ModuleUsage

From SpybotWiki
Revision as of 16:22, 22 February 2008 by CCRDude (talk | contribs) (Usage: added var types)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search
ModuleUsage
Group Registry
Main Application Version 1.3 or later
Required Update n/a
File Parameters no
Registry Parameters no
Build Parameters yes (second)
Special Parameters no

Searches for the Windows module usage setting for a special file.

Usage

ModuleUsage:<partialmodulename(string)>[,advanced build parameters]

Examples

ModuleUsage:"spyware/spyware.dll"

This will detect the following key:

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/SYSTEM/spyware.dll]

Description

  1. The first parameter can be any part of the whole key name, but should be descriptive. Algo-Prefixes will be supported after 1.5.2. AP PT
  2. The second parameter may contain advanced build parameters.

This command will also detect a CodeStoreDB if it is linked inside this entry. Please remember the keyname contains slashes, not backslashes!

Scan results

  • The actually ModuleUsage registry key.
  • The associated registry key for distributed program files (see CodeStoreDB), if existing.

See also

Similar commands