PDA

View Full Version : Spywear Toolbar Remover



muchspl2
03-13-2004, 03:10 AM
Note that it removes ALL toolbars, even the ones you may want.
http://members.cox.net/ot_space/toolbarkiller.vbs



Const HKEY_CLASSES_ROOT = &H80000000
Const HKEY_CURRENT_USER = &H80000001
Const HKEY_LOCAL_MACHINE = &H80000002
Const HKEY_USERS = &H80000003
Const REG_SZ = 1
Const REG_EXPAND_SZ = 2
Const REG_BINARY = 3
Const REG_DWORD = 4
Const REG_MULTI_SZ = 7

Set objWShell = WScript.CreateObject("WScript.Shell")

objWShell.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1001", 3, "REG_DWORD"
objWShell.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1004", 3, "REG_DWORD"

objWShell.RegWrite "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Compatibility Flags", 1024, "REG_DWORD"

KillAll HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Internet Explorer\Explorer Bars"
KillAll HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Internet Explorer\Extensions"
KillAll HKEY_LOCAL_MACHINE, "SOFTWARE\Microsoft\Internet Explorer\Toolbar"
KillAll HKEY_CURRENT_USER, "Software\Microsoft\Internet Explorer\Toolbar\Explorer"
KillAll HKEY_CURRENT_USER, "Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser"
KillAll HKEY_CURRENT_USER, "Software\Microsoft\Internet Explorer\Toolbar\WebBrowser"

For Each Process in GetObject("winmgmts:{impersonationLevel=impersonate}").ExecQuery("select * from Win32_Process")
If (InStr(LCase(process.name), "iexplore.exe") Or InStr(LCase(process.name), "explorer.exe")) Then
wscript.echo process.name
Process.terminate(0)
End If
Next

objWShell.Run "Explorer"

Sub KillAll(intHive, strKeyPath)

Set objReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv")

objReg.EnumKey intHive, strKeyPath, arrSubKeys

If IsArray(arrSubKeys) Then
For Each Subkey in arrSubKeys
wscript.echo "Deleting: " & strKeyPath & "\" & SubKey
objReg.DeleteKey intHive, strKeyPath & "\" & SubKey
Next
End If

objReg.EnumValues intHive,strKeyPath,arrItems,arrValueTypes

If IsArray(arrItems) Then
For Each objItem In arrItems
Wscript.Echo "Deleting: " & strKeyPath & "\" & objItem
objReg.DeleteKey intHive, strKeyPath & "\" & objItem
Next
End If

Set objReg = Nothing

End Sub

anyone see any problems

shn
03-13-2004, 03:55 AM
If it's a .reg file then back up your registry before you run it.

h1
03-13-2004, 03:57 AM
Looks good to me.

muchspl2
03-13-2004, 04:04 AM
cool i'll miror it if anyone wants it/needs it
Note that it removes ALL toolbars, even the ones you may want.
http://members.cox.net/ot_space/toolbarkiller.vbs

infamousalbo101
03-13-2004, 07:24 AM
Originally posted by muchspl2@13 March 2004 - 00:04
cool i'll miror it if anyone wants it/needs it
Note that it removes ALL toolbars, even the ones you may want.
http://members.cox.net/ot_space/toolbarkiller.vbs
Its good but i still like see somthing wrong with the script like umm damn i dont know how to explain it it works fine but fuck ummm i dont know how to explain it would u mind if i edited it for u?

muchspl2
03-13-2004, 07:36 AM
yea man its not copyrighted
more like a community project :D

infamousalbo101
03-13-2004, 06:21 PM
Originally posted by muchspl2@13 March 2004 - 03:36
yea man its not copyrighted
more like a community project :D
;)

muchspl2
03-14-2004, 07:38 PM
bump
this could be a cool project, klf toolbar remover :lol:

CoolMac
03-20-2004, 01:02 PM
you can remove toolbars using the !Add/Remove Programs" form the Control Panel ;)

muchspl2
03-20-2004, 01:37 PM
not spywear/adwear toolbars
this will kill everything

Ariel_001
03-20-2004, 03:24 PM
This would be a cool project. The klf toolbar remover.

Anyways I have a suggestion. Why not get rid of all the prompts and just show just two dialog box.

First one say
Title: klf toolbar remover: This will remove all third party Internet Explorer toolbars. Internet Explorer and Windows Explorer will close during this process.
Then have ok/ cancel buttons.


Last First one say Title: klf toolbar remover

If it went ok it could say:
all third party Internet Explorer toolbars are successfully removed

If not ok:
klf toolbar remover wan not able to remove third party Internet Explorer toolbars restart your computer and try again

muchspl2
03-21-2004, 12:01 PM
sounds hard, but I bet someone can code that

CoolMac
03-21-2004, 02:27 PM
Originally posted by muchspl2@20 March 2004 - 13:37
not spywear/adwear toolbars
this will kill everything
if the toolbar is not included in the Add-Remove programs it is illegal

muchspl2
03-22-2004, 02:41 AM
well plenty out their that don't
have fun prosecuting them :lol:

fkdup74
03-22-2004, 06:54 AM
Originally posted by CoolMac+21 March 2004 - 06:27--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (CoolMac @ 21 March 2004 - 06:27)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-muchspl2@20 March 2004 - 13:37
not spywear/adwear toolbars
this will kill everything
if the toolbar is not included in the Add-Remove programs it is illegal [/b][/quote]
i sincerely hope you dont rely on the add/remove programs list
to tell you exactly what is on your pc :ph34r:

and i dont know about the legality, but it is unethical as fuck
either way, it doesnt stop em from putting shit like that on the net


&#39;luck on the project muchspl B)
maybe i&#39;ll give it a shot...

Ariel_001
03-22-2004, 02:09 PM
After some quick study I made some changes. Does it look good?


L_Welcome_MsgBox_Message_Text = &#34;This will remove all third party Internet Explorer toolbars. Internet Explorer and Windows Explorer will close during this process&#34;
L_Welcome_MsgBox_Title_Text = &#34;klf toolbar remover v1.0 Test Only&#34;
Call Welcome&#40;&#41;


Const HKEY_CLASSES_ROOT = &H80000000
Const HKEY_CURRENT_USER = &H80000001
Const HKEY_LOCAL_MACHINE = &H80000002
Const HKEY_USERS = &H80000003
Const REG_SZ = 1
Const REG_EXPAND_SZ = 2
Const REG_BINARY = 3
Const REG_DWORD = 4
Const REG_MULTI_SZ = 7

Set objWShell = WScript.CreateObject&#40;&#34;WScript.Shell&#34;&#41;

objWShell.RegWrite &#34;HKEY_LOCAL_MACHINE&#092;SOFTWARE&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;Internet Settings&#092;Zones&#092;3&#092;1001&#34;, 3, &#34;REG_DWORD&#34;
objWShell.RegWrite &#34;HKEY_LOCAL_MACHINE&#092;SOFTWARE&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;Internet Settings&#092;Zones&#092;3&#092;1004&#34;, 3, &#34;REG_DWORD&#34;

objWShell.RegWrite &#34;HKEY_LOCAL_MACHINE&#092;SOFTWARE&#092;Microsoft&#092;Internet Explorer&#092;ActiveX Compatibility&#092;{D27CDB6E-AE6D-11cf-96B8-444553540000}&#092;Compatibility Flags&#34;, 1024, &#34;REG_DWORD&#34;

KillAll HKEY_LOCAL_MACHINE, &#34;SOFTWARE&#092;Microsoft&#092;Internet Explorer&#092;Explorer Bars&#34;
KillAll HKEY_LOCAL_MACHINE, &#34;SOFTWARE&#092;Microsoft&#092;Internet Explorer&#092;Extensions&#34;
KillAll HKEY_LOCAL_MACHINE, &#34;SOFTWARE&#092;Microsoft&#092;Internet Explorer&#092;Toolbar&#34;
KillAll HKEY_CURRENT_USER, &#34;Software&#092;Microsoft&#092;Internet Explorer&#092;Toolbar&#092;Explorer&#34;
KillAll HKEY_CURRENT_USER, &#34;Software&#092;Microsoft&#092;Internet Explorer&#092;Toolbar&#092;ShellBrowser&#34;
KillAll HKEY_CURRENT_USER, &#34;Software&#092;Microsoft&#092;Internet Explorer&#092;Toolbar&#092;WebBrowser&#34;

For Each Process in GetObject&#40;&#34;winmgmts&#58;{impersonationLevel=impersonate}&#34;&#41;.ExecQuery&#40;&#34;select * from Win32_Process&#34;&#41;
If &#40;InStr&#40;LCase&#40;process.name&#41;, &#34;iexplore.exe&#34;&#41; Or InStr&#40;LCase&#40;process.name&#41;, &#34;explorer.exe&#34;&#41;&#41; Then
Process.terminate&#40;0&#41;
End If
Next

objWShell.Run &#34;Explorer&#34;

Sub KillAll&#40;intHive, strKeyPath&#41;

Set objReg=GetObject&#40;&#34;winmgmts&#58;{impersonationLevel=impersonate}&#33;&#092;&#092;.&#092;root&#092;default&#58;StdRegProv&#34;&#41;

objReg.EnumKey intHive, strKeyPath, arrSubKeys

If IsArray&#40;arrSubKeys&#41; Then
For Each Subkey in arrSubKeys
objReg.DeleteKey intHive, strKeyPath & &#34;&#092;&#34; & SubKey
Next
End If

objReg.EnumValues intHive,strKeyPath,arrItems,arrValueTypes

If IsArray&#40;arrItems&#41; Then
For Each objItem In arrItems
objReg.DeleteKey intHive, strKeyPath & &#34;&#092;&#34; & objItem
Next
End If

Set objReg = Nothing

End Sub

Sub Welcome&#40;&#41;
Dim intDoIt

intDoIt = MsgBox&#40;L_Welcome_MsgBox_Message_Text, _
vbOKCancel + vbInformation, _
L_Welcome_MsgBox_Title_Text &#41;
If intDoIt = vbCancel Then
WScript.Quit
End If
End Sub

I found some fundamental problems with this script. It appears to make some problems with the flash player. You will need to re-install it. Maybe someone can fix this. (Make it ignore Flash Player registry entries)

muchspl2
04-05-2004, 05:55 AM
I&#39;m not sure but it seems to work ok so far
but i want some people to add to it