; eyedog.kix - a script to check for (and install if necessary) the scriptlet.typelib/eyedog
; patch that protects machines against the KAK worm and other devices used to run scripted 
; email simply by previewing it or reading it.

; The path to the patch
$patchPath="\\servername\sharename\directoryname\"

; the registry keys to check for.  If scriptletkey exists, then the patch hasn't been run 
; If the eyedogkey is set to 1024, then the patch has been run.

$scriptletPath="HKEY_CLASSES_ROOT\CLSID\"
$scriptletKey=EXISTKEY($scriptletPath + "{06290BD5-48AA-11D2-8432-006008C3FBFC}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}")
$EyedogPath="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\"
$EyedogKey=READVALUE($EyedogPath + "ActiveX Compatibility\{06A7EC63-4E21-11D0-A112-00A0C90543AA}","Compatibility Flags")

; if $scriptletkey exists, the patch needs to be run
IF $scriptletKey=0
  GOTO "Install"
ELSE
  IF (INSTR($EyedogKey,"1024") OR INSTR($EyedogKey,"04"))  ; if $eyedogkey is set to 1024 (or hex 04), the patch has been run
    GOTO "END"
  ELSE
   GOTO "Install"
  ENDIF
ENDIF

; Fortunately, the patch is the same for all platforms, so we only need one install section
:Install
$return=MESSAGEBOX("The system has determined that your computer is missing a critical security update.  "
	+ "When you click on OK, the installation will begin.  This will take about 1 second to complete "
        + "and should not require a reboot.","scriptlet.typelib/Eyedog Security Patch",64)
RUN ($patchPath + "Q240308.exe")
GOTO "END"

:END