ModuleUsage

From SpybotWiki
Revision as of 12:25, 18 February 2008 by CCRDude (talk | contribs)
Jump to: navigation, search

Searches for the Windows module usage setting for a special file.

Usage

ModuleUsage:<part of name of module>[,advanced build parameters]

Examples

ModuleUsage:"spyware/spyware.dll"

This will detect the following key:

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/SYSTEM/spyware.dll]

Description

  1. The first parameter can be any part of the whole key name, but should be descriptive. Algo-Prefixes will be supported after 1.5.2. AP PT
  2. The second parameter may contain advanced build parameters.

This command will also detect a CodeStoreDB if it is linked inside this entry. Please remember the keyname contains slashes, not backslashes!

Scan results

  • The actually ModuleUsage registry key.
  • The associated registry key for distributed program files (see CodeStoreDB), if existing.

See also

Similar commands