File - Revision history

PepiMK at 09:42, 21 April 2011

2011-04-21T09:42:22Z

← Older revision		Revision as of 09:42, 21 April 2011
Line 12:		Line 12:

	==Usage==		==Usage==

			====for .sbi====
	File:<description(string)>,<filename(string)>[,advanced file parameters]		File:<description(string)>,<filename(string)>[,advanced file parameters]

			===for scripts===
			sbiFile(<description(string)>,<filename(string)>[,advanced file parameters]);

	===Examples===		===Examples===

			====for .sbi====
	File:"<$FILE_DATA>","<$WINDIR>\Malware.txt","filesize=182,md5=83C36C493D7A254F9DE2ED63B3F92548"		File:"<$FILE_DATA>","<$WINDIR>\Malware.txt","filesize=182,md5=83C36C493D7A254F9DE2ED63B3F92548"
	File:"<$FILE_DATA>","<wc>C:\Temp\Malware.*","filesize>=180,md5=83C36C493D7A254F9DE2ED63B3F92548"		File:"<$FILE_DATA>","<wc>C:\Temp\Malware.*","filesize>=180,md5=83C36C493D7A254F9DE2ED63B3F92548"
	File:"<$FILE_DATA>","<regexpr>C:\Temp\Mal[a-z]{4}.*","filesize<=190,md5=83C36C493D7A254F9DE2ED63B3F92548"		File:"<$FILE_DATA>","<regexpr>C:\Temp\Mal[a-z]{4}.*","filesize<=190,md5=83C36C493D7A254F9DE2ED63B3F92548"
	File:"<$FILE_DATA>","<regexpr>C:\Windows\System[^\t]\Mal[a-z]{4}.","filesize<=190,md5=83C36C493D7A254F9DE2ED63B3F92548"		File:"<$FILE_DATA>","<regexpr>C:\Windows\System[^\t]\Mal[a-z]{4}.","filesize<=190,md5=83C36C493D7A254F9DE2ED63B3F92548"

			====for scripts====
			sbiFile('<$FILE_DATA>','<$WINDIR>\Malware.txt','filesize=182,md5=83C36C493D7A254F9DE2ED63B3F92548');

	===Description===		===Description===

CCRDude: /* Examples */ fixed example into code block

2008-05-27T16:45:45Z

Examples: fixed example into code block

← Older revision		Revision as of 16:45, 27 May 2008
Line 18:		Line 18:
	File:"<$FILE_DATA>","<wc>C:\Temp\Malware.*","filesize>=180,md5=83C36C493D7A254F9DE2ED63B3F92548"		File:"<$FILE_DATA>","<wc>C:\Temp\Malware.*","filesize>=180,md5=83C36C493D7A254F9DE2ED63B3F92548"
	File:"<$FILE_DATA>","<regexpr>C:\Temp\Mal[a-z]{4}.*","filesize<=190,md5=83C36C493D7A254F9DE2ED63B3F92548"		File:"<$FILE_DATA>","<regexpr>C:\Temp\Mal[a-z]{4}.*","filesize<=190,md5=83C36C493D7A254F9DE2ED63B3F92548"
	File:"<$FILE_DATA>","<regexpr>C:\Windows\System[^\t]\Mal[a-z]{4}.","filesize<=190,md5=83C36C493D7A254F9DE2ED63B3F92548"		File:"<$FILE_DATA>","<regexpr>C:\Windows\System[^\t]\Mal[a-z]{4}.","filesize<=190,md5=83C36C493D7A254F9DE2ED63B3F92548"

	===Description===		===Description===

CCRDude: /* Examples */ added 1.6 example

2008-05-27T16:45:30Z

Examples: added 1.6 example

← Older revision		Revision as of 16:45, 27 May 2008
Line 18:		Line 18:
	File:"<$FILE_DATA>","<wc>C:\Temp\Malware.*","filesize>=180,md5=83C36C493D7A254F9DE2ED63B3F92548"		File:"<$FILE_DATA>","<wc>C:\Temp\Malware.*","filesize>=180,md5=83C36C493D7A254F9DE2ED63B3F92548"
	File:"<$FILE_DATA>","<regexpr>C:\Temp\Mal[a-z]{4}.*","filesize<=190,md5=83C36C493D7A254F9DE2ED63B3F92548"		File:"<$FILE_DATA>","<regexpr>C:\Temp\Mal[a-z]{4}.*","filesize<=190,md5=83C36C493D7A254F9DE2ED63B3F92548"
			File:"<$FILE_DATA>","<regexpr>C:\Windows\System[^\t]\Mal[a-z]{4}.","filesize<=190,md5=83C36C493D7A254F9DE2ED63B3F92548"

	===Description===		===Description===

CCRDude: /* Description */ added 1.6 improvement

2008-05-27T16:44:57Z

Description: added 1.6 improvement

← Older revision		Revision as of 16:44, 27 May 2008
Line 23:		Line 23:

	# The first parameter is a simple description, used for the GUI to display to the user only. Instead of using plain text, it is recommended to use [[Description templates\|description templates]], which are displayed in a localized version by the scanner GUI.		# The first parameter is a simple description, used for the GUI to display to the user only. Instead of using plain text, it is recommended to use [[Description templates\|description templates]], which are displayed in a localized version by the scanner GUI.
	# The second parameter defines the file name and path. In the standard form, it supports wildcards and [[Path templates\|path templates]], but you can also use [[AlgoPrefix\|Algo-Prefixes]] to vary the filename matching algorithm, e.g. to use regular expressions. ~~Please note that~~ any ~~pattern apply to~~ the ~~file name only! The file~~ path ~~cannot be varied~~, ~~but if you specify advanced parameters, the On-Access scanner will simply ignore the path~~. {{AlgoPrefix}} {{PathTemplates}}		# The second parameter defines the file name and path. In the standard form, it supports wildcards and [[Path templates\|path templates]], but you can also use [[AlgoPrefix\|Algo-Prefixes]] to vary the filename matching algorithm, e.g. to use regular expressions. Starting with [[Spybot - Search & Destroy]] 1.6, you may use wildcards or regular expressions in any part of the path, on a by level base. {{AlgoPrefix}} {{PathTemplates}}
	# The third parameter allows you to define more criteria to look for in a file, since the file name itself is rarely unique (just think about all those misleading malware files that attempt to use standard Windows filenames). There is a huge range of [[Advanced file parameters\|advanced file parameters]], with different costs, some cached, some not. Using less costly parameters like [[filesize]] first is quite recommended to filter the amount of files that are left for the later parameters.		# The third parameter allows you to define more criteria to look for in a file, since the file name itself is rarely unique (just think about all those misleading malware files that attempt to use standard Windows filenames). There is a huge range of [[Advanced file parameters\|advanced file parameters]], with different costs, some cached, some not. Using less costly parameters like [[filesize]] first is quite recommended to filter the amount of files that are left for the later parameters.

CCRDude: /* Usage */ added var types

2008-02-22T16:13:27Z

Usage: added var types

← Older revision		Revision as of 16:13, 22 February 2008
Line 12:		Line 12:

	==Usage==		==Usage==
	File:<description>,<filename>[,advanced file parameters]		File:<description(string)>,<filename(string)>[,advanced file parameters]

	===Examples===		===Examples===

CCRDude at 13:05, 22 February 2008

2008-02-22T13:05:50Z

← Older revision		Revision as of 13:05, 22 February 2008
Line 1:		Line 1:
	''File'' is the regular command to detect any files on your system.		{{SbiCmdInfo
			\|SYNTAX = File
			\|PENAME = SpybotSD.exe
			\|PEVERSION = 1.3
			\|GROUP = Files
			\|MINUPDATE = n/a
			\|ADVFILEPARAMS = yes (third)
			\|ADVREGPARAMS = no
			\|ADVBUILDPARAMS = yes (third)
			\|ADVSPECIALPARAMS = no
			}}''File'' is the regular command to detect any files on your system.

	==Usage==		==Usage==

CCRDude at 19:05, 18 February 2008

2008-02-18T19:05:40Z

← Older revision		Revision as of 19:05, 18 February 2008
Line 37:		Line 37:

	[[Category:SBI Commands]]		[[Category:SBI Commands]]
	~~[[Category:SBI Commands supporting AlgoPrefix]]~~

CCRDude at 10:44, 18 February 2008

2008-02-18T10:44:18Z

← Older revision		Revision as of 10:44, 18 February 2008
Line 37:		Line 37:

	[[Category:SBI Commands]]		[[Category:SBI Commands]]
	~~[[Category:SBI Commands (current)]]~~
	[[Category:SBI Commands supporting AlgoPrefix]]		[[Category:SBI Commands supporting AlgoPrefix]]

CCRDude at 10:41, 18 February 2008

2008-02-18T10:41:18Z

← Older revision		Revision as of 10:41, 18 February 2008
Line 2:		Line 2:

	==Usage==		==Usage==
	File:~~[Description]~~,[~~Filepath & Filename]~~,<advanced file parameters>		File:<description>,<filename>[,advanced file parameters]

	===Examples===		===Examples===
Line 17:		Line 17:

	If you are dealing with [[Rootkits]], you also need to take a look at [[NTFile]], a brother of this command that uses deeper rooted functions to locate a file and is able to detect files hidden to the standard Win32 API.		If you are dealing with [[Rootkits]], you also need to take a look at [[NTFile]], a brother of this command that uses deeper rooted functions to locate a file and is able to detect files hidden to the standard Win32 API.

			===Scan Results===
			* The file identified by the parameters.

	==See also==		==See also==

CCRDude: /* Description */

2008-02-17T16:23:22Z

Description

← Older revision		Revision as of 16:23, 17 February 2008
Line 13:		Line 13:

	# The first parameter is a simple description, used for the GUI to display to the user only. Instead of using plain text, it is recommended to use [[Description templates\|description templates]], which are displayed in a localized version by the scanner GUI.		# The first parameter is a simple description, used for the GUI to display to the user only. Instead of using plain text, it is recommended to use [[Description templates\|description templates]], which are displayed in a localized version by the scanner GUI.
	# The second parameter defines the file name and path. In the standard form, it supports wildcards and [[Path templates\|path templates]], but you can also use [[AlgoPrefix\|Algo-Prefixes]] to vary the filename matching algorithm, e.g. to use regular expressions. Please note that any pattern apply to the file name only! The file path cannot be varied, but if you specify advanced parameters, the On-Access scanner will simply ignore the path. {{AlgoPrefix}}		# The second parameter defines the file name and path. In the standard form, it supports wildcards and [[Path templates\|path templates]], but you can also use [[AlgoPrefix\|Algo-Prefixes]] to vary the filename matching algorithm, e.g. to use regular expressions. Please note that any pattern apply to the file name only! The file path cannot be varied, but if you specify advanced parameters, the On-Access scanner will simply ignore the path. {{AlgoPrefix}} {{PathTemplates}}
	# The third parameter allows you to define more criteria to look for in a file, since the file name itself is rarely unique (just think about all those misleading malware files that attempt to use standard Windows filenames). There is a huge range of [[Advanced file parameters\|advanced file parameters]], with different costs, some cached, some not. Using less costly parameters like [[filesize]] first is quite recommended to filter the amount of files that are left for the later parameters.		# The third parameter allows you to define more criteria to look for in a file, since the file name itself is rarely unique (just think about all those misleading malware files that attempt to use standard Windows filenames). There is a huge range of [[Advanced file parameters\|advanced file parameters]], with different costs, some cached, some not. Using less costly parameters like [[filesize]] first is quite recommended to filter the amount of files that are left for the later parameters.

← Older revision		Revision as of 16:44, 27 May 2008
Line 23:		Line 23:

	# The first parameter is a simple description, used for the GUI to display to the user only. Instead of using plain text, it is recommended to use [[Description templates\|description templates]], which are displayed in a localized version by the scanner GUI.		# The first parameter is a simple description, used for the GUI to display to the user only. Instead of using plain text, it is recommended to use [[Description templates\|description templates]], which are displayed in a localized version by the scanner GUI.
	# The second parameter defines the file name and path. In the standard form, it supports wildcards and [[Path templates\|path templates]], but you can also use [[AlgoPrefix\|Algo-Prefixes]] to vary the filename matching algorithm, e.g. to use regular expressions. ~~Please note that~~ any ~~pattern apply to~~ the ~~file name only! The file~~ path ~~cannot be varied~~, ~~but if you specify advanced parameters, the On-Access scanner will simply ignore the path~~. {{AlgoPrefix}} {{PathTemplates}}		# The second parameter defines the file name and path. In the standard form, it supports wildcards and [[Path templates\|path templates]], but you can also use [[AlgoPrefix\|Algo-Prefixes]] to vary the filename matching algorithm, e.g. to use regular expressions. Starting with [[Spybot - Search & Destroy]] 1.6, you may use wildcards or regular expressions in any part of the path, on a by level base. {{AlgoPrefix}} {{PathTemplates}}
	# The third parameter allows you to define more criteria to look for in a file, since the file name itself is rarely unique (just think about all those misleading malware files that attempt to use standard Windows filenames). There is a huge range of [[Advanced file parameters\|advanced file parameters]], with different costs, some cached, some not. Using less costly parameters like [[filesize]] first is quite recommended to filter the amount of files that are left for the later parameters.		# The third parameter allows you to define more criteria to look for in a file, since the file name itself is rarely unique (just think about all those misleading malware files that attempt to use standard Windows filenames). There is a huge range of [[Advanced file parameters\|advanced file parameters]], with different costs, some cached, some not. Using less costly parameters like [[filesize]] first is quite recommended to filter the amount of files that are left for the later parameters.

← Older revision		Revision as of 16:23, 17 February 2008
Line 13:		Line 13:

	# The first parameter is a simple description, used for the GUI to display to the user only. Instead of using plain text, it is recommended to use [[Description templates\|description templates]], which are displayed in a localized version by the scanner GUI.		# The first parameter is a simple description, used for the GUI to display to the user only. Instead of using plain text, it is recommended to use [[Description templates\|description templates]], which are displayed in a localized version by the scanner GUI.
	# The second parameter defines the file name and path. In the standard form, it supports wildcards and [[Path templates\|path templates]], but you can also use [[AlgoPrefix\|Algo-Prefixes]] to vary the filename matching algorithm, e.g. to use regular expressions. Please note that any pattern apply to the file name only! The file path cannot be varied, but if you specify advanced parameters, the On-Access scanner will simply ignore the path. {{AlgoPrefix}}		# The second parameter defines the file name and path. In the standard form, it supports wildcards and [[Path templates\|path templates]], but you can also use [[AlgoPrefix\|Algo-Prefixes]] to vary the filename matching algorithm, e.g. to use regular expressions. Please note that any pattern apply to the file name only! The file path cannot be varied, but if you specify advanced parameters, the On-Access scanner will simply ignore the path. {{AlgoPrefix}} {{PathTemplates}}
	# The third parameter allows you to define more criteria to look for in a file, since the file name itself is rarely unique (just think about all those misleading malware files that attempt to use standard Windows filenames). There is a huge range of [[Advanced file parameters\|advanced file parameters]], with different costs, some cached, some not. Using less costly parameters like [[filesize]] first is quite recommended to filter the amount of files that are left for the later parameters.		# The third parameter allows you to define more criteria to look for in a file, since the file name itself is rarely unique (just think about all those misleading malware files that attempt to use standard Windows filenames). There is a huge range of [[Advanced file parameters\|advanced file parameters]], with different costs, some cached, some not. Using less costly parameters like [[filesize]] first is quite recommended to filter the amount of files that are left for the later parameters.