; regchange.kix
; A script to edit the registry (and the configuration files for VirusScan 4.0.3 and 
; NetShield NT 4.0.3a) changing the extensions that McAfee scans by default to all the 
; latest "dangerous" ones and setting the bScanOnShutdown value to 0 - this clears up 
; a hang on shutdown problem in Win9x machines.
;
; To change the extensions string, just overwrite $newString by putting the new string
; you want between the quotes.  Or you can add extensions by typing them in (alphabetically)
; in the existing string.  Once you've done that, choose an extension you've added, and put 
; its value inside $newStringKey.  This will change the value each section looks for and thus 
; update all the extensions settings.

$newString="??_ ASP BAT CDR COM CSC DL? DOC DOT EXE GMS GZ? HLP HT? IM? INI JS? MD? MPP MPT MSG MSO OCX OLE OV? POT PP? RTF SCR SHS SMM SYS VBS VS? VXD WBK WPD XL? XML"
$newStringKey="VBS"
$regPath="HKEY_LOCAL_MACHINE\SOFTWARE\"
$VS403Code=ExistKey($regPath + "Network Associates\McAfee VirusScan")
$NetShield403Code=ExistKey($regPath + "Network Associates\NetShield NT")
$VS45Code=ExistKey($regPath + "Network Associates\TVD\VirusScan")

SELECT
  CASE $VS403Code = 0
    GOTO "VirusScan403"
  CASE $NetShield403Code = 0
    GOTO "NetShieldNT403"
  CASE $VS45Code = 0
    GOTO "VirusScan45"
  CASE 1
    GOTO "VBSEdit"
ENDSELECT

:VirusScan403

$keyPath=($regPath + "Network Associates\McAfee VirusScan\Exchange Scan\CurrentVersion\DetectionOptions")
$installDir=READVALUE($regPath + "McAfee\Scan95","szProductLocation")
$vshFile=($installDir +"\default.vsh")
$vscFile=($installDir + "\default.vsc")
$alldriveFile=($installDir + "\alldrive.vsc")
$scan_cFile=($installDir + "\scan_c.vsc")

$vshCode=EXIST($vshFile)
$vscCode=EXIST($vshFile)
$alldriveCode=EXIST($alldriveFile)
$scan_cCode=EXIST($scan_cFile)
$keyCode=EXISTKEY($keyPath)

$vshStr=READPROFILESTRING($vshFile,"DetectionOptions","szDefaultProgramExtensions")
$vscStr=READPROFILESTRING($vscFile,"DetectionOptions","szDefaultProgramExtensions")
$alldriveStr=READPROFILESTRING($alldriveFile,"DetectionOptions","szDefaultProgramExtensions")
$scan_cStr=READPROFILESTRING($scan_cFile,"DetectionOptions","szDefaultProgramExtensions")
$keyStr=READVALUE($keyPath,"szProgramExtensions")

IF $vshCode=1
  $ShutdownStr=READPROFILESTRING($vshFile,"DetectionOptions","bScanOnShutdown")
  IF INSTR($ShutdownStr,"1")
    WRITEPROFILESTRING($vshFile,"DetectionOptions","bScanOnShutdown","0")
  ENDIF
ENDIF

IF $vshCode=1
  IF INSTR($vshStr,$newStringKey)
  ELSE
    WRITEPROFILESTRING($vshFile,"DetectionOptions","szProgramExtensions",$newString)
    WRITEPROFILESTRING($vshFile,"DetectionOptions","szDefaultProgramExtensions",$newString)
    WRITEPROFILESTRING($vshFile,"EMailDetectionOptions","szProgramExtensions",$newString)
    WRITEPROFILESTRING($vshFile,"EMailDetectionOptions","szDefaultProgramExtensions",$newString)
    WRITEPROFILESTRING($vshFile,"DownloadDetectionOptions","szProgramExtensions",$newString)
  ENDIF
ENDIF

IF $vscCode=1
  IF INSTR($vscStr,$newStringKey)
  ELSE
    WRITEPROFILESTRING($vscFile,"DetectionOptions","szProgramExtensions",$newString)
    WRITEPROFILESTRING($vscFile,"DetectionOptions","szDefaultProgramExtensions",$newString)
  ENDIF
ENDIF

IF $alldriveCode=1
  IF INSTR($alldriveStr,$newStringKey)
  ELSE
    WRITEPROFILESTRING($alldriveFile,"DetectionOptions","szProgramExtensions",$newString)
    WRITEPROFILESTRING($alldriveFile,"DetectionOptions","szDefaultProgramExtensions",$newString)
  ENDIF
ENDIF

IF $scan_cCode=1
  IF INSTR($scan_cStr,$newStringKey)
  ELSE
    WRITEPROFILESTRING($scan_cFile,"DetectionOptions","szProgramExtensions",$newString)
    WRITEPROFILESTRING($scan_cFile,"DetectionOptions","szDefaultProgramExtensions",$newString)
  ENDIF
ENDIF

IF $keyCode = 0
  IF INSTR($keyStr,$newStringKey)
  ELSE
    WRITEVALUE($keyPath,"szProgramExtensions",$newString,REG_SZ)
  ENDIF
ENDIF

GOTO "VBSEdit"

:NetShieldNT403
$installDir=READVALUE($regPath + "McAfee\VirusScan","szInstallDir")

$vscFile=($installDir + "\default.vsc")
$vscStr=READPROFILESTRING($vscFile,"ScanOptions","szDefaultProgramExtensions")
$vscCode=EXIST($vscFile)

$McShieldPath=($regPath + "McAfee\VirusScan\McShield\CurrentVersion")
$McShieldKey=READVALUE($McShieldPath,"szProgExts")
$McShieldCode=EXISTKEY($McShieldPath)

$DefTaskPath=($regPath + "McAfee\VirusScan\DefaultTask")
$DefTaskKey=READVALUE($DefTaskPath,"szProgExts")
$DefTaskCode=EXISTKEY($DefTaskPath)

IF $vscCode=1
  IF INSTR($vscStr,$newStringKey)
  ELSE
    WRITEPROFILESTRING($vscFile,"ScanOptions","szProgramExtensions",$newString)
    WRITEPROFILESTRING($vscFile,"ScanOptions","szDefaultProgramExtensions",$newString)
  ENDIF
ENDIF

IF $McShieldCode=0
  IF INSTR($McShieldKey,$newStringKey)
  ELSE
    WRITEVALUE($McShieldPath,"szProgExts",$newString,REG_SZ)
    WRITEVALUE($McShieldPath,"szDefProgExts",$newString,REG_SZ)
  ENDIF
ENDIF

IF $DefTaskCode=0
  IF INSTR($DefTaskKey,$newStringKey)
  ELSE
    WRITEVALUE($DefTaskPath,"szProgExts",$newString,REG_SZ)
    WRITEVALUE($DefTaskPath,"szDefProgExts",$newString,REG_SZ)
  ENDIF
ENDIF

GOTO "VBSEdit"

:VirusScan45
$OnAccessPath=($regPath + "Network Associates\TVD\Shared Components\On Access Scanner\")

$McShieldPath=($OnAccessPath + "McShield\Configuration")
$McShieldKey=READVALUE($McShieldPath,"szProgExts")
$McShieldCode=EXISTKEY($McShieldPath)

$DownLoadPath=($OnAccessPath + "Vshield\Download Scan\DetectionOptions")
$DownLoadKey=READVALUE($DownLoadPath,"szProgramExtensions")
$DownLoadCode=EXISTKEY($DownLoadPath)

$EmailPath=($OnAccessPath + "VShield\E-Mail Scan\DetectionOptions")
$EmailKey=READVALUE($EmailPath,"szProgramExtensions")
$EmailCode=EXISTKEY($EmailPath)

$SystemPath=($OnAccessPath + "VShield\System Scan\DetectionOptions")
$SystemKey=READVALUE($SystemPath,"szProgramExtensions")
$SystemCode=EXISTKEY($SystemPath)

$OnDemandPath=($regPath + "Network Associates\TVD\Shared Components\On Demand Scanner\")

$ExchScanPath=($onDemandPath + "Exchange Scan\DetectionOptions")
$ExchScanKey=READVALUE($ExchScanPath,"szProgramExtensions")
$ExchScanCode=EXISTKEY($ExchScanPath)

$Scan32Path=($onDemandPath + "Scan32\DetectionOptions")
$Scan32Key=READVALUE($Scan32Path,"szProgramExtensions")
$Scan32Code=EXISTKEY($Scan32Path)

$ScanTasksPath=($regPath + "Network Associates\TVD\VirusScan\AVConsol\ScanTasks\")

$item_0Path=($ScanTasksPath + "item_0\DetectionOptions")
$item_0Key=READVALUE($item_0Path,"szProgramExtensions")
$item_0Code=EXISTKEY($item_0Path)

$item_1Path=($ScanTasksPath + "item_1\DetectionOptions")
$item_1Key=READVALUE($item_1Path,"szProgramExtensions")
$item_1Code=EXISTKEY($item_1Path)

$item_2Path=($ScanTasksPath + "item_2\DetectionOptions")
$item_2Key=READVALUE($item_2Path,"szProgramExtensions")
$item_2Code=EXISTKEY($item_2Path)

$item_3Path=($ScanTasksPath + "item_3\DetectionOptions")
$item_3Key=READVALUE($item_3Path,"szProgramExtensions")
$item_3Code=EXISTKEY($item_3Path)

$item_4Path=($ScanTasksPath + "item_4\DetectionOptions")
$item_4Key=READVALUE($item_4Path,"szProgramExtensions")
$item_4Code=EXISTKEY($item_4Path)

IF $McShieldCode=0
  IF INSTR($McShieldKey,$newStringKey)
  ELSE
    WRITEVALUE($McShieldPath,"szProgExts",$newString,REG_SZ)
    WRITEVALUE($McShieldPath,"szDefProgExts",$newString,REG_SZ)
  ENDIF
ENDIF

IF $DownLoadCode=0
  IF INSTR($DownLoadKey,$newStringKey)
  ELSE
    WRITEVALUE($DownLoadPath,"szProgramExtensions",$newString,REG_SZ)
  ENDIF
ENDIF

IF $EMailCode=0
  IF INSTR($EMailKey,$newStringKey)
  ELSE
    WRITEVALUE($EMailPath,"szProgramExtensions",$newString,REG_SZ)
    WRITEVALUE($EmailPath,"szDefaultProgramExtensions",$newString,REG_SZ)
  ENDIF
ENDIF

IF $SystemCode=0
  IF INSTR($SystemKey,$newStringKey)
  ELSE
    WRITEVALUE($SystemPath,"szProgramExtensions",$newString,REG_SZ)
    WRITEVALUE($SYstemPath,"szDefaultProgramExtensions",$newString,REG_SZ)
  ENDIF
ENDIF

IF $ExchScanCode=0
  IF INSTR($ExchScanKey,$newStringKey)
  ELSE
    WRITEVALUE($ExchScanPath,"szProgramExtensions",$newString,REG_SZ)
  ENDIF
ENDIF

IF $Scan32Code=0
  IF INSTR($Scan32Key,$newStringKey)
  ELSE
    WRITEVALUE($Scan32Path,"szProgramExtensions",$newString,REG_SZ)
    WRITEVALUE($Scan32Path,"szDefaultProgramExtensions",$newString,REG_SZ)
  ENDIF
ENDIF

IF $item_0Code=0
  IF INSTR($item_0Key,$newStringKey)
  ELSE
    WRITEVALUE($item_0Path,"szProgramExtensions",$newString,REG_SZ)
    WRITEVALUE($item_0Path,"szDefaultProgramExtensions",$newString,REG_SZ)
  ENDIF
ENDIF

IF $item_1Code=0
  IF INSTR($item_1Key,$newStringKey)
  ELSE
    WRITEVALUE($item_1Path,"szProgramExtensions",$newString,REG_SZ)
    WRITEVALUE($item_1Path,"szDefaultProgramExtensions",$newString,REG_SZ)
  ENDIF
ENDIF

IF $item_2Code=0
  IF INSTR($item_2Key,$newStringKey)
  ELSE
    WRITEVALUE($item_2Path,"szProgramExtensions",$newString,REG_SZ)
    WRITEVALUE($item_2Path,"szDefaultProgramExtensions",$newString,REG_SZ)
  ENDIF
ENDIF

IF $item_3Code=0
  IF INSTR($item_3Key,$newStringKey)
  ELSE
    WRITEVALUE($item_3Path,"szProgramExtensions",$newString,REG_SZ)
    WRITEVALUE($item_3Path,"szDefaultProgramExtensions",$newString,REG_SZ)
  ENDIF
ENDIF

IF $item_4Code=0
  IF INSTR($item_4Key,$newStringKey)
  ELSE
    WRITEVALUE($item_4Path,"szProgramExtensions",$newString,REG_SZ)
    WRITEVALUE($item_4Path,"szDefaultProgramExtensions",$newString,REG_SZ)
  ENDIF
ENDIF

GOTO "VBSEdit"

:VBSEdit
$keyPath=($regPath + "Classes\VBSFile\Shell")
$keyCode=EXISTKEY($keyPath)
$presentKey=READVALUE($keyPath,"")

IF $keyCode<>0
  GOTO "END"
ENDIF

IF INSTR($presentKey,"Edit")
  GOTO "END"
ELSE
  WRITEVALUE($keyPath,"","Edit","REG_SZ") 
ENDIF

GOTO "END"

:END