|
I found the following code in the general discussion forum, but it looks like Hotbar has three different variations in the registry: Hotbara, Hotbarb and Hotbarc My message$ displays the warning message, but it won't uninstall Hotbar. Any ideas?
$spyware=0 $spyApps= 'Webshots Desktop','BonziBUDDY','WeatherBug','My Search Uninstall','Hotbara','Hotbarb','Hotbarc','Hotbar' For Each $app In $spyApps If KeyExist('HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\'+$app) $spyware=1 $path ='' $path =ReadValue('HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\'+$app,'path') $uninst=ReadValue('HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\'+$app,'UninstallString') Select Case InStr($uninst,'unins000.exe') $uninst = Join(Split($uninst),' /a /s ') Case InStr($uninst,'remove.exe') $uninst = Join(Split($uninst),' /s ') Case InStr($uninst,'MSIExec.exe') $uninst = $uninst+' /q' Case InStr($uninst,'uninst.exe') $uninst = Join(Split($uninst),' -y -a ') EndSelect $message = "Unauthorized software "+$app+" has been detected on this computer"+@crlf+ "The application is being removed. It may require you to respond to a question"+@crlf+ "If you have any questions regarding the policy of these application, call IT Support" $=MessageBox($message, "Message from Advocacy IT Support", 48, 15) Shell 'cmd /c '+ $uninst If $path Shell 'cmd /c rd /s /q '+$path EndIf EndIf Next If $spyware=1 Shell 'cmd /c "\\server\publicdr\AI Download\spyware\spybotsd13.exe" /verysilent /nocancel /noicons /components="main"' ;Shell 'cmd /c'+ $setup +'\SpybotSD\spybotsd_tools.exe /S /D="C:\Program Files\Spybot - Search & Destroy\"' ;Shell 'cmd /c'+ $setup +'\SpybotSD\spybotsd_includes.exe /S /D="C:\Program Files\Spybot - Search & Destroy\"' Shell 'cmd /c "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /autofix /onlyspyware /autoclose /taskbarhide' Shell 'cmd /c "C:\Program Files\Spybot - Search & Destroy\unins000.exe" /silent' Shell 'cmd /c RD "C:\Program Files\Spybot - Search & Destroy" /s /q' EndIf RETURN
|