Difference between revisions of "RegyValue"

From SpybotWiki
Jump to: navigation, search
(added info box)
(Usage: added var types, updated example)
Line 12: Line 12:
  
 
==Usage==
 
==Usage==
  RegyValue:<description>,<rootkey>,<keypath>,<key>[,advanced registry parameters]
+
  RegyValue:<description(string)>,<rootkey(enum)>,<keypath(string)>,<value(string)>[,advanced registry parameters]
  
 
===Examples===
 
===Examples===
  RegyValue:"Settings",HKEY_LOCAL_MACHINE,"\Software\Microsoft\Windows\CurrentVersion\","HidingSpywareValue"
+
  RegyValue:"<$REG_SETTINGS>",HKEY_LOCAL_MACHINE,"\Software\Microsoft\Windows\CurrentVersion\","HidingSpywareValue"
  
 
===Description===
 
===Description===

Revision as of 16:37, 22 February 2008

RegyValue
Group Registry
Main Application Version 0.95 or later
Required Update n/a
File Parameters no
Registry Parameters yes (fifth)
Build Parameters yes (fifth)
Special Parameters no

Searches for the defined registry value and adds it to the results list, if found.

Usage

RegyValue:<description(string)>,<rootkey(enum)>,<keypath(string)>,<value(string)>[,advanced registry parameters]

Examples

RegyValue:"<$REG_SETTINGS>",HKEY_LOCAL_MACHINE,"\Software\Microsoft\Windows\CurrentVersion\","HidingSpywareValue"

Description

Detects a registry value and flags it for removal.

  1. First, a description. Using a description template instead of plain text is recommended so that the user will receive a localized version.
  2. The root key, where HKEY_CURRENT_USER stands for all users actually.
  3. The path to the value, starting with a backslash. PT
  4. The name of the value to detect. You may use a Algo-Prefix here. AP PT
  5. To refine detection, you can use advanced registry parameters to check the actual data of the value. You may use Algo-Prefixes here. AP PT

Scan Results

  • The identified registry value(s).

See also

Similar commands