Hi all,

I have been writing a script that will eliminate funlove virus from machines. The script will check local machine for FLCSS.EXE file and GetFileAttr on it, determine if it's a file or directory, and if a file is present will logoff the user. I will post the code below, but this is the problem: I am checking for FLCSS.EXE on the local machine. In my initial tests I was never using lower case letters. Upon my deployment many users called with problems saying they had been logged off the network. In my investigation I determined the FLCSS.EXE on the local machine was lower case and thus the script was not recognizing it. Other than adding code to look for the lowercase version of the file, is there a way I can disregard the case sensitive search criteria? As you can see with 8 letters in the filename I could have a possible 64 different filenames that I need to search against. Please help if you can.

Thanks
Adam A

code:

$Result = GetFileAttr("%windir%\system32\FLCSS.EXE")
if $Result=0 MD "%windir%\system32\FLCSS.EXE"
RETURN
ELSE
if ( $Result = 16 ) ; directory already exists
RETURN
ELSE
$Return=MessageBox("The system has detected a possible virus infection on your machine. Please call the Help Desk for assistance in removal. To protect our network's integrity and corporate data,

YOU WILL BE LOGGED OFF THE DOMAIN!

Until the possible virus infection has been removed.", "WARNING: FUNLOVE VIRUS ALERT",16)
LOGOFF(1)
EXIT
ENDIF
ENDIF