Install and Uninstall Malwarebytes via Powershell

[Britec]

Here is the code for installing Malwarebytes via Powershell

Code:

# Silent Install MalwareBytes
# Download URL: https://www.malwarebytes.com/mwb-download/thankyou/

# Path for the workdir
$workdir = "c:\installer\"

# Check if work directory exists if not create it

If (Test-Path -Path $workdir -PathType Container)
{ Write-Host "$workdir already exists" -ForegroundColor Red}
ELSE
{ New-Item -Path $workdir  -ItemType directory }

# Download the installer

$source = "https://downloads.malwarebytes.com/file/mb3"
$destination = "$workdir\mbam.exe"
Invoke-WebRequest $source -OutFile $destination

# Start the installation

Start-Process -FilePath "$workdir\mbam.exe" -ArgumentList "/NOCANCEL /NORESTART /VERYSILENT /SUPPRESSMSGBOXES"

# Wait XX Seconds for the installation to finish

Start-Sleep -s 35

# Remove the installer

rm -Force $workdir\mbam*

Quote:For Windows 7 users please change to this code 



[ltr]$source = "https://data-cdn.mbamupdates.com/web/mb3-setup-consumer-3.0.6.1469.exe"
$destination = "$workdir\mbam.exe"
Invoke-WebRequest $source -OutFile $destination[/ltr]

Original Credit of Source Code

Here is the code for uninstalling Malwarebytes via Powershell

Code:

Function List-Programs {
   [cmdletbinding()]
   [cmdletbinding()]
   param(
   [parameter(ValueFromPipeline=$true,ValueFromPipelineByPropertyName=$true)]
   [string[]]$ComputerName = $env:computername            
   
   )            
   
   begin {
       $UninstallRegKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall"
       }            
   
   process {
       foreach($Computer in $ComputerName) {
           Write-Verbose "Working on $Computer"
           if(Test-Connection -ComputerName $Computer -Count 1 -ea 0) {
               $HKLM   = [microsoft.win32.registrykey]::OpenRemoteBaseKey('LocalMachine',$computer)
               $UninstallRef  = $HKLM.OpenSubKey($UninstallRegKey)
               $Applications = $UninstallRef.GetSubKeyNames()            
                               
               foreach ($App in $Applications) {
                   $AppRegistryKey  = $UninstallRegKey + "\\" + $App
                   $AppDetails   = $HKLM.OpenSubKey($AppRegistryKey)
                   $AppGUID   = $App
                   $AppDisplayName  = $($AppDetails.GetValue("DisplayName"))
                   $AppVersion   = $($AppDetails.GetValue("DisplayVersion"))
                   $AppPublisher  = $($AppDetails.GetValue("Publisher"))
                   $AppInstalledDate = $($AppDetails.GetValue("InstallDate"))
                   $AppUninstall  = $($AppDetails.GetValue("UninstallString"))
                   if(!$AppDisplayName) { continue }
                   $OutputObj = New-Object -TypeName PSobject
                   $OutputObj | Add-Member -MemberType NoteProperty -Name ComputerName -Value $Computer.ToUpper()
                   $OutputObj | Add-Member -MemberType NoteProperty -Name AppName -Value $AppDisplayName
                   $OutputObj | Add-Member -MemberType NoteProperty -Name AppVersion -Value $AppVersion
                   $OutputObj | Add-Member -MemberType NoteProperty -Name AppVendor -Value $AppPublisher
                   $OutputObj | Add-Member -MemberType NoteProperty -Name InstalledDate -Value $AppInstalledDate
                   $OutputObj | Add-Member -MemberType NoteProperty -Name UninstallKey -Value $AppUninstall
                   $OutputObj | Add-Member -MemberType NoteProperty -Name AppGUID -Value $AppGUID
                   $OutputObj# | Select ComputerName, DriveName
                   }
               }
           }
       }            
   
   end {}
   }

Function Uninstall-Program {
   [cmdletbinding()]
   param (
   [parameter(ValueFromPipeline=$true,ValueFromPipelineByPropertyName=$true)]
   [string]$ComputerName = $env:computername,
   [parameter(ValueFromPipeline=$true,ValueFromPipelineByPropertyName=$true,Mandator​y=$true)]
   [string]$UninstallKey
   )
   try {
       $returnval = ([WMICLASS]"\\$computerName\ROOT\CIMV2:win32_process").Create($UninstallKey + " /VERYSILENT /SUPPRESSMSGBOXES /NORESTART")
       }
   catch {
       write-error "Failed to trigger the uninstallation. Review the error message"
       $_
       exit
       }
   switch ($($returnval.returnvalue)){
       0 { "Uninstallation command triggered successfully" }
       2 { "You don't have sufficient permissions to trigger the command on $Computer" }
       3 { "You don't have sufficient permissions to trigger the command on $Computer" }
       8 { "An unknown error has occurred" }
       9 { "Path Not Found" }
       9 { "Invalid Parameter"}
       }
   }

function Uninstall-MBAM {
   param($computername)
   try
   {
       $UninstallKey = (List-Programs -ComputerName $computername | where {$_.AppName -like "*Malwarebytes*"}).UninstallKey
       Uninstall-Program -computername $computername -UninstallKey $UninstallKey
   }
   Catch
   {
       $ErrorMessage = $_.Exception.Message
       $FailedItem = $_.Exception.ItemName
       Write-Host "There was an error on $computername.`r`n$FailedItem`r`nMessage: $ErrorMessage"
       Break
   }
}

Uninstall-MBAM -computername $env:computername

Original Credit of Source Code

[Timster]

Whats wrong with Malwarebytes? I thought it was a good program?

[Britec]

You tart