Difference between revisions of "ModuleUsage"

From SpybotWiki
Jump to: navigation, search
(Usage: added var types)
 
(One intermediate revision by the same user not shown)
Line 1: Line 1:
Searches for the Windows module usage setting for a special file.
+
{{SbiCmdInfo
 +
|SYNTAX = ModuleUsage
 +
|PENAME = SpybotSD.exe
 +
|PEVERSION = 1.3 or later
 +
|GROUP = Registry
 +
|MINUPDATE = n/a
 +
|ADVFILEPARAMS = no
 +
|ADVREGPARAMS = no
 +
|ADVBUILDPARAMS = yes (second)
 +
|ADVSPECIALPARAMS = no
 +
}}Searches for the Windows module usage setting for a special file.
  
 
==Usage==
 
==Usage==
  ModuleUsage:<part of name of module>[,advanced build parameters]
+
  ModuleUsage:<partialmodulename(string)>[,advanced build parameters]
  
 
===Examples===
 
===Examples===

Latest revision as of 16:22, 22 February 2008

ModuleUsage
Group Registry
Main Application Version 1.3 or later
Required Update n/a
File Parameters no
Registry Parameters no
Build Parameters yes (second)
Special Parameters no

Searches for the Windows module usage setting for a special file.

Usage

ModuleUsage:<partialmodulename(string)>[,advanced build parameters]

Examples

ModuleUsage:"spyware/spyware.dll"

This will detect the following key:

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/SYSTEM/spyware.dll]

Description

  1. The first parameter can be any part of the whole key name, but should be descriptive. Algo-Prefixes will be supported after 1.5.2. AP PT
  2. The second parameter may contain advanced build parameters.

This command will also detect a CodeStoreDB if it is linked inside this entry. Please remember the keyname contains slashes, not backslashes!

Scan results

  • The actually ModuleUsage registry key.
  • The associated registry key for distributed program files (see CodeStoreDB), if existing.

See also

Similar commands