Difference between revisions of "AutoRunByFilename"

From SpybotWiki
Jump to: navigation, search
(Description)
Line 9: Line 9:
  
 
===Description===
 
===Description===
This command is only to be used in rare cases where the autorun entry might be the only lead to a totally random directory name. It detects a Run value, much like [[AutoRun]], and also an associated directory. Again, you may specify [[Advanced file parameters|advanced file parameters]] to limit detection in case of ambigious filenames (which nearly all are, so make use of this)! You may also keep the directory parameter empty, but you may not obmit it. [[AlgoPrefix|Algo-Prefixes]] are supported only for the value name.
+
This command is only to be used in rare cases where the autorun entry might be the only lead to a totally random directory name. It detects a Run value, much like [[AutoRun]], and also an associated directory, but, contrary to [[AutoRunByFilename]], it checks the data which contains the target filenames.
 +
 
 +
# The first parameter describes the filename to find. [[AlgoPrefix|Algo-Prefixes]] are supported only here. {{AlgoPrefix}}
 +
# The second parameter means an additional folder that might get flagged if the run entry points to a file inside a folder of that name. You may also keep this directory parameter empty, but you may not obmit it.
 +
# You may specify [[Advanced file parameters|advanced file parameters]] to limit detection in case of ambigious value names (which nearly all are, so make use of this)!
  
 
==See also==
 
==See also==

Revision as of 16:14, 17 February 2008

This SBI command is outdated and will probably not be supported in Spybot-S&D 2.0. As of yet, it is unclear whether an automated conversion path exists. Automated conversion paths may also be less sufficient than a manual upgrade. We recommend that you take a look at AutoRun for a possible alternative command.

Searches for a registry run entry by the filename. If the directory parameter is set, a directory of the given name will be detected too, if the file resided inside it.

Usage

AutoRunByFilename:[Filename],[Directory],<advanced parameters>

Examples

AutoRunByFilename:"spyware.exe","","filesize=10,md5=7303F017FE369F9CE5AF630DA93BA867"

Description

This command is only to be used in rare cases where the autorun entry might be the only lead to a totally random directory name. It detects a Run value, much like AutoRun, and also an associated directory, but, contrary to AutoRunByFilename, it checks the data which contains the target filenames.

  1. The first parameter describes the filename to find. Algo-Prefixes are supported only here. AP
  2. The second parameter means an additional folder that might get flagged if the run entry points to a file inside a folder of that name. You may also keep this directory parameter empty, but you may not obmit it.
  3. You may specify advanced file parameters to limit detection in case of ambigious value names (which nearly all are, so make use of this)!

See also

Similar commands