Difference between revisions of "StartmenuItem"
m (→Usage: fixed var names) |
|||
| (2 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| − | Searches the start menu items for one linking to the given filename. | + | {{SbiCmdInfo |
| + | |SYNTAX = StartmenuItem | ||
| + | |PENAME = SpybotSD.exe | ||
| + | |PEVERSION = 1.3 or later | ||
| + | |GROUP = Files | ||
| + | |MINUPDATE = n/a | ||
| + | |ADVFILEPARAMS = yes (third) | ||
| + | |ADVREGPARAMS = no | ||
| + | |ADVBUILDPARAMS = yes (third) | ||
| + | |ADVSPECIALPARAMS = no | ||
| + | }}Searches the start menu items for one linking to the given filename. | ||
==Usage== | ==Usage== | ||
| − | StartmenuItem: | + | StartmenuItem:<linkname(string)>,<filename(string)>[,advanced file parameters] |
===Examples=== | ===Examples=== | ||
| Line 13: | Line 23: | ||
You might want to use File instead, using the <$STARTMENU> or <$COMMONSTARTMENU> path templates, combined with the path template <$DESKTOP> and the advanced file parameter target[link], unless you depend on the link to find the actual file (in case it uses totally random names in totally random folders, for example). | You might want to use File instead, using the <$STARTMENU> or <$COMMONSTARTMENU> path templates, combined with the path template <$DESKTOP> and the advanced file parameter target[link], unless you depend on the link to find the actual file (in case it uses totally random names in totally random folders, for example). | ||
| + | |||
| + | ===Scan Results=== | ||
| + | * The link file. | ||
==See also== | ==See also== | ||
| Line 28: | Line 41: | ||
[[Category:SBI Commands]] | [[Category:SBI Commands]] | ||
| − | |||
[[Category:SBI Commands supporting AlgoPrefix]] | [[Category:SBI Commands supporting AlgoPrefix]] | ||
Latest revision as of 16:39, 22 February 2008
| StartmenuItem | |
| Group | Files |
| Main Application | Version 1.3 or later |
| Required Update | n/a |
| File Parameters | yes (third) |
| Registry Parameters | no |
| Build Parameters | yes (third) |
| Special Parameters | no |
Searches the start menu items for one linking to the given filename.
Usage
StartmenuItem:<linkname(string)>,<filename(string)>[,advanced file parameters]
Examples
StartmenuItem:"Our malware online.lnk","<$PROGRAMFILES>\OurMalware\Malware Online.url"
Description
- The name of the link file to detect, no path involved, Algo-Prefixes allowed. AP
- The name of the file the link needs to point to, Algo-Prefixes and path templates allowed. AP PT
- You should specify advanced file parameters as the third parameter to limit the detection by real file properties, since file names only can be quite ambiguous.
You might want to use File instead, using the <$STARTMENU> or <$COMMONSTARTMENU> path templates, combined with the path template <$DESKTOP> and the advanced file parameter target[link], unless you depend on the link to find the actual file (in case it uses totally random names in totally random folders, for example).
Scan Results
- The link file.
