This looks great Tim and Jeff.  But I don't think we could include it in
unattended.  From the original link that Tim sent:

"Important Notes
    * These free blocklists are strictly for non-commercial, personal use
only! If you are considering using it for any other use, contact us first.
Don't rip us off or I will feed your organs to "Misty, the killer canine",
in alphabetical order."

It's not free code... :(  Too bad as this would be great for unattended.  I
wonder if this can even be used in a corporate setting.

Michael

-----Original Message-----
From: Jeff Black [mailto:[EMAIL PROTECTED] 
Sent: Thursday, April 29, 2004 3:02 PM
To: [EMAIL PROTECTED]
Subject: RE: [Unattended] OT: Spyware, Adware, and other annoying software
installation pre vention, no-spyware.bat and no-spyware-update.bat


I created two scripts for this. One for use within unattended, the other for
use during login scripts in order to keep the list updated.

Imo no-spyware.bat should be included in cvs.

Thoughts?

::unattended method
::begin no-spyware.bat

:: OPTIONAL: Import www.spywareguide.com's blocklist.reg
::
URL|ALL|http://www.spywareguide.com/blocklist.reg|packages/spywareguide/bloc
klist.reg
@Echo off
todo.pl "regedit /s %Z%\packages\spywareguide\blocklist.reg"
::end no-spyware.bat




::login script method

I'm sure there are more elegant ways to do this but this works great for me
;) I have wget.exe  [ from http://unxutils.sourceforge.net/ ] in my path.
Actually in my login script I map a drive to %logonserver%\netlogon and
change to that drive letter, then disconnect that drive mapping at the end
of the login script.

YMMV

::Begin no-spyware-update.bat
@Echo off
::**********************************************************
::***       File Details and Revision History            ***
::***                                                    ***
::***           File Name  : no-spyware.bat            ***
::***           Revision   : 2                         ***
::***           Date       : 4/29/2004                 ***
::***           Written By : Jeff Black                ***
::***                                                    ***
::**********************************************************
::
::**********************************************************
::***         Script Purpose and Description             ***
::***         ------------------------------             ***
::***     Download and import a registry file from       ***
::***  http://www.spywareguide.com/blocklist.reg         ***
::***  to hopefully block 99% of bad activeX controls,   ***
::***  etc that spyware uses to install itself.          ***
::***                                                    ***
::**********************************************************
if %1.==/?.     goto :help
if %1.==?.      goto :help
if %1.==--?.    goto :help
if %1.==-?.     goto :help
if %1.==/help.  goto :help
if %1.==-help.  goto :help
if %1.==--help. goto :help

::**********************************************************
::***                                                    ***
::***          Main Configuration Section                ***
::***                                                    ***
::**********************************************************
::
::
set getfilepath=http://www.spywareguide.com/
set getfilename=blocklist.reg

::**********************************************************
::***                                                    ***
::***              Begin Main Script                     ***
::***                                                    ***
::**********************************************************
pushd %cd%
cd /d %temp%
wget -nc -q %getfilepath%%getfilename%
if not exist %temp%\%getfilename% goto :noregfile
if exist %temp%\%getfilename% Echo Importing blocklist.reg into the local
registry if exist %temp%\%getfilename% regedit /s %temp%\%getfilename% if
exist %temp%\%getfilename% del /q %temp%\%getfilename% popd

goto :end
::*********************************
::***                           ***
::***   Error Message Section   ***
::***                           ***
::*********************************



:help
echo **********************************************************
echo ***         Script Purpose and Description             ***
echo ***         ------------------------------             ***
echo ***     Download and import a registry file from       ***
echo ***  http://www.spywareguide.com/blocklist.reg         ***
echo ***  to hopefully block 99% of bad activeX controls,   ***
echo ***  etc that spyware uses to install itself.          ***
echo ***                                                    ***
echo **********************************************************
goto :end

:noregfile
Echo.
Echo Unable to download the spyware activex blocklist from
http://www.spywareguide.com/ Echo. ping 127.0.0.1 >>nul

:scripthelp
echo ********************************************************************
echo ***                                                              ***
echo ***          Using this script within your script                ***
echo ***          ------------------------------------                ***
echo ***  Within your script:                                         ***
echo ***     call %0                                                  ***
echo ***                                                              ***
echo ********************************************************************

:end

::end no-spyware-update.bat



> http://www.spywareguide.com/blockfile.php has a registry file that 
> blocks all known spyware activeX components. The only problem is that 
> it is updated frequently, so you would need to work out some way to 
> update it, perhaps in your login script.
> 
> 
> Tim Evans, Sparling
> 206-667-0509, fax 206-667-0554
> 
> 
> Does anyone have any tips on what I could do to users computers to 
> prevent them from installing software on there computers?!?  I have 
> had it with all
> the spyware crap that is messing up my pristine installations.  Is there
> a
> block list that I could plugin to my squid proxy server?  Is there some
> sort
> of group policy I could enforce locally on every machine to prevent any
> user
> besides me from installing software?  Is there a way to allow printer
> drivers to be installed in the users profile by the user or will my
> blocking
> any software installs prevent this also from happening?
> 
> My network is a NT 4.0 Domain, so no Active Directory.  Is there a way 
> I could push some sort of registry tweak to handle this?
> 
> I know this is OT, but I figure many of us have this same problem. 
> Perhaps some default settings could be pushed to the enduser through 
> unattended at
> install time to have my computers arrive at the users desks with this
> problem handled for them.
> 
> Thanks for your time, suggestions, and ideas...
> 
> Michael, the fed up admin.





-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
unattended-info mailing list [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/unattended-info


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
unattended-info mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/unattended-info

Reply via email to