Kaseya Community

Spybot Removal

  • I made a script that would uninstall any version of spybot and then install the latest.(1.4)

    For some reason the uninstall isn't silent. It prompts the user "do you want to uninstall Spybot"

    How do i make this silent. i'm using unins000.exe as the uninstaller in the spybot - search & destroy folder. i tried using the /silent switch, but as i stated the user still gets prompted.

    Any ideas?

    Also is there a way to force through "Spybot can not remove all spyware, do you want to schedule spybot to run on startup" after a scan is complete on a system that is "swamped" with spyware?

    Thanks in advance!

    Script Name: Application- Install Spybot S&D
    Script Description: Removes any previously installed version of Spybot and replaces it with the latest version(1.4)

    If there isn’t a previously installed version, then it just installs the latest version(1.4)


    IF Test File
    Parameter 1 : C:\Program Files\Spybot - Search & Destroy\spybotsd.exe
    Exists :
    THEN
    Execute File - (Continue on Fail)
    Parameter 1 : C:\Program Files\Spybot - Search & Destroy\unins000.exe
    Parameter 2 : /silent
    Parameter 3 : 3
    OS Type : 1
    Get Variable
    Parameter 1 : 4
    Parameter 2 :
    Parameter 3 : agentDrv
    OS Type : 1
    Write File
    Parameter 1 : #agentDrv#temp\spybotsd.exe
    Parameter 2 : VSASharedFiles.spybotsd14.exe
    OS Type : 1
    Execute File
    Parameter 1 : #agentDrv#temp\spybotsd.exe
    Parameter 2 : /verysilent /nocancel /noicons /components="main"
    Parameter 3 : 3
    OS Type : 1
    Write File
    Parameter 1 : C:\Program Files\Spybot - Search & Destroy\Default configuration.ini
    Parameter 2 : VSASharedFiles.Default configuration.ini
    OS Type : 1
    Write Script Log Entry
    Parameter 1 : Spybot Installed Successfully
    OS Type : 1
    ELSE
    Get Variable
    Parameter 1 : 4
    Parameter 2 :
    Parameter 3 : agentDrv
    OS Type : 1
    Write File
    Parameter 1 : #agentDrv#temp\spybotsd.exe
    Parameter 2 : VSASharedFiles.spybotsd14.exe
    OS Type : 1
    Execute File
    Parameter 1 : #agentDrv#temp\spybotsd.exe
    Parameter 2 : /verysilent /nocancel /noicons /components="main"
    Parameter 3 : 3
    OS Type : 1
    Write File
    Parameter 1 : C:\Program Files\Spybot - Search & Destroy\Default configuration.ini
    Parameter 2 : VSASharedFiles.Default configuration.ini
    OS Type : 1
    Write Script Log Entry
    Parameter 1 : Spybot Installed Successfully
    OS Type : 1





    Chris



    Legacy Forum Name: Spybot Removal,
    Legacy Posted By Username: cmd
  • Did you ever find a way to remove spybot? Here is an faq from Spybot about deleting all folders and then running a reg file downloaded from Spybot:

    http://www.safer-networking.org/en/faq/27.html

    Have'nt tried it yet but let me know if you have any luck and I will do the same.


    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: chrisgrill3
  • Did you try the /verysilent switch?

    I have a client with 70 machines, some of which are running ver 1.3 When I script a spybot cleanup and the client has the older version the script hangs and I can't do anything to the machine until it's rebooted via psshutdown! Kaseya reboot script won't run and remote control won't launch after ver 1.3 hangs.

    I am now up to four scripts to check version, uninstall, install 1.4, scan. I have not tried the uninstall yet as I'm not sure of the consequences of a failed 1.3 removal.

    Please reply if you have a fix.


    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: nvelocity
  • This is the script we are running. Actually it's four scripts and it does what is needed but does rely on a few conditions being in existence to run correctly. We are assuming if we have the install executable spybotsd14.exe in our temp directory that this machine has passed our other checks for if the software is installed and is now safe to install, update and run.

    It will force a reboot if an older version removal is needed. I haven't found a way to check what version may be installed, so we just check to see if Spybot is installed then we check if our file has been uploaded. If it's installed but our file spybotsd14.exe is not in our temp dir then we assume it's an older version and uninstall then install.

    I have not figured out how to get reports to run as the fixes.txt and checks.txt append the dates so there's now way for me to parse them correctly.

    Script Name: Spybot 1 Version Check
    Script Description:

    IF Test File
    Parameter 1 : \spybotsd14.exe
    Exists :
    THEN
    Execute Script
    Parameter 1 : Spybot 3 Scan (NOTE: Script reference is NOT imported. Correct manually in script editor.
    Parameter 2 :
    Parameter 3 : 0
    OS Type : 0
    ELSE
    Execute Script
    Parameter 1 : Spybot 2 Remove Old Version (NOTE: Script reference is NOT imported. Correct manually in script editor.
    Parameter 2 :
    Parameter 3 : 0
    OS Type : 0

    Script Name: Spybot 2 Remove Old Version
    Script Description:

    IF Test Registry Key
    Parameter 1 : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Spybot - Search & Destroy_is1
    Exists :
    THEN
    Write File
    Parameter 1 : /remove-spybotsd-settings.reg
    Parameter 2 : shall\remove-spybotsd-settings.reg
    OS Type : 0
    Execute Shell Command
    Parameter 1 : rmdir /s /q "c:\Program Files\Spybot - Search & Destroy"
    Parameter 2 : 1
    OS Type : 0
    Execute Shell Command
    Parameter 1 : regedit /s /remove-spybotsd-settings.reg
    Parameter 2 : 1
    OS Type : 0
    Send Message
    Parameter 1 : Updating Anti Spyware Software...This REQUIRES A REBOOT. Rebooting NOW!
    Parameter 2 : 1
    OS Type : 0
    Execute Script
    Parameter 1 : Reboot (NOTE: Script reference is NOT imported. Correct manually in script editor.
    Parameter 2 :
    Parameter 3 : 0
    OS Type : 0
    Execute Script
    Parameter 1 : Spybot 3 Scan (NOTE: Script reference is NOT imported. Correct manually in script editor.
    Parameter 2 : 5
    Parameter 3 : 1
    OS Type : 0
    ELSE
    Execute Script
    Parameter 1 : Spybot 3 Scan (NOTE: Script reference is NOT imported. Correct manually in script editor.
    Parameter 2 :
    Parameter 3 : 0
    OS Type : 0

    Script Name: Spybot 3 Scan
    Script Description: Script copied from Kaseya Forums on 08-18-06 and then edited by shall


    IF Test File
    Parameter 1 : C:\Program Files\Spybot - Search & Destroy\spybotsd.exe
    Exists :
    THEN
    Delete File - (Continue on Fail)
    Parameter 1 : C:\Program Files\Spybot - Search & Destroy\Updates\online.ini
    OS Type : 0
    Write File - (Continue on Fail)
    Parameter 1 : C:\Program Files\Spybot - Search & Destroy\Updates\online.ini
    Parameter 2 : VSASharedFiles\online.ini
    OS Type : 0
    Send Message - (Continue on Fail)
    Parameter 1 : Weekly Spyware Scan in Progress - Please be patient
    Parameter 2 : 1
    OS Type : 0
    Execute File - (Continue on Fail)
    Parameter 1 : C:\Program Files\Spybot - Search & Destroy\spybotSD.exe
    Parameter 2 : /taskbarhide /autoupdate /autoclose
    Parameter 3 : 3
    OS Type : 0
    Execute File
    Parameter 1 : C:\Program Files\Spybot - Search & Destroy\spybotSD.exe
    Parameter 2 : /taskbarhide /autocheck /autofix /autoimmunize /onlyspyware /autoclose
    Parameter 3 : 3
    OS Type : 0
    Get File - (Continue on Fail)
    Parameter 1 : C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Fixes.txt
    Parameter 2 : Spybot\Fixes.txt
    Parameter 3 : 0
    OS Type : 0
    Get File - (Continue on Fail)
    Parameter 1 : C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\checks.txt
    Parameter 2 : Spybot\checks.txt
    Parameter 3 : 0
    OS Type : 0
    Get Variable - (Continue on Fail)
    Parameter 1 : 6
    Parameter 2 :
    Parameter 3 : machine
    OS Type : 0
    Write Script Log Entry - (Continue on Fail)
    Parameter 1 : Nvelocity Admin completed Spybot scan on #machine#
    OS Type : 0
    Send Message
    Parameter 1 : Spyware Scan completed!
    Parameter 2 : 1
    OS Type : 0
    ELSE
    Execute Script
    Parameter 1 : Spybot 4 Deploy (NOTE: Script reference is NOT imported. Correct manually in script editor.
    Parameter 2 :
    Parameter 3 : 0
    OS Type : 0

    Script Name: Spybot 4 Deploy
    Script Description:

    IF True
    THEN
    Write File
    Parameter 1 : \spybotsd14.exe
    Parameter 2 : VSASharedFiles\spybotsd14.exe
    OS Type : 0
    Execute File
    Parameter 1 : \spybotsd14.exe
    Parameter 2 : /verysilent /nocancel /noicons /components="main"
    Parameter 3 : 2
    OS Type : 0
    Write Script Log Entry
    Parameter 1 : Nvelocity Admin - Spybot 1.4 installed
    OS Type : 0
    Execute Script
    Parameter 1 : Spybot 3 Scan (NOTE: Script reference is NOT imported. Correct manually in script editor.
    Parameter 2 : 3
    Parameter 3 : 1
    OS Type : 0
    ELSE










    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: nvelocity
  • We ended up with a similar solution using multiple scripts.

    Legacy Forum Name: Spyware Scripts,
    Legacy Posted By Username: chrisgrill3