Start:: CloseProcesses: ; ============================ ; Remove fake MicrosoftRm service ; ============================ SC Stop MicrosoftRm SC Delete MicrosoftRm DeleteFile: C:\Windows\Systems\da-DK\es-ES\ff-Adlm-SN\DriverState\Microsofte.Photos.exe RemoveDirectory: C:\Windows\Systems\da-DK\es-ES\ff-Adlm-SN\DriverState ; ============================ ; Remove Mihomo / Clash Party / Clash Mi leftovers ; ============================ Task: {239A850B-8509-4C3C-B716-A821ACE1C58A} DeleteFile: C:\Program Files\Clash Party\resources\sidecar\mihomo-smart.exe DeleteFile: C:\Program Files\Clash Party\Clash Party.exe RemoveDirectory: C:\Program Files\Clash Party RemoveDirectory: C:\Program Files\Clash Mi RemoveDirectory: C:\Users\Marspotatooo\AppData\Roaming\me.nabdev.iloader RemoveDirectory: C:\Users\Marspotatooo\AppData\Local\iloader ; Reset proxy HKU\S-1-5-21-228696658-1821511808-2666430869-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer"=- HKU\S-1-5-21-228696658-1821511808-2666430869-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable"=- ; Reset DNS overrides Tcpip\..\Interfaces\{7bdec08a-8bc4-d361-91bd-4d61efcbcb08}: [NameServer]=- Tcpip\..\Interfaces\{9e6fe1da-841b-ee9d-1002-5210fb95904a}: [NameServer]=- ; ============================ ; Remove broken Google Updater tasks ; ============================ Task: {62FA32C1-D1ED-422A-BC0E-DA7646949D7C} ; ============================ ; Remove broken CLSIDs ; ============================ HKU\S-1-5-21-228696658-1821511808-2666430869-1001_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43} HKU\S-1-5-21-228696658-1821511808-2666430869-1001_Classes\CLSID\{547E9AEF-8043-5D26-879F-01E7664192DC} HKU\S-1-5-21-228696658-1821511808-2666430869-1001_Classes\CLSID\{5ea9a442-5352-ed6e-d37f-9d511e7e2caa} HKU\S-1-5-21-228696658-1821511808-2666430869-1001_Classes\CLSID\{6DDCE70D-A4AE-4E97-908C-BE7B2DB750AD} HKU\S-1-5-21-228696658-1821511808-2666430869-1001_Classes\CLSID\{B53B0E75-9135-540F-BBA6-2DE6470338A2} ; ============================ ; Remove broken OneDrive shell overlays ; ============================ HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\OneDrive1 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\OneDrive2 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\OneDrive3 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\OneDrive4 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\OneDrive5 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\OneDrive6 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\OneDrive7 HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\OneDrive1 HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\OneDrive2 HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\OneDrive3 HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\OneDrive4 HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\OneDrive5 HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\OneDrive6 HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\OneDrive7 ; ============================ ; Remove GroupPolicy restrictions ; ============================ C:\ProgramData\NTUSER.pol ; ============================ ; Reset Winsock ; ============================ CMD: netsh winsock reset CMD: ipconfig /flushdns End::