You are not logged in. [Log In] KiXtart.org website » Forums » KiXtart » Basic Scripting » Merge a registry key
Register User       Forum List       Calendar       FAQ
Page 1 of 1 1
Topic Options
#23011 - 2002-06-12 05:15 PM Merge a registry key
Anonymous
Unregistered


Hello,

Can somebody point me in theright direction.

I'm trying to merge a registry key via a kix script.

I've tried the Loadkey command & example but it's not merging the the reg file.

I've tried adding the whole path to the Key, but that hasn't worked.

Example of script.

LoadKey ("HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration","c:\mcafee_sp1_fix.reg")

Thanks in advance

Colin
Top
#23012 - 2002-06-12 05:18 PM Re: Merge a registry key
Sealeopard Offline
KiX Master
*****

Registered: 2001-04-25
Posts: 11165
Loc: Boston, MA, USA
Wrong command. To merge a registry file use:
code:
SHELL '%COMSPEC% /C /E:1024 REGEDIT /S c:\mcafee_sp1_fix.reg'
If tis is done under Windows NT/2000/XP the account executing the above line must have administrative privileges in order to write to HKEY_LOCAL_MACHINE
_________________________
There are two types of vessels, submarines and targets.

Top
#23013 - 2002-06-17 10:19 AM Re: Merge a registry key
MCA Offline
KiX Supporter
*****

Registered: 2000-04-28
Posts: 5152
Loc: Netherlands, EU
solved?
_________________________
email scripting@wanadoo.nl homepage scripting@wanadoo.nl | Links | Summary of Site Site KiXforms FAQ kixtart.org library collection mirror MCA | FAQ & UDF help file UDF kixtart.org library collection mirror MCA | mirror USA | mirror europe UDF scriptlogic library collection UDFs | mirror MCA

Top
#23014 - 2002-06-17 11:35 AM Re: Merge a registry key
Anonymous
Unregistered


Unfortunately not.....but I appreciate the help!!

The reg file fails to merge.

It manually works so I know it's not the reg file.

Any other ideas??

Thanks again

Colin
Top
#23015 - 2002-06-17 11:46 AM Re: Merge a registry key
MCA Offline
KiX Supporter
*****

Registered: 2000-04-28
Posts: 5152
Loc: Netherlands, EU
Dear Colin,

Can you show us what the content is of your c:\mcafee_sp1_fix.reg file?
greetings.
_________________________
email scripting@wanadoo.nl homepage scripting@wanadoo.nl | Links | Summary of Site Site KiXforms FAQ kixtart.org library collection mirror MCA | FAQ & UDF help file UDF kixtart.org library collection mirror MCA | mirror USA | mirror europe UDF scriptlogic library collection UDFs | mirror MCA

Top
#23016 - 2002-06-17 03:43 PM Re: Merge a registry key
Anonymous
Unregistered


Key Name: SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration
Class Name:
Last Write Time: 6/13/02 - 12:17 PM
Value 0
Name: bDenyFloppyMountIfInfected
Type: REG_DWORD
Data: 0x1

Value 1
Name: bDontScanBootSectors
Type: REG_DWORD
Data: 0

Value 2
Name: bDontScanMBRSectors
Type: REG_DWORD
Data: 0

Value 3
Name: bFileCacheEnabled
Type: REG_DWORD
Data: 0x1

Value 4
Name: bLoadAtStartup
Type: REG_DWORD
Data: 0x1

Value 5
Name: bNetworkScanEnabled
Type: REG_DWORD
Data: 0

Value 6
Name: bScanAllFiles
Type: REG_DWORD
Data: 0

Value 7
Name: bScanAllOLE
Type: REG_DWORD
Data: 0

Value 8
Name: bScanCompressed
Type: REG_DWORD
Data: 0x1

Value 9
Name: bScanDefaultFiles
Type: REG_DWORD
Data: 0x1

Value 10
Name: bScanFloppyOnShutdown
Type: REG_DWORD
Data: 0x1

Value 11
Name: bScanIncoming
Type: REG_DWORD
Data: 0x1

Value 12
Name: bScanOutgoing
Type: REG_DWORD
Data: 0x1

Value 13
Name: DisableFilterLocalScansOptimisation
Type: REG_DWORD
Data: 0x1

Value 14
Name: DisableFilterNetworkScansOptimisation
Type: REG_DWORD
Data: 0x1

Value 15
Name: DisablePLADMinusOne
Type: REG_DWORD
Data: 0x1

Value 16
Name: DisableResetLastAccessDate
Type: REG_DWORD
Data: 0x1

Value 17
Name: DontDetectJokes
Type: REG_DWORD
Data: 0

Value 18
Name: DontDetectTrojans
Type: REG_DWORD
Data: 0

Value 19
Name: DotVirOnQuarantine
Type: REG_DWORD
Data: 0

Value 20
Name: dwDebugFlags
Type: REG_DWORD
Data: 0

Value 21
Name: dwLastModified
Type: REG_DWORD
Data: 0x13

Value 22
Name: dwMacroHeuristicsLevel
Type: REG_DWORD
Data: 0

Value 23
Name: dwProgramHeuristicsLevel
Type: REG_DWORD
Data: 0

Value 24
Name: ExcludedItem_0
Type: REG_SZ
Data: \_RESTORE\||25|1

Value 25
Name: ExcludeSFPList
Type: REG_DWORD
Data: 0x1

Value 26
Name: ExtensionFilterOption
Type: REG_DWORD
Data: 0x2

Value 27
Name: NumberOfScanners
Type: REG_DWORD
Data: 0x4

Value 28
Name: NumExcludeItems
Type: REG_DWORD
Data: 0x1

Value 29
Name: ScanArchiveFindAll
Type: REG_DWORD
Data: 0

Value 30
Name: ScanArchives
Type: REG_DWORD
Data: 0

Value 31
Name: ScanArchiveTimeout
Type: REG_DWORD
Data: 0x5

Value 32
Name: ScannerThreadTimeout
Type: REG_DWORD
Data: 0x7530

Value 33
Name: SmoothWritesExtensions
Type: REG_SZ
Data: INI

Value 34
Name: SmoothWritesTime
Type: REG_DWORD
Data: 0x1

Value 35
Name: szMoveToFolder
Type: REG_SZ
Data: C:\Program Files\Network Associates\VirusScan\Infected

Value 36
Name: szProgExts
Type: REG_SZ
Data: ::: ??_ {?? 001 002 386 3GR ACM ADT AP? ASD ASP AX? BAT BIN BO? CC? CDR CHM CLA CMD CNV CO? CP? CSC D?B DAT DEV DIF DL? DO? DRV EE? EX? FMT FO? GMS GZ? HDI HLP HT? IM? IN? JS? LIB MB? MD? MHT MOD MPD MPP MPT MRC MS? OB? OC? OL? OLE OTM OV? PCI PD? PHP PIF PLG POT PP? PRC QLB QPW QTC REG RTF SCR SH? SIS SMM SYS TD0 TGZ TLB TSP VB? VS? VWP VXD WBK WIZ WP? WRI WS? X32 XL? XML XSL XTP XX? ZL?

Value 37
Name: TSDisableAll
Type: REG_DWORD
Data: 0x1

Value 38
Name: uAction
Type: REG_DWORD
Data: 0x5

Value 39
Name: UnloadDriver
Type: REG_DWORD
Data: 0

Value 40
Name: UseEngineGFS
Type: REG_DWORD
Data: 0x1

Value 41
Name: VSDenyAccessMode
Type: REG_DWORD
Data: 0x1


Sorry it's so long!!

The fix actually only makes 2 changes to the registry.

Amends the DisablePLADMinusOne from 0 to 1.

Adds a new DWord
DisableResetLastAccessDate with a setting of 1.

Thanks

Colin
Top
#23017 - 2002-06-17 07:20 PM Re: Merge a registry key
MCA Offline
KiX Supporter
*****

Registered: 2000-04-28
Posts: 5152
Loc: Netherlands, EU
Dear,

Above code isn't the right format for regedit. We will try to translate it to kixtart.
When you export the
code:
HKLM\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration
you we see another result.
greetings.

[ 17 June 2002, 19:21: Message edited by: MCA ]
_________________________
email scripting@wanadoo.nl homepage scripting@wanadoo.nl | Links | Summary of Site Site KiXforms FAQ kixtart.org library collection mirror MCA | FAQ & UDF help file UDF kixtart.org library collection mirror MCA | mirror USA | mirror europe UDF scriptlogic library collection UDFs | mirror MCA

Top
#23018 - 2002-06-18 06:07 AM Re: Merge a registry key
MCA Offline
KiX Supporter
*****

Registered: 2000-04-28
Posts: 5152
Loc: Netherlands, EU
Dear,

We have translate above input. It is possible that some keys doesn't
reflect the required result.
Reason: we are using mostly an export as input. So we can easily compare
that scripts creates exactly the required keys. Your input is just the
output from an installation procedure.

Just give it a try: display problem with code. see other reaction for complete script.

greetings.

btw: it is also possible that the HKEY_LOCAL_MACHINE must be HKEY_CURRENT_USER. we doesn't have enough input from you.
btw: we still like to see an export of your registry part.

[ 18 June 2002, 06:28: Message edited by: MCA ]
_________________________
email scripting@wanadoo.nl homepage scripting@wanadoo.nl | Links | Summary of Site Site KiXforms FAQ kixtart.org library collection mirror MCA | FAQ & UDF help file UDF kixtart.org library collection mirror MCA | mirror USA | mirror europe UDF scriptlogic library collection UDFs | mirror MCA

Top
#23019 - 2002-06-18 06:14 AM Re: Merge a registry key
MCA Offline
KiX Supporter
*****

Registered: 2000-04-28
Posts: 5152
Loc: Netherlands, EU
Dear,

Following input doesn't make it possible to enter our reaction as one:
$value=": \_RESTORE\||25|1"
As we become automatically an unregistered user.
Please combine above input and correct the broken part with above $value setting.
greetings
_________________________
email scripting@wanadoo.nl homepage scripting@wanadoo.nl | Links | Summary of Site Site KiXforms FAQ kixtart.org library collection mirror MCA | FAQ & UDF help file UDF kixtart.org library collection mirror MCA | mirror USA | mirror europe UDF scriptlogic library collection UDFs | mirror MCA

Top
#23020 - 2002-06-18 06:26 AM Re: Merge a registry key
MCA Offline
KiX Supporter
*****

Registered: 2000-04-28
Posts: 5152
Loc: Netherlands, EU
Dear,

Complete script:
code:
                       $name="bDenyFloppyMountIfInfected"             $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="bDontScanBootSectors"                   $type="REG_DWORD"   $value="0"
 GOSUB write_registry  $name="bDontScanMBRSectors"                    $type="REG_DWORD"   $value="0"
 GOSUB write_registry  $name="bFileCacheEnabled"                      $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="bLoadAtStartup"                         $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="bNetworkScanEnabled"                    $type="REG_DWORD"   $value="0"
 GOSUB write_registry  $name="bScanAllFiles"                          $type="REG_DWORD"   $value="0"
 GOSUB write_registry  $name="bScanAllOLE"                            $type="REG_DWORD"   $value="0"
 GOSUB write_registry  $name="bScanCompressed"                        $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="bScanDefaultFiles"                      $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="bScanFloppyOnShutdown"                  $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="bScanIncoming"                          $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="bScanOutgoing"                          $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="DisableFilterLocalScansOptimisation"    $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="DisableFilterNetworkScansOptimisation"  $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="DisablePLADMinusOne"                    $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="DisableResetLastAccessDate"             $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="DontDetectJokes"                        $type="REG_DWORD"   $value="0"
 GOSUB write_registry  $name="DontDetectTrojans"                      $type="REG_DWORD"   $value="0"
 GOSUB write_registry  $name="DotVirOnQuarantine"                     $type="REG_DWORD"   $value="0"
 GOSUB write_registry  $name="dwDebugFlags"                           $type="REG_DWORD"   $value="0"
 GOSUB write_registry  $name="dwLastModified"                         $type="REG_DWORD"   $value="13"
 GOSUB write_registry  $name="dwMacroHeuristicsLevel"                 $type="REG_DWORD"   $value="0"
 GOSUB write_registry  $name="dwProgramHeuristicsLevel"               $type="REG_DWORD"   $value="0"
 GOSUB write_registry  $name="ExcludedItem_0"                         $type="REG_SZ"      $value=": \_RESTORE\||25|1" ; possible it must be REG_MULTI_SZ as type
 GOSUB write_registry  $name="ExcludeSFPList"                         $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="ExtensionFilterOption"                  $type="REG_DWORD"   $value="2"
 GOSUB write_registry  $name="NumberOfScanners"                       $type="REG_DWORD"   $value="4"
 GOSUB write_registry  $name="NumExcludeItems"                        $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="ScanArchiveFindAll"                     $type="REG_DWORD"   $value="0"
 GOSUB write_registry  $name="ScanArchives"                           $type="REG_DWORD"   $value="0"
 GOSUB write_registry  $name="ScanArchiveTimeout"                     $type="REG_DWORD"   $value="5"
 GOSUB write_registry  $name="ScannerThreadTimeout"                   $type="REG_DWORD"   $value="7530"
 GOSUB write_registry  $name="SmoothWritesExtensions"                 $type="REG_SZ"      $value="INI"
 GOSUB write_registry  $name="SmoothWritesTime"                       $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="szMoveToFolder"                         $type="REG_SZ"      $value="C:\Program Files\Network Associates\VirusScan\Infected"

 GOSUB write_registry  $name="szProgExts"                             $type="REG_SZ"
                       $value=       "::: ??_ {?? 001 002 386 3GR ACM ADT AP? ASD ASP AX? BAT BIN BO? CC? CDR CHM CLA CMD CNV CO? CP? CSC D?B DAT DEV DIF DL? DO? DRV EE? EX?"
                       $value=$value+" FMT FO? GMS GZ? HDI HLP HT? IM? IN? JS? LIB MB? MD? MHT MOD MPD MPP MPT MRC MS? OB? OC? OL? OLE OTM OV? PCI PD? PHP PIF PLG POT PP? PRC"
                       $value=$value+" QLB QPW QTC REG RTF SCR SH? SIS SMM SYS TD0 TGZ TLB TSP VB? VS? VWP VXD WBK WIZ WP? WRI WS? X32 XL? XML XSL XTP XX? ZL?"
 GOSUB write_registry  $name="TSDisableAll"                           $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="uAction"                                $type="REG_DWORD"   $value="5"
 GOSUB write_registry  $name="UnloadDriver"                           $type="REG_DWORD"   $value="0"
 GOSUB write_registry  $name="UseEngineGFS"                           $type="REG_DWORD"   $value="1"
 GOSUB write_registry  $name="VSDenyAccessMode"                       $type="REG_DWORD"   $value="1"
 GOSUB write_registry
 EXIT

:write_registry
 $key="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration"
 IF (WriteValue($key,$name,$value,$type) <> 0)
   ? "Warning   KIX: write problems with key "$name". error @error (@serror)"
 ENDIF
 RETURN
greetings.
_________________________
email scripting@wanadoo.nl homepage scripting@wanadoo.nl | Links | Summary of Site Site KiXforms FAQ kixtart.org library collection mirror MCA | FAQ & UDF help file UDF kixtart.org library collection mirror MCA | mirror USA | mirror europe UDF scriptlogic library collection UDFs | mirror MCA

Top
#23021 - 2002-06-18 09:44 AM Re: Merge a registry key
Anonymous
Unregistered


Wow!!!

Thanks very much!!

I'll get Mcafee to thank you since it's their "fix" that has caused the issue on our NT Workstations!!!!!!

Regards

Colin
Top
#23022 - 2002-06-18 09:48 AM Re: Merge a registry key
MCA Offline
KiX Supporter
*****

Registered: 2000-04-28
Posts: 5152
Loc: Netherlands, EU
It was a pleasure to do.
You are always welcome on the board.
greetings
_________________________
email scripting@wanadoo.nl homepage scripting@wanadoo.nl | Links | Summary of Site Site KiXforms FAQ kixtart.org library collection mirror MCA | FAQ & UDF help file UDF kixtart.org library collection mirror MCA | mirror USA | mirror europe UDF scriptlogic library collection UDFs | mirror MCA

Top
#23023 - 2002-06-18 10:03 AM Re: Merge a registry key
Anonymous
Unregistered


I've tried the script & it bombs out if the writevalue already exists.

We only need to make 2 changes to the registry.

Change the value of DWORD "DisablePLADMinusOne" from 0 to 1.

Add the DWORD "DisableResetLastAccessDate" with a value of 1.

I've cut the script you kindly did down to those 2 lines.

GOSUB write_registry $name="DisablePLADMinusOne" $type="REG_DWORD" $value="1"
GOSUB write_registry $name="DisableResetLastAccessDate" $type="REG_DWORD" $value="1"
GOSUB write_registry
EXIT

:write_registry
$key="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration"
IF (WriteValue($key,$name,$value,$type) <> 0)
? "Warning KIX: write problems with key "$name". error @error (@serror)"
ENDIF
RETURN

Is there a way of changing the original value, or will I have to use the DELVALUE option to remove the DWORD "DisablePLADMinusOne", then re-add it with the correct value?

(Then I'll have to place a safeguard to get the script to "RunOnce"!)

Thanks (Again!)

Colin
Top
#23024 - 2002-06-18 10:14 AM Re: Merge a registry key
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
the writevalue writes over the old value if exists.
_________________________
!

download KiXnet

Top
#23025 - 2002-06-18 10:28 AM Re: Merge a registry key
MCA Offline
KiX Supporter
*****

Registered: 2000-04-28
Posts: 5152
Loc: Netherlands, EU
Dear,

The first GOSUB write_registry call we have removed. At that point the variables
aren't initiliazed.
code:
                      $name="DisablePLADMinusOne"        $type="REG_DWORD" $value="1"
 GOSUB write_registry $name="DisableResetLastAccessDate" $type="REG_DWORD" $value="1"
 GOSUB write_registry
 EXIT

:write_registry
 $key="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\On Access Scanner\McShield\Configuration"
 IF (WriteValue($key,$name,$value,$type) <> 0)
    ? "Warning KIX: write problems with key "$name". error @error (@serror)"
 ENDIF
 RETURN
We agree with Lonkero, that with WriteValue any existing value will be overwritten.
greetings.
_________________________
email scripting@wanadoo.nl homepage scripting@wanadoo.nl | Links | Summary of Site Site KiXforms FAQ kixtart.org library collection mirror MCA | FAQ & UDF help file UDF kixtart.org library collection mirror MCA | mirror USA | mirror europe UDF scriptlogic library collection UDFs | mirror MCA

Top
#23026 - 2002-06-18 10:41 AM Re: Merge a registry key
Anonymous
Unregistered


Brilliant!

Worked a treat!

Again, Many thanks.

Regards

Colin
Top
Page 1 of 1 1


Moderator:  Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 302 anonymous users online.
details
Newest Members
Sir_Barrington, batdk82, StuTheCoder, M_Moore, BeeEm
17886 Registered Users
My Cookies · Mark all read Powered by UBB.threads™ Contact Us · KiXtart.org website · Top

Generated in 0.061 seconds in which 0.021 seconds were spent on a total of 12 queries. Zlib compression enabled.
Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org