Option Explicit
Dim objShell, objFSO, strFilePath, strFileName, strFileExt, strRegKey, strRegValue
'创建Shell和FileSystemObject对象
Set objShell = CreateObject("WScript.Shell")
Set objFSO = CreateObject("Scripting.FileSystemObject")
'获取当前用户的“Temp”文件夹路径
strFilePath = objShell.ExpandEnvironmentStrings("%Temp%")
'循环遍历“Temp”文件夹中的所有文件
For Each objFile In objFSO.GetFolder(strFilePath).Files
'获取文件名、扩展名和完整路径
strFileName = objFSO.GetBaseName(objFile)
strFileExt = objFSO.GetExtensionName(objFile)
strFilePath = objFSO.GetAbsolutePathName(objFile)
'如果文件名包含以下关键字,则认为是流氓软件
If InStr(strFileName, "uninstall") Or InStr(strFileName, "setup") Or InStr(strFileName, "install") Or InStr(strFileName, "update") Or InStr(strFileName, "patch") Then
'删除该文件
objFSO.DeleteFile(strFilePath)
'禁止该文件的注册表项
strRegKey = "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun"
strRegValue = strFileName & "." & strFileExt
objShell.RegWrite strRegKey & "\" & strFileName, strRegValue, "REG_SZ"
'弹出提示框
MsgBox "已阻止流氓软件:" & strFileName & "." & strFileExt
End If
Next
'释放对象
Set objShell = Nothing
Set objFSO = Nothing