Difference between revisions of "IniValueDelete"
(→Description) |
|||
| Line 1: | Line 1: | ||
==Usage== | ==Usage== | ||
| − | IniValueDelete: | + | IniValueDelete:<description>,<filename>,<section>,<value>,<data>[,advanced build parameters] |
===Examples=== | ===Examples=== | ||
| Line 18: | Line 18: | ||
You might want to take advantage of the [[AlgoPrefix|Algo-Prefix]] ''<$REGMATCHn>'' result of previous ''<regexpr>'' checks here. | You might want to take advantage of the [[AlgoPrefix|Algo-Prefix]] ''<$REGMATCHn>'' result of previous ''<regexpr>'' checks here. | ||
| + | |||
| + | ===Scan Results=== | ||
| + | * INI file entry. | ||
==See also== | ==See also== | ||
Revision as of 11:54, 18 February 2008
Contents
Usage
IniValueDelete:<description>,<filename>,<section>,<value>,[,advanced build parameters]
Examples
IniValueDelete:"<$REG_AUTORUN>","<$WINDIR>\system.ini","boot","SCRNSAVE.EXE","<$WINDIR>\MalwareSaver.scr"
This example completely removes the screensaver entry when it points to a malware file.
Description
This command removes a value from an INI file.
- The first parameter is a standard description; either plaintext, or better a description template, since that allows localization when displaying results to the user.
- The second parameter describes the file; you may use path template here. PT
- The third parameter describes the section inside the INI file; Algo-Prefixes are allowed here. AP PT
- The fourth parameter describes the name of the value; Algo-Prefixes are allowed here. AP PT
- The fifth parameter identifies the data the value has to match. PT
- Optionally, you may use advanced build parameters in the sixth parameter.
You might want to take advantage of the Algo-Prefix <$REGMATCHn> result of previous <regexpr> checks here.
Scan Results
- INI file entry.
