Working with DirectoryInfo

by **David Trimboli** » Wed, 03 Mar 2010 02:19:41 GMT

I'm working on a function that removes files related to a virus. The files are called x[1], x[2], x[3], etc, 
and are found in "Local Settings\Temporary Internet Files\Content.IE5\<CacheFolder>". The script fails to 
detect and remove the files because the variable $CacheFolder (seems to return a string instead of a folder 
object (although the type is reported as DirectoryInfo). The Get-ChildItem cmdlet is trying to the cache 
folders in my home directory instead of the correct paths.

How can I adjust this function to correctly search the cache folders?

function Remove-Virut ($ComputerName = $env:ComputerName)
{

# First establish access to remote computer.
# Is it on the network?
     if (Test-Connection $ComputerName -Count 1)
     {
# Does the user have access?
         if (-not (Get-Item \\$ComputerName\c$ -ErrorAction SilentlyContinue))
	{
	    net use \\$ComputerName\c$
	}

# Delete bogus .scr files in \Windows\System32.
         $ScrFiles = Get-Item \\$ComputerName\Admin$\system32\*.scr -ErrorAction SilentlyContinue -Force |
	    Where-Object {$_.Name -match "^[0-9][0-9]?.scr$"}
	If ($ScrFiles)
        	{
	    Write-Host "Removing .scr files:"
	    Write-Host $ScrFiles
	    Remove-Item $ScrFiles
	}

# Delete x[#] files from Internet Explorer caches
         $XFilePath = "Local Settings\Temporary Internet Files\Content.IE5"
	$ServicePaths = "Documents and Settings\Default User", "Documents and Settings\LocalService",
	    "Documents and Settings\NetworkService"
	foreach ($ServicePath in $ServicePaths)
	{
	    $CacheFolders = Get-ChildItem "\\$ComputerName\c$\$ServicePath\$XFilePath" -Force |
	        Where-Object {$_.PSIsContainer}

# HERE COMES THE BIT THAT DOESN'T WORK!
	    foreach ($CacheFolder in $CacheFolders)
	    {
	        $XFiles = Get-ChildItem $CacheFolder -Force -ErrorAction SilentlyContinue |
	            Where-Object {$_.Name -match "^x\[[0-9]"}
		if ($XFiles) {
		    Write-Host "Removing x[] files from $CacheFolder.Name:"
		    Write-Host $XFiles
		    Remove-Item $XFiles
		}
             }
	}
     }
}


-- 
David Trimboli
Windows Systems Analyst
Cold Spring Harbor Laboratory

by **UGF1bENoYXZleg** » Wed, 03 Mar 2010 04:06:01 GMT

Try specifying the fullname property. For some reason when you are working 
with File/DirectoryInfo objects within a foreach loop you need to specify 
fullname when passing into *-*Item cmdlets.

So the line:

$XFiles = Get-ChildItem $CacheFolder -Force -ErrorAction SilentlyContinue |

should be:

$XFiles = Get-ChildItem $CacheFolder.fullname -Force -ErrorAction 
SilentlyContinue |


Hope that helps,
Paul Chavez

by **David Trimboli** » Wed, 03 Mar 2010 05:07:59 GMT

Thanks, Paul. That did it!






-- 
David Trimboli
Windows Systems Analyst
Cold Spring Harbor Laboratory

Working with DirectoryInfo

Working with DirectoryInfo

Jump to:

Next

Working with DirectoryInfo

RE: Working with DirectoryInfo

Re: Working with DirectoryInfo

Similar Threads:

Who is online