Mini-projets : votre boite a outils¶

# Startup Programs Diagnostic Script
# Scans Run keys and identifies entries with missing executables

$registryPaths = @(
    "HKCU:\Software\Microsoft\Windows\CurrentVersion\Run",
    "HKLM:\Software\Microsoft\Windows\CurrentVersion\Run",
    "HKCU:\Software\Microsoft\Windows\CurrentVersion\RunOnce",
    "HKLM:\Software\Microsoft\Windows\CurrentVersion\RunOnce"
)

$totalEntries = 0
$suspiciousEntries = 0

foreach ($path in $registryPaths) {
    Write-Host "`n=== $path ===" -ForegroundColor Cyan

    if (-not (Test-Path $path)) {
        Write-Host "  (this key does not exist)" -ForegroundColor DarkGray
        continue
    }

    $entries = Get-ItemProperty -Path $path -ErrorAction SilentlyContinue
    $names = $entries.PSObject.Properties |
        Where-Object { $_.Name -notlike "PS*" }

    foreach ($entry in $names) {
        $totalEntries++
        $value = $entry.Value

        # Extract the executable path (handle quotes and arguments)
        $exePath = $value -replace '"', '' -replace '\s+/.*', '' -replace '\s+-.*', ''

        if (Test-Path $exePath) {
            Write-Host "  [OK] $($entry.Name)" -ForegroundColor Green
            Write-Host "       $value" -ForegroundColor DarkGray
        } else {
            $suspiciousEntries++
            Write-Host "  [??] $($entry.Name)" -ForegroundColor Yellow
            Write-Host "       $value" -ForegroundColor Yellow
            Write-Host "       -> File not found at expected path" -ForegroundColor Red
        }
    }
}

Write-Host "`n--- Summary ---" -ForegroundColor Cyan
Write-Host "Total startup entries: $totalEntries"
Write-Host "Suspicious entries:    $suspiciousEntries" -ForegroundColor $(
    if ($suspiciousEntries -gt 0) { "Yellow" } else { "Green" }
)
Write-Host "`nPress any key to close..."
$null = $Host.UI.RawUI.ReadKey("NoEcho,IncludeKeyDown")

# System Diagnostic Script
# Reads key system information from the registry

Write-Host "========================================" -ForegroundColor Cyan
Write-Host "       SYSTEM DIAGNOSTIC REPORT         " -ForegroundColor Cyan
Write-Host "========================================" -ForegroundColor Cyan
Write-Host ""

# Computer name
$computerName = (Get-ItemProperty `
    "HKLM:\SYSTEM\CurrentControlSet\Control\ComputerName\ActiveComputerName"
).ComputerName
Write-Host "Computer name:     $computerName"

# Windows version and build
$winVer = Get-ItemProperty `
    "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion"
$displayVersion = $winVer.DisplayVersion
$buildNumber = $winVer.CurrentBuildNumber
$ubr = $winVer.UBR
Write-Host "Windows version:   $displayVersion (Build $buildNumber.$ubr)"
Write-Host "Product name:      $($winVer.ProductName)"

# Installation date (convert Unix timestamp to readable date)
$installDate = $winVer.InstallDate
if ($installDate) {
    $readableDate = (Get-Date "1970-01-01").AddSeconds($installDate).ToLocalTime()
    Write-Host "Install date:      $($readableDate.ToString('yyyy-MM-dd HH:mm'))"
}

# Registered owner
$owner = $winVer.RegisteredOwner
if ($owner) {
    Write-Host "Registered owner:  $owner"
} else {
    Write-Host "Registered owner:  (not set)"
}

Write-Host ""

# Startup programs count
$startupCount = 0
$runPaths = @(
    "HKCU:\Software\Microsoft\Windows\CurrentVersion\Run",
    "HKLM:\Software\Microsoft\Windows\CurrentVersion\Run"
)
foreach ($runPath in $runPaths) {
    if (Test-Path $runPath) {
        $props = (Get-ItemProperty $runPath).PSObject.Properties |
            Where-Object { $_.Name -notlike "PS*" }
        $startupCount += ($props | Measure-Object).Count
    }
}
Write-Host "Startup programs:  $startupCount"

# Antivirus status (from Security Center, requires admin for full details)
Write-Host ""
Write-Host "--- Security ---" -ForegroundColor Cyan
try {
    $avProducts = Get-CimInstance -Namespace "root\SecurityCenter2" `
        -ClassName AntiVirusProduct -ErrorAction Stop
    foreach ($av in $avProducts) {
        Write-Host "Antivirus:         $($av.displayName)"
    }
} catch {
    Write-Host "Antivirus:         (unable to query Security Center)"
}

# Windows Defender status from registry
$defenderPath = "HKLM:\SOFTWARE\Microsoft\Windows Defender"
if (Test-Path $defenderPath) {
    $rtProtection = (Get-ItemProperty `
        "$defenderPath\Real-Time Protection" -ErrorAction SilentlyContinue
    ).DisableRealtimeMonitoring
    if ($rtProtection -eq 1) {
        Write-Host "Real-time protect: DISABLED" -ForegroundColor Red
    } else {
        Write-Host "Real-time protect: Enabled" -ForegroundColor Green
    }
}

Write-Host ""
Write-Host "========================================" -ForegroundColor Cyan
Write-Host "Report generated:  $(Get-Date -Format 'yyyy-MM-dd HH:mm:ss')"
Write-Host "========================================" -ForegroundColor Cyan
Write-Host "`nPress any key to close..."
$null = $Host.UI.RawUI.ReadKey("NoEcho,IncludeKeyDown")

# Monthly Registry Backup Script
# Exports important registry keys to a dated folder

# Create backup folder with current date
$backupRoot = "$env:USERPROFILE\Documents\Sauvegardes-Registre"
$dateFolder = Get-Date -Format "yyyy-MM-dd"
$backupPath = Join-Path $backupRoot $dateFolder

if (-not (Test-Path $backupPath)) {
    New-Item -Path $backupPath -ItemType Directory -Force | Out-Null
}

# Define keys to back up (name = filename, path = registry key)
$keysToBackup = @(
    @{ Name = "startup-user";       Path = "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" },
    @{ Name = "startup-machine";    Path = "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" },
    @{ Name = "uninstall";          Path = "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" },
    @{ Name = "explorer-advanced";  Path = "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" },
    @{ Name = "current-version";    Path = "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" }
)

$successCount = 0

Write-Host "Registry backup starting..." -ForegroundColor Cyan
Write-Host "Destination: $backupPath" -ForegroundColor DarkGray
Write-Host ""

foreach ($key in $keysToBackup) {
    $outputFile = Join-Path $backupPath "$($key.Name).reg"

    # Use reg.exe export to create .reg files
    $result = & reg export $key.Path $outputFile /y 2>&1

    if ($LASTEXITCODE -eq 0) {
        $successCount++
        Write-Host "  [OK] $($key.Name)" -ForegroundColor Green
    } else {
        Write-Host "  [FAIL] $($key.Name): $result" -ForegroundColor Red
    }
}

Write-Host ""
Write-Host "--- Summary ---" -ForegroundColor Cyan
Write-Host "Keys backed up: $successCount / $($keysToBackup.Count)"
Write-Host "Location:       $backupPath"
Write-Host "Total size:     $([math]::Round(((Get-ChildItem $backupPath -File | Measure-Object Length -Sum).Sum / 1KB), 1)) KB"
Write-Host ""
Write-Host "Backup complete." -ForegroundColor Green

Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass
& "C:\Scripts\sauvegarde-registre.ps1"