Difference between revisions of "RootClass"
(→Usage: added var types) |
|||
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
| − | Searches for a typical Class declaration in the registry, including any following Class IDs. | + | {{SbiCmdInfo |
| + | |SYNTAX = RootClass | ||
| + | |PENAME = SpybotSD.exe | ||
| + | |PEVERSION = 1.3 or later | ||
| + | |GROUP = Registry | ||
| + | |MINUPDATE = n/a | ||
| + | |ADVFILEPARAMS = no | ||
| + | |ADVREGPARAMS = no | ||
| + | |ADVBUILDPARAMS = yes (second) | ||
| + | |ADVSPECIALPARAMS = no | ||
| + | }}Searches for a typical Class declaration in the registry, including any following Class IDs. | ||
==Usage== | ==Usage== | ||
| − | RootClass:[ | + | RootClass:<classname(string)>[,advanced build parameters] |
===Examples=== | ===Examples=== | ||
| − | RootClass:" | + | RootClass:"DummerHijackerSearch.BHO" |
RootClass:"JustARootClass" | RootClass:"JustARootClass" | ||
| Line 12: | Line 22: | ||
# The first parameter has to be the name of the class, as found as a subkey of HKEY_CLASSES_ROOT\. | # The first parameter has to be the name of the class, as found as a subkey of HKEY_CLASSES_ROOT\. | ||
| − | # | + | # The second one may optionally contain [[Advanced build parameters|advanced build parameters]]. |
===Scan Results=== | ===Scan Results=== | ||
Latest revision as of 16:38, 22 February 2008
| RootClass | |
| Group | Registry |
| Main Application | Version 1.3 or later |
| Required Update | n/a |
| File Parameters | no |
| Registry Parameters | no |
| Build Parameters | yes (second) |
| Special Parameters | no |
Searches for a typical Class declaration in the registry, including any following Class IDs.
Usage
RootClass:<classname(string)>[,advanced build parameters]
Examples
RootClass:"DummerHijackerSearch.BHO" RootClass:"JustARootClass"
Description
This command will also detect linked root classes (typically those ending with .1, and all CLSIDs, Interfaces and Type Libraries linked to it, so it's the tool of choice when the GUIDs of those are random, but the class name is fixed.
- The first parameter has to be the name of the class, as found as a subkey of HKEY_CLASSES_ROOT\.
- The second one may optionally contain advanced build parameters.
Scan Results
- The root class itself.
- Associated CLSIDs (class GUIDs).
- Associated type libraries.
- Associated browser helper objects.
