ set yr=%date:~10,4%
 set EndTime=%mnth%.%day%.%yr%_%h%.%m%.%s%
 
 Echo(~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~>"%TEMP%\pwindoze.txt"
-Echo(PrivWindoze Lite v3.1.0 ^(12.06.2024^)>>"%TEMP%\pwindoze.txt"
+Echo(PrivWindoze Lite v3.1.1 ^(12.10.2024^)>>"%TEMP%\pwindoze.txt"
 Echo(https://furtivex.net>>"%TEMP%\pwindoze.txt"
 Echo(Operating System: %OS% %ARCH% %DisplayVersion%>>"%TEMP%\pwindoze.txt"
 Echo(Ran by "%username%" ^(%USERSTATUS%^) on %StartTime%>>"%TEMP%\pwindoze.txt"

diff --git a/Urunkey.cfg b/Urunkey.cfg
@@ -1,3 +1,4 @@
+BingWallpaperApp
 com.slatedigital.analytics
 LenovoVantage
 LenovoVantageToolbar
diff --git a/regbad.dat b/regbad.dat
@@ -38,10 +38,19 @@ HKLM\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\A
 HKLM\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Extensions\windows.protocol\windows-feedback
 HKLM\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PackageRepository\Extensions\windows.protocol\zune
 HKLM\Software\Microsoft\MSN Apps\MSN Toolbar Suite
-HKLM\SYSTEM\CurrentControlSet\Services\EventLog\HP Analytics
 HKLM\Software\Microsoft\TelemetryClient
+HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{09D0DB68-90EA-4015-983E-A0BD777D5A02}
 HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{13E9CBF6-6E32-40D0-874A-018DFEFB0851}_is1
+HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5F084DD8-AF2C-4004-9C92-820C32E4BD55}
+HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6468C4A5-E47E-405F-B675-A70A70983EA6}
+HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{64BAA990-F1FC-4145-A7B1-E41FBBC9DA47}
+HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{74FE39A0-FB76-47CD-84BA-91E2BBB17EF2}
+HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D1E8F2D7-7794-4245-B286-87ED86C1893C}
+HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}
+HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\HP_Documentation
+HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\HPWelcome
 HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Lenovo Now
 HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\VantageSRV_is1
+HKLM\SYSTEM\CurrentControlSet\Services\EventLog\HP Analytics
 HKU\.DEFAULT\Software\Microsoft\TelemetryClient
 HKU\.DEFAULT\Software\Microsoft\Windows Script\Settings\Telemetry
diff --git a/svc_delete.dat b/svc_delete.dat
@@ -11,6 +11,7 @@ HPOmenCap
 HPOmenCustomCapDriver
 HPSysInfoCap
 HpTouchpointAnalyticsService
+HPWMISVC
 Intel Analytics Service
 LenovoVantageService
 SmartAppearanceAISVC

diff --git a/svc_stop_disable.dat b/svc_stop_disable.dat
@@ -15,6 +15,7 @@ HPOmenCap
 HPOmenCustomCapDriver
 HPSysInfoCap
 HpTouchpointAnalyticsService
+HPWMISVC
 Intel Analytics Service
 LenovoVantageService
 SmartAppearanceAISVC