StartmenuItemByLink
Searches the start menus (user and global) for links calling a file of the given filename.
Usage
StartmenuItemByLink:[link contents],[(boolean)partial],<advanced file parameters>
Examples
Example: StartmenuItemByLink:"spyware.exe","1"
This will search the start menu for a link pointing to the file spyware.exe, adding both the link and the file to the results list.
Description
- Define the link target either complete, or partially, depending on the second parameter.
- Set partial in the second parameter to 1 if you don’t know the complete filename, else use 0.
- Use advanced file parameters to make sure the link points to the real malware file you're trying to locate.
You might want to use File instead, using the <$STARTMENU> or <$COMMONSTARTMENU> path templates, unless you depend on the link to find the actual file (in case it uses totally random names in totally random folders, for example).
