Spywear Toolbar Remover

muchspl2 · 03-13-2004, 03:10 AM

Note that it removes ALL toolbars, even the ones you may want.
http://members.cox.net/ot_space/toolbarkiller.vbs

Code:

Const HKEY_CLASSES_ROOT = &H80000000
Const HKEY_CURRENT_USER = &H80000001
Const HKEY_LOCAL_MACHINE = &H80000002
Const HKEY_USERS = &H80000003
Const REG_SZ = 1
Const REG_EXPAND_SZ = 2
Const REG_BINARY = 3
Const REG_DWORD = 4
Const REG_MULTI_SZ = 7

Set objWShell = WScript.CreateObject&#40;&#34;WScript.Shell&#34;&#41;

objWShell.RegWrite &#34;HKEY_LOCAL_MACHINE&#092;SOFTWARE&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;Internet Settings&#092;Zones&#092;3&#092;1001&#34;, 3, &#34;REG_DWORD&#34;
objWShell.RegWrite &#34;HKEY_LOCAL_MACHINE&#092;SOFTWARE&#092;Microsoft&#092;Windows&#092;CurrentVersion&#092;Internet Settings&#092;Zones&#092;3&#092;1004&#34;, 3, &#34;REG_DWORD&#34;

objWShell.RegWrite &#34;HKEY_LOCAL_MACHINE&#092;SOFTWARE&#092;Microsoft&#092;Internet Explorer&#092;ActiveX Compatibility&#092;{D27CDB6E-AE6D-11cf-96B8-444553540000}&#092;Compatibility Flags&#34;, 1024, &#34;REG_DWORD&#34;

KillAll HKEY_LOCAL_MACHINE, &#34;SOFTWARE&#092;Microsoft&#092;Internet Explorer&#092;Explorer Bars&#34;
KillAll HKEY_LOCAL_MACHINE, &#34;SOFTWARE&#092;Microsoft&#092;Internet Explorer&#092;Extensions&#34;
KillAll HKEY_LOCAL_MACHINE, &#34;SOFTWARE&#092;Microsoft&#092;Internet Explorer&#092;Toolbar&#34;
KillAll HKEY_CURRENT_USER, &#34;Software&#092;Microsoft&#092;Internet Explorer&#092;Toolbar&#092;Explorer&#34;
KillAll HKEY_CURRENT_USER, &#34;Software&#092;Microsoft&#092;Internet Explorer&#092;Toolbar&#092;ShellBrowser&#34;
KillAll HKEY_CURRENT_USER, &#34;Software&#092;Microsoft&#092;Internet Explorer&#092;Toolbar&#092;WebBrowser&#34;

For Each Process in GetObject&#40;&#34;winmgmts&#58;{impersonationLevel=impersonate}&#34;&#41;.ExecQuery&#40;&#34;select * from Win32_Process&#34;&#41;
	If &#40;InStr&#40;LCase&#40;process.name&#41;, &#34;iexplore.exe&#34;&#41; Or InStr&#40;LCase&#40;process.name&#41;, &#34;explorer.exe&#34;&#41;&#41; Then
 wscript.echo process.name
 Process.terminate&#40;0&#41;
	End If
Next

objWShell.Run &#34;Explorer&#34;

Sub KillAll&#40;intHive, strKeyPath&#41;
	
	Set objReg=GetObject&#40;&#34;winmgmts&#58;{impersonationLevel=impersonate}&#33;&#092;&#092;.&#092;root&#092;default&#58;StdRegProv&#34;&#41;

	objReg.EnumKey intHive, strKeyPath, arrSubKeys
	
	If IsArray&#40;arrSubKeys&#41; Then
 For Each Subkey in arrSubKeys
 	wscript.echo &#34;Deleting&#58; &#34; & strKeyPath & &#34;&#092;&#34; & SubKey
 	objReg.DeleteKey intHive, strKeyPath & &#34;&#092;&#34; & SubKey
 Next
	End If

	objReg.EnumValues intHive,strKeyPath,arrItems,arrValueTypes
	
	If IsArray&#40;arrItems&#41; Then 
 For Each objItem In arrItems
 	Wscript.Echo &#34;Deleting&#58; &#34; & strKeyPath & &#34;&#092;&#34; & objItem
 	objReg.DeleteKey intHive, strKeyPath & &#34;&#092;&#34; & objItem
 Next
	End If

	Set objReg = Nothing

End Sub

anyone see any problems

**shn** · 03-13-2004, 03:55 AM

If it's a .reg file then back up your registry before you run it.

h1 · 03-13-2004, 03:57 AM

Looks good to me.

muchspl2 · 03-13-2004, 04:04 AM

cool i'll miror it if anyone wants it/needs it
Note that it removes ALL toolbars, even the ones you may want.
http://members.cox.net/ot_space/toolbarkiller.vbs

**infamousalbo101** · 03-13-2004, 07:24 AM

Originally posted by muchspl2@13 March 2004 - 00:04
cool i'll miror it if anyone wants it/needs it
Note that it removes ALL toolbars, even the ones you may want.
http://members.cox.net/ot_space/toolbarkiller.vbs

Its good but i still like see somthing wrong with the script like umm damn i dont know how to explain it it works fine but fuck ummm i dont know how to explain it would u mind if i edited it for u?