Difference between revisions of "RootClass"

From SpybotWiki
Jump to: navigation, search
Line 10: Line 10:
 
===Description===
 
===Description===
 
This command will also detect linked root classes (typically those ending with ''.1'', and all CLSIDs, Interfaces and Type Libraries linked to it, so it's the tool of choice when the GUIDs of those are random, but the class name is fixed.
 
This command will also detect linked root classes (typically those ending with ''.1'', and all CLSIDs, Interfaces and Type Libraries linked to it, so it's the tool of choice when the GUIDs of those are random, but the class name is fixed.
 +
 +
# The first parameter has to be the name of the class, as found as a subkey of HKEY_CLASSES_ROOT\.
 +
# She second one may optionally contain [[Advanced build parameters|advanced build parameters]].
  
 
==See also==
 
==See also==
 +
* [[Advanced build parameters]]
 +
 +
===Similar commands===
 
* [[CLSID]]  
 
* [[CLSID]]  
 
* [[Interface]]
 
* [[Interface]]
 +
* [[RegyKey]]
 
* [[Typelib]]
 
* [[Typelib]]
 
===Similar commands===
 
  
 
[[Category:SBI Commands]]
 
[[Category:SBI Commands]]
 
[[Category:SBI Commands (current)]]
 
[[Category:SBI Commands (current)]]

Revision as of 14:28, 17 February 2008

Searches for a typical Class declaration in the registry, including any following Class IDs.

Usage

RootClass:[name of root class],<advanced build parameters>

Examples

RootClass:"DummeHijackerSearch.BHO"
RootClass:"JustARootClass"

Description

This command will also detect linked root classes (typically those ending with .1, and all CLSIDs, Interfaces and Type Libraries linked to it, so it's the tool of choice when the GUIDs of those are random, but the class name is fixed.

  1. The first parameter has to be the name of the class, as found as a subkey of HKEY_CLASSES_ROOT\.
  2. She second one may optionally contain advanced build parameters.

See also

Similar commands