StartmenuItem
| StartmenuItem | |
| Group | Files |
| Main Application | Version 1.3 or later |
| Required Update | n/a |
| File Parameters | yes (third) |
| Registry Parameters | no |
| Build Parameters | yes (third) |
| Special Parameters | no |
Searches the start menu items for one linking to the given filename.
Usage
StartmenuItem:<linkname(string)>,<filename(string)>[,advanced file parameters]
Examples
StartmenuItem:"Our malware online.lnk","<$PROGRAMFILES>\OurMalware\Malware Online.url"
Description
- The name of the link file to detect, no path involved, Algo-Prefixes allowed. AP
- The name of the file the link needs to point to, Algo-Prefixes and path templates allowed. AP PT
- You should specify advanced file parameters as the third parameter to limit the detection by real file properties, since file names only can be quite ambiguous.
You might want to use File instead, using the <$STARTMENU> or <$COMMONSTARTMENU> path templates, combined with the path template <$DESKTOP> and the advanced file parameter target[link], unless you depend on the link to find the actual file (in case it uses totally random names in totally random folders, for example).
Scan Results
- The link file.
