Difference between revisions of "IniValueRemove"
(→Description) |
|||
Line 1: | Line 1: | ||
==Usage== | ==Usage== | ||
− | IniValueRemove: | + | IniValueRemove:<description>,<filename>,<section>,<value>,<data>,<data to be removed>],<advanced build parameters> |
===Examples=== | ===Examples=== | ||
Line 19: | Line 19: | ||
You might want to take advantage of the [[AlgoPrefix|Algo-Prefix]] ''<$REGMATCHn>'' result of previous ''<regexpr>'' checks here. | You might want to take advantage of the [[AlgoPrefix|Algo-Prefix]] ''<$REGMATCHn>'' result of previous ''<regexpr>'' checks here. | ||
+ | |||
+ | ===Scan Results=== | ||
+ | * INI file entry. | ||
==See also== | ==See also== | ||
Line 35: | Line 38: | ||
[[Category:SBI Commands]] | [[Category:SBI Commands]] | ||
− |
Revision as of 11:54, 18 February 2008
Contents
Usage
IniValueRemove:<description>,<filename>,<section>,<value>,,],<advanced build parameters>
Examples
IniValueRemove:"<$REG_AUTORUN>","<$WINDIR>\win.ini","windows","load","*","<$WINDIR>\badmalware.exe"
This example removes just the reference to e.g. C:\Windows\badmalware.exe from the data, keeping other load entries intact.
Description
This command removes data from INI file content values; useful mostly in places where other data in the same value needs to be kept, thus the value cannot be removed completely.
- The first parameter is a standard description; either plaintext, or better a description template, since that allows localization when displaying results to the user.
- The second parameter describes the file; you may use path template here. PT
- The third parameter describes the section inside the INI file; Algo-Prefixes are allowed here. AP PT
- The fourth parameter describes the name of the value; Algo-Prefixes are allowed here. AP PT
- The fifth parameter identifies the data the value has to match. PT
- The sixth parameter finally defines the text that is to be removed. PT
- Optionally, you may use advanced build parameters in the seventh parameter.
You might want to take advantage of the Algo-Prefix <$REGMATCHn> result of previous <regexpr> checks here.
Scan Results
- INI file entry.