From SpybotWiki
Jump to: navigation, search
Group Registry
Main Application Version 1.4 or later
1.5.3 for adv. file
Required Update n/a
File Parameters yes (sixth)
Registry Parameters no
Build Parameters yes (fifth)
Special Parameters value=data

Looks wether the given registry value has another value then the given one.


RegyChange:<description(string)>,<rootkey(enum)>,<keypath(string)>,<value=data>[,advanced build parameters[,advanced file parameters]]


RegyChange:"Folder history",HKEY_CURRENT_USER,"\Software\Microsoft\Internet Explorer\Main\","Save Directory="

Empties the registry value Save Directory.


This command checks whether a specified value has known data, to be able to correct that data back to the known one should it have been changed.

  1. First, a description. Using a description template instead of plain text is recommended so that the user will receive a localized version.
  2. The root key, where HKEY_CURRENT_USER stands for all users actually, and HKEY_LOCAL_MACHINE covers both 32 and 64 bit where applicable, so no Wow6432Node subkey is required.
  3. The path to the value, starting with a backslash. AP PT
  4. An entry that is used to assign new data to a value. You can use a simple value=newdata; or for numeric values, value=dword:0815 (or value=W=0815 in short). Binary is possible as well (value=B=0011). Algo-Prefixes are allowed for both value name and text data here. AP
  5. This field supports advanced build parameters. Verifiers are not supported, since the change code conflicts with the verification code currently.
  6. Starting with 1.5.3, advanced file parameters for Flow Control can be specified. PT

You should keep in mind that even system registry values may differ between Windows versions.

Scan Results

  • A special result that allows to change the value back to the known data upon fixing.

See also

Similar commands