# update signatures
Update-MpSignature
Start-MpScan -ScanType FullScan
# check startup
Get-CimInstance Win32_StartupCommand |
Select-Object Name, Command, Location, User |
Format-List
# Check scheduled tasks
Get-ScheduledTask |
Where-Object {$_.TaskPath -notlike "\Microsoft*"} |
Select-Object TaskName, TaskPath, State
# Check services
Get-CimInstance Win32_Service |
Where-Object {$_.StartMode -eq "Auto"} |
Select-Object Name, DisplayName, State, PathName |
Format-Table -AutoSize
# Check proxy
netsh winhttp show proxy
Get-ItemProperty "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings" |
Select-Object ProxyEnable, ProxyServer
# Check host file
notepad C:\Windows\System32\drivers\etc\hosts