Difference between revisions of "StartmenuItem"

From SpybotWiki
Jump to: navigation, search
(added info box, fixes usage)
m (Usage: fixed var names)
 
Line 12: Line 12:
  
 
==Usage==
 
==Usage==
  StartmenuItem:<link name(string)>,<file name(sring)>[,advanced file parameters]
+
  StartmenuItem:<linkname(string)>,<filename(string)>[,advanced file parameters]
  
 
===Examples===
 
===Examples===

Latest revision as of 16:39, 22 February 2008

StartmenuItem
Group Files
Main Application Version 1.3 or later
Required Update n/a
File Parameters yes (third)
Registry Parameters no
Build Parameters yes (third)
Special Parameters no

Searches the start menu items for one linking to the given filename.

Usage

StartmenuItem:<linkname(string)>,<filename(string)>[,advanced file parameters]

Examples

StartmenuItem:"Our malware online.lnk","<$PROGRAMFILES>\OurMalware\Malware Online.url" 

Description

  1. The name of the link file to detect, no path involved, Algo-Prefixes allowed. AP
  2. The name of the file the link needs to point to, Algo-Prefixes and path templates allowed. AP PT
  3. You should specify advanced file parameters as the third parameter to limit the detection by real file properties, since file names only can be quite ambiguous.

You might want to use File instead, using the <$STARTMENU> or <$COMMONSTARTMENU> path templates, combined with the path template <$DESKTOP> and the advanced file parameter target[link], unless you depend on the link to find the actual file (in case it uses totally random names in totally random folders, for example).

Scan Results

  • The link file.

See also

Similar commands