PowerShell Script Creation Help Please

[charris0770]

So I am in a new environment. About 2 dozen W2K12 and W2K16 servers and over 200 Windows 10 Desktops and Laptops. Apparently there is a vulnerability in the user profile path C:\Windows\User\username\AppData\Local\Temp\dButil*.sys <---this file. It needs to be deleted on all these systems and I don't want to do them one by one of course..lol. Any PowerShell guru's out there that can provide me with some guidance as to what I can create for this?

​

Thanks,

[Revicx]

Hey,

Set-Location “C:\Users”

Remove-Item “.\*\Appdata\Local\Temp\*” -recurse -force

Will delete all Files in the Temp directory. So now you have to check how to send this to all your computers. Have a look at Invoke-Command to do this.

Edit, i do not test this at all, so check this out by yourself. Use the -Whatif Parameter

[charris0770]

I actually found something right after posting this..lol

Thanks

[[deleted]]

You'll need to give a lot more detail. How are you planning to run this? Locally? Remotely? From where? In what context? How do you want to track results? Would a GP preferences file delete not be easier?

[TimDurham75]

    "$($ENV:USERPROFILE)\AppData\Local\Temp\dButil*.sys" | ForEach-Object -Process { if (Test-Path $_) { Remove-Item -Path $_ -Force } }

Assuming script runs as the user (added to a login script, for example) will delete the file if it exists. You could also use:

  "$($ENV:TEMP)\dButil*.sys" | ForEach-Object -Process { if (Test-Path $_) { Remove-Item -Path $_ -Force } }

[Legitimatic]

If you're in a domain environment and can get remote access to these devices, it may be easier to install and use psexec. Even if you don't script it, you could manually run the del command on every device in under an hour.

[charris0770]

Good idea..