User contributions for CCRDude

16 February 2008

• 16:3616:36, 16 February 2008 diff hist +825‎ N DownloadFile ‎ New page: Used to detect files in any folder specified inside the GUI as download folders. ==Usage== DownloadFile:[Filename],<advanced file parameters> ===Examples=== DownloadFile:"KeyLoggerSetu...
• 16:2916:29, 16 February 2008 diff hist +204‎ N Description templates ‎ New page: Description templates are a pre-defined set of templates that can be used to let the GUI use localized versions of standard malware object descriptions. ... TODO : list of description tem...
• 16:2716:27, 16 February 2008 diff hist +1,269‎ N Directory ‎ New page: ''Directory'' is the generic directly flagging command. ==Usage== Directory:[Description],[Directory name],<advanced directory parameters> ===Examples=== Directory:"<$DIR_PROG>","<$PRO...
• 16:2116:21, 16 February 2008 diff hist +3,399‎ N Path templates ‎ New page: Path templates allow you to specify file paths that are not static, but adjust to the localization and user names of the installation they're used on. It also allows you to scan more than ...
• 16:0416:04, 16 February 2008 diff hist +1,306‎ N DesktopIconByLink ‎ New page: {{Outdated SBI|File}} Searches all desktop icons for one linking to the given filename. ==Usage== DesktopIconByLink:<filename>,[(boolean)partial],<advanced parameters> ===Examples=== D...
• 15:1515:15, 16 February 2008 diff hist −4‎ SBI Commands ‎No edit summary
• 15:1515:15, 16 February 2008 diff hist +769‎ N False positive ‎ New page: False positives are scan results that flag good files as belonging to malware. ==Reasons== False positives usually happen because of ambiguous SBI Commands, e.g. missing or lax [[Adva...
• 15:0915:09, 16 February 2008 diff hist +1,430‎ N CodeStoreDB ‎ New page: {{Outdated SBI|RegyKey}} If the download of the spyware was done using ActiveX, information may be saved in the Code Store Database. This command identifies those database entries by the u...
• 15:0415:04, 16 February 2008 diff hist +196‎ Category:SBI Commands ‎No edit summary
• 15:0215:02, 16 February 2008 diff hist +310‎ N SBI Commands ‎ New page: SBI Commands are OpenSBI instructions, defined inside .sbi text files, that tell Spybot - Search & Destroy how it has to detect malware that you wish to be removed....
• 14:5814:58, 16 February 2008 diff hist +4‎ SBI file format ‎No edit summary
• 14:5814:58, 16 February 2008 diff hist +2,059‎ N SBI file format ‎ New page: SBI files are detection databases than can be used to tell Spybot - Search & Destroy where and how to look for malware. This document describes the OpenSBI format, which is a plain text f...
• 14:4814:48, 16 February 2008 diff hist +20‎ Category:SBI Commands ‎No edit summary
• 14:4714:47, 16 February 2008 diff hist −22‎ Category:SBI Commands supporting AlgoPrefix ‎No edit summary current
• 14:4714:47, 16 February 2008 diff hist +141‎ N Category:SBI Commands supporting AlgoPrefix ‎ New page: This is a list of SBI Commands that do support the AlgoPrefix method to match texts. Category:SBI Commands supporting AlgoPrefix
• 14:4614:46, 16 February 2008 diff hist +48‎ File ‎No edit summary
• 14:4614:46, 16 February 2008 diff hist +48‎ AutoRunByValue ‎No edit summary
• 14:4614:46, 16 February 2008 diff hist +48‎ AutoRunByFilename ‎No edit summary
• 14:4614:46, 16 February 2008 diff hist +48‎ AutoRun ‎No edit summary
• 14:4514:45, 16 February 2008 diff hist −15‎ Main Page ‎No edit summary
• 14:4114:41, 16 February 2008 diff hist +64‎ m CLSID ‎ →‎Description
• 14:4114:41, 16 February 2008 diff hist +1,153‎ N CLSID ‎ New page: Searches the registry for a class with the given name. ==Usage== CLSID:[class name],<filename,<advanced file parameters>> ===Examples=== CLSID:"Dummy Class" This easy example would de...
• 14:3514:35, 16 February 2008 diff hist +1,605‎ N BrowserHelper ‎ New page: The most common way spy- and adware links into Internet Explorer is creating a browser helper object. ==Usage== BrowserHelper:[name],<advanced file parameters> ===Examples=== BrowserHe...
• 14:2314:23, 16 February 2008 diff hist +1,317‎ N AlgoPrefix ‎ New page: Algo prefixes allow you to use various string matching algorithms to identif patterns of text. ==Examples== <wc>Hall? Welt <substr>Hallo <bool>Hallo OR Hello <bool>Hallo AND Welt <re...
• 14:1714:17, 16 February 2008 diff hist +11‎ AutoStart ‎ →‎Similar commands
• 14:1614:16, 16 February 2008 diff hist +21‎ AutoStart ‎ →‎See also
• 14:1614:16, 16 February 2008 diff hist +1,633‎ N AutoStart ‎ New page: This command searches the Autostart group inside the start menu for links. Also searches desktop and start menu root. ==Usage== AutoStart:[link name or name of file linked to],[directory...
• 14:0714:07, 16 February 2008 diff hist −1‎ AutoRunByValue ‎No edit summary
• 14:0714:07, 16 February 2008 diff hist +1,079‎ N AutoRunByFilename ‎ New page: {{Outdated SBI|AutoRun}} Searches for a registry run entry by the filename. If the directory parameter is set, a directory of the given name will be detected too, if the file resided insid...
• 14:0614:06, 16 February 2008 diff hist +16‎ AutoRunByValue ‎No edit summary
• 14:0414:04, 16 February 2008 diff hist +199‎ N Template:Bausteindesign1 ‎ New page: cellspacing="8" cellpadding="0" class="hintergrundfarbe1 rahmenfarbe1" style="width: 100%; font-size: 95%; border-bottom-style: solid; border-bottom-width:1px; margin-bottom: 1em; position... current
• 14:0414:04, 16 February 2008 diff hist +816‎ N Template:Outdated SBI ‎ New page: <div id="Vorlage_Korrekter_Titel"> {|{{Bausteindesign1}} | style="width: 25px; vertical-align: top; padding-top: 2px;" | | This SBI command is outdated and will probably not be supported ...
• 14:0114:01, 16 February 2008 diff hist −40‎ AppID ‎No edit summary
• 14:0114:01, 16 February 2008 diff hist −55‎ AutoRunByValue ‎No edit summary
• 13:5713:57, 16 February 2008 diff hist −6‎ AppID ‎No edit summary
• 13:5713:57, 16 February 2008 diff hist +1,353‎ N AutoRunByValue ‎ New page: {{Veraltertes SBI|AutoRunByValue|AutoRun}} Searches for a registry run entry by the registry value name. If the directory parameter is set, a directory of the given name will be detected ...
• 13:4413:44, 16 February 2008 diff hist +1,397‎ N AutoRun ‎ New page: Autorun helps you detect registrx autorun settings. ==Usage== AutoRun:[value],[filename data],<advanced file parameters> ===Examples=== AutoRun:"AdRoarUpdate","<$WINDIR>\ARUpdate.exe",...
• 13:4213:42, 16 February 2008 diff hist +61‎ File ‎No edit summary
• 13:3613:36, 16 February 2008 diff hist +36‎ NoOp ‎No edit summary
• 13:3613:36, 16 February 2008 diff hist +36‎ File ‎No edit summary
• 13:3613:36, 16 February 2008 diff hist +26‎ AppID ‎No edit summary
• 13:3513:35, 16 February 2008 diff hist +25‎ N Category:SBI Commands (outdated) ‎ New page: Category:SBI Commands current
• 13:3513:35, 16 February 2008 diff hist +494‎ N AppID ‎ New page: {{Veraltertes SBI|AppID|RegyKey}} Searches for an application ID inside the registry. ==Usage== Format: AppID:<Key name>,<Value name> ===Examples=== AppID:"CNForm.EXE","CNForm" This ...
• 13:2913:29, 16 February 2008 diff hist +2‎ File ‎No edit summary
• 13:2913:29, 16 February 2008 diff hist +2‎ NoOp ‎No edit summary
• 13:2613:26, 16 February 2008 diff hist +863‎ N NoOp ‎ New page: ''NoOp'' is the short form of ''No Operation'' and is a simple command that does not anything to the results list, but can assist as a blind helper for some operations, since it understand...
• 13:2513:25, 16 February 2008 diff hist 0‎ File ‎No edit summary
• 13:1613:16, 16 February 2008 diff hist +119‎ N Category:SBI Commands ‎ New page: This category contains links to all commands than can be used in an SBI (Spybot-S&D Include, file extension .sbi) file.
• 12:4012:40, 16 February 2008 diff hist +2,200‎ N File ‎ New page: ''File'' is the regular command to detect any files on your system. ==Usage== File:"Description","Filepath & Filename","advanced file parameters" ===Examples=== File:"<$FILE_DATA>","C:...
• 12:0412:04, 16 February 2008 diff hist +449‎ N Main Page ‎No edit summary