Windows Tips and Tricks - ilya-khadykin/notes-outdated GitHub Wiki

GodMode

Create directory with the following name on Desktop:

GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}

It's hard to delete a directory with the following name com4.{241D7C96-F8BF-4F85-B01FE2B043341A4B}

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
lsm = C:\Users\admin\AppData\Roaming\com4.{241D7C96-F8BF-4F85-B01FE2B043341A4B}\lsm.exe

This is because Windows considers com4.* as a device and doesn't allow you to delete it using Explorer

Remove any information about your actions in the system

Tested on Windows 7/10

Recent places and programs

cd %appdata%\Microsoft\Windows\Recent
echo y | del *.*

cd %appdata%\microsoft\windows\recent\automaticdestinations\
echo y | del *.*

In Windows 10 open gpedit.msc and go to «Конфигурация пользователя\Административные шаблоны\Меню «Пуск» и панель задач» (Russian localization)

USB drives

Win+R > regedit

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR\
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USB\

Search for MountPoints, MountedDevices DeviceClasses and RemovableMedia.

Use the following program - USB Oblivion

Cache and browser history

You can clear all of this using browsers themselves but it's a tedious process.

Chrome: press Ctrl + Shift + Del

Use the following program - Free History Eraser (leases some data present (for Edge browser), not ideal solution)

DNS Cache

ipconfig /displaydns

ipconfig /flushdns

Flash Cookies

cd %appdata%\Macromedia\Flash Player\#SharedObjects
echo y | del *.*

Recent documents in Microsoft Office

Set showed number of recent documents to 1 in the Settings

Special Software

  • CCleaner Desktop

Real file deletion

CCleaner > Tools > Drive Wiiper

Automation .bat script

\path_to_ccleaner\CCleaner.exe /delete %appdata%\Microsoft\Windows\Recent\*” 1
\path_to_ccleaner\CCleaner.exe /delete %appdata%\microsoft\windows\recent\automaticdestinations\*” 1
\path_to_ccleaner\CCleaner.exe /delete %appdata%\Macromedia\Flash Player\#SharedObjects” 1
\path_to_usboblivion\USBOblivion.exe -enable -auto -nosave -silent
\path_to_ccleaner\CCleaner.exe /AUTO
ipconfig /flushdns

Drive Wiper use should run manually, there is no way to do it via cmd

AutoHotkey-script

To run the script use AutoHotkey - https://autohotkey.com/

Run, C:\path\to\chrome.exe –incognito
WinWait,  Google Chrome
WinWaitClose
Run, C:\path\to\ccleaner.exe /AUTO
Run, cmd /c “ipconfig /flushdns”
MsgBox, Browser Session is Cleaned.

How to find out what groups are assigned to the user

net user <userName> /domain | find "Group"

Enable IP Routing in Windows

Credit: https://gist.github.com/mouseroot/5489960

  1. Open regedit
  2. Navigate to "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\"
  3. Change IPEnableRouter to 1
  4. Run services->Routing and Remote->start

(reboot may be nessesary)

⚠️ **GitHub.com Fallback** ⚠️