Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fixed PowerShell syntax #82

Closed
wants to merge 4 commits into from
Closed

Fixed PowerShell syntax #82

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
da1ecab
Update sos-optimize-windows.ps1
Acenl12 Dec 29, 2023
3c79530
UpdUpdate toto corcorrect powrshpowershell syntsyntax
Acenl12 Dec 29, 2023
3a3e56b
Update sos-optimize-windows.ps1
Acenl12 Dec 29, 2023
6faae9f
Update sos-optimize-windows.ps1
simeononsecurity Dec 29, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
158 changes: 79 additions & 79 deletions sos-optimize-windows.ps1
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2580,7 +2580,7 @@ if ($privacy -eq $true) {
Write-Output "Disabling live tiles"
$Live = 'HKCU:\Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications'
If (!(Test-Path $Live)) {
mkdir $Live -ErrorAction SilentlyContinue
mkdir $Live -ErrorAction SilentlyContinue
New-ItemProperty $Live -Name NoTileApplicationNotification -Value 1 -Verbose
}

Expand Down Expand Up @@ -2672,121 +2672,121 @@ if ($imagecleanup -eq $true) {
#Delete controversial default0 user
net user defaultuser0 /delete 2>nul
#Clear thumbnail cache
Remove-Item /f /s /q /a $env:LocalAppData\Microsoft\Windows\Explorer\*.db
Remove-Item -Force -Recurse -ErrorAction SilentlyContinue /a $env:LocalAppData\Microsoft\Windows\Explorer\*.db
#Clear Windows temp files
Remove-Item /f /q $env:localappdata\Temp\*
Remove-Item /s /q "$env:WINDIR\Temp"
Remove-Item /s /q "$env:TEMP"
Remove-Item -Force -ErrorAction SilentlyContinue $env:localappdata\Temp\*
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:WINDIR\Temp"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:TEMP"
#Clear main telemetry file
takeown /f "$env:ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl" /r -Value y
icacls "$env:ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl" /grant administrators:F /t
Write-Output"" > "$env:ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl"
Write-Output Clear successful: "$env:ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl"
#Clear Distributed Transaction Coordinator logs
Remove-Item /f /q $env:SystemRoot\DtcInstall.log
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\DtcInstall.log
#Clear Optional Component Manager and COM+ components logs
Remove-Item /f /q $env:SystemRoot\comsetup.log
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\comsetup.log
#Clear Pending File Rename Operations logs
Remove-Item /f /q $env:SystemRoot\PFRO.log
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\PFRO.log
#Clear Windows Deployment Upgrade Process Logs
Remove-Item /f /q $env:SystemRoot\setupact.log
Remove-Item /f /q $env:SystemRoot\setuperr.log
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\setupact.log
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\setuperr.log
#Clear Windows Setup Logs
Remove-Item /f /q $env:SystemRoot\setupapi.log
Remove-Item /f /q $env:SystemRoot\Panther\*
Remove-Item /f /q $env:SystemRoot\inf\setupapi.app.log
Remove-Item /f /q $env:SystemRoot\inf\setupapi.dev.log
Remove-Item /f /q $env:SystemRoot\inf\setupapi.offline.log
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\setupapi.log
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\Panther\*
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\inf\setupapi.app.log
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\inf\setupapi.dev.log
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\inf\setupapi.offline.log
#Clear Windows System Assessment Tool logs
Remove-Item /f /q $env:SystemRoot\Performance\WinSAT\winsat.log
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\Performance\WinSAT\winsat.log
#Clear Password change events
Remove-Item /f /q $env:SystemRoot\debug\PASSWD.LOG
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\debug\PASSWD.LOG
#Clear user web cache database
Remove-Item /f /q $env:LocalAppData\Microsoft\Windows\WebCache\*.*
Remove-Item -Force -ErrorAction SilentlyContinue $env:LocalAppData\Microsoft\Windows\WebCache\*.*
#Clear system temp folder when noone is logged in
Remove-Item /f /q $env:SystemRoot\ServiceProfiles\LocalService\AppData\Local\Temp\*.*
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\ServiceProfiles\LocalService\AppData\Local\Temp\*.*
#Clear DISM (Deployment Image Servicing and Management) Logs
Remove-Item /f /q $env:SystemRoot\Logs\CBS\CBS.log
Remove-Item /f /q $env:SystemRoot\Logs\DISM\DISM.log
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\Logs\CBS\CBS.log
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\Logs\DISM\DISM.log
#Clear Server-initiated Healing Events Logs
Remove-Item /f /q "$env:SystemRoot\Logs\SIH\*"
Remove-Item -Force -ErrorAction SilentlyContinue "$env:SystemRoot\Logs\SIH\*"
#Common Language Runtime Logs
Remove-Item /f /q "$env:LocalAppData\Microsoft\CLR_v4.0\UsageTraces\*"
Remove-Item /f /q "$env:LocalAppData\Microsoft\CLR_v4.0_32\UsageTraces\*"
Remove-Item -Force -ErrorAction SilentlyContinue "$env:LocalAppData\Microsoft\CLR_v4.0\UsageTraces\*"
Remove-Item -Force -ErrorAction SilentlyContinue "$env:LocalAppData\Microsoft\CLR_v4.0_32\UsageTraces\*"
#Network Setup Service Events Logs
Remove-Item /f /q "$env:SystemRoot\Logs\NetSetup\*"
Remove-Item -Force -ErrorAction SilentlyContinue "$env:SystemRoot\Logs\NetSetup\*"
#Disk Cleanup tool (Cleanmgr.exe) Logs
Remove-Item /f /q "$env:SystemRoot\System32\LogFiles\setupcln\*"
Remove-Item -Force -ErrorAction SilentlyContinue "$env:SystemRoot\System32\LogFiles\setupcln\*"
#Clear Windows update and SFC scan logs
Remove-Item /f /q $env:SystemRoot\Temp\CBS\*
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\Temp\CBS\*
#Clear Windows Update Medic Service logs
takeown /f $env:SystemRoot\Logs\waasmedic /r -Value y
icacls $env:SystemRoot\Logs\waasmedic /grant administrators:F /t
Remove-Item /s /q $env:SystemRoot\Logs\waasmedic
Remove-Item -Recurse -ErrorAction SilentlyContinue $env:SystemRoot\Logs\waasmedic
#Clear Cryptographic Services Traces
Remove-Item /f /q $env:SystemRoot\System32\catroot2\dberr.txt
Remove-Item /f /q $env:SystemRoot\System32\catroot2.log
Remove-Item /f /q $env:SystemRoot\System32\catroot2.jrs
Remove-Item /f /q $env:SystemRoot\System32\catroot2.edb
Remove-Item /f /q $env:SystemRoot\System32\catroot2.chk
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\System32\catroot2\dberr.txt
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\System32\catroot2.log
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\System32\catroot2.jrs
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\System32\catroot2.edb
Remove-Item -Force -ErrorAction SilentlyContinue $env:SystemRoot\System32\catroot2.chk
#Windows Update Events Logs
Remove-Item /f /q "$env:SystemRoot\Logs\SIH\*"
Remove-Item -Force -ErrorAction SilentlyContinue "$env:SystemRoot\Logs\SIH\*"
#Windows Update Logs
Remove-Item /f /q "$env:SystemRoot\Traces\WindowsUpdate\*"
Remove-Item -Force -ErrorAction SilentlyContinue "$env:SystemRoot\Traces\WindowsUpdate\*"
#Clear Internet Explorer traces
Remove-Item /f /q "$env:LocalAppData\Microsoft\Windows\INetCache\IE\*"
Remove-Item -Force -ErrorAction SilentlyContinue "$env:LocalAppData\Microsoft\Windows\INetCache\IE\*"
reg delete "HKCU\SOFTWARE\Microsoft\Internet Explorer\TypedURLs" /va /f
reg delete "HKCU\SOFTWARE\Microsoft\Internet Explorer\TypedURLsTime" /va /f
Remove-Item /s /q "$env:LocalAppData\Microsoft\Internet Explorer"
Remove-Item /s /q "$env:APPDATA\Microsoft\Windows\Cookies"
Remove-Item /s /q "$env:USERPROFILE\Cookies"
Remove-Item /s /q "$env:USERPROFILE\Local Settings\Traces"
Remove-Item /s /q "$env:LocalAppData\Temporary Internet Files"
Remove-Item /s /q "$env:LocalAppData\Microsoft\Windows\Temporary Internet Files"
Remove-Item /s /q "$env:LocalAppData\Microsoft\Windows\INetCookies\PrivacIE"
Remove-Item /s /q "$env:LocalAppData\Microsoft\Feeds Cache"
Remove-Item /s /q "$env:LocalAppData\Microsoft\InternetExplorer\DOMStore"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:LocalAppData\Microsoft\Internet Explorer"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:APPDATA\Microsoft\Windows\Cookies"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:USERPROFILE\Cookies"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:USERPROFILE\Local Settings\Traces"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:LocalAppData\Temporary Internet Files"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:LocalAppData\Microsoft\Windows\Temporary Internet Files"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:LocalAppData\Microsoft\Windows\INetCookies\PrivacIE"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:LocalAppData\Microsoft\Feeds Cache"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:LocalAppData\Microsoft\InternetExplorer\DOMStore"
#Clear Google Chrome traces
Remove-Item /f /q "$env:LocalAppData\Google\Software Reporter Tool\*.log"
Remove-Item /s /q "$env:USERPROFILE\Local Settings\Application Data\Google\Chrome\User Data"
Remove-Item /s /q "$env:LocalAppData\Google\Chrome\User Data"
Remove-Item /s /q "$env:LocalAppData\Google\CrashReports\"
Remove-Item /s /q "$env:LocalAppData\Google\Chrome\User Data\Crashpad\reports\"
Remove-Item -Force -ErrorAction SilentlyContinue "$env:LocalAppData\Google\Software Reporter Tool\*.log"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:USERPROFILE\Local Settings\Application Data\Google\Chrome\User Data"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:LocalAppData\Google\Chrome\User Data"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:LocalAppData\Google\CrashReports\"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:LocalAppData\Google\Chrome\User Data\Crashpad\reports\"
#Clear Opera traces
Remove-Item /s /q "$env:USERPROFILE\AppData\Local\Opera\Opera"
Remove-Item /s /q "$env:APPDATA\Opera\Opera"
Remove-Item /s /q "$env:USERPROFILE\Local Settings\Application Data\Opera\Opera"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:USERPROFILE\AppData\Local\Opera\Opera"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:APPDATA\Opera\Opera"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:USERPROFILE\Local Settings\Application Data\Opera\Opera"
#Clear Safari traces
Remove-Item /s /q "$env:USERPROFILE\AppData\Local\Apple Computer\Safari\Traces"
Remove-Item /s /q "$env:APPDATA\Apple Computer\Safari"
Remove-Item /q /s /f "$env:USERPROFILE\AppData\Local\Apple Computer\Safari\Cache.db"
Remove-Item /q /s /f "$env:USERPROFILE\AppData\Local\Apple Computer\Safari\WebpageIcons.db"
Remove-Item /s /q "$env:USERPROFILE\Local Settings\Application Data\Apple Computer\Safari\Traces"
Remove-Item /q /s /f "$env:USERPROFILE\Local Settings\Application Data\Apple Computer\Safari\Cache.db"
Remove-Item /q /s /f "$env:USERPROFILE\Local Settings\Application Data\Safari\WebpageIcons.db"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:USERPROFILE\AppData\Local\Apple Computer\Safari\Traces"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:APPDATA\Apple Computer\Safari"
Remove-Item -Recurse -Force -ErrorAction SilentlyContinue "$env:USERPROFILE\AppData\Local\Apple Computer\Safari\Cache.db"
Remove-Item -Recurse -Force -ErrorAction SilentlyContinue "$env:USERPROFILE\AppData\Local\Apple Computer\Safari\WebpageIcons.db"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:USERPROFILE\Local Settings\Application Data\Apple Computer\Safari\Traces"
Remove-Item -Recurse -Force -ErrorAction SilentlyContinue "$env:USERPROFILE\Local Settings\Application Data\Apple Computer\Safari\Cache.db"
Remove-Item -Recurse -Force -ErrorAction SilentlyContinue "$env:USERPROFILE\Local Settings\Application Data\Safari\WebpageIcons.db"
#Clear Listary indexes
Remove-Item /f /s /q $env:APPDATA\Listary\UserData > nul
Remove-Item -Force -Recurse -ErrorAction SilentlyContinue $env:APPDATA\Listary\UserData > nul
#Clear Java cache
Remove-Item /s /q "$env:APPDATA\Sun\Java\Deployment\cache"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:APPDATA\Sun\Java\Deployment\cache"
#Clear Flash traces
Remove-Item /s /q "$env:APPDATA\Macromedia\Flash Player"
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:APPDATA\Macromedia\Flash Player"
#Clear Steam dumps, logs and traces
Remove-Item /f /q %ProgramFiles(x86)%\Steam\Dumps
Remove-Item /f /q %ProgramFiles(x86)%\Steam\Traces
Remove-Item /f /q %ProgramFiles(x86)%\Steam\appcache\*.log
Remove-Item -Force -ErrorAction SilentlyContinue %ProgramFiles(x86)%\Steam\Dumps
Remove-Item -Force -ErrorAction SilentlyContinue %ProgramFiles(x86)%\Steam\Traces
Remove-Item -Force -ErrorAction SilentlyContinue %ProgramFiles(x86)%\Steam\appcache\*.log
#Clear Visual Studio telemetry and feedback data
Remove-Item /s /q "$env:APPDATA\vstelemetry" 2>nul
Remove-Item /s /q "$env:LocalAppData\Microsoft\VSApplicationInsights" 2>nul
Remove-Item /s /q "$env:ProgramData\Microsoft\VSApplicationInsights" 2>nul
Remove-Item /s /q "$env:TEMP\Microsoft\VSApplicationInsights" 2>nul
Remove-Item /s /q "$env:TEMP\VSFaultInfo" 2>nul
Remove-Item /s /q "$env:TEMP\VSFeedbackPerfWatsonData" 2>nul
Remove-Item /s /q "$env:TEMP\VSFeedbackVSRTCLogs" 2>nul
Remove-Item /s /q "$env:TEMP\VSRemoteControl" 2>nul
Remove-Item /s /q "$env:TEMP\VSTelem" 2>nul
Remove-Item /s /q "$env:TEMP\VSTelem.Out" 2>nul
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:APPDATA\vstelemetry" 2>nul
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:LocalAppData\Microsoft\VSApplicationInsights" 2>nul
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:ProgramData\Microsoft\VSApplicationInsights" 2>nul
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:TEMP\Microsoft\VSApplicationInsights" 2>nul
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:TEMP\VSFaultInfo" 2>nul
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:TEMP\VSFeedbackPerfWatsonData" 2>nul
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:TEMP\VSFeedbackVSRTCLogs" 2>nul
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:TEMP\VSRemoteControl" 2>nul
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:TEMP\VSTelem" 2>nul
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:TEMP\VSTelem.Out" 2>nul
#Clear Dotnet CLI telemetry
Remove-Item /s /q "$env:USERPROFILE\.dotnet\TelemetryStorageService" 2>nul
Remove-Item -Recurse -ErrorAction SilentlyContinue "$env:USERPROFILE\.dotnet\TelemetryStorageService" 2>nul
#Clear regedit last key
reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit" /va /f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Regedit" /va /f
Expand Down Expand Up @@ -2824,9 +2824,9 @@ if ($imagecleanup -eq $true) {
reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU" /va /f
reg delete "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\TypedPaths" /va /f
#Clear recently accessed files
Remove-Item /f /q "$env:APPDATA\Microsoft\Windows\Recent\AutomaticDestinations\*"
Remove-Item -Force -ErrorAction SilentlyContinue "$env:APPDATA\Microsoft\Windows\Recent\AutomaticDestinations\*"
#Clear user pins
Remove-Item /f /q "$env:APPDATA\Microsoft\Windows\Recent\CustomDestinations\*"
Remove-Item -Force -ErrorAction SilentlyContinue "$env:APPDATA\Microsoft\Windows\Recent\CustomDestinations\*"
#Clear regedit last key
reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit" /va /f
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Applets\Regedit" /va /f
Expand Down
Loading