Difference between revisions of "IniValueRemove"

From SpybotWiki
Jump to: navigation, search
(Description)
Line 1: Line 1:
 
==Usage==
 
==Usage==
  IniValueRemove:[description],[filename],[section],[value],[data],[data to be removed],<advanced build parameters>
+
  IniValueRemove:<description>,<filename>,<section>,<value>,<data>,<data to be removed>],<advanced build parameters>
  
 
===Examples===
 
===Examples===
Line 19: Line 19:
  
 
You might want to take advantage of the [[AlgoPrefix|Algo-Prefix]] ''<$REGMATCHn>'' result of previous ''<regexpr>'' checks here.
 
You might want to take advantage of the [[AlgoPrefix|Algo-Prefix]] ''<$REGMATCHn>'' result of previous ''<regexpr>'' checks here.
 +
 +
===Scan Results===
 +
* INI file entry.
  
 
==See also==
 
==See also==
Line 35: Line 38:
  
 
[[Category:SBI Commands]]
 
[[Category:SBI Commands]]
[[Category:SBI Commands (current)]]
 

Revision as of 11:54, 18 February 2008

Usage

IniValueRemove:<description>,<filename>,<section>,<value>,,],<advanced build parameters>

Examples

IniValueRemove:"<$REG_AUTORUN>","<$WINDIR>\win.ini","windows","load","*","<$WINDIR>\badmalware.exe" 

This example removes just the reference to e.g. C:\Windows\badmalware.exe from the data, keeping other load entries intact.

Description

This command removes data from INI file content values; useful mostly in places where other data in the same value needs to be kept, thus the value cannot be removed completely.

  1. The first parameter is a standard description; either plaintext, or better a description template, since that allows localization when displaying results to the user.
  2. The second parameter describes the file; you may use path template here. PT
  3. The third parameter describes the section inside the INI file; Algo-Prefixes are allowed here. AP PT
  4. The fourth parameter describes the name of the value; Algo-Prefixes are allowed here. AP PT
  5. The fifth parameter identifies the data the value has to match. PT
  6. The sixth parameter finally defines the text that is to be removed. PT
  7. Optionally, you may use advanced build parameters in the seventh parameter.

You might want to take advantage of the Algo-Prefix <$REGMATCHn> result of previous <regexpr> checks here.

Scan Results

  • INI file entry.

See also

Similar commands

Similar advanced file parameters