home *** CD-ROM | disk | FTP | other *** search
/ PC Format (PL) 2015 February / PC_Format_022015.iso / Użytkowe / CCleaner 5.0 / ccsetup500.exe / CCleaner64.exe / 1033 / INI / 273 < prev   
Text File  |  2014-11-21  |  172KB  |  4,362 lines
  1. ; CCleaner - Application Cleaning file
  2.  
  3. [Global]
  4. Revision=2147
  5. NextIDValue=2407
  6.  
  7. ;
  8. ; WARNING - DO NOT EDIT THIS FILE
  9. ; If you would like to create custom entries then create a new file
  10. ; called winapp2.ini which follows the same format as this one.
  11. ; CCleaner will automatically pick up the new file.
  12. ;
  13. ; Copyright ⌐2004-2014 Piriform Ltd, All Rights Reserved.
  14. ; This file and it's contents may not be copied or distributed
  15. ; without the express permission of the author.
  16. ;
  17. ; Notes
  18. ; ---------------------------------------
  19. ; LangSecRef
  20. ;  3021 = Applications
  21. ;  3022 = Internet
  22. ;  3023 = Multimedia
  23. ;  3024 = Utilities
  24. ;  3025 = Windows
  25. ;  3026 = Firefox/Mozilla
  26. ;  3027 = Opera
  27. ;  3028 = Safari
  28. ;  3029 = Google Chrome
  29. ;  3030 = Thunderbird
  30. ;  3031 = Windows Store
  31.  
  32. [Mozilla - Internet Cache]
  33. ID=2001
  34. LangSecRef=3026
  35. LangRef=3161
  36. Default=True
  37. SpecialDetect=DET_MOZILLA
  38. SpecialKey1=N_MOZ_CACHE
  39.  
  40. [Mozilla - Internet History]
  41. ID=2002
  42. LangSecRef=3026
  43. LangRef=3162
  44. Default=True
  45. SpecialDetect=DET_MOZILLA
  46. SpecialKey1=N_MOZ_HISTORY
  47.  
  48. [Mozilla - Download History]
  49. ID=2003
  50. LangSecRef=3026
  51. LangRef=3163
  52. Default=True
  53. SpecialDetect=DET_MOZILLA
  54. SpecialKey1=N_MOZ_DOWNLOAD
  55.  
  56. [Mozilla - Cookies]
  57. ID=2004
  58. LangSecRef=3026
  59. LangRef=3102
  60. Default=True
  61. SpecialDetect=DET_MOZILLA
  62. SpecialKey1=N_MOZ_COOKIES
  63.  
  64. [Mozilla - Saved Form Information]
  65. ID=2005
  66. LangSecRef=3026
  67. LangRef=3164
  68. Default=False
  69. SpecialDetect=DET_MOZILLA
  70. SpecialKey1=N_MOZ_FORM
  71.  
  72. [Mozilla - Saved Passwords]
  73. ID=2181
  74. LangSecRef=3026
  75. LangRef=3109
  76. WarningRef=3202
  77. SpecialDetect=DET_MOZILLA
  78. SpecialKey1=N_MOZ_PASSWORD
  79.  
  80. [Mozilla - Session]
  81. ID=2153
  82. LangSecRef=3026
  83. LangRef=3167
  84. Default=True
  85. SpecialDetect=DET_MOZILLA
  86. SpecialKey1=N_MOZ_SESSION
  87.  
  88. [Mozilla - Site Preferences]
  89. ID=2222
  90. LangSecRef=3026
  91. LangRef=3168
  92. Default=False
  93. SpecialDetect=DET_MOZILLA
  94. SpecialKey1=N_MOZ_SITE_PREFERENCES
  95.  
  96. [Mozilla - Compact Databases]
  97. ID=2146
  98. LangSecRef=3026
  99. LangRef=3165
  100. Default=False
  101. SpecialDetect=DET_MOZILLA
  102. SpecialKey1=N_MOZ_COMPACT_DATABASES
  103.  
  104. [Thunderbird - Internet Cache]
  105. ID=2297
  106. LangSecRef=3030
  107. LangRef=3161
  108. Default=True
  109. SpecialDetect=DET_THUNDERBIRD
  110. SpecialKey1=N_THUNDERBIRD_CACHE
  111.  
  112. [Thunderbird - Internet History]
  113. ID=2298
  114. LangSecRef=3030
  115. LangRef=3162
  116. Default=True
  117. SpecialDetect=DET_THUNDERBIRD
  118. SpecialKey1=N_THUNDERBIRD_HISTORY
  119.  
  120. [Thunderbird - Download History]
  121. ID=2299
  122. LangSecRef=3030
  123. LangRef=3163
  124. Default=True
  125. SpecialDetect=DET_THUNDERBIRD
  126. SpecialKey1=N_THUNDERBIRD_DOWNLOAD
  127.  
  128. [Thunderbird - Cookies]
  129. ID=2300
  130. LangSecRef=3030
  131. LangRef=3102
  132. Default=True
  133. SpecialDetect=DET_THUNDERBIRD
  134. SpecialKey1=N_THUNDERBIRD_COOKIES
  135.  
  136. [Thunderbird - Saved Form Information]
  137. ID=2301
  138. LangSecRef=3030
  139. LangRef=3164
  140. Default=False
  141. SpecialDetect=DET_THUNDERBIRD
  142. SpecialKey1=N_THUNDERBIRD_FORM
  143.  
  144. [Thunderbird - Saved Passwords]
  145. ID=2302
  146. LangSecRef=3030
  147. LangRef=3109
  148. WarningRef=3202
  149. SpecialDetect=DET_THUNDERBIRD
  150. SpecialKey1=N_THUNDERBIRD_PASSWORD
  151.  
  152. [Thunderbird - Session]
  153. ID=2303
  154. LangSecRef=3030
  155. LangRef=3167
  156. Default=True
  157. SpecialDetect=DET_THUNDERBIRD
  158. SpecialKey1=N_THUNDERBIRD_SESSION
  159.  
  160. [Thunderbird - Site Preferences]
  161. ID=2304
  162. LangSecRef=3030
  163. LangRef=3168
  164. Default=False
  165. SpecialDetect=DET_THUNDERBIRD
  166. SpecialKey1=N_THUNDERBIRD_SITE_PREFERENCES
  167.  
  168. [Thunderbird - Compact Databases]
  169. ID=2305
  170. LangSecRef=3030
  171. LangRef=3165
  172. Default=False
  173. SpecialDetect=DET_THUNDERBIRD
  174. SpecialKey1=N_THUNDERBIRD_COMPACT_DATABASES
  175.  
  176. [Opera - Internet Cache]
  177. ID=2006
  178. LangSecRef=3027
  179. LangRef=3161
  180. Default=True
  181. SpecialDetect=DET_OPERA
  182. SpecialKey1=N_OPERA_CACHE
  183.  
  184. [Opera - Internet History]
  185. ID=2007
  186. LangSecRef=3027
  187. LangRef=3162
  188. Default=True
  189. SpecialDetect=DET_OPERA
  190. SpecialKey1=N_OPERA_HISTORY
  191.  
  192. [Opera - Cookies]
  193. ID=2008
  194. LangSecRef=3027
  195. LangRef=3102
  196. Default=True
  197. SpecialDetect=DET_OPERA
  198. SpecialKey1=N_OPERA_COOKIES
  199.  
  200. [Opera - Download History]
  201. ID=2342
  202. LangSecRef=3027
  203. LangRef=3163
  204. Default=True
  205. SpecialDetect=DET_OPERA
  206. SpecialKey1=N_OPERA_DOWNLOAD
  207.  
  208. [Opera - Recently Typed URLs]
  209. ID=2224
  210. LangSecRef=3027
  211. LangRef=3104
  212. Default=True
  213. SpecialDetect=DET_OPERA
  214. SpecialKey1=N_OPERA_RECENTLY_TYPED_URLS
  215.  
  216. [Opera - Last Download Location]
  217. ID=2223
  218. LangSecRef=3027
  219. LangRef=3108
  220. Default=True
  221. SpecialDetect=DET_OPERA
  222. SpecialKey1=N_OPERA_LAST_DOWNLOAD_LOCATION
  223.  
  224. [Opera - Saved Passwords]
  225. ID=2182
  226. LangSecRef=3027
  227. LangRef=3109
  228. WarningRef=3202
  229. SpecialDetect=DET_OPERA
  230. SpecialKey1=N_OPERA_PASSWORD
  231.  
  232. [Opera - Session]
  233. ID=2225
  234. LangSecRef=3027
  235. LangRef=3167
  236. Default=True
  237. SpecialDetect=DET_OPERA
  238. SpecialKey1=N_OPERA_SESSION
  239.  
  240. [Opera - Saved Form Information]
  241. ID=2343
  242. LangSecRef=3027
  243. LangRef=3164
  244. Default=False
  245. SpecialDetect=DET_OPERA
  246. SpecialKey1=N_OPERA_FORM
  247.  
  248. [Opera - Website Icons]
  249. ID=2149
  250. LangSecRef=3027
  251. LangRef=3166
  252. Default=True
  253. SpecialDetect=DET_OPERA
  254. SpecialKey1=N_OPERA_WEBSITE_ICONS
  255.  
  256. [Opera - Compact Databases]
  257. ID=2344
  258. LangSecRef=3027
  259. LangRef=3165
  260. Default=False
  261. SpecialDetect=DET_OPERA
  262. SpecialKey1=N_OPERA_COMPACT_DATABASES
  263.  
  264. [Safari - Internet Cache]
  265. ID=2009
  266. LangSecRef=3028
  267. LangRef=3161
  268. Default=True
  269. DetectFile=%ProgramFiles%\Safari\Safari.exe
  270. FileKey1=%localappdata%\Apple Computer\Safari|Cache.db
  271.  
  272. [Safari - Internet History]
  273. ID=2010
  274. LangSecRef=3028
  275. LangRef=3162
  276. Default=True
  277. DetectFile=%ProgramFiles%\Safari\Safari.exe
  278. FileKey1=%appdata%\Apple Computer\Safari|History.plist
  279. FileKey2=%appdata%\Apple Computer\Safari|LastSession.plist
  280. FileKey3=%appdata%\Apple Computer\Safari|TopSites.plist
  281. FileKey4=%appdata%\Apple Computer\Safari|Downloads.plist
  282. FileKey5=%localappdata%\Apple Computer\Safari\History|*.*
  283. FileKey6=%localappdata%\Apple Computer\Safari\Webpage Previews|*.*|RECURSE
  284. SpecialKey1=N_SAFARI_HISTORY
  285.  
  286. [Safari - Cookies]
  287. ID=2011
  288. LangSecRef=3028
  289. LangRef=3102
  290. Default=True
  291. DetectFile=%ProgramFiles%\Safari\Safari.exe
  292. SpecialKey1=N_SAFARI_COOKIES
  293.  
  294. [Safari - Saved Form Information]
  295. ID=2012
  296. LangSecRef=3028
  297. LangRef=3164
  298. Default=False
  299. DetectFile=%ProgramFiles%\Safari\Safari.exe
  300. FileKey1=%appdata%\Apple Computer\Safari|Form Values.plist
  301.  
  302. [Safari - Saved Passwords]
  303. ID=2183
  304. LangSecRef=3028
  305. LangRef=3109
  306. WarningRef=3202
  307. SpecialDetect=DET_SAFARI_PASSWORD
  308. SpecialKey1=N_SAFARI_PASSWORD
  309.  
  310. [Google Chrome - Internet Cache]
  311. ID=2013
  312. LangSecRef=3029
  313. LangRef=3161
  314. Default=True
  315. SpecialDetect=DET_CHROME
  316. SpecialKey1=N_CHROME_CACHE
  317.  
  318. [Google Chrome - Internet History]
  319. ID=2014
  320. LangSecRef=3029
  321. LangRef=3162
  322. Section = Chrome
  323. Default=True
  324. SpecialDetect=DET_CHROME
  325. SpecialKey1=N_CHROME_HISTORY
  326.  
  327. [Google Chrome - Download History]
  328. ID=2015
  329. LangSecRef=3029
  330. LangRef=3163
  331. Default=True
  332. SpecialDetect=DET_CHROME
  333. SpecialKey1=N_CHROME_DOWNLOAD
  334.  
  335. [Google Chrome - Last Download Location]
  336. ID=2345
  337. LangSecRef=3029
  338. LangRef=3108
  339. Default=True
  340. SpecialDetect=DET_CHROME
  341. SpecialKey1=N_CHROME_LAST_DOWNLOAD_LOCATION
  342.  
  343. [Google Chrome - Cookies]
  344. ID=2016
  345. LangSecRef=3029
  346. LangRef=3102
  347. Default=True
  348. SpecialDetect=DET_CHROME
  349. SpecialKey1=N_CHROME_COOKIES
  350.  
  351. [Google Chrome - Saved Form Information]
  352. ID=2017
  353. LangSecRef=3029
  354. LangRef=3164
  355. Default=False
  356. SpecialDetect=DET_CHROME
  357. SpecialKey1=N_CHROME_FORM
  358.  
  359. [Google Chrome - Saved Passwords]
  360. ID=2184
  361. LangSecRef=3029
  362. LangRef=3109
  363. WarningRef=3202
  364. Default=False
  365. SpecialDetect=DET_CHROME
  366. SpecialKey1=N_CHROME_PASSWORD
  367.  
  368. [Google Chrome - Session]
  369. ID=2152
  370. LangSecRef=3029
  371. LangRef=3167
  372. Default=True
  373. SpecialDetect=DET_CHROME
  374. SpecialKey1=N_CHROME_SESSION
  375.  
  376. [Google Chrome - Compact Databases]
  377. ID=2147
  378. LangSecRef=3029
  379. LangRef=3165
  380. Default=False
  381. SpecialDetect=DET_CHROME
  382. SpecialKey1=N_CHROME_COMPACT_DATABASES
  383.  
  384. [Adobe Acrobat Reader 5.0]
  385. ID=2018
  386. LangSecRef=3021
  387. Detect=HKCU\Software\Adobe\Acrobat Reader\5.0\AVGeneral\cRecentFiles
  388. Default=True
  389. RegKey1=HKCU\Software\Adobe\Acrobat Reader\5.0\AVGeneral\cRecentFiles
  390.  
  391. [Adobe Acrobat Reader 6.0]
  392. ID=2019
  393. LangSecRef=3021
  394. Detect=HKCU\Software\Adobe\Acrobat Reader\6.0\AVGeneral
  395. Default=True
  396. RegKey1=HKCU\Software\Adobe\Acrobat Reader\6.0\AVGeneral\cRecentFiles
  397.  
  398. [Adobe Acrobat Reader 7.0]
  399. ID=2020
  400. LangSecRef=3021
  401. Detect=HKCU\Software\Adobe\Acrobat Reader\7.0\AVGeneral
  402. Default=True
  403. RegKey1=HKCU\Software\Adobe\Acrobat Reader\7.0\AVGeneral\cRecentFiles
  404. FileKey1=%localappdata%\Adobe\Acrobat\7.0\Cache\Search70|*.*
  405. FileKey2=%ProgramFiles%\Adobe\Acrobat 7.0\Reader|*.bak
  406. FileKey3=%ProgramFiles%\Adobe\Acrobat 7.0\ActiveX|*.bak
  407. FileKey4=%ProgramFiles%\Adobe\Acrobat 7.0\Reader\plug_ins|*.bak
  408. FileKey5=%ProgramFiles%\Adobe\Acrobat 7.0\Reader\Updater|*.bak
  409.  
  410. [Adobe Reader 8.0]
  411. ID=2021
  412. LangSecRef=3021
  413. Detect=HKCU\Software\Adobe\Acrobat Reader\8.0
  414. Default=True
  415. RegKey1=HKCU\Software\Adobe\Acrobat Reader\8.0\AVGeneral\cRecentFiles
  416. FileKey1=%localappdata%\Adobe\Acrobat\8.0\Cache\Search80|*.*
  417.  
  418. [Adobe Reader 9.0]
  419. ID=2137
  420. LangSecRef=3021
  421. Detect=HKCU\Software\Adobe\Acrobat Reader\9.0
  422. Default=True
  423. RegKey1=HKCU\Software\Adobe\Acrobat Reader\9.0\AVGeneral\cRecentFiles
  424. FileKey1=%LocalAppData%\Adobe\Acrobat\9.0\Cache\Search|*.*
  425. FileKey2=%LocalLowAppData%\Adobe\Acrobat\9.0\Search|*.*
  426.  
  427. [Adobe Reader 10.0]
  428. ID=2176
  429. LangSecRef=3021
  430. Detect=HKCU\Software\Adobe\Acrobat Reader\10.0
  431. Default=True
  432. RegKey1=HKCU\Software\Adobe\Acrobat Reader\10.0\AVGeneral\cRecentFiles
  433. FileKey1=%LocalAppData%\Adobe\Acrobat\10.0\Cache\Search|*.*
  434. FileKey2=%LocalLowAppData%\Adobe\Acrobat\10.0\Search|*.*
  435.  
  436. [Adobe Reader 11.0]
  437. ID=2317
  438. LangSecRef=3021
  439. Detect=HKCU\Software\Adobe\Acrobat Reader\11.0
  440. Default=True
  441. RegKey1=HKCU\Software\Adobe\Acrobat Reader\11.0\AVGeneral\cRecentFiles
  442. FileKey1=%LocalAppData%\Adobe\Acrobat\11.0\Cache\Search|*.*
  443. FileKey2=%LocalLowAppData%\Adobe\Acrobat\11.0\Search|*.*
  444.  
  445. [Adobe Acrobat 8.0]
  446. ID=2022
  447. LangSecRef=3021
  448. Detect=HKCU\Software\Adobe\Adobe Acrobat\8.0
  449. Default=True
  450. RegKey1=HKCU\Software\Adobe\Adobe Acrobat\8.0\AVGeneral\cRecentFiles
  451. FileKey1=%localappdata%\Adobe\Acrobat\8.0\Cache\Search80|*.*
  452.  
  453. [Adobe Acrobat 9.0]
  454. ID=2185
  455. LangSecRef=3021
  456. Detect=HKCU\Software\Adobe\Adobe Acrobat\9.0
  457. Default=True
  458. RegKey1=HKCU\Software\Adobe\Adobe Acrobat\9.0\AVGeneral\cRecentFiles
  459. FileKey1=%LocalAppData%\Adobe\Acrobat\9.0\Cache\Search|*.*
  460. FileKey2=%LocalLowAppData%\Adobe\Acrobat\9.0\Search|*.*
  461. FileKey3=%LocalAppData%\Adobe\Acrobat\9.0\Cache|*.lst
  462.  
  463. [Adobe Acrobat 10.0]
  464. ID=2186
  465. LangSecRef=3021
  466. Detect=HKCU\Software\Adobe\Adobe Acrobat\10.0
  467. Default=True
  468. RegKey1=HKCU\Software\Adobe\Adobe Acrobat\10.0\AVGeneral\cRecentFiles
  469. FileKey1=%LocalAppData%\Adobe\Acrobat\10.0\Cache\Search|*.*
  470. FileKey2=%LocalLowAppData%\Adobe\Acrobat\10.0\Search|*.*
  471. FileKey3=%LocalAppData%\Adobe\Acrobat\10.0\Cache|*.lst
  472.  
  473. [Adobe Acrobat XI]
  474. ID=2326
  475. LangSecRef=3021
  476. Detect=HKCU\Software\Adobe\Adobe Acrobat\11.0
  477. Default=True
  478. RegKey1=HKCU\Software\Adobe\Adobe Acrobat\11.0\AVGeneral\cRecentFiles
  479. RegKey2=HKCU\Software\Adobe\Adobe Acrobat\11.0\CompoundDocs\cStoredBinder
  480. FileKey1=%LocalAppData%\Adobe\Acrobat\11.0\Cache\|*.*
  481. FileKey2=%LocalLowAppData%\Adobe\Acrobat\11.0\Search|*.*
  482.  
  483. [Adobe ImageReady 7.0]
  484. ID=2023
  485. LangSecRef=3021
  486. Default=True
  487. Detect=HKCU\Software\Adobe\ImageReady 7.0
  488. RegKey1=HKCU\Software\Adobe\ImageReady 7.0\Preferences\URLHistory
  489. RegKey2=HKCU\Software\Adobe\ImageReady 7.0\Preferences|SaveDir
  490. RegKey3=HKCU\Software\Adobe\ImageReady 7.0\Preferences\RecentFiles
  491.  
  492. [Adobe ImageReady CS]
  493. ID=2154
  494. LangSecRef=3021
  495. Detect=HKCU\Software\Adobe\ImageReady 8.0
  496. Default=True
  497. RegKey1=HKCU\Software\Adobe\ImageReady 8.0\Preferences\URLHistory
  498. RegKey2=HKCU\Software\Adobe\ImageReady 8.0\Preferences|SaveDir
  499. RegKey3=HKCU\Software\Adobe\ImageReady 8.0\Preferences\RecentFiles
  500.  
  501. [Adobe Photoshop 6.0]
  502. ID=2024
  503. LangSecRef=3021
  504. Default=True
  505. Detect=HKCU\Software\Adobe\Photoshop\6.0
  506. RegKey1=HKCU\Software\Adobe\Photoshop\6.0\VisitedDirs
  507.  
  508. [Adobe Photoshop 7.0]
  509. ID=2025
  510. LangSecRef=3021
  511. Default=True
  512. Detect=HKCU\Software\Adobe\Photoshop\7.0
  513. RegKey1=HKCU\Software\Adobe\Photoshop\7.0\VisitedDirs
  514.  
  515. [Adobe Photoshop CS]
  516. ID=2026
  517. LangSecRef=3021
  518. Default=True
  519. Detect=HKCU\Software\Adobe\Photoshop\8.0
  520. RegKey1=HKCU\Software\Adobe\Photoshop\8.0\VisitedDirs
  521.  
  522. [Adobe Photoshop CS2]
  523. ID=2027
  524. LangSecRef=3021
  525. Detect=HKCU\Software\Adobe\Photoshop\9.0
  526. Default=True
  527. RegKey1=HKCU\Software\Adobe\Photoshop\9.0\VisitedDirs
  528. RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList
  529. FileKey1=%appdata%\Adobe\CameraRaw\Cache|*.*
  530.  
  531. [Adobe Photoshop CS3]
  532. ID=2139
  533. LangSecRef=3021
  534. Detect=HKCU\Software\Adobe\Photoshop\10.0
  535. Default=True
  536. RegKey1=HKCU\Software\Adobe\Photoshop\10.0\VisitedDirs
  537. RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList
  538.  
  539. [Adobe Photoshop CS4]
  540. ID=2140
  541. LangSecRef=3021
  542. Detect=HKCU\Software\Adobe\Photoshop\11.0
  543. Default=True
  544. RegKey1=HKCU\Software\Adobe\Photoshop\11.0\VisitedDirs
  545. RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList
  546.  
  547. [Adobe Photoshop CS5]
  548. ID=2156
  549. LangSecRef=3021
  550. Detect=HKCU\Software\Adobe\Photoshop\12.0
  551. Default=True
  552. RegKey1=HKCU\Software\Adobe\Photoshop\12.0\VisitedDirs
  553. RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList
  554.  
  555. [Adobe Photoshop CS6]
  556. ID=2323
  557. LangSecRef=3021
  558. Detect=HKCU\Software\Adobe\Photoshop\60.0
  559. Default=True
  560. RegKey1=HKCU\Software\Adobe\Photoshop\60.0\VisitedDirs
  561. RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList
  562.  
  563. [Adobe Photoshop Elements 12]
  564. ID=2367
  565. LangSecRef=3021
  566. Detect=HKCU\Software\Adobe\Photoshop Elements\12.0
  567. Default=True
  568. RegKey1=HKCU\Software\Adobe\Elements Organizer\12.0\CurrentMediaFilePath
  569. RegKey2=HKCU\Software\Adobe\Photoshop Elements\12.0\CurrentMediaFilePath
  570. RegKey3=HKCU\Software\Adobe\Photoshop Elements\12.0\common\settings\Elements MRU
  571. RegKey4=HKCU\Software\Adobe\Photoshop Elements\12.0\VisitedDirs|STARTUPIMAGEDIRECTORY
  572. FileKey1=%CommonAppData%\Adobe\Photoshop Elements\12.0\Locale\*_*\Photo Creations\temp|*.dat
  573. FileKey2=%AppData%\Adobe\Elements Organizer\12.0\Organizer|Log.txt
  574. FileKey3=%CommonAppData%\Adobe\Elements Organizer\Catalogs\My Catalog|face.thumb.9.cache;thumb.5.cache
  575.  
  576. [Adobe Illustrator]
  577. ID=2144
  578. LangSecRef=3021
  579. Detect=HKCU\Software\Adobe\MediaBrowser\MRU\illustrator
  580. Default=True
  581. RegKey1=HKCU\Software\Adobe\MediaBrowser\MRU\illustrator\FileList
  582.  
  583. [Adobe Air]
  584. ID=2201
  585. LangSecRef=3024
  586. DetectFile=%LocalAppData%\Adobe\Air
  587. Default=True
  588. FileKey1=%LocalAppData%\Adobe\Air\Logs|*.*
  589.  
  590. [Adobe Dreamweaver]
  591. ID=2314
  592. LangSecRef=3021
  593. Detect=HKCU\Software\Adobe\MediaBrowser\MRU\Dreamweaver
  594. Default=True
  595. RegKey1=HKCU\Software\Adobe\MediaBrowser\MRU\Dreamweaver\FileList
  596. RegKey2=HKCU\Software\Adobe\Dreamweaver CS6\Recent File List
  597.  
  598. [Adobe Premiere Pro CC]
  599. ID=2354
  600. LangSecRef=3021
  601. Default=True
  602. Detect=HKLM\SOFTWARE\Adobe\Premiere Pro\7.0
  603. Detect2=HKCU\Software\Adobe\Premiere Pro\7.0
  604. FileKey1=%ProgramFiles%\Adobe\Adobe Premiere Pro CC\cache|*-*-*.cache
  605. FileKey2=%ProgramFiles%\Adobe\Adobe Premiere Pro CC\Required\data\cache|*.pcache
  606. FileKey3=%AppData%\Adobe\dynamiclinkmanager\7.0\logs|*.log
  607. FileKey4=%AppData%\Adobe\Lumetri\7.0\log|*.log
  608. FileKey5=%AppData%\Adobe\Premiere Pro\7.0\logs|*.log
  609. FileKey6=%AppData%\Adobe\Premiere Pro\7.0|Plugin Loading.log
  610. FileKey7=%AppData%\Adobe\Common\Media Cache Files|*.mediasrc
  611. FileKey8=%AppData%\Adobe\Common\Media Cache|*.mediasrc
  612.  
  613. [Adobe Premiere Elements 12]
  614. ID=2369
  615. LangSecRef=3021
  616. Default=False
  617. Detect=HKCU\Software\Adobe\Premiere Elements\12.0
  618. RegKey1=HKCU\Software\Adobe\Premiere Elements\12.0\MRUDocuments
  619. FileKey1=%AppData%\Adobe\Common\Thumbnail Cache|thumbnailDB
  620. FileKey2=%AppData%\Adobe\Premiere Elements\12.0\logs|*.log
  621. FileKey3=%AppData%\Adobe\Premiere Elements\12.0|Plugin Loading.log;CAHeadless Plugin Loading.log
  622. FileKey4=%AppData%\Adobe\Premiere Elements 12.0\12.0\logs|*.log
  623.  
  624. [Acrobat Distiller 10]
  625. ID=2264
  626. LangSecRef=3021
  627. DetectFile=%AppData%\Adobe\Acrobat\Distiller 10
  628. Default=True
  629. FileKey1=%AppData%\Adobe\Acrobat\Distiller 10|messages.log
  630. FileKey2=%AppData%\Adobe\Acrobat\Distiller 10\Cache|*.*|RECURSE
  631.  
  632. [Advanced Searchbar]
  633. ID=2202
  634. LangSecRef=3022
  635. DetectFile=%ProgramFiles%\AdvancedSearchbar\advancedsearchbar.dll
  636. Default=True
  637. FileKey1=%ProgramFiles%\AdvancedSearchbar\Cache|*.*
  638. RegKey1=HKCU\Software\Advanced Searchbar\Toolbar\Historysearchbox1
  639.  
  640. [Yahoo Toolbar]
  641. ID=2028
  642. LangSecRef=3022
  643. Detect=HKCU\Software\Yahoo\Companion
  644. Default=True
  645. RegKey1=HKCU\Software\Yahoo\Companion\SearchHistory
  646.  
  647. [Windows Live Toolbar]
  648. ID=2029
  649. LangSecRef=3022
  650. Detect=HKCU\Software\Microsoft\MSN Apps\SearchBox
  651. Default=True
  652. RegKey1=HKCU\Software\Microsoft\MSN Apps\SearchBox|History
  653. RegKey2=HKCU\Software\Microsoft\MSN Apps\MSN Toolbar|SearchStrings
  654.  
  655. [Google Toolbar]
  656. ID=2030
  657. LangSecRef=3022
  658. Detect=HKCU\Software\Google\NavClient\1.1
  659. Default=True
  660. RegKey1=HKCU\Software\Google\NavClient\1.1\History
  661. RegKey2=HKCU\Software\Google\NavClient\1.1\Options|KillPopupCount
  662.  
  663. [Google Toolbar IE]
  664. ID=2031
  665. LangSecRef=3022
  666. Detect=HKCU\Software\Google\Google Toolbar
  667. Default=True
  668. FileKey1=%appdata%\Google\Local Search History|*.*
  669.  
  670. [Google Deskbar]
  671. ID=2032
  672. LangSecRef=3022
  673. Detect=HKCU\Software\Google\Deskbar
  674. Default=True
  675. RegKey1=HKCU\Software\Google\Deskbar\termhistory
  676. RegKey2=HKCU\Software\Google\Deskbar\urlhistory
  677.  
  678. [Google Calendar Sync]
  679. ID=2159
  680. LangSecRef=3022
  681. Detect=HKCU\Software\Google\Google Calendar Sync
  682. Default=True
  683. FileKey1=%localappdata%\Google\Google Calendar Sync\logs|*.log
  684.  
  685. [Google Talk]
  686. ID=2158
  687. LangSecRef=3022
  688. Detect=HKCU\Software\Google\Google Talk
  689. DetectFile1=%ProgramFiles%\Google\Google Talk
  690. DetectFile2=%appdata%\Google\Google Talk
  691. DetectFile3=%localappdata%\Google\Google Talk
  692. Default=False
  693. FileKey1=%localappdata%\Google\Google Talk\status|*.txt
  694. FileKey2=%localappdata%\Google\Google Talk\chatlogs|*.log
  695.  
  696. [Kantaris Media Player]
  697. ID=2232
  698. LangSecRef=3023
  699. DetectFile=%AppData%\Christofer Persson\Kantaris Media Player
  700. Default=True
  701. FileKey1=%AppData%\Christofer Persson\Kantaris Media Player|*.jpg
  702.  
  703. [KMPlayer]
  704. ID=2233
  705. LangSecRef=3023
  706. Detect=HKCU\Software\KMPlayer
  707. Default=True
  708. RegKey1=HKCU\Software\KMPlayer\KMP2.0|LastFileName
  709. RegKey2=HKCU\Software\KMPlayer\WideAlbum\(Default Album)
  710. RegKey3=HKCU\Software\KMPlayer\albumart|LastAlbumName
  711.  
  712. [Windows Media Player]
  713. ID=2033
  714. LangSecRef=3023
  715. Detect=HKCU\Software\Microsoft\MediaPlayer\Player
  716. Default=True
  717. RegKey1=HKCU\Software\Microsoft\MediaPlayer\Player\RecentFileList
  718. RegKey2=HKCU\Software\Microsoft\MediaPlayer\Player\RecentURLList
  719. RegKey3=HKCU\Software\Microsoft\MediaPlayer\Preferences|LastPlayList
  720. RegKey4=HKCU\Software\Microsoft\MediaPlayer\Preferences|LastPlayListIndex
  721. RegKey5=HKCU\Software\Microsoft\MediaPlayer\Player\Settings|SaveAsDir
  722. RegKey6=HKCU\Software\Microsoft\MediaPlayer\AutoComplete\MediaEdit
  723. RegKey7=HKCU\Software\Microsoft\MediaPlayer\Radio\MRUList
  724. RegKey8=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedIconPath
  725. RegKey9=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedLargeLogoPath
  726. FileKey1=%LocalAppData%\Microsoft\Media Player|lastplayed.wpl
  727. FileKey2=%LocalAppData%\Microsoft\Media Player|cacheentry*.*|RECURSE
  728. FileKey3=%LocalAppData%\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE
  729. FileKey4=%LocalAppData%\Microsoft\Media Player\Transcoded Files Cache|*.*|RECURSE
  730.  
  731. [Windows Media Center]
  732. ID=2278
  733. LangSecRef=3023
  734. DetectFile=%windir%\ehome\ehshell.exe
  735. Default=True
  736. FileKey1=%CommonAppData%\Microsoft\eHome\logs|*.*
  737. FileKey2=%LocalAppData%\Microsoft\eHome|playlistcache.db
  738. FileKey3=%PUBLIC%\Recorded TV\TempRec\TempSBE|*.*|RECURSE
  739.  
  740. [Real Player]
  741. ID=2034
  742. LangSecRef=3023
  743. Detect=HKCU\Software\RealNetworks\RealPlayer\6.0
  744. Default=True
  745. RegKey1=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips1
  746. RegKey2=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips2
  747. RegKey3=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips3
  748. RegKey4=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips4
  749. RegKey5=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips5
  750. RegKey6=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips6
  751. RegKey7=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips7
  752. RegKey8=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips8
  753. RegKey9=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins1
  754. RegKey10=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins2
  755. RegKey11=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins3
  756. RegKey12=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins4
  757. RegKey13=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins5
  758. RegKey14=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins6
  759. RegKey15=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins7
  760. RegKey16=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins8
  761. RegKey17=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\LastOpenFileDir
  762. RegKey18=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips1
  763. RegKey19=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips2
  764. RegKey20=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips3
  765. RegKey21=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips4
  766. RegKey22=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips5
  767. RegKey23=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips6
  768. RegKey24=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips7
  769. FileKey1=%AppData%\Real\RealOne Player|cookies.txt;ctd.dat;realplayer.ste
  770. FileKey2=%AppData%\Real\RealOne Player\History|*.*
  771. FileKey3=%AppData%\Real\RealPlayer|cookies.txt;ctd.dat;realplayer.ste
  772. FileKey4=%AppData%\Real\RealPlayer\History|*.*
  773. FileKey5=%AppData%\Real\RealPlayer\ErrorLogs|*.*
  774. FileKey6=%AppData%\Real\RealPlayer\WatchFolders|*.log|RECURSE
  775. FileKey7=%ProgramFiles%\Common Files\Real\Update_OB|RealPlayer-log.txt
  776.  
  777. [Real Player SP]
  778. ID=2150
  779. LangSecRef=3023
  780. Detect=HKCU\Software\RealNetworks\RealPlayer\12.0
  781. Default=True
  782. RegKey1=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips1
  783. RegKey2=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips2
  784. RegKey3=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips3
  785. RegKey4=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips4
  786. RegKey5=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips5
  787. RegKey6=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips6
  788. RegKey7=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips7
  789. RegKey8=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips8
  790. RegKey9=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins1
  791. RegKey10=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins2
  792. RegKey11=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins3
  793. RegKey12=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins4
  794. RegKey13=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins5
  795. RegKey14=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins6
  796. RegKey15=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins7
  797. RegKey16=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins8
  798. RegKey17=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\LastOpenFileDir
  799. RegKey18=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips1
  800. RegKey19=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips2
  801. RegKey20=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips3
  802. RegKey21=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips4
  803. RegKey22=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips5
  804. RegKey23=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips6
  805. RegKey24=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips7
  806. RegKey25=HKCU\Software\RealNetworks\RealConverter\12.0\Preferences\BrowsePath
  807. RegKey26=HKCU\Software\RealNetworks\RealConverter\12.0\Preferences\DestinationPath
  808. RegKey27=HKCU\Software\RealNetworks\RealTrimmer\12.0\Preferences\BrowsePath
  809. FileKey1=%AppData%\Real\RealPlayer|cookies.txt;ctd.dat;realplayer.ste;RealPlayer-log.txt
  810. FileKey2=%AppData%\Real\RealPlayer\History|*.*
  811. FileKey3=%AppData%\Real\RealPlayer\ErrorLogs|*.*
  812. FileKey4=%AppData%\Real\RealPlayer\WatchFolders|*.log|RECURSE
  813.  
  814. [Real Player 15]
  815. ID=2276
  816. LangSecRef=3023
  817. Detect=HKCU\Software\RealNetworks\RealPlayer\15.0
  818. Default=True
  819. RegKey1=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips1
  820. RegKey2=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips2
  821. RegKey3=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips3
  822. RegKey4=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips4
  823. RegKey5=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips5
  824. RegKey6=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips6
  825. RegKey7=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips7
  826. RegKey8=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips8
  827. RegKey9=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\LastOpenFileDir
  828. RegKey10=HKCU\Software\RealNetworks\RealConverter\15.0\Preferences\BrowsePath
  829. RegKey11=HKCU\Software\RealNetworks\RealConverter\15.0\Preferences\DestinationPath
  830. RegKey12=HKCU\Software\RealNetworks\RealTrimmer\15.0\Preferences\BrowsePath
  831. FileKey1=%AppData%\Real\RealPlayer|realplayer.ste;RealPlayer-log.txt
  832. FileKey2=%AppData%\Real\RealPlayer\History|*.*
  833. FileKey3=%AppData%\Real\RealPlayer\ErrorLogs|*.*
  834. FileKey4=%AppData%\Real\RealPlayer\WatchFolders|*.log
  835.  
  836. [Real Player 16]
  837. ID=2325
  838. LangSecRef=3023
  839. Detect=HKCU\Software\RealNetworks\RealPlayer\16.0
  840. Default=True
  841. RegKey1=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips1
  842. RegKey2=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips2
  843. RegKey3=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips3
  844. RegKey4=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips4
  845. RegKey5=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips5
  846. RegKey6=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips6
  847. RegKey7=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips7
  848. RegKey8=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips8
  849. RegKey9=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\LastOpenFileDir
  850. RegKey10=HKCU\Software\RealNetworks\RealConverter\16.0\Preferences\BrowsePath
  851. RegKey11=HKCU\Software\RealNetworks\RealConverter\16.0\Preferences\DestinationPath
  852. RegKey12=HKCU\Software\RealNetworks\RealTrimmer\16.0\Preferences\BrowsePath
  853. FileKey1=%AppData%\Real\RealPlayer|realplayer.ste;RealPlayer-log.txt
  854. FileKey2=%AppData%\Real\RealPlayer\History|*.*
  855. FileKey3=%AppData%\Real\RealPlayer\ErrorLogs|*.*
  856. FileKey4=%AppData%\Real\RealPlayer\WatchFolders|*.log
  857.  
  858. [Real Player Cloud]
  859. ID=2034
  860. LangSecRef=3023
  861. Detect=HKCU\Software\RealNetworks\RealPlayer\17.0
  862. Default=True
  863. RegKey1=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips1
  864. RegKey2=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips2
  865. RegKey3=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips3
  866. RegKey4=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips4
  867. RegKey5=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips5
  868. RegKey6=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips6
  869. RegKey7=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips7
  870. RegKey8=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips8
  871. RegKey9=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\LastOpenFileDir
  872. RegKey10=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips1
  873. RegKey11=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips2
  874. RegKey12=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips3
  875. RegKey13=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips4
  876. RegKey14=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips5
  877. RegKey15=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips6
  878. RegKey16=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips7
  879. FileKey1=%AppData%\Real\RealPlayer\Temp|*.*
  880. FileKey2=%ProgramFiles%\Real\RealPlayer\RPDS|install.log
  881. FileKey3=%CommonAppData%\Real\RealPlayer|*-log.txt;S-*
  882. FileKey4=%CommonAppData%\RPDS\Content\images|*.jpg
  883. FileKey5=%CommonAppData%\Real\RPDS\Logs|*.log;error.log*
  884. FileKey6=%AppData%\Real\RealPlayer|RealPlayer-log.txt
  885. FileKey7=%AppData%\Real\RealPlayer\ErrorLogs|*.log
  886. FileKey8=%AppData%\Real\RealPlayer\History|*.*
  887. FileKey9=%AppData%\Real\RealPlayer\ThumbsCache|*.*|RECURSE
  888. FileKey10=%AppData%\Real\RealPlayer\WatchFolders|*_scan*
  889. FileKey11=%ProgramFiles%\Real\RealPlayer\common|cookies.txt
  890. ExcludeKey1=FILE|%AppData%\Real\RealPlayer\WatchFolders\*scan.out
  891.  
  892. [Quicktime Player]
  893. ID=2035
  894. LangSecRef=3023
  895. Detect=HKLM\Software\Apple Computer, Inc.\QuickTime
  896. Default=True
  897. RegKey1=HKLM\Software\Apple Computer, Inc.\QuickTime\Recent Movies
  898. FileKey1=%LocalLowAppData%\Apple Computer\QuickTime\downloads|*.*|RECURSE
  899. FileKey2=%localappdata%\Apple Computer\QuickTime\downloads|*.*|RECURSE
  900. FileKey3=%localappdata%\Apple Computer\QuickTime|QTPlayerSession.xml
  901. FileKey4=%appdata%\Apple Computer\QuickTime|QTPlayerSession.xml
  902. FileKey5=%CommonAppData%\Apple Computer\Installer Cache\QuickTime*|QuickTime.msi.backup
  903. FileKey6=%userprofile%|QTPlayerSession.xml
  904.  
  905. [AVI Preview]
  906. ID=2037
  907. LangSecRef=3023
  908. Detect=HKCU\Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more
  909. Default=True
  910. RegKey1=HKCU\Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more\Recent File List
  911.  
  912. [Steam]
  913. ID=2203
  914. LangSecRef=3023
  915. DetectFile=%ProgramFiles%\Steam\Steam.exe
  916. Default=True
  917. FileKey1=%ProgramFiles%\Steam|*.mdmp;*.log
  918. FileKey2=%ProgramFiles%\Steam\Dumps|*.*|RECURSE
  919. FileKey3=%ProgramFiles%\Steam\Logs|*.*|RECURSE
  920.  
  921. [Xfire]
  922. ID=2204
  923. LangSecRef=3023
  924. DetectFile=%ProgramFiles%\Xfire\Xfire.exe
  925. Default=True
  926. FileKey1=%CommonAppData%\Xfire|*-*-*-*-*-*-*.log;xfire_exe_log.txt;xfire_toucan_log.txt
  927. FileKey2=%ProgramFiles%\Xfire|*-*-*-*-*-*-*.log;xfire_exe_log.txt;xfire_toucan_log.txt
  928.  
  929. [XML Spy]
  930. ID=2038
  931. LangSecRef=3021
  932. Detect=HKCU\Software\Altova\XML Spy
  933. Default=True
  934. RegKey1=HKCU\Software\Altova\XML Spy\Recent File List
  935. RegKey2=HKCU\Software\Altova\XML Spy\Recent Project List
  936.  
  937. [Oxygen XML Editor]
  938. ID=2327
  939. LangSecRef=3021
  940. DetectFile=%AppData%\com.oxygenxml\
  941. Default=True
  942. FileKey1=%AppData%\com.oxygenxml\usageData|usageData.xml
  943. FileKey2=%AppData%\com.oxygenxml|file.history
  944. FileKey3=%AppData%\com.oxygenxml|project.history
  945.  
  946. [SWiSH]
  947. ID=2039
  948. LangSecRef=3023
  949. Detect=HKCU\Software\DJJ Holdings\SWiSH
  950. Default=True
  951. RegKey1=HKCU\Software\DJJ Holdings\SWiSH\Recent File List
  952.  
  953. [Paint Shop Pro 7.0]
  954. ID=2040
  955. LangSecRef=3023
  956. Detect=HKCU\Software\Jasc\Paint Shop Pro 7
  957. Default=True
  958. RegKey1=HKCU\Software\Jasc\Paint Shop Pro 7\Recent File List
  959. RegKey2=HKCU\Software\Jasc\Animation Shop 3\Recent File List
  960. RegKey3=HKCU\Software\Jasc\Paint Shop Pro 7\General|FolderHistory
  961. RegKey4=HKCU\Software\Jasc\Paint Shop Pro 7\General|SaveAsDirectory
  962. RegKey5=HKCU\Software\Jasc\Paint Shop Pro 7\General|SaveCopyDirectory
  963.  
  964. [Paint Shop Pro 8.0]
  965. ID=2041
  966. LangSecRef=3023
  967. Detect=HKCU\Software\Jasc\Paint Shop Pro 8
  968. Default=True
  969. RegKey1=HKCU\Software\Jasc\Paint Shop Pro 8\Recent File List
  970. RegKey2=HKCU\Software\Jasc\Paint Shop Pro 8\WorkspaceMRU
  971. RegKey3=HKCU\Software\Jasc\Paint Shop Pro 8\JascCmdPyScript\RunScript|FileName
  972. RegKey4=HKCU\Software\Jasc\Paint Shop Pro 8\JascCmdFile\FileSaveAs|FileFolder
  973. RegKey5=HKCU\Software\Jasc\Paint Shop Pro 8\JascCmdNonGraphic\SaveWorkspace|WorkspaceFilename
  974. RegKey6=HKCU\Software\Jasc\Paint Shop Pro 8\ScriptMRU
  975.  
  976. [Paint Shop Pro 9.0]
  977. ID=2042
  978. LangSecRef=3023
  979. Detect=HKCU\Software\Jasc\Paint Shop Pro 9
  980. Default=True
  981. RegKey1=HKCU\Software\Jasc\Paint Shop Pro 9\Recent File List
  982. RegKey2=HKCU\Software\Jasc\Paint Shop Pro 9\WorkspaceMRU
  983. RegKey3=HKCU\Software\Jasc\Paint Shop Pro 9\JascCmdFile\FileSaveAs|FileFolder
  984. RegKey4=HKCU\Software\Jasc\Paint Shop Pro 9\JascCmdFile\FileOpen|Folder
  985.  
  986. [Paint Shop Pro X]
  987. ID=2043
  988. LangSecRef=3023
  989. Detect=HKCU\Software\Corel\Paint Shop Pro\10
  990. Default=True
  991. RegKey1=HKCU\Software\Corel\Paint Shop Pro\10\Recent File List
  992. RegKey2=HKCU\Software\Corel\Paint Shop Pro\10\WorkspaceMRU
  993. RegKey3=HKCU\Software\Corel\Paint Shop Pro\10\CmdFile\FileSaveAs|FileFolder
  994. RegKey4=HKCU\Software\Corel\Paint Shop Pro\10\CmdFile\FileOpen|Folder
  995.  
  996. [Paint Shop Pro XI]
  997. ID=2044
  998. LangSecRef=3023
  999. Detect=HKCU\Software\Corel\Paint Shop Pro\11
  1000. Default=True
  1001. RegKey1=HKCU\Software\Corel\Paint Shop Pro\11\Recent File List
  1002. RegKey2=HKCU\Software\Corel\Paint Shop Pro\11\WorkspaceMRU
  1003. RegKey3=HKCU\Software\Corel\Paint Shop Pro\11\CmdFile\FileSaveAs|FileFolder
  1004. RegKey4=HKCU\Software\Corel\Paint Shop Pro\11\CmdFile\FileOpen|Folder
  1005.  
  1006. [Paint Shop Pro X2]
  1007. ID=2148
  1008. LangSecRef=3023
  1009. Detect=HKCU\Software\Corel\Paint Shop Pro\12
  1010. Detect2=HKCU\Software\Corel\Paint Shop Pro\12.5
  1011. Default=True
  1012. RegKey1=HKCU\Software\Corel\Paint Shop Pro\12\Recent File List
  1013. RegKey2=HKCU\Software\Corel\Paint Shop Pro\12\WorkspaceMRU
  1014. RegKey3=HKCU\Software\Corel\Paint Shop Pro\12\CmdFile\FileSaveAs|FileFolder
  1015. RegKey4=HKCU\Software\Corel\Paint Shop Pro\12\CmdFile\FileOpen|Folder
  1016. RegKey5=HKCU\Software\Corel\Paint Shop Pro\12.5\Recent File List
  1017. RegKey6=HKCU\Software\Corel\Paint Shop Pro\12.5\WorkspaceMRU
  1018. RegKey7=HKCU\Software\Corel\Paint Shop Pro\12.5\CmdFile\FileSaveAs|FileFolder
  1019. RegKey8=HKCU\Software\Corel\Paint Shop Pro\12.5\CmdFile\FileOpen|Folder
  1020.  
  1021. [Paint Shop Pro X3]
  1022. ID=2167
  1023. LangSecRef=3023
  1024. Detect=HKCU\Software\Corel\Paint Shop Pro\13
  1025. Default=True
  1026. RegKey1=HKCU\Software\Corel\Paint Shop Pro\13\Recent File List
  1027. RegKey2=HKCU\Software\Corel\Paint Shop Pro\13\WorkspaceMRU
  1028. RegKey3=HKCU\Software\Corel\Paint Shop Pro\13\CmdFile\FileSaveAs|FileFolder
  1029. RegKey4=HKCU\Software\Corel\Paint Shop Pro\13\CmdFile\FileOpen|Folder
  1030.  
  1031. [Corel PaintShop Pro X4]
  1032. ID=2273
  1033. LangSecRef=3023
  1034. Detect=HKCU\Software\Corel\PaintShop Pro\X4
  1035. Default=True
  1036. RegKey1=HKCU\Software\Corel\PaintShop Pro\X4\Recent File List
  1037. RegKey2=HKCU\Software\Corel\PaintShop Pro\X4\UI Customization\EN\WorkspaceMRU
  1038. RegKey3=HKCU\Software\Corel\PaintShop Pro\X4\CmdFile\FileSaveAs|FileFolder
  1039. RegKey4=HKCU\Software\Corel\PaintShop Pro\X4\CmdFile\FileOpen|Folder
  1040. RegKey5=HKCU\Software\Corel\PaintShop Pro\X4\ScriptMRU
  1041.  
  1042. [Corel PaintShop Pro X5]
  1043. ID=2316
  1044. LangSecRef=3023
  1045. Detect=HKCU\Software\Corel\PaintShop Pro\X5
  1046. Default=True
  1047. RegKey1=HKCU\Software\Corel\PaintShop Pro\X5\Recent File List
  1048. RegKey2=HKCU\Software\Corel\PaintShop Pro\X5\UI Customization\EN\WorkspaceMRU
  1049. RegKey3=HKCU\Software\Corel\PaintShop Pro\X5\CmdFile\FileSaveAs|FileFolder
  1050. RegKey4=HKCU\Software\Corel\PaintShop Pro\X5\CmdFile\FileOpen|Folder
  1051. RegKey5=HKCU\Software\Corel\PaintShop Pro\X5\ScriptMRU
  1052.  
  1053. [Corel PaintShop Pro X6]
  1054. ID=2364
  1055. LangSecRef=3023
  1056. Detect=HKCU\Software\Corel\PaintShop Pro\X6
  1057. Default=True
  1058. RegKey1=HKCU\Software\Corel\PaintShop Pro\X6\Recent File List
  1059. RegKey2=HKCU\Software\Corel\PaintShop Pro\X6\CmdFile\FileSaveAs|FileFolder
  1060. RegKey3=HKCU\Software\Corel\PaintShop Pro\X6\CmdFile\FileOpen|Folder
  1061. RegKey4=HKCU\Software\Corel\PaintShop Pro\X6\ScriptMRU
  1062. FileKey1=%ProgramFiles%\Corel\Corel PaintShop Pro X6\PlugIns\*|*.log
  1063. FileKey2=%LocalAppData%\Corel PaintShop Pro\16.0\Thumbs|*.*|RECURSE
  1064.  
  1065. [MS Works 4.0]
  1066. ID=2045
  1067. LangSecRef=3021
  1068. Detect= HKCU\Software\Microsoft\Works\4.0
  1069. Default=True
  1070. RegKey1=HKCU\Software\Microsoft\Works\4.0\Recent File List
  1071.  
  1072. [Office 97]
  1073. ID=2046
  1074. LangSecRef=3021
  1075. Detect=HKCU\Software\Microsoft\Office\8.0\Common
  1076. Default=True
  1077. FileKey1=%appdata%\Microsoft\Office\Recent|*.*
  1078. RegKey1=HKCU\Software\Microsoft\Office\8.0\Excel\Recent File List
  1079. RegKey2=HKCU\Software\Microsoft\Office\8.0\Project\Recent File List
  1080. RegKey3=HKCU\Software\Microsoft\Office\8.0\PowerPoint\Recent File List
  1081. RegKey4=HKCU\Software\Microsoft\Office\8.0\PowerPoint\Recent Folder List
  1082. RegKey5=HKCU\Software\Microsoft\Office\8.0\Common\Internet\LocationOfComponents
  1083. RegKey6=HKCU\Software\Microsoft\Office\8.0\Access\Settings
  1084.  
  1085. [Office XP]
  1086. ID=2047
  1087. LangSecRef=3021
  1088. Detect=HKCU\Software\Microsoft\Office\10.0\Common
  1089. Default=True
  1090. FileKey1=%appdata%\Microsoft\Office\Recent|*.*
  1091. RegKey1=HKCU\Software\Microsoft\Office\10.0\PowerPoint\Recent File List
  1092. RegKey2=HKCU\Software\Microsoft\Office\10.0\Excel\Recent Files
  1093. RegKey3=HKCU\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent File List
  1094. RegKey4=HKCU\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent Page List
  1095. RegKey5=HKCU\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent Web List
  1096. RegKey6=HKCU\Software\Microsoft\Office\10.0\Word\Recent Templates
  1097. RegKey7=HKCU\Software\Microsoft\Office\10.0\Common\Internet|UseRWHlinkNavigation
  1098.  
  1099. [Office 2003]
  1100. ID=2048
  1101. LangSecRef=3021
  1102. Detect=HKCU\Software\Microsoft\Office\11.0\Common
  1103. Default=True
  1104. FileKey1=%AppData%\Microsoft\Office\Recent|*.*
  1105. FileKey2=%AppData%\Microsoft\Office|*.tmp|RECURSE
  1106. RegKey1=HKCU\Software\Microsoft\Office\11.0\Excel\Recent Files
  1107. RegKey2=HKCU\Software\Microsoft\Office\11.0\Common\Open Find\Microsoft Office Word\Settings\Save As\File Name MRU
  1108. RegKey3=HKCU\Software\Microsoft\Office\11.0\PowerPoint\Recent File List
  1109. RegKey4=HKCU\Software\Microsoft\Office\11.0\Publisher\Recent File List
  1110. RegKey5=HKCU\Software\Microsoft\Office\11.0\InfoPath\Recent File List
  1111. RegKey6=HKCU\Software\Microsoft\Office\11.0\Common\Internet\Server Cache
  1112. RegKey7=HKCU\Software\Microsoft\Office\11.0\Common\Internet|UseRWHlinkNavigation
  1113. RegKey8=HKCU\Software\Microsoft\MSPaper 11.0\Persist File Name
  1114. RegKey9=HKCU\Software\Microsoft\MSPaper 11.0\Recent File List
  1115. RegKey10=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile1
  1116. RegKey11=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile2
  1117. RegKey12=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile3
  1118. RegKey13=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile4
  1119. RegKey14=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile5
  1120. RegKey15=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile6
  1121. RegKey16=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile7
  1122. RegKey17=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile8
  1123. RegKey18=HKCU\Software\Microsoft\Office\11.0\Outlook\Contact|QuickFindMRU
  1124. RegKey19=HKCU\Software\Microsoft\Office\11.0\Outlook\Contact|StripSearchMRU
  1125. RegKey20=HKCU\Software\Microsoft\Office\11.0\Outlook\Preferences|LocationMRU
  1126. RegKey21=HKCU\Software\Microsoft\Office\11.0\Excel Viewer\Recent Files
  1127. RegKey22=HKCU\Software\Microsoft\Office\Common|FontBmpCache
  1128.  
  1129. [Office 2007]
  1130. ID=2049
  1131. LangSecRef=3021
  1132. Detect=HKCU\Software\Microsoft\Office\12.0\Common
  1133. Default=True
  1134. FileKey1=%AppData%\Microsoft\Office\Recent|*.*
  1135. FileKey2=%AppData%\Microsoft\Office|*.tmp|RECURSE
  1136. RegKey1=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Word\Settings\Save As\File Name MRU
  1137. RegKey2=HKCU\Software\Microsoft\Office\12.0\Word\File MRU
  1138. RegKey3=HKCU\Software\Microsoft\Office\12.0\Excel\File MRU
  1139. RegKey4=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU1
  1140. RegKey5=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU2
  1141. RegKey6=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU3
  1142. RegKey7=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU4
  1143. RegKey8=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU5
  1144. RegKey9=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU6
  1145. RegKey10=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU7
  1146. RegKey11=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU8
  1147. RegKey12=HKCU\Software\Microsoft\Office\12.0\PowerPoint\File MRU
  1148. RegKey13=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Save As\File Name MRU
  1149. RegKey14=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office InfoPath\Settings\Open\File Name MRU
  1150. RegKey15=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office InfoPath\Settings\Save As\File Name MRU
  1151. RegKey16=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Excel\Settings\Save As\File Name MRU
  1152. RegKey17=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Publisher\Settings\Save As\File Name MRU
  1153. RegKey18=HKCU\Software\Microsoft\Office\12.0\Publisher\Recent File List
  1154. RegKey19=HKCU\Software\Microsoft\Office\12.0\InfoPath\Recent File List
  1155. RegKey20=HKCU\Software\Microsoft\Office\12.0\Excel Viewer\Viewer File MRU
  1156. RegKey21=HKCU\Software\Microsoft\Office\12.0\Clip Organizer\Search\Last Query
  1157. RegKey22=HKCU\Software\Microsoft\Office\Common|FontBmpCache
  1158.  
  1159. [Office 2010]
  1160. ID=2151
  1161. LangSecRef=3021
  1162. Detect=HKCU\Software\Microsoft\Office\14.0\Common
  1163. Default=True
  1164. FileKey1=%AppData%\Microsoft\Office\Recent|*.*
  1165. FileKey2=%AppData%\Microsoft\Office|*.tmp|RECURSE
  1166. FileKey3=%LocalAppData%\Microsoft\Office\14.0\OfficeFileCache|*.*|RECURSE
  1167. RegKey1=HKCU\Software\Microsoft\Office\14.0\Access\File MRU
  1168. RegKey2=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Default Database Path\File Name MRU
  1169. RegKey3=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Default Theme for New Databases\File Name MRU
  1170. RegKey4=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\File New Database\File Name MRU
  1171. RegKey5=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\File Open\File Name MRU
  1172. RegKey6=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\File Save\File Name MRU
  1173. RegKey7=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Open\File Name MRU
  1174. RegKey8=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Save As\File Name MRU
  1175. RegKey9=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Default Database Path\File Name MRU
  1176. RegKey10=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Default Theme for New Databases\File Name MRU
  1177. RegKey11=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\File New Database\File Name MRU
  1178. RegKey12=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\File Open\File Name MRU
  1179. RegKey13=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\File Save\File Name MRU
  1180. RegKey14=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Open\File Name MRU
  1181. RegKey15=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Save As\File Name MRU
  1182. RegKey16=HKCU\Software\Microsoft\Office\14.0\Word\File MRU
  1183. RegKey17=HKCU\Software\Microsoft\Office\14.0\Word\Place MRU
  1184. RegKey18=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\Browse\File Name MRU
  1185. RegKey19=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\File Open\File Name MRU
  1186. RegKey20=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\File Save\File Name MRU
  1187. RegKey21=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\Modify Location\File Name MRU
  1188. RegKey22=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\Save As\File Name MRU
  1189. RegKey23=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\Browse\File Name MRU
  1190. RegKey24=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\File Open\File Name MRU
  1191. RegKey25=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\File Save\File Name MRU
  1192. RegKey26=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\Modify Location\File Name MRU
  1193. RegKey27=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\Save As\File Name MRU
  1194. RegKey28=HKCU\Software\Microsoft\Office\14.0\Excel\File MRU
  1195. RegKey29=HKCU\Software\Microsoft\Office\14.0\Excel\Place MRU
  1196. RegKey30=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\Browse\File Name MRU
  1197. RegKey31=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\File Open\File Name MRU
  1198. RegKey32=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\File Save\File Name MRU
  1199. RegKey33=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\Modify Location\File Name MRU
  1200. RegKey34=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\Save As\File Name MRU
  1201. RegKey35=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\Browse\File Name MRU
  1202. RegKey36=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\File Open\File Name MRU
  1203. RegKey37=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\File Save\File Name MRU
  1204. RegKey38=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\Modify Location\File Name MRU
  1205. RegKey39=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\Save As\File Name MRU
  1206. RegKey40=HKCU\Software\Microsoft\Office\14.0\Publisher\File MRU
  1207. RegKey41=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\File Open\File Name MRU
  1208. RegKey42=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\File Save\File Name MRU
  1209. RegKey43=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\Open Publication\File Name MRU
  1210. RegKey44=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\Save As\File Name MRU
  1211. RegKey45=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\File Open\File Name MRU
  1212. RegKey46=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\File Save\File Name MRU
  1213. RegKey47=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\Open Publication\File Name MRU
  1214. RegKey48=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\Save As\File Name MRU
  1215. RegKey49=HKCU\Software\Microsoft\Office\14.0\PowerPoint\File MRU
  1216. RegKey50=HKCU\Software\Microsoft\Office\14.0\PowerPoint\Place MRU
  1217. RegKey51=HKCU\Software\Microsoft\Office\14.0\PowerPoint\RecentFolderList
  1218. RegKey52=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\Browse\File Name MRU
  1219. RegKey53=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\File Open\File Name MRU
  1220. RegKey54=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\File Save\File Name MRU
  1221. RegKey55=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\Open\File Name MRU
  1222. RegKey56=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\Save As\File Name MRU
  1223. RegKey57=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Browse\File Name MRU
  1224. RegKey58=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\File Open\File Name MRU
  1225. RegKey59=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\File Save\File Name MRU
  1226. RegKey60=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Open\File Name MRU
  1227. RegKey61=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Save As\File Name MRU
  1228. RegKey62=HKCU\Software\Microsoft\Office\14.0\InfoPath\Designer File MRU
  1229. RegKey63=HKCU\Software\Microsoft\Office\14.0\InfoPath\Filler File MRU
  1230. RegKey64=HKCU\Software\Microsoft\Office\14.0\InfoPath\Recent Templates
  1231. RegKey65=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Browse\File Name MRU
  1232. RegKey66=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\File Open\File Name MRU
  1233. RegKey67=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\File Save\File Name MRU
  1234. RegKey68=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Open\File Name MRU
  1235. RegKey69=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Open in Design Mode\File Name MRU
  1236. RegKey70=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Save As\File Name MRU
  1237. RegKey71=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Browse\File Name MRU
  1238. RegKey72=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\File Open\File Name MRU
  1239. RegKey73=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\File Save\File Name MRU
  1240. RegKey74=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Open\File Name MRU
  1241. RegKey75=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Open in Design Mode\File Name MRU
  1242. RegKey76=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Save As\File Name MRU
  1243. RegKey77=HKCU\Software\Microsoft\Office\14.0\OneNote\OpenNotebooks
  1244. RegKey78=HKCU\Software\Microsoft\Office\14.0\OneNote\RecentNotebooks
  1245. RegKey79=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\File Open\File Name MRU
  1246. RegKey80=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\File Save\File Name MRU
  1247. RegKey81=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Open Backup\File Name MRU
  1248. RegKey82=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Open Notebook\File Name MRU
  1249. RegKey83=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Save As\File Name MRU
  1250. RegKey84=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Select File\File Name MRU
  1251. RegKey85=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Select Folder\File Name MRU
  1252. RegKey86=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\File Open\File Name MRU
  1253. RegKey87=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\File Save\File Name MRU
  1254. RegKey88=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Open Backup\File Name MRU
  1255. RegKey89=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Open Notebook\File Name MRU
  1256. RegKey90=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Save As\File Name MRU
  1257. RegKey91=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Select File\File Name MRU
  1258. RegKey92=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Select Folder\File Name MRU
  1259. RegKey93=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\Create or Open Outlook Data File\File Name MRU
  1260. RegKey94=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\File Open\File Name MRU
  1261. RegKey95=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\File Save\File Name MRU
  1262. RegKey96=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\Open Calendar\File Name MRU
  1263. RegKey97=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\Open Outlook Data File\File Name MRU
  1264. RegKey98=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\Create or Open Outlook Data File\File Name MRU
  1265. RegKey99=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\File Open\File Name MRU
  1266. RegKey100=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\File Save\File Name MRU
  1267. RegKey101=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\Open Calendar\File Name MRU
  1268. RegKey102=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\Open Outlook Data File\File Name MRU
  1269. RegKey103=HKCU\Software\Microsoft\Office\14.0\Clip Organizer\Search\Last Query
  1270. RegKey104=HKCU\Software\Microsoft\Office\Common|FontBmpCache
  1271. RegKey105=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly1
  1272. RegKey106=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly2
  1273. RegKey107=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly3
  1274. RegKey108=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly4
  1275. RegKey109=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template1
  1276. RegKey110=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template2
  1277. RegKey111=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template3
  1278. RegKey112=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template4
  1279. RegKey113=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile1
  1280. RegKey114=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile2
  1281. RegKey115=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile3
  1282. RegKey116=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile4
  1283. RegKey117=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile5
  1284. RegKey118=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile6
  1285. RegKey119=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile7
  1286. RegKey120=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile8
  1287. RegKey121=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile9
  1288. RegKey122=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile10
  1289. RegKey123=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile11
  1290. RegKey124=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile12
  1291. RegKey125=HKCU\Software\Microsoft\Office\14.0\Outlook\Search
  1292.  
  1293. [Office 2013]
  1294. ID=2318
  1295. LangSecRef=3021
  1296. Detect=HKCU\Software\Microsoft\Office\15.0\Common
  1297. Default=True
  1298. FileKey1=%AppData%\Microsoft\Office\Recent|*.*
  1299. FileKey2=%LocalAppData%\Microsoft\MSOIdentityCRL\production\temp|*.*_sync
  1300. FileKey3=%AppData%\Microsoft\PowerPoint\Sync\Temp|*.*
  1301. RegKey1=HKCU\Software\Microsoft\Office\15.0\Access\File MRU
  1302. RegKey2=HKCU\Software\Microsoft\Office\15.0\Word\File MRU
  1303. RegKey3=HKCU\Software\Microsoft\Office\15.0\Word\Place MRU
  1304. RegKey4=HKCU\Software\Microsoft\Office\15.0\Excel\File MRU
  1305. RegKey5=HKCU\Software\Microsoft\Office\15.0\Excel\Place MRU
  1306. RegKey6=HKCU\Software\Microsoft\Office\15.0\Publisher\File MRU
  1307. RegKey7=HKCU\Software\Microsoft\Office\15.0\PowerPoint\File MRU
  1308. RegKey8=HKCU\Software\Microsoft\Office\15.0\PowerPoint\Place MRU
  1309. RegKey9=HKCU\Software\Microsoft\Office\15.0\OneNote\RecentNotebooks
  1310. RegKey10=HKCU\Software\Microsoft\Office\15.0\Word\User MRU
  1311. RegKey11=HKCU\Software\Microsoft\Office\15.0\Excel\User MRU
  1312. RegKey12=HKCU\Software\Microsoft\Office\15.0\Access\User MRU
  1313. RegKey13=HKCU\Software\Microsoft\Office\15.0\Publisher\User MRU
  1314. RegKey14=HKCU\Software\Microsoft\Office\15.0\PowerPoint\User MRU
  1315. ExcludeKey1=FILE|%AppData%\Microsoft\Office\Recent\|Welcome to Word.LNK
  1316. ExcludeKey2=FILE|%AppData%\Microsoft\Office\Recent\|Welcome to Publisher.LNK
  1317. ExcludeKey3=FILE|%AppData%\Microsoft\Office\Recent\|Welcome to OneNote.LNK
  1318.  
  1319. [Installshield Developer 7.0]
  1320. ID=2050
  1321. LangSecRef=3021
  1322. Detect=HKCU\Software\InstallShield\Developer\7.0
  1323. Default=True
  1324. RegKey1=HKCU\Software\InstallShield\Developer\7.0\Recent File List
  1325.  
  1326. [Macromedia Flash 4.0]
  1327. ID=2051
  1328. LangSecRef=3023
  1329. Detect=HKCU\Software\Macromedia\Flash 4
  1330. Default=True
  1331. RegKey1=HKCU\Software\Macromedia\Flash 4\Recent File List
  1332.  
  1333. [Macromedia Flash 5.0]
  1334. ID=2052
  1335. LangSecRef=3023
  1336. Detect=HKCU\Software\Macromedia\Flash 5
  1337. Default=True
  1338. RegKey1=HKCU\Software\Macromedia\Flash 5\Recent File List
  1339.  
  1340. [Macromedia Flash MX]
  1341. ID=2053
  1342. LangSecRef=3023
  1343. Detect=HKCU\Software\Macromedia\Flash 6
  1344. Default=True
  1345. RegKey1=HKCU\Software\Macromedia\Flash 6\Recent File List
  1346.  
  1347. [Macromedia Flash MX 2004]
  1348. ID=2054
  1349. LangSecRef=3023
  1350. Detect=HKCU\Software\Macromedia\Flash 7
  1351. Default=True
  1352. RegKey1=HKCU\Software\Macromedia\Flash 7\Recent File List
  1353.  
  1354. [Adobe Flash Player]
  1355. ID=2055
  1356. LangSecRef=3023
  1357. Detect=HKCR\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}
  1358. Detect2=HKCU\Software\Macromedia\FlashPlayer
  1359. DetectFile=%SystemDirectory%\Macromed\flash\flashplayer.xpt
  1360. Default=True
  1361. SpecialKey1=N_FLASH_COOKIES
  1362. RegKey1=HKCU\Software\Macromedia\FlashPlayer|RecentMovie1
  1363. RegKey2=HKCU\Software\Macromedia\FlashPlayer|RecentMovie2
  1364. RegKey3=HKCU\Software\Macromedia\FlashPlayer|RecentMovie3
  1365. RegKey4=HKCU\Software\Macromedia\FlashPlayer|RecentMovie4
  1366. RegKey5=HKCU\Software\Macromedia\FlashPlayer|RecentMovie5
  1367. RegKey6=HKCU\Software\Macromedia\FlashPlayer|RecentMovie6
  1368. RegKey7=HKCU\Software\Macromedia\FlashPlayer|RecentMovie7
  1369. RegKey8=HKCU\Software\Macromedia\FlashPlayer|RecentMovie8
  1370. RegKey9=HKCU\Software\Macromedia\FlashPlayer|RecentMovie9
  1371.  
  1372. [Macromedia Homesite 5.0]
  1373. ID=2056
  1374. LangSecRef=3021
  1375. Detect=HKCU\Software\Macromedia\HomeSite5
  1376. Default=True
  1377. RegKey1=HKCU\Software\Macromedia\HomeSite5\RecentFiles
  1378.  
  1379. [Macromedia Fireworks 6.0]
  1380. ID=2057
  1381. LangSecRef=3021
  1382. Default=True
  1383. Detect=HKCU\Software\Macromedia\Firework 6
  1384. RegKey1=HKCU\Software\Macromedia\Firework 6\Recent File List
  1385.  
  1386. [Adobe Fireworks 6.0]
  1387. ID=2334
  1388. LangSecRef=3021
  1389. Detect=HKCU\Software\Adobe\Fireworks\12.0
  1390. Default=True
  1391. RegKey1=HKCU\Software\Adobe\Fireworks\12.0\ini\Recent File List
  1392. FileKey1=%AppData%\Adobe\Fireworks CS6|Project_Log.htm;Web_Log.htm
  1393.  
  1394. [Macromedia Dreamweaver MX]
  1395. ID=2058
  1396. LangSecRef=3021
  1397. Default=True
  1398. Detect=HKCU\Software\Macromedia\Dreamweaver MX 2004
  1399. RegKey1=HKCU\Software\Macromedia\Dreamweaver MX 2004\Recent File List
  1400.  
  1401. [Macromedia Shockwave 10]
  1402. ID=2189
  1403. LangSecRef=3023
  1404. Detect=HKCU\Software\Macromedia\Shockwave 10
  1405. Detect2=HKLM\Software\Macromedia\Shockwave 10
  1406. Default=True
  1407. RegKey1=HKCU\Software\Macromedia\Shockwave 10\movies
  1408. RegKey2=HKCU\Software\AppDataLow\Software\Macromedia\Shockwave 10\movies
  1409. RegKey3=HKCU\Software\AppDataLow\Software\Macromedia\Shockwave 10\statistics
  1410. FileKey1=%LocalLowAppData%\Macromedia\Shockwave Player|Shockwave Log
  1411.  
  1412. [Macromedia Shockwave 11]
  1413. ID=2190
  1414. LangSecRef=3023
  1415. Detect=HKLM\Software\Adobe\Shockwave 11
  1416. Detect2=HKCU\Software\Adobe\Shockwave 11
  1417. Default=True
  1418. RegKey1=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\moviestats\movies
  1419. RegKey2=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\moviestats\sessions
  1420. RegKey3=HKCU\Software\Adobe\Shockwave 11\moviestats\movies
  1421. RegKey4=HKCU\Software\Adobe\Shockwave 11\moviestats\sessions
  1422. RegKey5=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\movies
  1423. RegKey6=HKCU\Software\Adobe\Shockwave 11\movies
  1424. RegKey7=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\statistics
  1425. FileKey1=%LocalLowAppData%\Adobe\Shockwave Player 11|Shockwave Log
  1426.  
  1427. [Microsoft Silverlight]
  1428. ID=2169
  1429. LangSecRef=3023
  1430. DetectFile=%LocalAppData%\Microsoft\Silverlight\is
  1431. DetectFile2=%LocalLowAppData%\Microsoft\Silverlight\is
  1432. Detect=HKLM\Software\Microsoft\Silverlight
  1433. Default=True
  1434. FileKey1=%LocalAppData%\Microsoft\Silverlight\is|*.*|RECURSE 
  1435. FileKey2=%LocalLowAppData%\Microsoft\Silverlight\is|*.*|RECURSE
  1436. FileKey3=%LocalLowAppData%\Microsoft\Silverlight|*.tmp
  1437. ExcludeKey1=FILE|%LocalAppData%\Microsoft\Silverlight\is\*\|disabled.dat
  1438. ExcludeKey2=FILE|%LocalLowAppData%\Microsoft\Silverlight\is\*\|disabled.dat
  1439.  
  1440. [Ulead Smart Saver Pro 3.0]
  1441. ID=2059
  1442. LangSecRef=3023
  1443. Detect=HKCU\Software\Ulead Systems\Ulead SmartSaver Pro\3.0
  1444. Default=True
  1445. RegKey1=HKCU\Software\Ulead Systems\Ulead SmartSaver Pro\3.0\Recent File List
  1446.  
  1447. [Norton AntiVirus]
  1448. ID=2060
  1449. LangSecRef=3024
  1450. Detect=HKLM\SOFTWARE\Symantec\Norton AntiVirus NT\Install\7.50
  1451. Default=True
  1452. FileKey1=%commonappdata%\Symantec\Norton AntiVirus Corporate Edition\7.5\Logs|*.log
  1453. FileKey2=%localappdata%\Symantec\Norton AntiVirus Corporate Edition\7.5\Logs|*.log
  1454. FileKey3=%commonappdata%\Symantec\LiveUpdate\Downloads|*.*
  1455.  
  1456. [Symantec AntiVirus]
  1457. ID=2061
  1458. LangSecRef=3024
  1459. Detect=HKLM\SOFTWARE\Symantec\Symantec AntiVirus\Install\7.50
  1460. Default=True
  1461. FileKey1=%commonappdata%\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs|*.log
  1462. FileKey2=%localappdata%\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs|*.log
  1463. FileKey3=%commonappdata%\Symantec\LiveUpdate\Downloads|*.*
  1464.  
  1465. [MS Snapshot Viewer]
  1466. ID=2062
  1467. LangSecRef=3025
  1468. Detect=HKCU\Software\Microsoft\Snapshot Viewer
  1469. Default=True
  1470. RegKey1=HKCU\Software\Microsoft\Snapshot Viewer\Recent File List
  1471.  
  1472. [Remote Desktop]
  1473. ID=2063
  1474. LangSecRef=3025
  1475. Detect=HKCU\Software\Microsoft\Terminal Server Client
  1476. Default=True
  1477. FileKey1=%localappdata%\Microsoft\Terminal Server Client\Cache|*.*
  1478. RegKey1=HKCU\Software\Microsoft\Terminal Server Client\Default
  1479. ExcludeKey1=REG|HKCU\Software\Microsoft\Terminal Server Client\Default\AddIns
  1480.  
  1481. [MS Management Console]
  1482. ID=2064
  1483. LangSecRef=3025
  1484. Detect=HKCU\Software\Microsoft\Microsoft Management Console
  1485. Default=True
  1486. RegKey1=HKCU\Software\Microsoft\Microsoft Management Console\Recent File List
  1487.  
  1488. [MS Wordpad]
  1489. ID=2065
  1490. LangSecRef=3025
  1491. Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad
  1492. Default=True
  1493. RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Recent File List
  1494.  
  1495. [MS Paint]
  1496. ID=2066
  1497. LangSecRef=3025
  1498. Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Paint
  1499. Default=True
  1500. RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Paint\Recent File List
  1501.  
  1502. [MS Photo Editor]
  1503. ID=2067
  1504. LangSecRef=3025
  1505. Detect=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor
  1506. Default=True 
  1507. RegKey1=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile1
  1508. RegKey2=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile2
  1509. RegKey3=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile3
  1510. RegKey4=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile4
  1511. RegKey5=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType1
  1512. RegKey6=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType2
  1513. RegKey7=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType3
  1514. RegKey8=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType4
  1515.  
  1516. [MS Search]
  1517. ID=2266
  1518. LangSecRef=3025
  1519. DetectFile=%CommonAppData%\Microsoft\Search
  1520. Default=True
  1521. FileKey1=%CommonAppData%\Microsoft\Search|*.log|RECURSE
  1522.  
  1523. [Nero Burning ROM]
  1524. ID=2068
  1525. LangSecRef=3021
  1526. Detect=HKCU\Software\ahead\Nero - Burning Rom
  1527. Default=True
  1528. RegKey1=HKCU\Software\ahead\Nero - Burning Rom\Settings|BrowserDir
  1529. RegKey2=HKCU\Software\ahead\Nero - Burning Rom\Settings|ImageDir
  1530. RegKey3=HKCU\Software\ahead\Nero - Burning Rom\Settings|WorkingDir
  1531. RegKey4=HKLM\Software\Ahead\Nero - Burning Rom\Settings|ImageDir
  1532. RegKey5=HKLM\Software\Ahead\Nero - Burning Rom\Settings|BootImageDir
  1533. RegKey6=HKCU\Software\Ahead\Nero - Burning Rom\Recent File List
  1534. RegKey7=HKCU\Software\Ahead\Cover Designer\Recent File List
  1535. RegKey8=HKCU\Software\Ahead\Nero Wave Editor\Recent File List
  1536. FileKey1=%ProgramFiles%\Ahead\Nero|NeroHistory.log
  1537.  
  1538. [Nero Burning ROM 9]
  1539. ID=2142
  1540. LangSecRef=3021
  1541. Detect=HKCU\Software\Nero\Nero 9
  1542. Default=True
  1543. RegKey1=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|BrowserDir
  1544. RegKey2=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|ImageDir
  1545. RegKey3=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|WorkingDir
  1546. RegKey4=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|BootImageDir
  1547. RegKey5=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Recent File List
  1548. FileKey1=%appdata%\Nero\Nero 9\Nero Burning ROM|*.log
  1549.  
  1550. [Nero Burning ROM 10]
  1551. ID=2155
  1552. LangSecRef=3021
  1553. Detect=HKCU\Software\Nero\Nero 10
  1554. Default=True
  1555. RegKey1=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|BrowserDir
  1556. RegKey2=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|ImageDir
  1557. RegKey3=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|WorkingDir
  1558. RegKey4=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|BootImageDir
  1559. RegKey5=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|NeroCompilation
  1560. RegKey6=HKCU\Software\Nero\Nero 10\Nero\Recent File List
  1561. FileKey1=%appdata%\Nero\Nero 10\Nero Burning ROM|*.log
  1562.  
  1563. [Nero Burning ROM 2014]
  1564. ID=2365
  1565. LangSecRef=3021
  1566. Detect=HKCU\Software\Nero\Nero 15\Nero Burning ROM
  1567. Default=True
  1568. RegKey1=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BrowserDir
  1569. RegKey2=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|ImageDir
  1570. RegKey3=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|WorkingDir
  1571. RegKey4=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BootImageDir
  1572. RegKey5=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|NeroCompilation
  1573. RegKey6=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings\NeroIsoListView|IsoPath
  1574. RegKey7=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Recent File List
  1575. RegKey8=HKCU\Software\Nero\Nero 15\Nero Burning ROM\AutoSave|LastAutoSave
  1576. RegKey9=HKCU\Software\Nero\Nero 15\Nero Burning ROM\General|LastSaveTrackPath
  1577. FileKey1=%AppData%\Nero\Nero 15\Nero Burning ROM|NeroHistory.log
  1578.  
  1579. [Nero 12 Platinum HD Suite]
  1580. ID=2331
  1581. LangSecRef=3021
  1582. Detect=HKLM\Software\Nero\Nero 12
  1583. Default=True
  1584. RegKey1=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Recent File List
  1585. RegKey2=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|BrowserDir
  1586. RegKey3=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|ImageDir
  1587. RegKey4=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|NeroCompilation
  1588. RegKey5=HKCU\Software\Nero\Nero 12\Nero Express\Recent File List
  1589. RegKey6=HKCU\Software\Nero\Nero 12\Nero Express\Settings|WorkingDir
  1590. RegKey7=HKCU\Software\Nero\Nero 12\Nero Express\Settings|BrowserDir
  1591. RegKey8=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastISODir
  1592. RegKey9=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastAudioDir
  1593. RegKey10=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastVideoDVDKey
  1594. RegKey11=HKCU\Software\Nero\Nero 12\Nero WaveEditor\Recent File List
  1595. RegKey12=HKCU\Software\Nero\Nero 12\Nero CoverDesigner\Recent File List
  1596. FileKey1=%CommonAppData%\Nero\PeakFiles|*.tmp
  1597. FileKey2=%AppData%\Nero\Nero 12\Nero Recode\AnalysisData|*.jpg;*.xml
  1598. FileKey3=%AppData%\Nero\Nero 12\Nero BackItUp\Cache|*.txt
  1599. FileKey4=%AppData%\Nero\Nero 12\Nero Burning ROM|*.log;*Burning*.dmp
  1600. FileKey5=%AppData%\Nero\Nero 12\Nero3D|Direct3D.log
  1601. FileKey6=%AppData%\Nero\Nero 12\Nero Vision|NeroVideoLog.txt
  1602. FileKey7=%SystemDrive%\Windows\SysWOW64|*-NeroRescueAgent.txt
  1603.  
  1604. [Nero 14 Platinum HD Suite]
  1605. ID=2375
  1606. LangSecRef=3021
  1607. Detect=HKLM\Software\Nero\Nero 15
  1608. Default=True
  1609. RegKey1=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|WorkingDir
  1610. RegKey2=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BootImageDir
  1611. RegKey3=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings\NeroIsoListView|IsoPath
  1612. RegKey4=HKCU\Software\Nero\Nero 15\Nero Burning ROM\AutoSave|LastAutoSave
  1613. RegKey5=HKCU\Software\Nero\Nero 15\Nero Burning ROM\General|LastSaveTrackPath
  1614. RegKey6=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Recent File List
  1615. RegKey7=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BrowserDir
  1616. RegKey8=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|ImageDir
  1617. RegKey9=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|NeroCompilation
  1618. RegKey10=HKCU\Software\Nero\Nero 15\Nero Express\Recent File List
  1619. RegKey11=HKCU\Software\Nero\Nero 15\Nero Express\Settings|WorkingDir
  1620. RegKey12=HKCU\Software\Nero\Nero 15\Nero Express\Settings|BrowserDir
  1621. RegKey13=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastISODir
  1622. RegKey14=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastAudioDir
  1623. RegKey15=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastVideoDVDKey
  1624. RegKey16=HKCU\Software\Nero\Nero 15\Nero WaveEditor\Recent File List
  1625. RegKey17=HKCU\Software\Nero\Nero 15\Nero CoverDesigner\Recent File List
  1626. FileKey1=%CommonAppData%\Nero\PeakFiles|*.tmp
  1627. FileKey2=%AppData%\Nero\Nero 15\Nero Recode\AnalysisData|*.jpg;*.xml
  1628. FileKey3=%AppData%\Nero\Nero 15\Nero BackItUp\Cache|*.txt
  1629. FileKey4=%AppData%\Nero\Nero 15\Nero Burning ROM|*.log;*Burning*.dmp
  1630. FileKey5=%SystemDrive%\Windows\SysWOW64|*-NeroRescueAgent.txt
  1631. FileKey6=%AppData%\Nero\Nero 15\Nero3D|Direct3D.log
  1632. FileKey7=%AppData%\Nero\Nero 15\Nero Vision|NeroVideoLog.txt
  1633. FileKey8=%AppData%\Nero\Nero 15\Nero Welcome|LogFile.txt
  1634. FileKey9=%AppData%\Nero\Nero Blu-ray Player|LogFile.txt
  1635. FileKey10=%AppData%\Nero\OnlineServices|LoadData.tmp;LoadData_bak.tmp
  1636. FileKey11=%AppData%\Nero\ControlCenter|Sync.log
  1637. FileKey12=%CommonAppData%\Nero\Nero 11\ACME|ACME.log
  1638. FileKey13=%CommonAppData%\Nero\ACME|ACME.log
  1639.  
  1640. [Nero Video 11]
  1641. ID=2274
  1642. LangSecRef=3023
  1643. Detect=HKCU\Software\Nero\Nero 11\Nero Vision
  1644. Default=True
  1645. FileKey1=%AppData%\Nero\Nero 11\Nero Vision|*.log;*.txt
  1646. FileKey2=%AppData%\Nero\Nero 11\Nero Vision\Log|*.*
  1647. FileKey3=%AppData%\Nero\Nero 11\Nero Vision\NVFACache|*.*
  1648. FileKey4=%AppData%\Nero\Nero 11\Nero3D|*.log
  1649.  
  1650. [Nero Vision 10]
  1651. ID=2275
  1652. LangSecRef=3023
  1653. Detect=HKCU\Software\Nero\Nero 10\Nero Vision
  1654. Default=True
  1655. FileKey1=%AppData%\Nero\Nero 10\Nero Vision\Log|*.*
  1656. FileKey2=%AppData%\Nero\Nero 10\Nero Vision\NVFACache|*.*
  1657. FileKey3=%AppData%\Nero\Nero 10\Nero Vision|*.txt
  1658. FileKey4=%AppData%\Nero\Nero 10\Nero3D|*.log
  1659.  
  1660. [Nero BackItUp 2014]
  1661. ID=2370
  1662. LangSecRef=3021
  1663. Detect=HKLM\SOFTWARE\Wow6432Node\Nero\Nero 15\Nero BackItUp
  1664. Detect2=HKCU\Software\Nero\Nero 15\Nero BackItUp
  1665. Default=True
  1666. FileKey1=%AppData%\Nero\Nero 15\Nero BackItUp\Cache|*.txt
  1667.  
  1668. [Nero Express 2014]
  1669. ID=2371
  1670. LangSecRef=3021
  1671. Detect=HKLM\SOFTWARE\Wow6432Node\Nero\Nero 15\Nero Express
  1672. Detect2=HKCU\Software\Nero\Nero 15\Nero Express
  1673. Default=True
  1674. RegKey1=HKCU\Software\Nero\Nero 15\Nero Express\Recent File List
  1675. RegKey2=HKCU\Software\Nero\Nero 15\Nero Express\Settings|WorkingDir
  1676. RegKey3=HKCU\Software\Nero\Nero 15\Nero Express\Settings|BrowserDir
  1677. RegKey4=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastISODir
  1678. RegKey5=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastAudioDir
  1679. RegKey6=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastVideoDVDKey
  1680.  
  1681. [WinAce 2.0]
  1682. ID=2069
  1683. LangSecRef=3024
  1684. Detect=HKCU\Software\e-merge\WinAce\2.0
  1685. Default=True
  1686. RegKey1=HKCU\Software\e-merge\WinAce\2.0\Favorites
  1687. RegKey2=HKCU\Software\e-merge\WinAce\2.0\MRU Items
  1688.  
  1689. [SpyBot Search and Destroy]
  1690. ID=2070
  1691. LangSecRef=3024
  1692. Detect=HKCU\Software\Safer Networking Limited\SpybotSnD
  1693. Default=True
  1694. FileKey1=%commonappdata%\Spybot - Search & Destroy\Logs|*.*
  1695. FileKey2=%ProgramFiles%\Spybot - Search & Destroy|advdebug.txt
  1696. FileKey3=%commonappdata%\Spybot - Search & Destroy|Statistics.ini
  1697. FileKey4=%windir%\All Users\Application Data\Spybot - Search & Destroy\Logs|*.*
  1698. FileKey5=%windir%\All Users\Application Data\Spybot - Search & Destroy|Statistics.ini
  1699. FileKey6=%commonappdata%\Spybot - Search & Destroy\Backups|*.log
  1700.  
  1701. [Ad-Aware SE Personal]
  1702. ID=2071
  1703. LangSecRef=3024
  1704. DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
  1705. Default=True
  1706. FileKey1=%ProgramFiles%\Lavasoft\Ad-Aware SE Personal|defs.ref.old
  1707. FileKey2=%appdata%\Lavasoft\Ad-Aware\Logs|*.txt
  1708.  
  1709. [Ad-Aware SE Professional]
  1710. ID=2072
  1711. LangSecRef=3024
  1712. DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe
  1713. Default=True
  1714. FileKey1=%ProgramFiles%\Lavasoft\Ad-Aware SE Professional|defs.ref.old
  1715. FileKey2=%appdata%\Lavasoft\Ad-Aware\Logs|*.txt
  1716.  
  1717. [Ad-Aware SE Plus]
  1718. ID=2073
  1719. LangSecRef=3024
  1720. DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware SE Plus\Ad-Aware.exe
  1721. Default=True
  1722. FileKey1=%ProgramFiles%\Lavasoft\Ad-Aware SE Plus|defs.ref.old
  1723. FileKey2=%appdata%\Lavasoft\Ad-Aware\Logs|*.txt
  1724.  
  1725. [Ad-Aware]
  1726. ID=2163
  1727. LangSecRef=3024
  1728. DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware\Ad-Aware.exe
  1729. Default=True
  1730. Filekey1=%commonappdata%\Lavasoft\Ad-Aware\Logs|*.log
  1731.  
  1732. [Webroot SpySweeper]
  1733. ID=2074
  1734. LangSecRef=3024
  1735. Detect=HKCU\Software\Webroot\SpySweeper
  1736. FileKey1=%ProgramFiles%\Webroot\Spy Sweeper\Temp|*.*
  1737. FileKey2=%appdata%\Webroot\Spy Sweeper\Logs|*Log.txt
  1738.  
  1739. [Driver Cleaner Pro]
  1740. ID=2075
  1741. LangSecRef=3024
  1742. DetectFile=%ProgramFiles%\Driver Cleaner Pro\DCleaner.exe
  1743. Default=True
  1744. FileKey1=%ProgramFiles%\Driver Cleaner Pro\Log|*.log
  1745.  
  1746. [Kazaa (Search History)]
  1747. ID=2076
  1748. LangSecRef=3022
  1749. Detect=HKCU\Software\Kazaa
  1750. Default=True
  1751. RegKey1=HKCU\Software\Kazaa\Search
  1752.  
  1753. [Netscape Navigator 4.x]
  1754. ID=2077
  1755. LangSecRef=3022
  1756. Detect=HKCU\Software\Netscape\Netscape Navigator\Main
  1757. Default=True
  1758. FileKey1=%ProgramFiles%\Netscape\Users\default|netscape.hst;cookies.txt
  1759. FileKey2=%ProgramFiles%\Netscape\Users\default\cache|*.*
  1760.  
  1761. [Microsoft Visual Studio 6.0]
  1762. ID=2078
  1763. LangSecRef=3021
  1764. Detect=HKCU\Software\Microsoft\VisualStudio\6.0
  1765. Default=True
  1766. RegKey1=HKCU\Software\Microsoft\VisualStudio\6.0\FileMRUList
  1767. RegKey2=HKCU\Software\Microsoft\VisualStudio\6.0\MenuMRUList
  1768. RegKey3=HKCU\Software\Microsoft\VisualStudio\6.0\ProjectMRUList
  1769. RegKey4=HKCU\Software\Microsoft\Visual Basic\6.0\RecentFiles
  1770.  
  1771. [Axialis IconWorkshop]
  1772. ID=2079
  1773. LangSecRef=3023
  1774. Detect=HKCU\Software\Axialis\IconWorkshop
  1775. Default=True
  1776. RegKey1=HKCU\Software\Axialis\IconWorkshop\Recent File List
  1777. RegKey2=HKCU\Software\Axialis\IconWorkshop\Axialis Recent Files
  1778. RegKey3=HKCU\Software\Axialis\IconWorkshop\CoolBarList
  1779. FileKey1=%appdata%\Axialis\Temporary Preview Files|*.*|RECURSE
  1780. FileKey2=%LocalAppData%\Axialis\Temporary Preview Files|*.*|RECURSE
  1781.  
  1782. [eMule (Search History)]
  1783. ID=2080
  1784. LangSecRef=3022
  1785. Detect=HKCU\Software\eMule
  1786. Default=True
  1787. FileKey1=%ProgramFiles%\eMule\config|AC_SearchStrings.dat
  1788. FileKey2=%LocalAppData%\eMule\config|AC_SearchStrings.dat
  1789. FileKey3=%CommonAppData%\eMule\config|AC_SearchStrings.dat
  1790.  
  1791. [eMule (File Hashes)]
  1792. ID=2081
  1793. LangSecRef=3022
  1794. Detect=HKCU\Software\eMule
  1795. Default=False
  1796. FileKey1=%ProgramFiles%\eMule\config|known.met;known2.met;known2_64.met
  1797. FileKey2=%LocalAppData%\eMule\config|known.met;known2.met;known2_64.met
  1798. FileKey3=%CommonAppData%\eMule\config|known.met;known2.met;known2_64.met
  1799.  
  1800. [WinISO]
  1801. ID=2082
  1802. LangSecRef=3024
  1803. Detect=HKLM\Software\WinISO
  1804. Default=True
  1805. RegKey1=HKLM\Software\WinISO\Reopen
  1806.  
  1807. [IsoBuster]
  1808. ID=2083
  1809. LangSecRef=3021
  1810. Detect=HKCU\Software\Smart Projects\IsoBuster
  1811. Default=True
  1812. RegKey1=HKCU\Software\Smart Projects\IsoBuster|ImageFilePath
  1813.  
  1814. [Media Player Classic]
  1815. ID=2084
  1816. LangSecRef=3023
  1817. Detect=HKCU\Software\Gabest\Media Player Classic
  1818. Default=True
  1819. RegKey1=HKCU\Software\Gabest\Media Player Classic\Recent File List
  1820. RegKey2=HKCU\Software\Gabest\Media Player Classic\Recent Dub List
  1821. RegKey3=HKCU\Software\Gabest\Media Player Classic\Capture|FileName
  1822. FileKey1=%appdata%\Media Player Classic|default.mpcpl
  1823.  
  1824. [BSPlayer]
  1825. ID=2085
  1826. LangSecRef=3023
  1827. Detect=HKCU\Software\BST\bsplayer
  1828. Default=True
  1829. RegKey1=HKCU\Software\BST\bsplayer|File0
  1830. RegKey2=HKCU\Software\BST\bsplayer|File1
  1831. RegKey3=HKCU\Software\BST\bsplayer|File2
  1832. RegKey4=HKCU\Software\BST\bsplayer|File3
  1833. RegKey5=HKCU\Software\BST\bsplayer|File4
  1834. RegKey6=HKCU\Software\BST\bsplayer|File5
  1835. RegKey7=HKCU\Software\BST\bsplayer|File6
  1836. RegKey8=HKCU\Software\BST\bsplayer|File7
  1837. RegKey9=HKCU\Software\BST\bsplayer|File8
  1838. RegKey10=HKCU\Software\BST\bsplayer|File9
  1839.  
  1840. [VLC Media Player]
  1841. ID=2164
  1842. LangSecRef=3023
  1843. Detect=HKLM\Software\VideoLAN\VLC
  1844. DetectFile=%ProgramFiles%\videolan\vlc\vlc.exe
  1845. Default=True
  1846. FileKey1=%appdata%\vlc\art\artistalbum\|*.*|REMOVESELF
  1847. FileKey2=%appdata%\vlc\art\arturl\|*.*|REMOVESELF
  1848.  
  1849. [MediaMonkey]
  1850. ID=2165
  1851. LangSecRef=3023
  1852. Detect=HKCU\Software\MediaMonkey
  1853. DetectFile=%ProgramFiles%\MediaMonkey\MediaMonkey.exe
  1854. Default=True
  1855. FileKey1=%localappdata%\MediaMonkey|MediaMonkey.m3u
  1856. FileKey2=%localappdata%\MediaMonkey\Previews|*.*|RECURSE
  1857.  
  1858. [Winamp]
  1859. ID=2166
  1860. LangSecRef=3023
  1861. Detect=HKCU\Software\Winamp
  1862. Default=True
  1863. FileKey1=%ProgramFiles%\Winamp\Plugins\ml|recent.dat
  1864. FileKey2=%ProgramFiles%\Winamp\Plugins\ml\cache|*.*|RECURSE
  1865. FileKey3=%AppData%\Winamp\Plugins\ml|recent.dat
  1866. FileKey4=%AppData%\Winamp\Plugins\ml\Cache|*.*|RECURSE
  1867.  
  1868. [MusicMatch Jukebox]
  1869. ID=2231
  1870. LangSecRef=3023
  1871. Detect=HKCU\Software\Musicmatch\Musicmatch Jukebox
  1872. Default=True
  1873. FileKey1=%LocalAppData%\Musicmatch\Jukebox|*.log;*log.txt
  1874. FileKey2=%ProgramFiles%\MUSICMATCH\Musicmatch Jukebox\TEMP|*.*
  1875.  
  1876. [Sound Forge 6.0]
  1877. ID=2086
  1878. LangSecRef=3022
  1879. Detect=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics
  1880. Default=True
  1881. RegKey1=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30110
  1882. RegKey2=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30111
  1883. RegKey3=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30112
  1884. RegKey4=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30113
  1885. RegKey5=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30114
  1886. RegKey6=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30115
  1887.  
  1888. [Audacity]
  1889. ID=2171
  1890. LangSecRef=3023
  1891. Detect=HKCU\Software\Audacity
  1892. Default=True
  1893. RegKey1=HKCU\Software\Audacity\Audacity\RecentFiles
  1894.  
  1895. [Windows Live Messenger]
  1896. ID=2087
  1897. LangSecRef=3022
  1898. Detect=HKCU\Software\Microsoft\MSNMessenger\PerPassportSettings
  1899. Default=True
  1900. RegKey1=HKCU\Software\Microsoft\MessengerService\ListCache\.NET Messenger Service
  1901. FileKey1=%AppData%\Microsoft\MSN Messenger|*.sqm|RECURSE
  1902. FileKey2=%LocalAppData%\Microsoft\Messenger|*.uccapilog;*.bak
  1903. FileKey3=%UserProfile%\Tracing|WindowsLiveMessenger*.uccapilog;WindowsLiveMessenger*.uccapilog.bak
  1904.  
  1905. [Skype]
  1906. ID=2205
  1907. LangSecRef=3022
  1908. DetectFile=%ProgramFiles%\Skype\Phone\Skype.exe
  1909. Default=True
  1910. FileKey1=%AppData%\Skype|temp*
  1911.  
  1912. [AOL Instant Messenger]
  1913. ID=2206
  1914. LangSecRef=3022
  1915. DetectFile=%ProgramFiles%\AIM\aim.exe
  1916. Default=True
  1917. FileKey1=%AppData%\acccore\caches\bart|*.*|RECURSE
  1918. FileKey2=%AppData%\acccore\caches\users|*.*|REMOVESELF
  1919. FileKey3=%LocalAppData%\AIM\Settings\aolbartcache|*.*|RECURSE
  1920.  
  1921. [Camfrog Video Chat]
  1922. ID=2207
  1923. LangSecRef=3022
  1924. DetectFile=%ProgramFiles%\Camfrog\Camfrog Video Chat
  1925. DetectFile2=%AppData%\Camfrog\history.db
  1926. Default=True
  1927. FileKey1=%LocalAppData%\CrashRpt|*.*|REMOVESELF
  1928. FileKey2=%AppData%\Camfrog\cache|*.*|RECURSE
  1929.  
  1930. [Miranda Instant Messenger]
  1931. ID=2208
  1932. LangSecRef=3022
  1933. DetectFile1=%ProgramFiles%\Miranda IM\miranda32.exe
  1934. DetectFile2=%ProgramFiles%\Miranda IM\miranda64.exe
  1935. Default=True
  1936. FileKey1=%AppData%\Miranda|*.jpg|REMOVESELF
  1937.  
  1938. [Pidgin]
  1939. ID=2209
  1940. LangSecRef=3022
  1941. DetectFile=%ProgramFiles%\Pidgin\pidgin.exe
  1942. Default=True
  1943. FileKey1=%AppData%\.purple\autoaccept|*.*|REMOVESELF
  1944. FileKey2=%AppData%\.purple\icons|*.*
  1945.  
  1946. [Yahoo Messenger]
  1947. ID=2210
  1948. LangSecRef=3022
  1949. DetectFile=%ProgramFiles%\Yahoo!\Messenger\YahooMessenger.exe
  1950. Default=True
  1951. FileKey1=%ProgramFiles%\Yahoo!\Messenger\Cache|*.*|RECURSE
  1952. FileKey2=%ProgramFiles%\Yahoo!\Messenger\IMVCache|*.*|RECURSE
  1953. FileKey3=%ProgramFiles%\Yahoo!\Messenger|ypager.log
  1954. FileKey4=%ProgramFiles%\Yahoo!\Messenger\Logs|*.*
  1955. FileKey5=%ProgramFiles%\Yahoo!\Messenger\Games|*.gif|RECURSE
  1956.  
  1957. [ooVoo]
  1958. ID=2211
  1959. LangSecRef=3022
  1960. DetectFile=%ProgramFiles%\ooVoo\ooVoo.exe
  1961. Default=True
  1962. FileKey1=%AppData%\ooVoo Details\cache|*.*
  1963. FileKey2=%AppData%\ooVoo Details\logs|*.*
  1964.  
  1965. [TeamSpeak]
  1966. ID=2212
  1967. LangSecRef=3022
  1968. DetectFile1=%ProgramFiles%\TeamSpeak 3 Client\ts3client_win32.exe
  1969. DetectFile2=%ProgramFiles%\TeamSpeak 3 Client\ts3client_win64.exe
  1970. Default=True
  1971. FileKey1=%AppData%\TS3Client\cache|*.*|REMOVESELF
  1972. FileKey2=%AppData%\TS3Client\Logs|*.*
  1973.  
  1974. [Ventrilo Client]
  1975. ID=2213
  1976. LangSecRef=3022
  1977. DetectFile=%ProgramFiles%\Ventrilo\Ventrilo.exe
  1978. Default=True
  1979. FileKey1=%AppData%\Ventrilo|ventrilo.log
  1980. FileKey2=%AppData%\Ventrilo\temp|*.*
  1981. FileKey3=%AppData%\Ventrilo\recordings|*.*
  1982.  
  1983. [Ventrilo Server]
  1984. ID=2214
  1985. LangSecRef=3022
  1986. DetectFile=%ProgramFiles%\VentSrv\ventrilo_srv.exe
  1987. Default=True
  1988. FileKey1=%ProgramFiles%\VentSrv|ventrilo_srv.log
  1989.  
  1990. [MySpaceIM]
  1991. ID=2230
  1992. LangSecRef=3022
  1993. Detect=HKCU\Software\MySpace\IM
  1994. Default=True
  1995. FileKey1=%AppData%\MySpace\IM\Install|*.*
  1996. FileKey2=%AppData%\MySpace\IM\Logs|*.*
  1997.  
  1998. [Acronis True Image]
  1999. ID=2175
  2000. LangSecRef=3024
  2001. Detect=HKCU\Software\Acronis\TrueImage
  2002. Detect2=HKCU\Software\Acronis\TrueImageHome
  2003. Detect3=HKCU\Software\Acronis\ True Image Home
  2004. Detect4=HKLM\Software\Acronis\TrueImage
  2005. Default=False
  2006. FileKey1=%AppData%\Acronis\TrueImage\Logs|*.log
  2007. FileKey2=%AppData%\Acronis\TrueImageHome\Logs|*.log
  2008. FileKey3=%CommonAppData%\Acronis\TrueImage\Logs|*.log
  2009. FileKey4=%CommonAppData%\Acronis\TrueImageHome\Logs|*.log
  2010.  
  2011. [WinZip]
  2012. ID=2088
  2013. LangSecRef=3024
  2014. Detect=HKCU\Software\Nico Mak Computing\WinZip
  2015. Default=True
  2016. RegKey1=HKCU\Software\Nico Mak Computing\WinZip\filemenu
  2017. RegKey2=HKCU\Software\Nico Mak Computing\WinZip\extract
  2018. RegKey3=HKCU\Software\Nico Mak Computing\WinZip\directories|DefDir
  2019. RegKey4=HKCU\Software\Nico Mak Computing\WinZip\directories|ExtractTo
  2020. RegKey5=HKCU\Software\Nico Mak Computing\WinZip\directories|gzAddDir
  2021. RegKey6=HKCU\Software\Nico Mak Computing\WinZip\directories|zDefDir
  2022. RegKey7=HKCU\Software\Nico Mak Computing\WinZip\directories|AddDir
  2023. RegKey8=HKCU\Software\Nico Mak Computing\WinZip\directories|gzExtractTo
  2024. RegKey9=HKCU\Software\Nico Mak Computing\WinZip\rrs\Opened
  2025. RegKey10=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|0
  2026. RegKey11=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|1
  2027. RegKey12=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|2
  2028. RegKey13=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|3
  2029. RegKey14=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|4
  2030. RegKey15=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|5
  2031. RegKey16=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|6
  2032. RegKey17=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|7
  2033. RegKey18=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|8
  2034. RegKey19=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|9
  2035. RegKey20=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|10
  2036. RegKey21=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|11
  2037. RegKey22=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|12
  2038. RegKey23=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|13
  2039. RegKey24=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|14
  2040. RegKey25=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|15
  2041. RegKey26=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|16
  2042. RegKey27=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|17
  2043. RegKey28=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|18
  2044. RegKey29=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|19
  2045. RegKey30=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|20
  2046. FileKey1=%AppData%\WinZip\WINZIPSCANNER\Registry Cleaner|log_*.log
  2047. FileKey2=%AppData%\WinZip\WINZIPSCANNER\System Cleaner|log_*.log
  2048.  
  2049. [WinRAR]
  2050. ID=2089
  2051. LangSecRef=3024
  2052. Detect=HKCU\Software\WinRAR
  2053. Default=True
  2054. RegKey1=HKCU\Software\WinRAR\ArcHistory
  2055. RegKey2=HKCU\Software\WinRAR\General|LastFolder
  2056. RegKey3=HKCU\Software\WinRAR\DialogEditHistory\Arcname
  2057. RegKey4=HKCU\Software\WinRAR\DialogEditHistory\ExtrPath
  2058. RegKey5=HKCU\Software\WinRAR\DialogEditHistory\FindArcNames
  2059. RegKey6=HKCU\Software\WinRAR\DialogEditHistory\FindNames
  2060. RegKey7=HKCU\Software\WinRAR\DialogEditHistory\FindText
  2061. RegKey8=HKCU\Software\WinRAR\DialogEditHistory\ArcCmtName
  2062.  
  2063. [7-Zip]
  2064. ID=2090
  2065. LangSecRef=3024
  2066. Default=True
  2067. Detect=HKCU\Software\7-Zip\
  2068. RegKey1=HKCU\Software\7-Zip\Compression\ArcHistory
  2069. RegKey2=HKCU\Software\7-Zip\Extraction\PathHistory
  2070. RegKey3=HKCU\Software\7-Zip\FM|CopyHistory
  2071. RegKey4=HKCU\Software\7-Zip\FM|FolderHistory
  2072. RegKey5=HKCU\Software\7-Zip\FM|PanelPath0
  2073. RegKey6=HKCU\Software\7-Zip\Compression|ArcHistory
  2074. RegKey7=HKCU\Software\7-Zip\Extraction|PathHistory
  2075.  
  2076. [BitZipper]
  2077. ID=2270
  2078. LangSecRef=3024
  2079. Detect=HKCU\Software\Bitberry\BitZipper
  2080. Default=True
  2081. RegKey1=HKCU\Software\Bitberry\BitZipper\Open
  2082. RegKey2=HKCU\Software\Bitberry\BitZipper\Preferences|ExtractLastFolder
  2083. RegKey3=HKCU\Software\Bitberry\BitZipper\Preferences|AddLastFolder
  2084. RegKey4=HKCU\Software\Bitberry\BitZipper\Preferences|NewLastFolder
  2085. RegKey5=HKCU\Software\Bitberry\BitZipper\Preferences|OpenLastFolder
  2086. RegKey6=HKCU\Software\Bitberry\BitZipper\Preferences\FolderMRU
  2087. RegKey7=HKCU\Software\Bitberry\BitZipper\Preferences\FilterMRU
  2088.  
  2089. [PowerArchiver]
  2090. ID=2091
  2091. LangSecRef=3024
  2092. Detect=HKCU\Software\PowerArchiver
  2093. Default=True
  2094. RegKey1=HKCU\Software\PowerArchiver\Files|Active_File1
  2095. RegKey2=HKCU\Software\PowerArchiver\Files|Active_File2
  2096. RegKey3=HKCU\Software\PowerArchiver\Files|Active_File3
  2097. RegKey4=HKCU\Software\PowerArchiver\Files|Active_File4
  2098. RegKey5=HKCU\Software\PowerArchiver\Files|Active_File5
  2099. RegKey6=HKCU\Software\PowerArchiver\Files|Extract1
  2100. RegKey7=HKCU\Software\PowerArchiver\Files|Extract2
  2101. RegKey8=HKCU\Software\PowerArchiver\Files|Extract3
  2102. RegKey9=HKCU\Software\PowerArchiver\Files|Extract4
  2103. RegKey10=HKCU\Software\PowerArchiver\Files|Extract5
  2104. RegKey11=HKCU\Software\PowerArchiver\Files|Last open dir
  2105. RegKey12=HKCU\Software\PowerArchiver\Files|Last backup dir
  2106. RegKey13=HKCU\Software\PowerArchiver\Files|Last add dir
  2107.  
  2108. [PowerArchiver 2013]
  2109. ID=2388
  2110. LangSecRef=3024
  2111. Detect=HKLM\SOFTWARE\PowerArchiverInt
  2112. Default=True
  2113. RegKey1=HKCU\Software\PowerArchiverInt\Files|Last open dirW
  2114. RegKey2=HKCU\Software\PowerArchiverInt\Files|Last backup dirW
  2115. RegKey3=HKCU\Software\PowerArchiverInt\Files|Last add dirW
  2116. RegKey4=HKCU\Software\PowerArchiverInt\Files|Active_File1W
  2117. RegKey5=HKCU\Software\PowerArchiverInt\Files|Active_File2W
  2118. RegKey6=HKCU\Software\PowerArchiverInt\Files|Active_File3W
  2119. RegKey7=HKCU\Software\PowerArchiverInt\Files|Active_File4W
  2120. RegKey8=HKCU\Software\PowerArchiverInt\Files|Active_File5W
  2121. RegKey9=HKCU\Software\PowerArchiverInt\Files|Active_File6W
  2122. RegKey10=HKCU\Software\PowerArchiverInt\Files|Active_File7W
  2123. RegKey11=HKCU\Software\PowerArchiverInt\Files|Active_File8W
  2124. RegKey12=HKCU\Software\PowerArchiverInt\Files|Active_File9W
  2125. RegKey13=HKCU\Software\PowerArchiverInt\Files|Active_File10W
  2126. RegKey14=HKCU\Software\PowerArchiverInt\Files|Active_File11W
  2127. RegKey15=HKCU\Software\PowerArchiverInt\Files|Active_File12W
  2128. RegKey16=HKCU\Software\PowerArchiverInt\Files|Active_File13W
  2129. RegKey17=HKCU\Software\PowerArchiverInt\Files|Active_File14W
  2130. RegKey18=HKCU\Software\PowerArchiverInt\Files|Active_File15W
  2131. RegKey19=HKCU\Software\PowerArchiverInt\Files|Extract1W
  2132. RegKey20=HKCU\Software\PowerArchiverInt\Files|Extract2W
  2133. RegKey21=HKCU\Software\PowerArchiverInt\Files|Extract3W
  2134. RegKey22=HKCU\Software\PowerArchiverInt\Files|Extract4W
  2135. RegKey23=HKCU\Software\PowerArchiverInt\Files|Extract5W
  2136. RegKey24=HKCU\Software\PowerArchiverInt\Files|Extract6W
  2137. RegKey25=HKCU\Software\PowerArchiverInt\Files|Extract7W
  2138. RegKey26=HKCU\Software\PowerArchiverInt\Files|Extract8W
  2139. RegKey27=HKCU\Software\PowerArchiverInt\Files|Extract9W
  2140. RegKey28=HKCU\Software\PowerArchiverInt\Files|Extract10W
  2141. RegKey29=HKCU\Software\PowerArchiverInt\Files|SelDir1W
  2142. RegKey30=HKCU\Software\PowerArchiverInt\Files|SelDir2W
  2143. RegKey31=HKCU\Software\PowerArchiverInt\Files|SelDir3W
  2144. RegKey32=HKCU\Software\PowerArchiverInt\Files|SelDir4W
  2145. RegKey33=HKCU\Software\PowerArchiverInt\Files|SelDir5W
  2146. RegKey34=HKCU\Software\PowerArchiverInt\Files|BFile1W
  2147. RegKey35=HKCU\Software\PowerArchiverInt\Files|BFile2W
  2148. RegKey36=HKCU\Software\PowerArchiverInt\Files|BFile3W
  2149. RegKey37=HKCU\Software\PowerArchiverInt\Files|BFile4W
  2150. RegKey38=HKCU\Software\PowerArchiverInt\Files|BFile5W
  2151.  
  2152. [ZipMagic]
  2153. ID=2092
  2154. LangSecRef=3024
  2155. Default=True
  2156. Detect=HKCU\Software\Mijenix\ZipMagic
  2157. RegKey1=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\Recent
  2158. RegKey2=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\Archive Manager\UnZip To
  2159. RegKey3=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\UnZip To
  2160. RegKey4=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\Zip To
  2161.  
  2162. [PicoZip]
  2163. ID=2093
  2164. LangSecRef=3024
  2165. Detect=HKCU\Software\PicoZip
  2166. Default=True
  2167. RegKey1=HKCU\Software\PicoZip\MRU Items
  2168. RegKey2=HKCU\Software\PicoZip\MRUExtract
  2169.  
  2170. [PKZip]
  2171. ID=2312
  2172. LangSecRef=3024
  2173. Detect=HKCU\Software\PKWARE\PKZIP70
  2174. Default=True
  2175. RegKey1=HKCU\Software\PKWARE\PKZIP70\History
  2176.  
  2177. [Java]
  2178. ID=2094
  2179. LangSecRef=3022
  2180. Detect=HKLM\SOFTWARE\JavaSoft\Java Plug-in
  2181. Detect2=HKLM\SOFTWARE\JavaSoft\Java Runtime Environment
  2182. Detect3=HKLM\SOFTWARE\JavaSoft\Java Web Start
  2183. Default=False
  2184. FileKey1=%AppData%\Sun\Java\Deployment\cache|*.*|RECURSE
  2185. FileKey2=%AppData%\Sun\Java\Deployment\javaws\cache|*.*|RECURSE
  2186. FileKey3=%AppData%\Sun\Java\Deployment\Log|*.*
  2187. FileKey4=%AppData%\Sun\Java\Deployment\tmp|*.*|RECURSE
  2188. FileKey5=%LocalLowAppData%\Sun\Java\Deployment\cache|*.*|RECURSE
  2189. FileKey6=%LocalLowAppData%\Sun\Java\Deployment\Log|*.*
  2190. FileKey7=%WinDir%\System32|jupdate*.log
  2191. FileKey8=%WinDir%\SysWOW64|jupdate*.log
  2192. FileKey9=%AppData%\java\webview|*.*
  2193. ExcludeKey1=FILE|%AppData%\java\webview\.lock
  2194.  
  2195. [FreshDownload]
  2196. ID=2095
  2197. LangSecRef=3022
  2198. Detect=HKCU\Software\FreshDevices\FreshDownload
  2199. Default=True
  2200. RegKey1=HKCU\Software\FreshDevices\FreshDownload\History
  2201.  
  2202. [Windows Movie Maker]
  2203. ID=2096
  2204. LangSecRef=3023
  2205. Detect=HKCU\Software\Microsoft\MovieMaker
  2206. Default=True
  2207. FileKey1=%localappdata%\Microsoft\Movie Maker|MEDIATAB0.DAT
  2208.  
  2209. [TextPad]
  2210. ID=2097
  2211. LangSecRef=3021
  2212. Detect=HKCU\Software\Helios\TextPad 4
  2213. Default=True
  2214. RegKey1=HKCU\Software\Helios\TextPad 4\Recent File List
  2215. RegKey2=HKCU\Software\Helios\TextPad 4\Recent Strings
  2216.  
  2217. [VirtualDub]
  2218. ID=2098
  2219. LangSecRef=3023
  2220. Default=True
  2221. Detect=HKCU\Software\Freeware\VirtualDub
  2222. RegKey1=HKCU\Software\Freeware\VirtualDub\MRU List
  2223.  
  2224. [RegEdit]
  2225. ID=2099
  2226. LangSecRef=3025
  2227. Default=True
  2228. RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit|LastKey
  2229.  
  2230. [Game Explorer]
  2231. ID=2174
  2232. LangSecRef=3025
  2233. DetectOS=6.0
  2234. DetectFile=%%LocalAppData%\Microsoft Games
  2235. DetectFile2=%LocalAppData%\Microsoft\Windows\GameExplorer
  2236. DetectFile3=%LocalAppData%\Microsoft\GFWLive
  2237. Default=False
  2238. FileKey1=%LocalAppData%\Microsoft Games|*.xml.bak|RECURSE
  2239. FileKey2=%LocalAppData%\Microsoft\Windows\GameExplorer\GameStatistics|*.*|REMOVESELF
  2240. FileKey3=%LocalAppData%\Microsoft\GFWLive|*.log|RECURSE
  2241.  
  2242. [AceHTML 5]
  2243. ID=2100
  2244. LangSecRef=3024
  2245. Default=True
  2246. Detect=HKCU\Software\Visicom Media\AceHTML 5 Freeware
  2247. RegKey1=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last URLs
  2248. RegKey2=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last Projects
  2249. RegKey3=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last Open
  2250. RegKey4=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last Files
  2251.  
  2252. [Alcohol 120%]
  2253. ID=2101
  2254. LangSecRef=3024
  2255. Detect=HKCU\Software\Alcohol Soft\Alcohol 120%
  2256. Default=True
  2257. RegKey1=HKCU\Software\Alcohol Soft\Alcohol 120%\MountedMRU
  2258. RegKey2=HKCU\Software\Alcohol Soft\Alcohol 120%\Basic\Image Finder|Current Dir
  2259. RegKey3=HKCU\Software\Alcohol Soft\Alcohol 120%\Options\Burning Wizard|ImageFile
  2260. FileKey1=%ProgramFiles%\Alcohol Soft\Alcohol 120|alcohol.log
  2261.  
  2262. [Alcohol 52%]
  2263. ID=2373
  2264. LangSecRef=3023
  2265. Detect=HKCU\Software\Alcohol Soft\Alcohol 52%
  2266. Default=True
  2267. RegKey1=HKCU\Software\Alcohol Soft\Alcohol 52%\MountedMRU
  2268. RegKey2=HKCU\Software\Alcohol Soft\Alcohol 52%\Options\Image Making Wizard|ImageFilePath
  2269. RegKey3=HKCU\Software\Alcohol Soft\Alcohol 52%\Options\Image Making Wizard|ImageFileName
  2270. RegKey4=HKCU\Software\Alcohol Soft\Alcohol 52%\Basic\Image Finder|Current Dir
  2271.  
  2272. [LeechGet]
  2273. ID=2102
  2274. LangSecRef=3022
  2275. Default=True
  2276. Detect=HKCU\Software\Cronosoft\LeechGet
  2277. RegKey1=HKCU\Software\Cronosoft\LeechGet\History
  2278.  
  2279. [GetRight]
  2280. ID=2103
  2281. LangSecRef=3022
  2282. Default=True
  2283. Detect=HKCU\Software\Headlight\GetRight\
  2284. RegKey1=HKCU\Software\Headlight\GetRight\MRU
  2285. RegKey2=HKCU\Software\Headlight\GetRight\TypedURLS
  2286. RegKey3=HKCU\Software\Headlight\GetRight\Recent File List
  2287. FileKey1=%ProgramFiles%\GetRight|GetRight.hst
  2288.  
  2289. [Download Accelerator Plus]
  2290. ID=2104
  2291. LangSecRef=3022
  2292. Detect=HKCU\Software\SpeedBit\Download Accelerator
  2293. DetectFile=%CommonAppData%\Speedbit\DAP
  2294. Default=True
  2295. RegKey1=HKLM\SOFTWARE\SpeedBit\Download Accelerator\FileList
  2296. RegKey2=HKCU\Software\SpeedBit\Download Accelerator\HistoryCombo
  2297. RegKey3=HKCU\Software\SpeedBit\Download Accelerator\ADS\SecondMedia
  2298. FileKey1=%ProgramFiles%\DAP\Temp|*.*
  2299. FileKey2=%ProgramFiles%\DAP\Ads|*.*
  2300. FileKey3=%ProgramFiles%\DAP\Log|*.*
  2301. FileKey4=%CommonAppData%\Speedbit\DAP\Log|*.*
  2302. FileKey5=%CommonAppData%\Speedbit\DAP\temp|*.tmp
  2303. FileKey6=%CommonAppData%\Speedbit\DAP\History|*.dat|RECURSE
  2304.  
  2305. [Free Download Manager]
  2306. ID=2194
  2307. LangSecRef=3022
  2308. DetectFile=%ProgramFiles%\Free Download Manager\fdm.exe
  2309. DetectFile2=%AppData%\Free Download Manager
  2310. Default=True
  2311. RegKey1=HKCU\Software\FreeDownloadManager.ORG\Free Download Manager\Settings|Find
  2312. RegKey2=HKCU\Software\FreeDownloadManager.ORG\Free Download Manager\Settings|History
  2313. FileKey1=%AppData%\Free Download Manager|*.bak;dlmgrsi.sav;downloads.his.sav;history.sav;spider.sav
  2314.  
  2315. [Internet Download Accelerator]
  2316. ID=2195
  2317. LangSecRef=3022
  2318. Detect=HKCU\Software\2VG\Internet Download Accelerator
  2319. Default=True
  2320. FileKey1=%AppData%\Internet Download Accelerator|history.xml
  2321. FileKey2=%AppData%\Internet Download Accelerator\temp|*.hnt;lastnews.*;playflv.html
  2322. FileKey3=%AppData%\Internet Download Accelerator\temp\Preview|*.*
  2323. FileKey4=%AppData%\Internet Download Accelerator\lists|default.xml
  2324.  
  2325. [Internet Download Manager]
  2326. ID=2196
  2327. LangSecRef=3022
  2328. Detect=HKLM\Software\Internet Download Manager
  2329. Default=True
  2330. FileKey1=%AppData%\IDM|UrlHistory*.txt;foldresHistory.txt
  2331. FileKey2=%AppData%\IDM\DwnlData\*|Log.log
  2332. FileKey3=%CommonAppData%\IDM\Cache|*.*
  2333. FileKey4=%AppData%\IDM\Grabber\Projects|project*.bak
  2334.  
  2335. [Orbit Downloader]
  2336. ID=2234
  2337. LangSecRef=3022
  2338. Detect=HKLM\SOFTWARE\Orbit
  2339. Default=True
  2340. FileKey1=%AppData%\Orbit|fileinfo.dat;filesave.dat
  2341.  
  2342. [Morpheus]
  2343. ID=2105
  2344. LangSecRef=3022
  2345. Default=True
  2346. Detect=HKCU\Software\Morpheus
  2347. RegKey1=HKCU\Software\Morpheus\Morpheus\Recent File List
  2348.  
  2349. [VNCViewer 3]
  2350. ID=2106
  2351. LangSecRef=3024
  2352. Default=True
  2353. Detect=HKCU\Software\ORL\VNCviewer
  2354. RegKey1=HKCU\Software\ORL\VNCviewer\MRU
  2355.  
  2356. [VNCViewer 4]
  2357. ID=2107
  2358. LangSecRef=3024
  2359. Default=True
  2360. Detect=HKCU\Software\RealVNC\VNCviewer4
  2361. RegKey1=HKCU\Software\RealVNC\VNCviewer4\MRU
  2362.  
  2363. [DVD Shrink]
  2364. ID=2108
  2365. LangSecRef=3023
  2366. Default=True
  2367. Detect=HKCU\Software\DVD Shrink\
  2368. RegKey1=HKCU\Software\DVD Shrink\DVD Shrink 3.2\Recent Targets
  2369. RegKey2=HKCU\Software\DVD Shrink\DVD Shrink 3.2\Recent File List
  2370. RegKey3=HKCU\Software\DVD Shrink\DVDSHRINK103\TargetFiles
  2371. RegKey4=HKCU\Software\DVD Shrink\DVDSHRINK103\SourceFolders
  2372.  
  2373. [Tivo Desktop]
  2374. ID=2109
  2375. LangSecRef=3023
  2376. Default=True
  2377. Detect=HKCU\SOFTWARE\TiVo\Desktop
  2378. FileKey1=%localappdata%\TiVo Desktop\Cache|*.*
  2379.  
  2380. [CA Anti-Virus]
  2381. ID=2110
  2382. LangSecRef=3024
  2383. Default=True
  2384. Detect=HKLM\SOFTWARE\ComputerAssociates\Anti-Virus
  2385. FileKey1=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus|*.log;*log.txt
  2386. FileKey2=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ArcTemp|*.tmp
  2387. FileKey3=%CommonAppData%\CA\Consumer\AV|*.tmp;*.txt|RECURSE
  2388. FileKey4=%CommonAppData%\CA\Consumer\CCube|*.tmp;*.txt|RECURSE
  2389. FileKey5=%CommonAppData%\CA\Consumer\ISS\FeedStore|*.txt|RECURSE
  2390. FileKey6=%ProgramFiles%\CA\CA Internet Security Suite\CA Anti-Virus\ArcTemp|*.*
  2391. FileKey7=%ProgramFiles%\CA\CA Internet Security Suite\CA Anti-Virus\tmp|*.*
  2392.  
  2393. [ZoneAlarm (Logs)]
  2394. ID=2111
  2395. LangSecRef=3022
  2396. Detect=HKLM\SOFTWARE\Zone Labs\ZoneAlarm
  2397. Default=True
  2398. FileKey1=%windir%\Internet Logs|ZALog*.*
  2399.  
  2400. [Google Earth]
  2401. ID=2112
  2402. LangSecRef=3021
  2403. Detect=HKLM\SOFTWARE\Google\Google Earth Plus
  2404. Detect2=HKLM\SOFTWARE\Google\Google Earth Pro
  2405. Detect3=HKCU\SOFTWARE\Google\Google Earth Plus
  2406. Detect4=HKCU\SOFTWARE\Google\Google Earth Pro
  2407. Default=True
  2408. RegKey1=HKCU\Software\Google\Google Earth Plus\Search
  2409. RegKey2=HKCU\Software\Google\Google Earth Pro\Search
  2410. FileKey1=%AppData%\Google\GoogleEarth|dbcache.dat
  2411. FileKey2=%AppData%\Google\GoogleEarth|dbcache.dat.index
  2412. FileKey3=%LocalAppData%\Google\GoogleEarth|dbcache.dat
  2413. FileKey4=%localappdata%\Google\GoogleEarth|dbcache.dat.index
  2414. FileKey5=%LocalLowAppData%\Google\GoogleEarth|dbcache.dat
  2415. FileKey6=%LocalLowAppData%\Google\GoogleEarth|dbcache.dat.index
  2416. FileKey7=%LocalLowAppData%\Google\GoogleEarth\webdata|*.*
  2417. FileKey8=%LocalLowAppData%\Google\GoogleEarth\unified_cache_leveldb_*|*.*
  2418.  
  2419. [PerfectDisk 7.0]
  2420. ID=2114
  2421. LangSecRef=3024
  2422. Detect=HKCU\Software\Raxco\PerfectDisk\7.0
  2423. Default=True
  2424. FileKey1=%commonappdata%\Raxco\PerfectDisk\7.0|PerfectDisk.log
  2425.  
  2426. [Daemon Tools]
  2427. ID=2187
  2428. LangSecRef=3024
  2429. Detect=HKCU\Software\DT Soft
  2430. DetectFile=%AppData%\DAEMON Tools Lite\
  2431. DetectFile2=%AppData%\DAEMON Tools Pro\
  2432. DetectFile3=%AppData%\DAEMON Tools\
  2433. Default=True
  2434. FileKey1=%AppData%\Daemon Tools lite\iconscache|*.*
  2435. FileKey2=%AppData%\DAEMON Tools Lite|imagecatalog.xml
  2436. FileKey3=%AppData%\DAEMON Tools|imagecatalog.xml
  2437. FileKey4=%AppData%\DAEMON Tools Pro|imagecatalog.xml
  2438.  
  2439. [Vuze]
  2440. ID=2115
  2441. LangSecRef=3022
  2442. Detect=HKCU\Software\Azureus
  2443. DetectFile=%AppData%\Azureus\.lock
  2444. Default=True
  2445. FileKey1=%AppData%\Azureus\logs|*.*|RECURSE
  2446. FileKey2=%AppData%\Azureus\logs\save|*.log
  2447. FileKey3=%AppData%\Azureus\tmp|*.*|RECURSE
  2448. FileKey4=%AppData%\Azureus|*.bak;*.log
  2449. FileKey5=%AppData%\Azureus\active|*.bak
  2450.  
  2451. [BitTorrent]
  2452. ID=2173
  2453. LangSecRef=3022
  2454. Detect=HKCU\Software\BitTorrent\BitTorrent
  2455. DetectFile=%ProgramFiles%\BitTorrent\BitTorrent.exe
  2456. Default=true
  2457. FileKey1=%appdata%\BitTorrent|*.old
  2458.  
  2459. [FrostWire]
  2460. ID=2215
  2461. LangSecRef=3022
  2462. DetectFile=%ProgramFiles%\FrostWire\FrostWire.exe
  2463. Default=True
  2464. FileKey1=%AppData%\FrostWire|*.cache;*.bak;gnutella.net;checkandupdate.txt
  2465. FileKey2=%AppData%\FrostWire\image_cache|*.*|REMOVESELF
  2466.  
  2467. [uTorrent]
  2468. ID=2216
  2469. LangSecRef=3022
  2470. DetectFile=%ProgramFiles%\uTorrent\uTorrent.exe
  2471. Detect=HKCU\Software\BitTorrent\uTorrent
  2472. Default=True
  2473. FileKey1=%ProgramFiles%\uTorrent|*.dmp
  2474. FileKey2=%AppData%\utorrent|*.old
  2475. FileKey3=%AppData%\utorrent\dlimagecache|*.*|RECURSE
  2476. FileKey4=%AppData%\uTorrent\ie|*.tmp
  2477. FileKey5=%LocalLowAppData%\uTorrentBar\CacheIcons|*.*
  2478.  
  2479. [Shareaza]
  2480. ID=2217
  2481. LangSecRef=3022
  2482. DetectFile=%ProgramFiles%\Shareaza Applications\Shareaza\Shareaza.exe
  2483. Default=True
  2484. FileKey1=%LocalAppData%\Shareaza\Temp|*.*
  2485. FileKey2=%LocalAppData%\Shareaza|shistory.im
  2486. FileKey3=%LocalAppData%\Shareaza\Artwork|*.*
  2487.  
  2488. [iMesh]
  2489. ID=2218
  2490. LangSecRef=3022
  2491. DetectFile=%ProgramFiles%\iMesh Applications\iMesh\iMesh.exe
  2492. Default=True
  2493. FileKey1=%LocalAppData%\iMesh\Temp|*.*
  2494. FileKey2=%LocalAppData%\iMesh|shistory.im
  2495. FileKey3=%LocalAppData%\iMesh\Artwork|*.*
  2496.  
  2497. [BearShare]
  2498. ID=2219
  2499. LangSecRef=3022
  2500. DetectFile=%ProgramFiles%\BearShare Applications\BearShare\BearShare.exe
  2501. Default=True
  2502. FileKey1=%LocalAppData%\BearShare\Temp|*.*
  2503. FileKey2=%LocalAppData%\BearShare|shistory.im
  2504. FileKey3=%LocalAppData%\BearShare\Artwork|*.*
  2505.  
  2506. [DC++]
  2507. ID=2220
  2508. LangSecRef=3022
  2509. DetectFile=%ProgramFiles%\DC++\DCPlusPlus.exe
  2510. Default=True
  2511. FileKey1=%ProgramFiles%\DC++|files.xml.bz2
  2512. FileKey2=%ProgramFiles%\DC++\FileLists|*.*
  2513. FileKey3=%ProgramFiles%\DC++\Logs|*.*
  2514. FileKey4=%LocalAppData%\DC++|files.xml.bz2
  2515. FileKey5=%LocalAppData%\DC++\FileLists|*.*
  2516. FileKey6=%LocalAppData%\DC++\Logs|*.*
  2517.  
  2518. [Ares]
  2519. ID=2221
  2520. LangSecRef=3022
  2521. DetectFile=%ProgramFiles%\Ares\Ares.exe
  2522. Default=True
  2523. Regkey1=HKCU\Software\Ares\Search.History
  2524.  
  2525. [CuteFTP Pro 7.0]
  2526. ID=2116
  2527. LangSecRef=3022
  2528. Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 7 Professional
  2529. Default=True
  2530. FileKey1=%localappdata%\GlobalSCAPE\CuteFTP Pro\7.0\Cache|*.*|RECURSE
  2531. FileKey2=%localappdata%\GlobalSCAPE\CuteFTP Pro\7.0\CacheThumbs|*.*|RECURSE
  2532.  
  2533. [CuteFTP Home 7.0]
  2534. ID=2117
  2535. LangSecRef=3022
  2536. Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 7 Home
  2537. Default=True
  2538. FileKey1=%localappdata%\GlobalSCAPE\CuteFTP\7.0\Cache|*.*|RECURSE
  2539. FileKey2=%localappdata%\GlobalSCAPE\CuteFTP\7.0\CacheThumbs|*.*|RECURSE
  2540.  
  2541. [CuteFTP Pro 8.0]
  2542. ID=2118
  2543. LangSecRef=3022
  2544. Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 8 Professional
  2545. Default=True
  2546. FileKey1=%localappdata%\GlobalSCAPE\CuteFTP Pro\8.0\Cache|*.*|RECURSE
  2547. FileKey2=%localappdata%\GlobalSCAPE\CuteFTP Pro\8.0\CacheThumbs|*.*|RECURSE
  2548.  
  2549. [CuteFTP Home 8.0]
  2550. ID=2119
  2551. LangSecRef=3022
  2552. Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 8 Home
  2553. Default=True
  2554. RegKey1=HKCU\Software\GlobalSCAPE\CuteFTP 8 Home\Recent|LastSiteID
  2555. FileKey1=%localappdata%\GlobalSCAPE\CuteFTP Home\8.0\Cache|*.*|RECURSE
  2556. FileKey2=%localappdata%\GlobalSCAPE\CuteFTP Home\8.0\CacheThumbs|*.*|RECURSE
  2557. FileKey3=%AppData%\GlobalSCAPE\CuteFTP Home\8.0|*.log|RECURSE
  2558.  
  2559. [CuteFTP 9]
  2560. ID=2355
  2561. LangSecRef=3022
  2562. Detect=HKU\.DEFAULT\Software\Globalscape\CuteFTP 9
  2563. Detect2=HKLM\SOFTWARE\Wow6432Node\Globalscape\CuteFTP 9
  2564. Default=True
  2565. RegKey1=HKCU\Software\Globalscape\CuteFTP 9\Recent|LastSiteID
  2566. FileKey1=%LocalAppData%\Globalscape\CuteFTP\9.0\Cache|*.*
  2567. FileKey2=%LocalAppData%\Globalscape\CuteFTP\9.0\CacheThumbs|*.*
  2568. FileKey3=%AppData%\Globalscape\CuteFTP\9.0\Logs|*-*_*.log
  2569. FileKey4=%CommonAppData%\Globalscape\CuteFTP 9|TRB_BACKUP.dat;TR_BACKUP.dat
  2570.  
  2571. [Core FTP]
  2572. ID=2226
  2573. LangSecRef=3022
  2574. Detect=HKCU\Software\FTPWare
  2575. Default=True
  2576. FileKey1=%AppData%\CoreFTP|*.dir
  2577. FileKey2=%ProgramFiles%\CoreFTP|COREFTP.LOG
  2578.  
  2579. [FileZilla]
  2580. ID=2227
  2581. LangSecRef=3022
  2582. Detect=HKLM\SOFTWARE\FileZilla Client
  2583. Detect2=HKCU\SOFTWARE\FileZilla Client
  2584. Default=True
  2585. FileKey1=%AppData%\FileZilla|recentservers.xml;search.xml
  2586.  
  2587. [SmartFTP]
  2588. ID=2228
  2589. LangSecRef=3022
  2590. Detect=HKCU\Software\SmartFTP
  2591. Default=True
  2592. RegKey1=HKCU\Software\SmartFTP\Client 2.0\Settings\History\Items
  2593. FileKey1=%AppData%\SmartFTP\Client 2.0\Log|*.*|RECURSE
  2594. FileKey2=%AppData%\SmartFTP\Client 2.0\Storage|*.*
  2595.  
  2596. [ClamWin]
  2597. ID=2120
  2598. LangSecRef=3024
  2599. Detect=HKCU\Software\ClamWin
  2600. Default=True
  2601. FileKey1=%allusersprofile%\.clamwin\log|*.*
  2602. FileKey2=%userprofile%\.clamwin\log|*.*
  2603. FileKey3=%windir%\All Users\.clamwin\log|*.*
  2604.  
  2605. [Ewido Anti-Malware (Log)]
  2606. ID=2121
  2607. LangSecRef=3024
  2608. Detect=HKLM\Software\ewido
  2609. Default=True
  2610. FileKey1=%ProgramFiles%\Ewido\Security Suite|logfile.txt
  2611. FileKey2=%ProgramFiles%\Ewido Anti-Malware|logfile.txt
  2612.  
  2613. [AVG Anti-Spyware]
  2614. ID=2122
  2615. LangSecRef=3024
  2616. Detect=HKLM\SOFTWARE\Grisoft\AVGAntiSpyware
  2617. Default=True
  2618. FileKey1=%ProgramFiles%\Grisoft\AVG Anti-Spyware 7.5|logfile.txt
  2619.  
  2620. [Malwarebytes Anti-Malware]
  2621. ID=2162
  2622. LangSecRef=3024
  2623. Detect=HKLM\Software\Malwarebytes' Anti-Malware
  2624. DetectFile=%ProgramFiles%\Malwarebytes' Anti-Malware\mbam.exe
  2625. Default=False
  2626. FileKey1=%appdata%\Malwarebytes\Malwarebytes' Anti-Malware\Logs|*.txt
  2627. FileKey2=%appdata%\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine|*.*
  2628.  
  2629. [Spyware Terminator]
  2630. ID=2262
  2631. LangSecRef=3024
  2632. Detect=HKCU\Software\Spyware Terminator
  2633. Default=False
  2634. FileKey1=%ProgramFiles%\Spyware Terminator\update|*.*
  2635. FileKey2=%AppData%\Spyware Terminator\Reports|*.*
  2636.  
  2637. [SUPERAntiSpyware]
  2638. ID=2263
  2639. LangSecRef=3024
  2640. Detect=HKLM\Software\SUPERAntiSpyware.com\SUPERAntiSpyware
  2641. Default=True
  2642. FileKey1=%AppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\Logs|*.log
  2643. FileKey2=%AppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs|*.dmp;*.SDB
  2644.  
  2645. [A-Squared]
  2646. ID=2229
  2647. LangSecRef=3024
  2648. Detect=HKLM\Software\Emsi Software GmbH\a-squared Free
  2649. Default=True
  2650. FileKey1=%MyDocuments%\a-squared Free\Reports|*.txt
  2651.  
  2652. [Foxit Reader]
  2653. ID=2123
  2654. LangSecRef=3021
  2655. Detect=HKCU\Software\Foxit Software\Foxit Reader
  2656. Default=True
  2657. RegKey1=HKCU\Software\Foxit Software\Foxit Reader\Recent File List
  2658. RegKey2=HKCU\Software\Foxit Software\Foxit Reader\History
  2659.  
  2660. [Foxit Reader 6.0]
  2661. ID=2332
  2662. LangSecRef=3021
  2663. Detect=HKCU\Software\Foxit Software\Foxit Reader 6.0
  2664. Default=True
  2665. RegKey1=HKCU\Software\Foxit Software\Foxit Reader 6.0\Recent File List
  2666. RegKey2=HKCU\Software\Foxit Software\Foxit Reader 6.0\RecentFiles
  2667. RegKey3=HKCU\Software\Foxit Software\Foxit Reader 6.0\Preferences\History\LastOpen
  2668. RegKey4=HKCU\Software\Foxit Software\Foxit Reader 6.0\Preferences\History\LastSession
  2669. RegKey5=HKCU\Software\Foxit Software\Foxit Reader 6.0\Preferences\Others|csInitialOpenDir
  2670. RegKey6=HKCU\Software\Foxit Software\Foxit Reader 6.0\ImageTool|ImageDefPath
  2671. FileKey1=%LocalAppData%\Foxit Reader\|*_old.DMP
  2672. FileKey2=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud\DownloadCache|*.cache
  2673. FileKey3=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud\FileIDCache|*.ids
  2674. FileKey4=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud|foxitcloud.log
  2675.  
  2676. [Paint.NET]
  2677. ID=2124
  2678. LangSecRef=3021
  2679. Detect=HKCU\Software\Paint.NET
  2680. Default=True
  2681. RegKey1=HKCU\Software\Paint.NET|MRU0
  2682. RegKey2=HKCU\Software\Paint.NET|MRU1
  2683. RegKey3=HKCU\Software\Paint.NET|MRU2
  2684. RegKey4=HKCU\Software\Paint.NET|MRU3
  2685. RegKey5=HKCU\Software\Paint.NET|MRU4
  2686. RegKey6=HKCU\Software\Paint.NET|MRU5
  2687. RegKey7=HKCU\Software\Paint.NET|MRU6
  2688. RegKey8=HKCU\Software\Paint.NET|MRU7
  2689. RegKey9=HKCU\Software\Paint.NET|MRU0Thumb
  2690. RegKey10=HKCU\Software\Paint.NET|MRU1Thumb
  2691. RegKey11=HKCU\Software\Paint.NET|MRU2Thumb
  2692. RegKey12=HKCU\Software\Paint.NET|MRU3Thumb
  2693. RegKey13=HKCU\Software\Paint.NET|MRU4Thumb
  2694. RegKey14=HKCU\Software\Paint.NET|MRU5Thumb
  2695. RegKey15=HKCU\Software\Paint.NET|MRU6Thumb
  2696. RegKey16=HKCU\Software\Paint.NET|MRU7Thumb
  2697.  
  2698. [OpenOffice 1.14]
  2699. ID=2125
  2700. LangSecRef=3021
  2701. DetectFile=%ProgramFiles%\OpenOffice.org1.1.4\program\soffice.exe
  2702. Default=True
  2703. FileKey1=%ProgramFiles%\OpenOffice.org1.1.4\user\registry\data\org\openoffice\Office|Common.xcu
  2704.  
  2705. [OpenOffice 2.0]
  2706. ID=2126
  2707. LangSecRef=3021
  2708. Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\2.0
  2709. Default=True
  2710. FileKey1=%appdata%\OpenOffice.org2\user\registry\data\org\openoffice\Office|Common.xcu
  2711.  
  2712. [OpenOffice 2.1]
  2713. ID=2127
  2714. LangSecRef=3021
  2715. Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\2.1
  2716. Default=True
  2717. FileKey1=%appdata%\OpenOffice.org2\user\registry\data\org\openoffice\Office|Common.xcu
  2718.  
  2719. [OpenOffice 3]
  2720. ID=2143
  2721. LangSecRef=3021
  2722. Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.0
  2723. Detect2=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.1
  2724. Detect3=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.2
  2725. Detect4=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.0
  2726. Detect5=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.1
  2727. Detect6=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.2
  2728. Detect7=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.3
  2729. Detect8=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.3
  2730. Default=True
  2731. FileKey1=%appdata%\OpenOffice.org\3\user\registry\data\org\openoffice\Office|Histories.xcu
  2732.  
  2733. [OpenOffice 4]
  2734. ID=2356
  2735. LangSecRef=3021
  2736. Detect=HKLM\SOFTWARE\Wow6432Node\OpenOffice\OpenOffice\4.0.0
  2737. Detect2=HKLM\SOFTWARE\OpenOffice\OpenOffice\4.0.0
  2738. Default=True
  2739. FileKey1=%AppData%\OpenOffice\4\user\backup|*.ubackup
  2740. FileKey2=%AppData%\OpenOffice\4\user\temp|document_io_logring.txt
  2741. FileKey3=%AppData%\OpenOffice\4\user\uno_packages\cache|log.txt;*.cache
  2742. FileKey4=%ProgramFiles%\OpenOffice 4\presets\backup|*.cbackup
  2743. FileKey5=%ProgramFiles%\OpenOffice 4\presets\temp|*.tmp
  2744. FileKey6=%ProgramFiles%\OpenOffice 4\presets\uno_packages\cache|log.txt
  2745.  
  2746. [Grisoft AVG 7.0]
  2747. ID=2128
  2748. LangSecRef=3024
  2749. Detect=HKLM\SOFTWARE\Grisoft\Avg7
  2750. Default=True
  2751. FileKey1=%commonappdata%\Grisoft\Avg7Data|*.log
  2752. FileKey2=%commonappdata%\Grisoft\Avg7Data\upd7bin|*.*
  2753. FileKey3=%commonappdata%\Grisoft\Avg7Data\$history|*.*
  2754. FileKey4=%commonappdata%\Grisoft\Avg7Data\avg7upd|*.log
  2755. FileKey5=%windir%\All Users\Application Data\Grisoft\Avg7Data\upd7bin|*.*
  2756. FileKey6=%windir%\All Users\Application Data\Grisoft\Avg7Data\avg7upd|$history
  2757. FileKey7=%windir%\All Users\Application Data\Grisoft\Avg7Data\avg7upd|*.log
  2758. FileKey8=%windir%\All Users\Application Data\Grisoft\Avg7Data|*.log
  2759. FileKey9=%windir%\Application Data\AVG7\Log|*.log
  2760.  
  2761. [AVG AntiVirus 8.0]
  2762. ID=2141
  2763. LangSecRef=3024
  2764. Detect=HKLM\SOFTWARE\AVG\Avg8
  2765. Default=True
  2766. FileKey1=%CommonAppData%\avg8\Log|*.log;*.xml
  2767. FileKey2=%CommonAppData%\avg8\scanlogs|*.log
  2768. FileKey3=%CommonAppData%\avg8\update\backup|*.*
  2769. FileKey4=%CommonAppData%\avg8\Emc\Log|*.log
  2770.  
  2771. [AVG AntiVirus 9.0]
  2772. ID=2145
  2773. LangSecRef=3024
  2774. Detect=HKLM\SOFTWARE\AVG\Avg9
  2775. Default=True
  2776. FileKey1=%CommonAppData%\avg9\Log|*.log;*.xml
  2777. FileKey2=%CommonAppData%\avg9\scanlogs|*.log
  2778. FileKey3=%CommonAppData%\avg9\update\backup|*.*
  2779. FileKey4=%CommonAppData%\avg9\Emc\Log|*.log
  2780.  
  2781. [AVG AntiVirus 10.0]
  2782. ID=2170
  2783. LangSecRef=3024
  2784. Detect=HKLM\SOFTWARE\AVG\Avg10
  2785. Default=True
  2786. FileKey1=%CommonAppData%\avg10\Log|*.log;*.xml
  2787. FileKey2=%CommonAppData%\avg10\scanlogs|*.log
  2788. FileKey3=%CommonAppData%\avg10\update\backup|*.*
  2789. FileKey4=%CommonAppData%\avg10\Emc\Log|*.log
  2790. FileKey5=%CommonAppData%\avg10\IDS\config|*List.zip.bak
  2791. FileKey6=%CommonAppData%\avg10\IDS\profile|globalLoadable.bak
  2792. FileKey7=%CommonAppData%\avg10\Temp|*.tmp
  2793.  
  2794. [AVG AntiVirus 2012]
  2795. ID=2268
  2796. LangSecRef=3024
  2797. Detect=HKLM\SOFTWARE\AVG\AVG2012
  2798. Default=True
  2799. FileKey1=%CommonAppData%\AVG2012\Log|*.log;history.xml
  2800. FileKey2=%CommonAppData%\AVG2012\scanlogs|*.log
  2801. FileKey3=%CommonAppData%\AVG2012\update\backup|*.*
  2802. FileKey4=%CommonAppData%\AVG2012\Emc\Log|*.log
  2803. FileKey5=%CommonAppData%\AVG2012\IDS\config|*List.zip.bak
  2804. FileKey6=%CommonAppData%\AVG2012\IDS\profile|globalLoadable.bak
  2805. FileKey7=%CommonAppData%\AVG2012\Temp|*.tmp
  2806.  
  2807. [AVG AntiVirus 2013]
  2808. ID=2313
  2809. LangSecRef=3024
  2810. Detect=HKLM\SOFTWARE\AVG\AVG2013
  2811. Default=True
  2812. FileKey1=%CommonAppData%\AVG2013\Log|*.log;history.xml
  2813. FileKey2=%CommonAppData%\AVG2013\scanlogs|*.log
  2814. FileKey3=%CommonAppData%\AVG2013\update\backup|*.*
  2815. FileKey4=%CommonAppData%\AVG2013\Emc\Log|*.log
  2816. FileKey5=%CommonAppData%\AVG2013\IDS\config|*List.zip.bak
  2817. FileKey6=%CommonAppData%\AVG2013\IDS\profile|globalLoadable.bak
  2818. FileKey7=%CommonAppData%\AVG2013\Temp|*.tmp
  2819.  
  2820. [AntiVir Desktop]
  2821. ID=2138
  2822. LangSecRef=3024
  2823. Detect=HKLM\SOFTWARE\Avira\AntiVir Desktop
  2824. Default=True
  2825. FileKey1=%CommonAppData%\Avira\AntiVir Desktop|*.old
  2826. FileKey2=%CommonAppData%\Avira\AntiVir Desktop|*.tmp
  2827. FileKey3=%CommonAppData%\Avira\Antivir Desktop\BACKUP\FAILSAFE|*.tmp
  2828. FileKey4=%CommonAppData%\Avira\AntiVir Desktop\LOGFILES|*.*
  2829. FileKey5=%CommonAppData%\Avira\AntiVir Desktop\TEMP|*.*
  2830. FileKey6=%CommonAppData%\Avira\My Avira\Logfiles|*.*
  2831. FileKey7=%CommonAppData%\Avira\My Avira\Temp|*.*
  2832. FileKey8=%ProgramFiles%\Avira\AntiVir Desktop|*.old
  2833. FileKey9=%ProgramFiles%\Avira\AntiVir Desktop|*.tmp
  2834. FileKey10=%ProgramFiles%\Avira\AntiVir Desktop\FAILSAFE|*.tmp
  2835.  
  2836. [Avast! Antivirus 4]
  2837. ID=2160
  2838. LangSecRef=3024
  2839. Detect=HKCU\Software\ALWIL Software\Avast\4.0
  2840. Default=True
  2841. FileKey1=%ProgramFiles%\Alwil Software\Avast4\DATA\report|avast.xsl;Resident protection.txt;Simple user interface.txt;Simple user interface*.xml
  2842. FileKey2=%ProgramFiles%\Alwil Software\Avast4\DATA\log|*.*
  2843.  
  2844. [Avast! Antivirus 5]
  2845. ID=2161
  2846. LangSecRef=3024
  2847. Detect=HKCU\Software\ALWIL Software\Avast\5.0
  2848. Default=True
  2849. FileKey1=%ProgramData%\Alwil Software\Avast5\report|avast.xsl;avast.xsl;Resident protection.txt;Simple user interface.txt;Simple user interface*.xml
  2850. FileKey2=%ProgramData%\Alwil Software\Avast5\log|*.*
  2851.  
  2852. [Avast! Antivirus 6]
  2853. ID=2271
  2854. LangSecRef=3024
  2855. Detect=HKLM\Software\Avast Software\Avast
  2856. Detect2=HKCU\Software\Avast Software\Avast
  2857. Default=True
  2858. FileKey1=%ProgramData%\Avast Software\Avast\log|*.*
  2859.  
  2860. [Avast! Antivirus 8]
  2861. ID=2324
  2862. LangSecRef=3024
  2863. Detect=HKLM\Software\Avast Software\Avast
  2864. Detect2=HKCU\Software\Avast Software\Avast
  2865. Default=True
  2866. FileKey1=%ProgramData%\AVAST Software\Avast\log|*.txt
  2867. FileKey2=%ProgramData%\AVAST Software\Avast\Spamconf|*.bin.tmp*
  2868. FileKey3=%ProgramData%\AVAST Software\Avast\report|*.txt
  2869.  
  2870. [BitDefender]
  2871. ID=2306
  2872. LangSecRef=3024
  2873. Detect=HKLM\Software\Softwin\BitDefender Desktop
  2874. Default=False
  2875. FileKey1=%ProgramFiles%\BitDefender\BitDefender 2009\Logs|*.*|RECURSE
  2876. FileKey2=%CommonAppData%\BitDefender\Desktop\Profiles\Logs|*.xml|RECURSE
  2877. FileKey3=%AppData%\BitDefender\Desktop\Profiles\Logs|*.xml|RECURSE
  2878.  
  2879. [TUGZip]
  2880. ID=2131
  2881. LangSecRef=3024
  2882. Detect=HKCU\Software\TUGZip
  2883. Default=True
  2884. RegKey1=HKCU\Software\TUGZip|mainRecent
  2885. RegKey2=HKCU\Software\TUGZip|extrRecent
  2886. RegKey3=HKCU\Software\TUGZip|cmpWorkingDir
  2887.  
  2888. [Windows Defender]
  2889. ID=2132
  2890. LangSecRef=3024
  2891. Detect=HKLM\SOFTWARE\Microsoft\Windows Defender
  2892. DetectFile=%ProgramFiles%\Microsoft AntiSpyware\GIANTAntiSpywareMain.exe
  2893. Default=True
  2894. FileKey1=%CommonAppData%\Microsoft\Windows Defender\Scans\History\Results\Quick|*.*
  2895. FileKey2=%CommonAppData%\Microsoft\Windows Defender\Scans\History\Results\Resource|*.*
  2896. FileKey3=%CommonAppData%\Microsoft\Windows Defender\Support|*.log
  2897. FileKey4=%ProgramFiles%\Microsoft AntiSpyware|errors.log;tracksEraser.log;cleaner.log
  2898.  
  2899. [IZArc]
  2900. ID=2133
  2901. LangSecRef=3024
  2902. Detect=HKCU\Software\IZSoftware\IZArc
  2903. Default=True
  2904. RegKey1=HKCU\Software\IZSoftware\IZArc|AppCurrentDir
  2905. RegKey2=HKCU\Software\IZSoftware\IZArc\Recent
  2906. RegKey3=HKCU\Software\IZSoftware\IZArc\History
  2907.  
  2908. [Google Toolbar Firefox]
  2909. ID=2134
  2910. LangSecRef=3022
  2911. Default=True
  2912. SpecialDetect=DET_MOZILLA_GOOGLE_TOOLBAR
  2913. SpecialKey1=N_MOZ_GOOGLE_TOOLBAR
  2914.  
  2915. [MS Search Helper Extension]
  2916. ID=2191
  2917. LangSecRef=3021
  2918. DetectFile=%ProgramFiles%\Microsoft\Search Enhancement Pack\Search Helper
  2919. Default=True
  2920. FileKey1=%LocalAppData%\Microsoft\Search Enhancement Pack\Search Box Extension|searchhs.dat
  2921. FileKey2=%LocalLowAppData%\Microsoft\Search Enhancement Pack\Search Box Extension|searchhs.dat
  2922.  
  2923. [MS Office Picture Manager]
  2924. ID=2135
  2925. LangSecRef=3021
  2926. Detect=HKCU\Software\Microsoft\Office
  2927. Default=True
  2928. FileKey1=%LocalAppData%\Microsoft\OIS|OIScatalog.cag
  2929. FileKey2=%LocalAppData%\Microsoft\OIS\thumbnails|*.*
  2930.  
  2931. [ImgBurn]
  2932. ID=2136
  2933. LangSecRef=3021
  2934. Detect=HKCU\Software\ImgBurn
  2935. DetectFile=%ProgramFiles%\Imgburn\imgburn.exe
  2936. Default=False
  2937. RegKey1=HKCU\Software\ImgBurn|ISOBUILD_MRUBootImage
  2938. RegKey2=HKCU\Software\ImgBurn|ISOBUILD_MRUDeviceName
  2939. RegKey3=HKCU\Software\ImgBurn|ISOBUILD_MRUSourceFile
  2940. RegKey4=HKCU\Software\ImgBurn|ISOBUILD_MRUSourceFolder
  2941. RegKey5=HKCU\Software\ImgBurn|ISOBUILD_RecentFiles_Destination
  2942. RegKey6=HKCU\Software\ImgBurn|ISOBUILD_RecentFiles_Source
  2943. RegKey7=HKCU\Software\ImgBurn|ISOBUILD_RecentFolders_Destination
  2944. RegKey8=HKCU\Software\ImgBurn|ISOWRITE_MRUDeviceName
  2945. RegKey9=HKCU\Software\ImgBurn|ISOWRITE_RecentFiles_Source
  2946. RegKey10=HKCU\Software\ImgBurn|FILELOCATIONS_ProjectFiles
  2947. RegKey11=HKCU\Software\ImgBurn|FILELOCATIONS_QueueFiles
  2948. FileKey1=%AppData%\ImgBurn|ImgBurn.log
  2949. FileKey2=%AppData%\ImgBurn\IBG Files|*.*
  2950. FileKey3=%AppData%\imgburn\graph data files|*.*
  2951. FileKey4=%AppData%\imgburn\Log Files|*.*
  2952.  
  2953. [CloneCD]
  2954. ID=2177
  2955. LangSecRef=3021
  2956. Detect=HKLM\Software\SlySoft\CloneCD
  2957. Default=False
  2958. RegKey1=HKCU\Software\SlySoft\CloneCD\Settings|ImageFileName
  2959.  
  2960. [Virtual Clone Drive]
  2961. ID=2333
  2962. LangSecRef=3021
  2963. Default=True
  2964. Detect=HKCU\Software\Elaborate Bytes\VirtualCloneDrive
  2965. RegKey1=HKCU\Software\Elaborate Bytes\VirtualCloneDrive\LRU
  2966.  
  2967. [WinPatrol]
  2968. ID=2168
  2969. LangSecRef=3024
  2970. Detect=HKCU\Software\BillP Studios\WinPatrol
  2971. Default=True
  2972. FileKey1=%ProgramFiles%\BillP Studios\WinPatrol|WinPatrolLog.*
  2973. FileKey2=%SystemDrive%|HijackPatrol.log
  2974.  
  2975. [LogMeIn]
  2976. ID=2172
  2977. LangSecRef=3022
  2978. Detect=HKCU\Software\LogMeIn
  2979. Detect2=HKLM\SOFTWARE\LogMeIn, Inc.
  2980. Default=True
  2981. FileKey1=%LocalAppData%\LogMeIn Hamachi|*.log
  2982. FileKey2=%LocalAppData%\LogMeIn Hamachi|*.old
  2983. FileKey3=%LocalAppData%\LogMeIn Hamachi|*.bak
  2984. FileKey4=%ProgramFiles%\Logmein|LMI*.log
  2985. FileKey5=%ProgramData%\Logmein|LMI*.log
  2986.  
  2987. [Ashampoo Burning Studio 10]
  2988. ID=2178
  2989. LangSecRef=3024
  2990. Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 10
  2991. Default=False
  2992. FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 10|backupmetainfo.xml
  2993. FileKey2=%AppData%\Ashampoo\Ashampoo Burning Studio 10\Log|*.xml
  2994. FileKey3=%AppData%\Ashampoo\Log|*.txt
  2995.  
  2996. [Ashampoo Burning Studio 11]
  2997. ID=2281
  2998. LangSecRef=3024
  2999. Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 11
  3000. Default=True
  3001. FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 11|backupmetainfo.xml
  3002. FileKey2=%AppData%\Ashampoo\Ashampoo Burning Studio 11\Log|*.xml
  3003. FileKey3=%AppData%\Ashampoo\Log|*.txt
  3004.  
  3005. [Ashampoo Burning Studio 14]
  3006. ID=2403
  3007. LangSecRef=3024
  3008. Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14
  3009. Default=True
  3010. FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 14\log|*log.txt
  3011. FileKey2=%AppData%\Ashampoo\Ashampoo Burning Studio 14\log|*.xml
  3012.  
  3013. [ExamDiff]
  3014. ID=2179
  3015. LangSecRef=3024
  3016. Detect=HKCU\Software\PrestoSoft\ExamDiff
  3017. Default=False
  3018. RegKey1=HKCU\Software\PrestoSoft\ExamDiff\AutoPick
  3019. RegKey2=HKCU\Software\PrestoSoft\ExamDiff\Recent Find Strings
  3020. RegKey3=HKCU\Software\PrestoSoft\ExamDiff\Recent Left Files
  3021. RegKey4=HKCU\Software\PrestoSoft\ExamDiff\Recent Right Files
  3022. RegKey5=HKCU\Software\PrestoSoft\ExamDiff\Settings|File 1
  3023. RegKey6=HKCU\Software\PrestoSoft\ExamDiff\Settings|File 2
  3024.  
  3025. [ExamDiff Pro]
  3026. ID=2180
  3027. LangSecRef=3024
  3028. Detect=HKCU\Software\PrestoSoft\ExamDiff Pro
  3029. Default=False
  3030. RegKey1=HKCU\Software\PrestoSoft\ExamDiff Pro\AutoPick
  3031. RegKey2=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Find Strings Bin
  3032. RegKey3=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Left Directories
  3033. RegKey4=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Left Files
  3034. RegKey5=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Right Directories
  3035. RegKey6=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Right Files
  3036. RegKey7=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Session Files
  3037. RegKey8=HKCU\Software\PrestoSoft\ExamDiff Pro\Settings|File 1
  3038. RegKey9=HKCU\Software\PrestoSoft\ExamDiff Pro\Settings|File 2
  3039.  
  3040. [Compare It!]
  3041. ID=2188
  3042. LangSecRef=3024
  3043. Detect=HKCU\Software\grigsoft.com\Compare It!
  3044. Default=False
  3045. RegKey1=HKCU\Software\grigsoft.com\Compare It!\Combos
  3046. RegKey2=HKCU\Software\grigsoft.com\Compare It!\dirs
  3047. RegKey3=HKCU\Software\grigsoft.com\Compare It!\options|Recent0
  3048. RegKey4=HKCU\Software\grigsoft.com\Compare It!\options|Recent1
  3049. RegKey5=HKCU\Software\grigsoft.com\Compare It!\options|Recent2
  3050. RegKey6=HKCU\Software\grigsoft.com\Compare It!\options|Recent3
  3051. RegKey7=HKCU\Software\grigsoft.com\Compare It!\options|Recent4
  3052. RegKey8=HKCU\Software\grigsoft.com\Compare It!\options|Recent5
  3053. RegKey9=HKCU\Software\grigsoft.com\Compare It!\options|Recent6
  3054. RegKey10=HKCU\Software\grigsoft.com\Compare It!\options|Recent7
  3055. RegKey11=HKCU\Software\grigsoft.com\Compare It!\options|Recent8
  3056. RegKey12=HKCU\Software\grigsoft.com\Compare It!\options|Recent9
  3057. RegKey13=HKCU\Software\grigsoft.com\Compare It!\options|Recent10
  3058.  
  3059. [WinDiff]
  3060. ID=2198
  3061. LangSecRef=3024
  3062. Detect=HKCU\Software\Microsoft\Windiff
  3063. Default=True
  3064. RegKey1=HKCU\Software\Microsoft\Windiff|NameLeft
  3065. RegKey2=HKCU\Software\Microsoft\Windiff|NameRight
  3066.  
  3067. [FeedDemon]
  3068. ID=2193
  3069. LangSecRef=3022
  3070. Detect=HKCU\Software\Bradbury\FeedDemon\1.0
  3071. DetectFile=%LocalAppData%\FeedDemon\v1
  3072. Default=True
  3073. RegKey1=HKCU\Software\Bradbury\FeedDemon\1.0\SavedLists\TypedURLs
  3074. RegKey2=HKCU\Software\Bradbury\FeedDemon\1.0\SavedLists\TabbedBrowserUrls
  3075. RegKey3=HKCU\Software\Bradbury\FeedDemon\1.0\SearchFeedKeywords
  3076.  
  3077. [Last.FM]
  3078. ID=2200
  3079. LangSecRef=3023
  3080. DetectFile=%ProgramFiles%\Last.fm\LastFM.exe
  3081. Default=True
  3082. FileKey1=%LocalAppData%\Last.fm\client\cache|*.*
  3083. FileKey2=%LocalAppData%\Last.fm\client|*.log
  3084.  
  3085. [Pando]
  3086. ID=2235
  3087. LangSecRef=3021
  3088. DetectFile=%LocalAppData%\Pando\Pando Files
  3089. Default=True
  3090. FileKey1=%LocalAppData%\Pando\Pando Files|*.log
  3091.  
  3092. [Sandboxie]
  3093. ID=2236
  3094. LangSecRef=3024
  3095. DetectFile=%ProgramFiles%\Sandboxie\Start.exe
  3096. Default=False
  3097. FileKey1=%SystemDrive%\Sandbox\%UserName%|*.*|RECURSE
  3098. ExcludeKey1=FILE|%SystemDrive%\Sandbox\%UserName%\DONT-USE.TXT
  3099. ExcludeKey2=FILE|%SystemDrive%\Sandbox\%UserName%\desktop.ini
  3100.  
  3101. [Snagit 9]
  3102. ID=2237
  3103. LangSecRef=3024
  3104. Detect=HKCU\Software\TechSmith\SnagIt\9
  3105. Default=True
  3106. RegKey1=HKCU\Software\TechSmith\SnagIt\9\Recent Captures
  3107. RegKey2=HKCU\Software\TechSmith\SnagIt\9\SnagItEditor\Recent File List
  3108. FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin
  3109.  
  3110. [Snagit 10]
  3111. ID=2238
  3112. LangSecRef=3024
  3113. Detect=HKCU\Software\TechSmith\SnagIt\10
  3114. Default=True
  3115. RegKey1=HKCU\Software\TechSmith\SnagIt\10\Recent Captures
  3116. RegKey2=HKCU\Software\TechSmith\SnagIt\10\SnagItEditor\Recent File List
  3117. FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin
  3118. FileKey2=%LocalAppData%\TechSmith\SnagIt\DataStore\AppIcons|*.*
  3119. FileKey3=%LocalAppData%\TechSmith\SnagIt\DataStore\WebSiteIcons|*.*
  3120. FileKey4=%LocalAppData%\TechSmith\SnagIt\Thumbnails|*.*
  3121.  
  3122. [Snagit 11]
  3123. ID=2293
  3124. LangSecRef=3024
  3125. Detect=HKCU\Software\TechSmith\SnagIt\11
  3126. Default=True
  3127. RegKey1=HKCU\Software\TechSmith\SnagIt\11\Recent Captures
  3128. RegKey2=HKCU\Software\TechSmith\SnagIt\11\SnagItEditor\Recent File List
  3129. FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin
  3130. FileKey2=%LocalAppData%\TechSmith\SnagIt\DataStore\AppIcons|*.*
  3131. FileKey3=%LocalAppData%\TechSmith\SnagIt\DataStore\WebSiteIcons|*.*
  3132. FileKey4=%LocalAppData%\TechSmith\SnagIt\Thumbnails|*.*
  3133.  
  3134. [Snagit 12]
  3135. ID=2391
  3136. LangSecRef=3024
  3137. Detect=HKCU\Software\TechSmith\SnagIt\12
  3138. Default=True
  3139. RegKey1=HKCU\Software\TechSmith\SnagIt\12\Recent Captures
  3140. RegKey2=HKCU\Software\TechSmith\SnagIt\12\SnagItEditor\Recent File List
  3141. FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin
  3142. FileKey2=%LocalAppData%\TechSmith\SnagIt\DataStore\AppIcons|*.ico
  3143. FileKey3=%LocalAppData%\TechSmith\SnagIt\DataStore\WebSiteIcons|*.ico
  3144. FileKey4=%LocalAppData%\TechSmith\SnagIt\Thumbnails|*.*
  3145.  
  3146. [Ditto]
  3147. ID=2239
  3148. LangSecRef=3021
  3149. DetectFile=%AppData%\Ditto
  3150. Default=False
  3151. FileKey1=%AppData%\Ditto|ditto.db
  3152.  
  3153. [Evernote]
  3154. ID=2240
  3155. LangSecRef=3021
  3156. Detect=HKCU\Software\Evernote
  3157. Default=True
  3158. FileKey1=%LocalAppData%\Evernote\Evernote\Logs|*.*
  3159.  
  3160. [I2P]
  3161. ID=2241
  3162. LangSecRef=3022
  3163. DetectFile=%AppData%\I2P
  3164. Default=True
  3165. FileKey1=%AppData%\I2P\logs|*.*
  3166.  
  3167. [McAfee AntiVirus]
  3168. ID=2242
  3169. LangSecRef=3021
  3170. DetectFile=%CommonAppData%\McAfee\MCLOGS
  3171. Default=True
  3172. FileKey1=%CommonAppData%\McAfee\MCLOGS|*.log|RECURSE
  3173.  
  3174. [PerfectDisk 8]
  3175. ID=2244
  3176. LangSecRef=3024
  3177. Detect=HKCU\Software\Raxco\PerfectDisk\8.0
  3178. Default=True
  3179. FileKey1=%CommonAppData%\Raxco\PerfectDisk\8.0|PDBootLog
  3180.  
  3181. [PerfectDisk 9]
  3182. ID=2245
  3183. LangSecRef=3024
  3184. Detect=HKCU\Software\Raxco\PerfectDisk\9.0
  3185. Default=True
  3186. FileKey1=%CommonAppData%\Raxco\PerfectDisk\9.0|PDBootLog
  3187.  
  3188. [PerfectDisk 10]
  3189. ID=2246
  3190. LangSecRef=3024
  3191. Detect=HKCU\Software\Raxco\PerfectDisk\10.0
  3192. Default=True
  3193. FileKey1=%CommonAppData%\Raxco\PerfectDisk\10.0|PDBootLog
  3194.  
  3195. [PerfectDisk 11]
  3196. ID=2247
  3197. LangSecRef=3024
  3198. Detect=HKCU\Software\Raxco\PerfectDisk\11.0
  3199. Default=True
  3200. FileKey1=%CommonAppData%\Raxco\PerfectDisk\11.0|PDBootLog
  3201.  
  3202. [PerfectDisk 12]
  3203. ID=2248
  3204. LangSecRef=3024
  3205. Detect=HKCU\Software\Raxco\PerfectDisk\12.0
  3206. Default=True
  3207. FileKey1=%CommonAppData%\Raxco\PerfectDisk\12.0|PDBootLog
  3208.  
  3209. [PerfectDisk 12.5]
  3210. ID=2277
  3211. LangSecRef=3024
  3212. Detect=HKCU\Software\Raxco\PerfectDisk\12.5
  3213. Default=True
  3214. FileKey1=%CommonAppData%\Raxco\PerfectDisk\12.5|PDBootLog
  3215.  
  3216. [PowerISO]
  3217. ID=2249
  3218. LangSecRef=3024
  3219. Detect=HKCU\Software\PowerISO
  3220. Default=True
  3221. RegKey1=HKCU\Software\PowerISO|Reopen0
  3222. RegKey2=HKCU\Software\PowerISO|Reopen1
  3223. RegKey3=HKCU\Software\PowerISO|Reopen2
  3224. RegKey4=HKCU\Software\PowerISO|Reopen3
  3225. RegKey5=HKCU\Software\PowerISO|ExtractPath0
  3226. RegKey6=HKCU\Software\PowerISO|ExtractPath1
  3227. RegKey7=HKCU\Software\PowerISO|ExtractPath2
  3228. RegKey8=HKCU\Software\PowerISO|ExtractPath3
  3229. RegKey9=HKCU\Software\PowerISO|ExtractPath4
  3230. RegKey10=HKCU\Software\PowerISO|ExtractPath5
  3231. RegKey11=HKCU\Software\PowerISO|ExtractPath6
  3232. RegKey12=HKCU\Software\PowerISO|ExtractPath7
  3233.  
  3234. [UltraISO]
  3235. ID=2250
  3236. LangSecRef=3024
  3237. Detect=HKCU\Software\EasyBoot Systems\UltraISO\5.0
  3238. Default=True
  3239. RegKey1=HKCU\Software\EasyBoot Systems\UltraISO\5.0|Reopen
  3240. RegKey2=HKCU\Software\EasyBoot Systems\UltraISO\5.0|a
  3241. RegKey3=HKCU\Software\EasyBoot Systems\UltraISO\5.0|b
  3242. RegKey4=HKCU\Software\EasyBoot Systems\UltraISO\5.0|c
  3243. RegKey5=HKCU\Software\EasyBoot Systems\UltraISO\5.0|d
  3244. RegKey6=HKCU\Software\EasyBoot Systems\UltraISO\5.0|e
  3245. RegKey7=HKCU\Software\EasyBoot Systems\UltraISO\5.0|f
  3246. RegKey8=HKCU\Software\EasyBoot Systems\UltraISO\5.0|g
  3247. RegKey9=HKCU\Software\EasyBoot Systems\UltraISO\5.0|h
  3248. RegKey10=HKCU\Software\EasyBoot Systems\UltraISO\5.0|i
  3249.  
  3250. [GIMP 2.4]
  3251. ID=2251
  3252. LangSecRef=3021
  3253. DetectFile=%UserProfile%\.gimp-2.4
  3254. Default=True
  3255. FileKey1=%UserProfile%\.thumbnails\normal|*.*
  3256. FileKey2=%UserProfile%\.gimp-2.4|documents
  3257.  
  3258. [GIMP 2.6]
  3259. ID=2252
  3260. LangSecRef=3021
  3261. Default=True
  3262. DetectFile=%UserProfile%\.gimp-2.6
  3263. FileKey1=%UserProfile%\.thumbnails\normal|*.*
  3264.  
  3265. [GIMP 2.8]
  3266. ID=2295
  3267. LangSecRef=3021
  3268. Default=True
  3269. DetectFile=%UserProfile%\.gimp-2.8
  3270. FileKey1=%UserProfile%\.thumbnails\normal|*.*
  3271.  
  3272. [Go!Zilla]
  3273. ID=2253
  3274. LangSecRef=3022
  3275. DetectFile=%AppData%\Go!Zilla
  3276. Default=True
  3277. FileKey1=%AppData%\Go!Zilla|GoZilla.hst
  3278.  
  3279. [MagicISO]
  3280. ID=2254
  3281. LangSecRef=3024
  3282. Detect=HKCU\Software\MagicISO
  3283. Default=True
  3284. RegKey1=HKCU\Software\MagicISO\Reopen
  3285.  
  3286. [Zune]
  3287. ID=2255
  3288. LangSecRef=3023
  3289. DetectFile=%LocalAppData%\Microsoft\zune
  3290. Default=True
  3291. FileKey1=%LocalAppData%\Microsoft\zune\art cache|*.*|REMOVESELF
  3292. FileKey2=%LocalAppData%\Microsoft\Zune|NowPlaying.dat
  3293.  
  3294. [BreezeBrowser Pro]
  3295. ID=2256
  3296. LangSecRef=3021
  3297. Detect=HKCU\Software\BreezeSystems\BreezeBrowserPro
  3298. Default=True
  3299. RegKey1=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU0
  3300. RegKey2=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU1
  3301. RegKey3=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU2
  3302. RegKey4=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU3
  3303. RegKey5=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU4
  3304. RegKey6=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU5
  3305. RegKey7=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU6
  3306. RegKey8=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU7
  3307. RegKey9=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU8
  3308. RegKey10=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU9
  3309.  
  3310. [FastStone Image Viewer]
  3311. ID=2257
  3312. LangSecRef=3023
  3313. DetectFile=%AppData%\FastStone\FSIV
  3314. Default=True
  3315. FileKey1=%AppData%\FastStone\FSIV|HisFolderList.db
  3316.  
  3317. [FastStone Capture]
  3318. ID=2404
  3319. LangSecRef=3024
  3320. Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\FSCapture.exe
  3321. Default=True
  3322. RegKey1=HKCU\Software\FastStone|_GrbId
  3323. FileKey1=%LocalAppData%\FastStone\FSC\EditWith|*.*
  3324. FileKey2=%LocalAppData%\FastStone\FSC\Email|*.*
  3325. FileKey3=%LocalAppData%\FastStone\FSC\FTP|*.*
  3326.  
  3327. [AkelPad]
  3328. ID=2267
  3329. LangSecRef=3021
  3330. Detect=HKCU\Software\Akelsoft\AkelPad
  3331. Default=True
  3332. RegKey1=HKCU\Software\Akelsoft\AkelPad\Recent
  3333. RegKey2=HKCU\Software\Akelsoft\AkelPad\Search
  3334.  
  3335. [Notepad++]
  3336. ID=2258
  3337. LangSecRef=3021
  3338. DetectFile=%AppData%\notepad++
  3339. Default=False
  3340. FileKey1=%AppData%\notepad++|session.xml
  3341.  
  3342. [NoteXpad]
  3343. ID=2259
  3344. LangSecRef=3021
  3345. Detect=HKLM\Software\NoteXpad
  3346. Default=False
  3347. RegKey1=HKLM\Software\NoteXpad\Recent
  3348.  
  3349. [RegEditX]
  3350. ID=2260
  3351. LangSecRef=3024
  3352. Detect=HKLM\SOFTWARE\DCSoft\RegEditX
  3353. Default=True
  3354. FileKey1=%ProgramFiles%\DCSoft\RegEditX\x86|RegEditX.sav
  3355. FileKey2=%ProgramFiles%\DCSoft\RegEditX\x64|RegEditX.sav
  3356. FileKey3=%ProgramFiles%\DCSoft\RegEditX\x86|RegEditX.bak
  3357. FileKey4=%ProgramFiles%\DCSoft\RegEditX\x64|RegEditX.bak
  3358.  
  3359. [Foxit Reader 5.0]
  3360. ID=2265
  3361. LangSecRef=3021
  3362. Detect=HKCU\Software\Foxit Software\Foxit Reader 5.0
  3363. Default=True
  3364. RegKey1=HKCU\Software\Foxit Software\Foxit Reader 5.0\Recent File List
  3365. RegKey2=HKCU\Software\Foxit Software\Foxit Reader 5.0\RecentFiles
  3366. RegKey3=HKCU\Software\Foxit Software\Foxit Reader 5.0\Preferences\History\LastOpen
  3367. RegKey4=HKCU\Software\Foxit Software\Foxit Reader 5.0\Preferences\History\LastSession
  3368. RegKey5=HKCU\Software\Foxit Software\Foxit Reader 5.0\Preferences\Others|csInitialOpenDir
  3369.  
  3370. [ACDSee 14]
  3371. ID=2269
  3372. LangSecRef=3021
  3373. Default=True
  3374. DetectFile=%ProgramFiles%\ACD Systems\ACDSee\14.0\ACDSeeInTouch2.exe
  3375. Detect=HKLM\SOFTWARE\ACD Systems\ACDSee\140
  3376. RegKey1=HKCU\Software\ACD Systems\ACDSee\140|LastOptionPage
  3377. RegKey2=HKCU\Software\ACD Systems\ACDSee\140|LastOptionPageName
  3378. RegKey3=HKCU\Software\ACD Systems\ACDSee\140|OpenFolder
  3379. RegKey4=HKCU\Software\ACD Systems\ACDSee\140|HistSearchFileName
  3380. RegKey5=HKCU\Software\ACD Systems\ACDSee\140|HistSearchQuickText
  3381. RegKey6=HKCU\Software\ACD Systems\ACDSee\140|SimpleSearchHistory
  3382.  
  3383. [Camtasia Studio 7.0]
  3384. ID=2279
  3385. LangSecRef=3024
  3386. Detect=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio
  3387. Default=True
  3388. RegKey1=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|FileSaveAsMru
  3389. RegKey2=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|ExportAsZipMru
  3390. RegKey3=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUImportFolder
  3391. RegKey4=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUOpenProjectFolder
  3392. RegKey5=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUBatchAddFilesProjectsFolder
  3393. RegKey6=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUImportExportCaptions
  3394.  
  3395. [CoffeeCup HTML Editor]
  3396. ID=2280
  3397. LangSecRef=3024
  3398. DetectFile=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor
  3399. Default=True
  3400. FileKey1=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|mru.ini
  3401. FileKey2=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|links.ini
  3402. FileKey3=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|lastopen.dat
  3403.  
  3404. [Any Video Converter Ultimate]
  3405. ID=2282
  3406. LangSecRef=3023
  3407. Detect=HKCU\Software\AnvSoft\Any Video Converter Ultimate
  3408. Default=True
  3409. FileKey1=%appdata%\AnvSoft\Any Video Converter Ultimate|history*.db
  3410. FileKey2=%appdata%\AnvSoft\Any Video Converter Ultimate|*.log
  3411.  
  3412. [Freemake Video Downloader]
  3413. ID=2283
  3414. LangSecRef=3022
  3415. Detect=HKCU\Software\Freemake\FreemakeVideoDownloader
  3416. Default=True
  3417. FileKey1=%ProgramFiles%\Freemake\Freemake Video Downloader|trace.log
  3418. FileKey2=%CommonAppData%\Freemake\FreemakeVideoDownloader|*.txt
  3419. FileKey3=%Documents%\Freemake\FreemakeVideoDownloader\History\Thumbnails|*.*
  3420. FileKey4=%Documents%\Freemake\FreemakeVideoDownloader\History|*.xml
  3421.  
  3422. [Freemake Audio Converter]
  3423. ID=2284
  3424. LangSecRef=3023
  3425. Detect=HKCU\Software\Freemake\FreemakeAudioConverter
  3426. Default=True
  3427. FileKey1=%CommonAppData%\Freemake\FreemakeAudioConverter|*.txt
  3428. RegKey1=HKCU\Software\Freemake\FreemakeAudioConverter|InitVideoFileDirectory
  3429. RegKey2=HKCU\Software\Freemake\FreemakeAudioConverter|InitAudioFileDirectory
  3430. RegKey3=HKCU\Software\Freemake\FreemakeAudioConverter|InitImageFileDirectory
  3431.  
  3432. [Freemake Video Converter]
  3433. ID=2285
  3434. LangSecRef=3023
  3435. Detect=HKCU\Software\Freemake\FreemakeVideoConverter
  3436. Default=True
  3437. FileKey1=%CommonAppData%\Freemake\FreemakeVideoConverter|*.txt
  3438. RegKey1=HKCU\Software\Freemake\FreemakeVideoConverter|InitVideoFileDirectory
  3439. RegKey2=HKCU\Software\Freemake\FreemakeVideoConverter|InitAudioFileDirectory
  3440. RegKey3=HKCU\Software\Freemake\FreemakeVideoConverter|InitImageFileDirectory
  3441. RegKey4=HKCU\Software\Freemake\FreemakeVideoConverter|CurrentDVDDirectory
  3442. RegKey5=HKCU\Software\Freemake\FreemakeVideoConverter|AudioForSlideshow_0
  3443. RegKey6=HKCU\Software\Freemake\FreemakeVideoConverter|AudioForSlideshow_1
  3444. RegKey7=HKCU\Software\Freemake\FreemakeVideoConverter|AudioForSlideshow_2
  3445. RegKey8=HKCU\Software\Freemake\FreemakeVideoConverter|InitAudioDirectoryForSlideshow
  3446. RegKey9=HKCU\Software\Freemake\FreemakeVideoConverter|OutputDVDDirectory
  3447. RegKey10=HKCU\Software\Freemake\FreemakeVideoConverter|DVDOutputPath_0
  3448. RegKey11=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath1
  3449. RegKey12=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath2
  3450. RegKey13=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath3
  3451. RegKey14=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath4
  3452. RegKey15=HKCU\Software\Freemake\FreemakeVideoConverter|OutputDirectory
  3453.  
  3454. [ConvertXToDVD]
  3455. ID=2286
  3456. LangSecRef=3023
  3457. Detect=HKCU\Software\VSO\ConvertXToDVD
  3458. Detect2=HKCU\Software\VSO\ConvertXtoDVD\5
  3459. Default=True
  3460. FileKey1=%AppData%\Vso|*.log
  3461. FileKey2=%Documents%\PcSetup|*.log|REMOVESELF
  3462. FileKey3=%CommonAppData%\VSO|*.cache
  3463. FileKey4=%CommonAppData%\VSO\ConvertXToDVD\5\log|*.log;*.crashlist|REMOVESELF
  3464. RegKey1=HKCU\Software\VSO\ConvertXtoDVD\4.0|Dvd_Folder
  3465. RegKey2=HKCU\Software\VSO\ConvertXtoDVD\4.0\settings\Gen_MRU_Pathes
  3466. RegKey3=HKCU\Software\VSO\ConvertXtoDVD\5\Gen_MRU_Pathes
  3467.  
  3468. [VSO Blu-ray Converter Ultimate]
  3469. ID=2328
  3470. LangSecRef=3023
  3471. Detect=HKCU\Software\VSO\Blu-ray Converter Ultimate\2
  3472. Default=True
  3473. FileKey1=%CommonAppData%\VSO\Blu-ray Converter Ultimate\2\Log|*.log
  3474.  
  3475. [VSO DVD Converter Ultimate]
  3476. ID=2329
  3477. LangSecRef=3023
  3478. Detect=HKCU\Software\VSO\DVD Converter Ultimate\2
  3479. Default=True
  3480. FileKey1=%CommonAppData%\VSO\DVD Converter Ultimate\2\Log|*.log
  3481.  
  3482. [AIMP 3]
  3483. ID=2287
  3484. LangSecRef=3023
  3485. DetectFile=%AppData%\AIMP3
  3486. Default=True
  3487. FileKey1=%AppData%\AIMP3|AIMP3.bak
  3488. FileKey2=%AppData%\AIMP3|AIMP3ate.bak
  3489. FileKey3=%AppData%\AIMP3|AIMP3lib.bak
  3490. FileKey4=%AppData%\AIMP3|AIMP3ac.bak
  3491.  
  3492. [Corel VideoStudio Pro X4]
  3493. ID=2288
  3494. LangSecRef=3023
  3495. Detect=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0
  3496. Default=True
  3497. FileKey1=%AppData%\Corel\Messages|*.*|RECURSE
  3498. FileKey2=%AppData%\Ulead Systems\Corel VideoStudio Pro\14.0\en-US|VS_Pro.log
  3499. FileKey3=%Documents%\Corel VideoStudio Pro\14.0\SmartProxy|*.upx
  3500. RegKey1=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\HerRFL
  3501. RegKey2=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\Library Manager|Latest Export Folder
  3502. RegKey3=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\VIO\Recent Dir
  3503. ExcludeKey1=FILE|%AppData%\Corel\Messages|*.policy
  3504.  
  3505. [Corel VideoStudio Pro X5]
  3506. ID=2296
  3507. LangSecRef=3023
  3508. Detect=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0
  3509. Default=True
  3510. FileKey1=%AppData%\Corel\Messages|*.*|RECURSE
  3511. FileKey2=%AppData%\Ulead Systems\Corel VideoStudio Pro\15.0\en-US|VS_Pro.log
  3512. FileKey3=%Documents%\Corel VideoStudio Pro\15.0\SmartProxy|*.upx
  3513. RegKey1=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\HerRFL
  3514. RegKey2=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\Library Manager|Latest Export Folder
  3515. RegKey3=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\VIO\Recent Dir
  3516. ExcludeKey1=FILE|%AppData%\Corel\Messages|*.policy
  3517.  
  3518. [AlZip]
  3519. ID=2289
  3520. LangSecRef=3024
  3521. Detect=HKCU\Software\ESTsoft\ALZip
  3522. Default=True
  3523. RegKey1=HKCU\Software\ESTsoft\ALZip\MRUOpen
  3524. RegKey2=HKCU\Software\ESTsoft\ALZip\MRUExtract
  3525.  
  3526. [CyberLink PhotoDirector 3]
  3527. ID=2290
  3528. LangSecRef=3023
  3529. Detect=HKCU\Software\CyberLink\PhotoDirector3
  3530. Default=True
  3531. FileKey1=%LocalAppData%\Cyberlink\PhotoDirector\3.0|*.cache
  3532.  
  3533. [CyberLink PowerDirector 10]
  3534. ID=2291
  3535. LangSecRef=3023
  3536. Detect=HKCU\Software\CyberLink\PowerDirector\10.0
  3537. Default=True
  3538. FileKey1=%AppData%\CyberLink\MediaCache|*.*
  3539. FileKey2=%AppData%\CyberLink\PowerDirector\10.0|Recentfiles.ini
  3540. FileKey3=%AppData%\CyberLink\PowerDirector\10.0\DSPCache|*.*|RECURSE
  3541. FileKey4=%AppData%\CyberLink\PowerDirector\10.0\photoTmp|*.*|RECURSE
  3542. FileKey5=%AppData%\CyberLink\PowerDirector\10.0\SpltrCache|*.*|RECURSE
  3543. RegKey1=HKCU\Software\CyberLink\Hanuman\Waveform
  3544. RegKey2=HKCU\Software\CyberLink\MediaCache5\Data5
  3545. RegKey3=HKCU\Software\CyberLink\MediaCache5\Thumbnail5
  3546.  
  3547. [CyberLink PowerDirector 12]
  3548. ID=2368
  3549. LangSecRef=3023
  3550. Detect=HKCU\Software\CyberLink\PowerDirector12
  3551. Default=True
  3552. RegKey1=HKCU\Software\CyberLink\PowerDirector12\MediaObj\MediaCache5\Data5
  3553. RegKey2=HKCU\Software\CyberLink\PowerDirector12\MediaObj\MediaCache5\Thumbnail5
  3554. RegKey3=HKCU\Software\CyberLink\PowerDirector12|ImportFilePath
  3555. FileKey1=%CommonAppData%\CyberLink\PowerDirector\12.0\AnalyzeCacheFiles|CLZoetrope.fdb
  3556. FileKey2=%AppData%\CyberLink\PowerDirector\12.0\DSPCache|*.*|RECURSE
  3557. FileKey3=%AppData%\CyberLink\PowerDirector\12.0\photoTmp|*.*
  3558. FileKey4=%AppData%\CyberLink\PowerDirector\12.0\SpltrCache|*.*
  3559. FileKey5=%AppData%\CyberLink\PowerDirector\12.0\WaveForms|PD_0000.txt
  3560. FileKey6=%AppData%\CyberLink\PowerDirector\12.0|Recentfiles.ini
  3561. FileKey7=%AppData%\CyberLink\MediaCache|*.*
  3562.  
  3563. [CyberLink AudioDirector 4]
  3564. ID=2366
  3565. LangSecRef=3023
  3566. Detect=HKCU\Software\CyberLink\AudioDirector4
  3567. Default=True
  3568. RegKey1=HKCU\Software\CyberLink\AudioDirector4\MediaObj\MediaCache5\Data5
  3569. FileKey1=%CommonAppData%\CyberLink\Downloader|Item0.bak;Item1.bak;Item2.bak;Item3.bak;Item4.bak
  3570. FileKey2=%CommonAppData%\install_clap|*.*|RECURSE
  3571. FileKey3=%LocalAppData%\Cyberlink\AudioDirector\4.0\Temp|*.txt;*.pk
  3572.  
  3573. [DivX player]
  3574. ID=2292
  3575. LangSecRef=3023
  3576. DetectFile=%AppData%\DivX\Player
  3577. Default=True
  3578. FileKey1=%AppData%\DivX\Player|Media Library
  3579.  
  3580. [Universal Extractor]
  3581. ID=2307
  3582. LangSecRef=3024
  3583. Detect=HKCU\Software\UniExtract
  3584. Default=False
  3585. RegKey1=HKCU\Software\UniExtract\Directory
  3586. RegKey2=HKCU\Software\UniExtract\File
  3587.  
  3588. [4Sync]
  3589. ID=2308
  3590. LangSecRef=3024
  3591. Detect=HKCU\Software\4Sync
  3592. Default=True
  3593. FileKey1=%AppData%\4Sync|*.log
  3594.  
  3595. [Copernic]
  3596. ID=2309
  3597. LangSecRef=3021
  3598. DetectFile1=%AppData%\Copernic\Agent
  3599. DetectFile2=%AppData%\Copernic\Agent Pro
  3600. Detect=HKCU\Software\Copernic\DesktopSearch2
  3601. Default=False
  3602. FileKey1=%AppData%\Copernic\*\Searches|*.*|RECURSE
  3603. RegKey1=HKCU\Software\Copernic\DesktopSearch2\Config\SearchHistory
  3604.  
  3605. [DVDFab]
  3606. ID=2310
  3607. LangSecRef=3023
  3608. Detect1=HKLM\Software\DVDFab
  3609. Detect2=HKCU\Software\DVDFab
  3610. Default=True
  3611. FileKey1=%Documents%\DVDFab|*.log|RECURSE
  3612. FileKey2=%Documents%\DVDFab Passkey|*.log|RECURSE
  3613.  
  3614. [InkScape]
  3615. ID=2311
  3616. LangSecRef=3023
  3617. Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\inkscape.exe
  3618. Default=True
  3619. FileKey1=%AppData%\InkScape|*.log|RECURSE
  3620. FileKey2=%UserProfile%|.recently-used.xbel
  3621.  
  3622. [Anonymizer]
  3623. ID=2315
  3624. LangSecRef=3022
  3625. DetectFile=%AppData%\Anonymizer\Anonymizer Universal
  3626. Default=True
  3627. FileKey1=%AppData%\Anonymizer\Anonymizer Universal|*.log
  3628.  
  3629. [Gadu-Gadu]
  3630. ID=2319
  3631. LangSecRef=3022
  3632. Detect1=HKCU\Software\GG
  3633. Detect2=HKCU\Software\Gadu-Gadu 10
  3634. Detect3=HKCU\Software\Nowe Gadu-Gadu
  3635. Detect4=HKCU\Software\Gadu-Gadu
  3636. Default=True
  3637. FileKey1=%AppData%\GG\Profiles\*\*Cache|*|RECURSE
  3638. FileKey2=%AppData%\GG\logs|*.log
  3639. FileKey3=%AppData%\GG\Crash Reports|*|RECURSE
  3640. FileKey4=%AppData%\Gadu-Gadu 10\Profiles\*\*Cache|*|RECURSE
  3641. FileKey5=%AppData%\Gadu-Gadu 10\logs|*.log
  3642. FileKey6=%AppData%\Gadu-Gadu 10\Crash Reports|*|RECURSE
  3643. FileKey7=%AppData%\Gadu-Gadu\Profiles\*\*Cache|*|RECURSE
  3644. FileKey8=%AppData%\Gadu-Gadu\logs|*.log
  3645. FileKey9=%AppData%\Gadu-Gadu\Crash Reports|*|RECURSE
  3646. FileKey10=%AppData%\Nowe Gadu-Gadu\Profiles\*\*Cache|*|RECURSE
  3647. FileKey11=%AppData%\Nowe Gadu-Gadu\logs|*.log
  3648. FileKey12=%AppData%\Nowe Gadu-Gadu\Crash Reports|*|RECURSE
  3649. FileKey13=%LocalAppData%\GG\Profiles\*\*Cache|*|RECURSE
  3650. FileKey14=%LocalAppData%\GG\logs|*.log
  3651. FileKey15=%LocalAppData%\GG\Crash Reports|*|RECURSE
  3652. FileKey16=%LocalAppData%\Gadu-Gadu 10\Profiles\*\*Cache|*|RECURSE
  3653. FileKey17=%LocalAppData%\Gadu-Gadu 10\logs|*.log
  3654. FileKey18=%LocalAppData%\Gadu-Gadu 10\Crash Reports|*|RECURSE
  3655. FileKey19=%LocalAppData%\Gadu-Gadu\Profiles\*\*Cache|*|RECURSE
  3656. FileKey20=%LocalAppData%\Gadu-Gadu\logs|*.log
  3657. FileKey21=%LocalAppData%\Gadu-Gadu\Crash Reports|*|RECURSE
  3658. FileKey22=%LocalAppData%\Nowe Gadu-Gadu\Profiles\*\*Cache|*|RECURSE
  3659. FileKey23=%LocalAppData%\Nowe Gadu-Gadu\logs|*.log
  3660. FileKey24=%LocalAppData%\Nowe Gadu-Gadu\Crash Reports|*|RECURSE
  3661.  
  3662. [Foxit Phantom PDF]
  3663. ID=2320
  3664. LangSecRef=3021
  3665. Detect1=HKCU\Software\Foxit Software\Foxit PhantomPDF 5.0
  3666. Detect2=HKLM\Software\Foxit Software\Foxit PhantomPDF
  3667. Detect3=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0
  3668. Default=True
  3669. RegKey1=HKCU\Software\Foxit Software\Foxit PhantomPDF 5.0\Recent File List
  3670. RegKey2=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0\Recent File List
  3671. RegKey3=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0\Foxit PhantomPDF Advanced Editor\Recent File List
  3672.  
  3673. [PDFCreator]
  3674. ID=2335
  3675. LangSecRef=3021
  3676. Default=True
  3677. Detect=HKCU\Software\PDFCreator
  3678. FileKey1=%ProgramFiles%\PDFCreator|SetupLog.txt
  3679. FileKey2=%AppData%\pdfforge\Images2PDF|Print-*.log
  3680. FileKey3=%AppData%\pdfforge\Images2PDF|PrintPDF-*.log
  3681. FileKey4=%AppData%\pdfforge\Images2PDF\Tmp|*.prnt|REMOVESELF
  3682. RegKey1=HKCU\Software\PDFCreator\Program|LastsaveDirectory
  3683.  
  3684. [PDF Architect]
  3685. ID=2336
  3686. LangSecRef=3021
  3687. Default=True
  3688. Detect=HKCU\Software\PDF Architect
  3689. FileKey1=%AppData%\PDF Architect\Thumbnails|*.*
  3690. RegKey1=HKCU\Software\PDF Architect\Recent File List
  3691.  
  3692. [MailWasher Pro]
  3693. ID=2321
  3694. LangSecRef=3022
  3695. Detect1=HKCU\Software\FireTrust\MailWasher Pro
  3696. Detect2=HKCU\Software\FireTrust\MailWasher
  3697. Detect3=HKCU\Software\FireTrust\MailWasherPro
  3698. Default=True
  3699. FileKey1=%AppData%\Firetrust\MailWasher\logs|*.*|RECURSE
  3700. FileKey2=%AppData%\Firetrust\MailWasher|log_*|RECURSE
  3701. FileKey3=%AppData%\Firetrust\MailWasher|regex.txt
  3702. FileKey4=%AppData%\Firetrust\MailWasher|updatesAIU.txt
  3703. ExcludeKey1=FILE|%AppData%\Firetrust\MailWasher\cache|*mwp_exw.dat;*mwp_conv.dat;*mwp_inw.dat;*mwp_pmap.dat;*MWP.db3
  3704.  
  3705. [Samsung Kies]
  3706. ID=2322
  3707. LangSecRef=3023
  3708. Detect=HKCU\Software\Samsung\Kies2.0
  3709. Default=True
  3710. FileKey1=%AppData%\Samsung\Kies|UpdateLog.txt;UpdateList.txt;*.log|RECURSE 
  3711. FileKey2=%AppData%\Samsung\Kies\UpdateTemp|*.*|RECURSE
  3712. FileKey3=%CommonAppData%\Samsung\Kies|ConnectionManager.log;Kiesairmessage.log
  3713. FileKey4=%AppData%\Samsung\Kies\TempFiles|*.*|RECURSE
  3714. FileKey5=%CommonAppData%\Samsung\Device Error Recovery|*.log
  3715. FileKey6=%LocalAppData%\Temp\KiesTemporary|*.dll
  3716.  
  3717. [Connectify Hotspot]
  3718. ID=2330
  3719. LangSecRef=3022
  3720. Detect=HKLM\SOFTWARE\Connectify
  3721. Default=True
  3722. FileKey1=%ProgramFiles%\Connectify|install.log
  3723. FileKey2=%CommonAppData%\Connectify\logs|*.log
  3724. ExcludeKey1=%CommonAppData%\Connectify\logs|deamon.log
  3725.  
  3726. [Express Scribe]
  3727. ID=2340
  3728. LangSecRef=3021
  3729. Detect=HKCU\Software\NCH Software\Scribe
  3730. Default=False
  3731. FileKey1=%AppData%\NCH Software\Scribe\Logs|*.*
  3732.  
  3733. [Gom Player]
  3734. ID=2341
  3735. LangSecRef=3023
  3736. Detect=HKCU\Software\GRETECH\GomPlayer
  3737. Default=False
  3738. FileKey1=%AppData%\GRETECH\GomPlayer\Log|*.*
  3739. FileKey2=%AppData%\GRETECH\GomPlayer\DCache|*.*
  3740. RegKey1=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME000
  3741. RegKey2=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME001
  3742. RegKey3=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME002
  3743. RegKey4=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME003
  3744. RegKey5=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME004
  3745. RegKey6=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME005
  3746. RegKey7=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME006
  3747. RegKey8=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME007
  3748. RegKey9=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME008
  3749. RegKey10=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME009
  3750. RegKey11=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME010
  3751. RegKey12=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME011
  3752. RegKey13=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME012
  3753. RegKey14=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME013
  3754. RegKey15=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME014
  3755. RegKey16=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME015
  3756. RegKey17=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME016
  3757. RegKey18=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME017
  3758. RegKey19=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME018
  3759. RegKey20=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME019
  3760. RegKey21=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME020
  3761. RegKey22=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME021
  3762. RegKey23=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME022
  3763. RegKey24=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME023
  3764. RegKey25=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME024
  3765. RegKey26=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME025
  3766. RegKey27=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME026
  3767. RegKey28=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME027
  3768. RegKey29=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME028
  3769. RegKey30=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME029
  3770. RegKey31=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME030
  3771. RegKey32=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME031
  3772. RegKey33=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME032
  3773. RegKey34=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME033
  3774. RegKey35=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME034
  3775. RegKey36=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME035
  3776. RegKey37=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME036
  3777. RegKey38=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME037
  3778. RegKey39=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME038
  3779. RegKey40=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME039
  3780. RegKey41=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME040
  3781. RegKey42=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME041
  3782. RegKey43=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME042
  3783. RegKey44=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME043
  3784. RegKey45=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME044
  3785. RegKey46=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME045
  3786. RegKey47=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME046
  3787. RegKey48=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME047
  3788. RegKey49=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME048
  3789. RegKey50=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME049
  3790. RegKey51=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS000
  3791. RegKey52=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS001
  3792. RegKey53=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS002
  3793. RegKey54=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS003
  3794. RegKey55=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS004
  3795. RegKey56=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS005
  3796. RegKey57=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS006
  3797. RegKey58=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS007
  3798. RegKey59=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS008
  3799. RegKey60=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS009
  3800. RegKey61=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS010
  3801. RegKey62=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS011
  3802. RegKey63=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS012
  3803. RegKey64=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS013
  3804. RegKey65=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS014
  3805. RegKey66=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS015
  3806. RegKey67=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS016
  3807. RegKey68=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS017
  3808. RegKey69=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS018
  3809. RegKey70=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS019
  3810. RegKey71=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS020
  3811. RegKey72=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS021
  3812. RegKey73=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS022
  3813. RegKey74=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS023
  3814. RegKey75=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS024
  3815. RegKey76=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS025
  3816. RegKey77=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS026
  3817. RegKey78=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS027
  3818. RegKey79=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS028
  3819. RegKey80=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS029
  3820. RegKey81=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS030
  3821. RegKey82=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS031
  3822. RegKey83=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS032
  3823. RegKey84=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS033
  3824. RegKey85=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS034
  3825. RegKey86=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS035
  3826. RegKey87=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS036
  3827. RegKey88=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS037
  3828. RegKey89=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS038
  3829. RegKey90=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS039
  3830. RegKey91=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS040
  3831. RegKey92=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS041
  3832. RegKey93=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS042
  3833. RegKey94=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS043
  3834. RegKey95=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS044
  3835. RegKey96=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS045
  3836. RegKey97=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS046
  3837. RegKey98=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS047
  3838. RegKey99=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS048
  3839. RegKey100=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS049
  3840. RegKey101=HKCU\Software\GRETECH\GomPlayer\OPTION|sRecentFolder
  3841. RegKey102=HKCU\Software\GRETECH\GomPlayer\OPTION|sRecentFile
  3842. RegKey103=HKCU\Software\GRETECH\GomPlayer\OPTION|sRecentURL
  3843.  
  3844. [Skype Metro App]
  3845. ID=2337
  3846. LangSecRef=3031
  3847. Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.SkypeApp_kzf8qxf38zg5c
  3848. DetectFile=%LocalAppData%\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c
  3849. Default=True
  3850. FileKey1=%LocalAppData%\Packages\Microsoft.SkypeApp_*\AC\Temp|*.*
  3851. FileKey2=%LocalAppData%\Packages\Microsoft.SkypeApp_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
  3852. FileKey3=%LocalAppData%\Packages\Microsoft.SkypeApp_*\LocalState\*\logs|*.skypelog
  3853. FileKey4=%LocalAppData%\Packages\Microsoft.SkypeApp_*\TempState\Sync_*TempCache|*.*|RECURSE
  3854. FileKey5=%LocalAppData%\Packages\Microsoft.SkypeApp_*\Settings|LastModified.txt
  3855. RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.SkypeApp_kzf8qxf38zg5c\SearchHistory
  3856. RegKey2=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.SkypeApp_kzf8qxf38zg5c\PSR\AddedContactSince
  3857.  
  3858. [Twitter Metro]
  3859. ID=2338
  3860. LangSecRef=3031
  3861. Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\9E2F88E3.Twitter_wgeqdkkx372wm
  3862. DetectFile=%LocalAppData%\Packages\9E2F88E3.Twitter_wgeqdkkx372wm
  3863. Default=True
  3864. FileKey1=%LocalAppData%\Packages\*Twitter_*\AC\Microsoft\CLR_v4.0\|Twitter-*.LOG|RECURSE
  3865. FileKey2=%LocalAppData%\Packages\*Twitter_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
  3866. FileKey3=%LocalAppData%\Packages\*Twitter_*\AC\Microsoft\CryptnetUrlCache\MetaData|Twitter-*.*
  3867. FileKey4=%LocalAppData%\Packages\*Twitter_*\AC\Temp|*.*
  3868. FileKey5=%LocalAppData%\Packages\*Twitter_*\LocalState\CameraPicker\|*.png|RECURSE
  3869. FileKey6=%LocalAppData%\Packages\*Twitter_*\TempState|*.*|RECURSE
  3870. RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\9E2F88E3.Twitter_wgeqdkkx372wm\SearchHistory
  3871. ExcludeKey1=FILE|%LocalAppData%\Packages\*Twitter_*\AC\Microsoft\CryptnetUrlCache\Content\|Twitter-SyncNow.db
  3872.  
  3873. [Adobe Reader Touch]
  3874. ID=2339
  3875. LangSecRef=3031
  3876. DetectFile=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_ynb6jyjzte8ga
  3877. Default=True
  3878. FileKey1=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\INetCache|*.*
  3879. FileKey2=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\INetCookies|*.*
  3880. FileKey3=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\INetHistory|*.*
  3881. FileKey4=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\Microsoft\CLR_v4.0\UsageLogs|AdobeReader*.log
  3882. FileKey5=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\Temp|*.*
  3883. FileKey6=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\LocalState\*\logs|Adobe-*.log
  3884. FileKey7=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\TempState|*.*|RECURSE
  3885.  
  3886. [Bing Search]
  3887. ID=2346
  3888. LangSecRef=3031
  3889. DetectFile=%LocalAppData%\Packages\Microsoft.Bing_8wekyb3d8bbwe
  3890. Default=True
  3891. FileKey1=%LocalAppData%\Packages\Microsoft.Bing_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
  3892. FileKey2=%LocalAppData%\Packages\Microsoft.Bing_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
  3893. FileKey3=%LocalAppData%\Packages\Microsoft.Bing_*\AC\INetCache|*.*|RECURSE
  3894. FileKey4=%LocalAppData%\Packages\Microsoft.Bing_*\AC\INetCookies|*.*|RECURSE
  3895. FileKey5=%LocalAppData%\Packages\Microsoft.Bing_*\AC\INetHistory|*.*|RECURSE
  3896. FileKey6=%LocalAppData%\Packages\Microsoft.Bing_*\AC\AppCache|*.*
  3897. FileKey7=%LocalAppData%\Packages\Microsoft.Bing_*\AC\Temp|*.*
  3898. FileKey8=%LocalAppData%\Packages\Microsoft.Bing_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE
  3899. FileKey9=%LocalAppData%\Packages\Microsoft.Bing_*\AC\PRICache|*_sync.dac
  3900. FileKey10=%LocalAppData%\Packages\Microsoft.Bing_*\TempState|*.*|RECURSE
  3901.  
  3902. [Bing Finance]
  3903. ID=2347
  3904. LangSecRef=3031
  3905. DetectFile=%LocalAppData%\Packages\Microsoft.BingFinance_8wekyb3d8bbwe
  3906. Default=True
  3907. FileKey1=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
  3908. FileKey2=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
  3909. FileKey3=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\INetCache|*.*|RECURSE
  3910. FileKey4=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\INetCookies|*.*|RECURSE
  3911. FileKey5=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\INetHistory|*.*|RECURSE
  3912. FileKey6=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\Temp|*.*
  3913. FileKey7=%LocalAppData%\Packages\Microsoft.BingFinance_*\LocalState\Cache|*.*
  3914. FileKey8=%LocalAppData%\Packages\Microsoft.BingFinance_*\LocalState\navigationHistory|*.*|RECURSE
  3915. FileKey9=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\Microsoft\Internet Explorer\DOMStore|*.*
  3916. FileKey10=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\PriAppCache|*.*
  3917. RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.bingfinance_8wekyb3d8bbwe\Internet Explorer\DOMStorage\microsoft.bingfinance\SearchHistory
  3918. RegKey2=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.bingfinance_8wekyb3d8bbwe\Internet Explorer\DOMStorage\microsoft.bingfinance\RecentVisit
  3919.  
  3920. [Bing Maps]
  3921. ID=2348
  3922. LangSecRef=3031
  3923. DetectFile=%LocalAppData%\Packages\Microsoft.BingMaps_8wekyb3d8bbwe
  3924. Default=True
  3925. FileKey1=%LocalAppData%\Packages\Microsoft.BingMaps_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
  3926. FileKey2=%LocalAppData%\Packages\Microsoft.BingMaps_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
  3927. FileKey3=%LocalAppData%\Packages\Microsoft.BingMaps_*\AC\INetCache|*.*|RECURSE
  3928. FileKey4=%LocalAppData%\Packages\Microsoft.BingMaps_*\AC\INetCookies|*.*|RECURSE
  3929. FileKey5=%LocalAppData%\Packages\Microsoft.BingMaps_*\AC\INetHistory|*.*|RECURSE
  3930. FileKey6=%LocalAppData%\Packages\Microsoft.BingMaps_*\LocalState\Cache|*.*|RECURSE
  3931. FileKey7=%LocalAppData%\Packages\Microsoft.BingMaps_*\TempState|*.state
  3932.  
  3933. [Bing News]
  3934. ID=2349
  3935. LangSecRef=3031
  3936. DetectFile=%LocalAppData%\Packages\Microsoft.BingNews_8wekyb3d8bbwe
  3937. Default=True
  3938. FileKey1=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
  3939. FileKey2=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
  3940. FileKey3=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\INetCache|*.*|RECURSE
  3941. FileKey4=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\INetCookies|*.*|RECURSE
  3942. FileKey5=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\INetHistory|*.*|RECURSE
  3943. FileKey6=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\AppCache|*.*|RECURSE
  3944. FileKey7=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\Temp|*.*
  3945. FileKey8=%LocalAppData%\Packages\Microsoft.BingNews_*\LocalState\Cache|*.*|RECURSE
  3946. FileKey9=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE
  3947. FileKey10=%LocalAppData%\Packages\Microsoft.BingNews_*\TempState|*.sync
  3948. FileKey11=%LocalAppData%\Packages\Microsoft.BingNews*\LocalState\appCache|*.rfc
  3949. FileKey12=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\Microsoft\CLR_v4.0\UsageLogs|*.log
  3950.  
  3951. [Bing Sports]
  3952. ID=2350
  3953. LangSecRef=3031
  3954. DetectFile=%LocalAppData%\Packages\Microsoft.BingSports_8wekyb3d8bbwe
  3955. Default=True
  3956. FileKey1=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
  3957. FileKey2=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
  3958. FileKey3=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\INetCache|*.*|RECURSE
  3959. FileKey4=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\INetCookies|*.*|RECURSE
  3960. FileKey5=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\INetHistory|*.*|RECURSE
  3961. FileKey6=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\Temp|*.*
  3962. FileKey7=%LocalAppData%\Packages\Microsoft.BingSports_*\LocalState\Cache|*.*|RECURSE
  3963. FileKey8=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE
  3964. ExcludeKey1=FILE|%LocalAppData%\Packages\Microsoft.BingSports_*\LocalState\Cache|_sessionState2.xml
  3965.  
  3966. [Bing Travel]
  3967. ID=2351
  3968. LangSecRef=3031
  3969. DetectFile=%LocalAppData%\Packages\Microsoft.BingTravel_8wekyb3d8bbwe
  3970. Default=True
  3971. FileKey1=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
  3972. FileKey2=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
  3973. FileKey3=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\INetCache|*.*|RECURSE
  3974. FileKey4=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\INetCookies|*.*|RECURSE
  3975. FileKey5=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\INetHistory|*.*|RECURSE
  3976. FileKey6=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\Temp|*.*
  3977. FileKey7=%LocalAppData%\Packages\Microsoft.BingTravel_*\LocalState\Cache|*.*|RECURSE
  3978. FileKey8=%LocalAppData%\Packages\Microsoft.BingTravel_*\LocalState\navigationHistory|*.*|RECURSE
  3979. FileKey9=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE
  3980.  
  3981. [Sony Vegas Pro 12.0]
  3982. ID=2352
  3983. LangSecRef=3023
  3984. Detect=HKLM\SOFTWARE\Sony Creative Software\Vegas Pro\12.0
  3985. Default=True
  3986. FileKey1=%LocalAppData%\Sony\ErrorReport|*.erpt
  3987. FileKey2=%LocalAppData%\Sony\Vegas Pro\12.0|*.log
  3988. FileKey3=%AppData%\Sony|SCS_INSTALLER_1.log
  3989. FileKey4=%AppData%\Sony|*.dmp
  3990. FileKey5=%AppData%\Sony\Vegas Pro\12.0|localstorage_*.tmp
  3991. FileKey6=%AppData%\Sony\Vegas Pro\12.0|_lastsession.log
  3992.  
  3993. [Directory Opus 10]
  3994. ID=2353
  3995. LangSecRef=3024
  3996. Detect=HKLM\SOFTWARE\GPSoftware\Directory Opus
  3997. Default=True
  3998. FileKey1=%AppData%\GPSoftware\Directory Opus\Logs|*.*
  3999. FileKey2=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|find_name.osd
  4000. FileKey3=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|find_path.osd
  4001. FileKey4=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|zippy.osd
  4002. FileKey5=%AppData%\GPSoftware\Directory Opus\Thumbnail Cache|*_do.cache
  4003. RegKey1=HKLM\SOFTWARE\Wow6432Node\GPSoftware\Directory Opus\10.5.2.0|ItemListFilter
  4004.  
  4005. [NVIDIA Install Files]
  4006. ID=2357
  4007. LangSecRef=3024
  4008. Detect=HKCU\Software\NVIDIA Corporation
  4009. Default=True
  4010. FileKey1=%SystemDrive%\NVIDIA|*.*|REMOVESELF
  4011. FileKey2=%SystemDrive%\NV|*.*|REMOVESELF
  4012.  
  4013. [CDBurnerXP]
  4014. ID=2358
  4015. LangSecRef=3024
  4016. Detect=HKLM\SOFTWARE\Wow6432Node\Canneverbe Limited\CDBurnerXP
  4017. Detect2=HKCU\Software\Canneverbe Limited\CDBurnerXP
  4018. Default=True
  4019. FileKey1=%ProgramData%\Canneverbe Limited\CDBurnerXP\*.*.*.*|OperationLog.log
  4020. FileKey2=%AppData%\Canneverbe Limited\CDBurnerXP|StarBurn.log
  4021. FileKey3=%AppData%\Canneverbe Limited\CDBurnerXP\*.*.*.*|*.tmp
  4022. RegKey1=HKCU\Software\Canneverbe Limited\CDBurnerXP\PathsPrev
  4023.  
  4024. [UltraEdit]
  4025. ID=2359
  4026. LangSecRef=3021
  4027. Detect=HKCU\Software\IDM Computer Solutions\UltraEdit
  4028. Default=True
  4029. FileKey1=%AppData%\IDMComp\UltraEdit|projects.lst
  4030. FileKey2=%AppData%\IDMComp\Common\FTP Accounts|IdmFTPAccounts_bak.txt
  4031. FileKey3=%LocalAppData%\Downloaded Installations\UltraEdit\*|UltraEdit_.msi
  4032.  
  4033. [Photodex ProShow Producer]
  4034. ID=2360
  4035. LangSecRef=3021
  4036. Detect=HKLM\SOFTWARE\Photodex Media Sources
  4037. Detect2=HKLM\SOFTWARE\Wow6432Node\Photodex Media Sources
  4038. Default=True
  4039. FileKey1=%CommonAppData%\Photodex\ProShow|photodex-presenter-install.log
  4040. FileKey2=%CommonAppData%\Photodex\ProShow Producer|photodex-presenter-install.log
  4041. FileKey3=%ProgramFiles%\Photodex\ProShow Producer|install.log
  4042.  
  4043. [SketchUp Make 2013]
  4044. ID=2361
  4045. LangSecRef=3021
  4046. Detect=HKCU\Software\SketchUp
  4047. Default=True
  4048. FileKey1=%AppData%\SketchUp\SketchUp 2013\SketchUp|~*.tmp
  4049. RegKey1=HKCU\Software\SketchUp\SketchUp 2013\Recent File List
  4050.  
  4051. [HandBrake]
  4052. ID=2362
  4053. LangSecRef=3021
  4054. Detect=HKLM\SOFTWARE\Microsoft\Tracing\Handbrake_RASAPI32
  4055. Detect2=HKLM\SOFTWARE\Microsoft\Tracing\Handbrake_RASMANCS
  4056. Detect3=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Handbrake.exe
  4057. Default=True
  4058. FileKey1=%AppData%\HandBrake\logs|*.txt
  4059. FileKey2=%AppData%\HandBrake\HandBrake\*|*.tmp
  4060.  
  4061. [ABBYY FineReader 11.0]
  4062. ID=2363
  4063. LangSecRef=3021
  4064. Detect=HKCU\Software\ABBYY\FineReader\11.00
  4065. Default=True
  4066. RegKey1=HKCU\Software\ABBYY\FineReader\11.00\Shell\MainFrame\RecentFileList
  4067. RegKey2=HKCU\Software\ABBYY\FineReader\11.00\Shell\Dialogs|LoadImagePath
  4068. RegKey3=HKCU\Software\ABBYY\FineReader\11.00\Shell\Dialogs|SaveImagePath
  4069. FileKey1=%ProgramFiles%\ABBYY FineReader 11|ABBYY FineReader 11.log
  4070. FileKey2=%ProgramData%\ABBYY\Bonus.ScreenshotReader\11.00|*.thumbnail
  4071. FileKey3=%ProgramData%\ABBYY\FineReader\11.00\Licenses|ProductLicensing.log
  4072.  
  4073. [The Bat]
  4074. ID=2374
  4075. LangSecRef=3022
  4076. Detect=HKCU\Software\RIT\The Bat!
  4077. Default=True
  4078. FileKey1=%AppData%\The Bat!|TheBat_Exceptions.log
  4079. FileKey2=%AppData%\The Bat!\*|ACCOUNT_LOG.TXT
  4080.  
  4081. [Wondershare Video Converter Ultimate]
  4082. ID=2376
  4083. LangSecRef=3023
  4084. Detect=HKLM\SOFTWARE\Wondershare\Wondershare Video Converter Ultimate
  4085. Default=True
  4086. FileKey1=%commonprogramfiles%\Wondershare\Wondershare Helper Compact\log\Data|*.*|RECURSE
  4087. FileKey2=%ProgramFiles%\Wondershare\Video Converter Ultimate\Log|*.*
  4088. FileKey3=%CommonAppData%\Wondershare Video Converter Ultimate|*.dat.bak
  4089. FileKey4=%CommonAppData%\Wondershare Video Converter Ultimate\TempSiteIconDir|*.*
  4090. FileKey5=%CommonAppData%\Wondershare Video Converter Ultimate\TempThumbDir|*.*
  4091.  
  4092. [Sublime Text]
  4093. ID=2377
  4094. LangSecRef=3024
  4095. DetectFile=%AppData%\Sublime Text 3
  4096. Default=True
  4097. FileKey1=%LocalAppData%\Sublime Text 3\Index|LOG.old
  4098. FileKey2=%LocalAppData%\Sublime Text 3\Index|00*.log
  4099.  
  4100. [Picasa 3]
  4101. ID=2378
  4102. LangSecRef=3021
  4103. Detect=HKLM\SOFTWARE\Wow6432Node\Google\Picasa
  4104. Default=True
  4105. FileKey1=%LocalAppData%\Google\Picasa2|network.log;network_expwebsites.log
  4106. FileKey2=%LocalAppData%\Google\GBScreensaver|network.log
  4107. FileKey3=%LocalAppData%\Google\Google+ Auto Backup|network.log
  4108. FileKey4=%LocalAppData%\Google\Picasa2\cache|*.*|RECURSE
  4109. FileKey5=%LocalAppData%\Google\Picasa2\temp|*.*|RECURSE
  4110. FileKey6=%LocalAppData%\Google\Picasa2\tmp|PluginRec.dat;PluginRec.dat_bak
  4111.  
  4112. [Kingsoft Office 2013]
  4113. ID=2379
  4114. LangSecRef=3021
  4115. Detect=HKCU\SOFTWARE\Kingsoft\Kingsoft\Office\6.0
  4116. Detect2=HKLM\SOFTWARE\Wow6432Node\Kingsoft\Office\6.0
  4117. Default=True
  4118. RegKey1=HKCU\Software\Kingsoft\Office\6.0\et\RecentFiles
  4119. RegKey2=HKCU\Software\Kingsoft\Office\6.0\et\RecentFunction
  4120. RegKey3=HKCU\Software\Kingsoft\Office\6.0\wpp\RecentFiles
  4121. RegKey4=HKCU\Software\Kingsoft\Office\6.0\wps\RecentFiles
  4122. FileKey1=%AppData%\Kingsoft\*|*.bak2
  4123. FileKey2=%CommonAppData%\Kingsoft\Office6\LocalTemp|*.*
  4124. FileKey3=%LocalAppData%\Kingsoft\et\cache\http|*.*|RECURSE
  4125. FileKey4=%LocalAppData%\Kingsoft\et\cache\https|*.*|RECURSE
  4126. FileKey5=%LocalAppData%\Kingsoft\wpp\cache\http|*.*|RECURSE
  4127. FileKey6=%LocalAppData%\Kingsoft\wps\cache\http|*.*|RECURSE
  4128. FileKey7=%LocalAppData%\Kingsoft\wps\cache\https|*.*|RECURSE
  4129. FileKey8=%AppData%\Kingsoft\office6\backup|*.*
  4130. FileKey9=%AppData%\Kingsoft\office6\log\*|*.log
  4131. FileKey10=%AppData%\Kingsoft\office6\update\log|*.log
  4132. FileKey11=%AppData%\Kingsoft\office6\update\down|*.src
  4133. FileKey12=%AppData%\Kingsoft\office6\update\dump|*.dmp
  4134. FileKey13=%AppData%\Kingsoft\office6\update\log\package|*.pkg
  4135.  
  4136. [Facebook Metro]
  4137. ID=2380
  4138. LangSecRef=3031
  4139. Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Facebook.Facebook_8xx8rvfyw5nnt
  4140. Default=True
  4141. FileKey1=%LocalAppData%\Packages\*Facebook_*\AC\AppCache|*.*|RECURSE
  4142. FileKey2=%LocalAppData%\Packages\*Facebook_*\AC\INetCache|*.*|RECURSE
  4143. FileKey3=%LocalAppData%\Packages\*Facebook_*\AC\INetCookies|*.*|RECURSE
  4144. FileKey4=%LocalAppData%\Packages\*Facebook_*\AC\INetHistory|*.*|RECURSE
  4145. FileKey5=%LocalAppData%\Packages\*Facebook_*\AC\Microsoft\CLR_v4.0|*.log|RECURSE
  4146. FileKey6=%LocalAppData%\Packages\*Facebook_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
  4147. FileKey7=%LocalAppData%\Packages\*Facebook_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
  4148. FileKey8=%LocalAppData%\Packages\*Facebook_*\AC\PRICache|*.*
  4149. FileKey9=%LocalAppData%\Packages\*Facebook_*\AC\Temp|*.*
  4150.  
  4151. [Xilisoft Video Converter]
  4152. ID=2381
  4153. LangSecRef=3023
  4154. Detect=HKLM\Software\Xilisoft\Video Converter Platinum
  4155. Detect2=HKLM\Software\Xilisoft\Video Converter Ultimate
  4156. Detect3=HKLM\Software\Xilisoft\Video Converter Standard
  4157. Default=True
  4158. RegKey1=Software\Xilisoft\Video Converter Platinum\Settings|last_output_dir
  4159. RegKey2=Software\Xilisoft\Video Converter Platinum\Settings|last_profile_group
  4160. RegKey3=Software\Xilisoft\Video Converter Platinum\Settings|last_profile_url
  4161. RegKey4=Software\Xilisoft\Video Converter Platinum\Settings|recent_profiles
  4162. RegKey5=Software\Xilisoft\Video Converter Platinum\Settings\output
  4163. Filekey1=%CommonAppData%\Xilisoft\Video Converter Platinum\customdata|settings.old
  4164.  
  4165. [Xilisoft DVD Ripper]
  4166. ID=2382
  4167. LangSecRef=3023
  4168. Detect=HKLM\Software\Xilisoft\DVD Ripper Ultimate SE
  4169. Default=True
  4170. RegKey1=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|last_output_dir
  4171. RegKey2=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|last_profile_group
  4172. RegKey3=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|last_profile_url
  4173. RegKey4=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|recent_profiles
  4174. RegKey5=Software\Xilisoft\DVD Ripper Ultimate SE\Settings\output
  4175. FileKey1=%CommonAppData%\Xilisoft\DVD Ripper Ultimate SE\customdata|settings.old
  4176.  
  4177. [dBpoweramp]
  4178. ID=2383
  4179. LangSecRef=3023
  4180. Detect=HKCU\Software\Illustrate\dBpoweramp
  4181. Default=True
  4182. RegKey1=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder0
  4183. RegKey2=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder1
  4184. RegKey3=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder2
  4185. RegKey4=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder3
  4186. RegKey5=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder4
  4187. RegKey6=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder5
  4188. RegKey7=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder6
  4189. RegKey8=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder7
  4190. RegKey9=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder8
  4191. RegKey10=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder9
  4192. RegKey11=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder10
  4193. RegKey12=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\AAC (Advanced Audio Compression)|DMCUserFolderStr
  4194. RegKey13=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Aiff|DMCUserFolderStr
  4195. RegKey14=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Apple Lossless|DMCUserFolderStr
  4196. RegKey15=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\FLAC|DMCUserFolderStr
  4197. RegKey16=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\mp3 (Lame)|DMCUserFolderStr
  4198. RegKey17=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\ogg vorbis|DMCUserFolderStr
  4199. RegKey18=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Wave|DMCUserFolderStr
  4200. RegKey19=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Windows Media Audio 10|DMCUserFolderStr
  4201. RegKey20=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\[Multi Encoder]|DMCUserFolderStr
  4202. RegKey21=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Test Conversion|DMCUserFolderStr
  4203. RegKey22=HKCU\Software\Illustrate\dBpoweramp|LastAccessedFolder
  4204.  
  4205. [SyncBackFree]
  4206. ID=2384
  4207. LangSecRef=3024
  4208. Detect=HKCU\Software\2BrightSparks\SyncBackFree
  4209. Default=True
  4210. FileKey1=%LocalAppData%\2BrightSparks\SyncBackFree\Logs|*.*
  4211. FileKey2=%LocalAppData%\2BrightSparks\SyncBackFree|Debug*.txt
  4212.  
  4213. [Wondershare Video Converter Pro]
  4214. ID=2385
  4215. LangSecRef=3023
  4216. Detect=HKLM\SOFTWARE\Wondershare\Wondershare Video Converter Pro
  4217. Default=True
  4218. FileKey1=%ProgramFiles%\Wondershare Video Converter Pro\TempThumbDir|*.*|RECURSE
  4219. FileKey2=%ProgramFiles%\Wondershare Video Converter Pro\Log|*.*|RECURSE
  4220. FileKey3=%CommonAppData%\Wondershare Video Converter Pro|*.dat.bak
  4221. FileKey4=%CommonAppData%\Wondershare Video Converter Pro\TempSiteIconDir|*.*
  4222. FileKey5=%CommonAppData%\Wondershare Video Converter Pro\TempThumbDir|*.*
  4223. FileKey6=%CommonProgramFiles%\Wondershare\Wondershare Helper Compact\Temp|video*.exe
  4224. FileKey7=%ProgramFiles%\Wondershare\Video Converter Pro\Output|Thumbnail.dat
  4225.  
  4226. [Aimersoft Video Converter Ultimate]
  4227. ID=2386
  4228. LangSecRef=3023
  4229. Detect=HKLM\SOFTWARE\Aimersoft\Aimersoft Video Converter Ultimate
  4230. Default=True
  4231. FileKey1=%ProgramFiles%\Aimersoft\Video Converter Ultimate\Log|*.*
  4232. FileKey2=%ProgramFiles%\Aimersoft\Video Converter Ultimate\Snapshot|snap*.dat
  4233. FileKey3=%ProgramFiles%\Common Files\Aimersoft\Aimersoft Helper Compact\log|*.*|RECURSE
  4234. FileKey4=%CommonAppData%\Aimersoft Video Converter Ultimate\TempSiteIconDir|*.*
  4235. FileKey5=%CommonAppData%\Aimersoft Video Converter Ultimate\TempThumbDir|*.*
  4236. FileKey6=%CommonAppData%\Aimersoft Video Converter Ultimate|*.dat.bak
  4237. FileKey7=%LocalAppData%\Aimersoft\ASHelper|*.exe.tmp
  4238. FileKey8=%AppData%\Aimersoft Video Converter Ultimate\Temp|*.*
  4239.  
  4240. [Stardock WindowBlinds]
  4241. ID=2389
  4242. LangSecRef=3021
  4243. Detect=HKCU\Software\Stardock\WindowBlinds
  4244. Default=True
  4245. RegKey1=HKCU\Software\Stardock\WindowBlinds\WB5.ini\Recent
  4246. FileKey1=%Public%\Documents\Stardock\WindowBlinds|StardockB*.dmp
  4247.  
  4248. [Nitro Pro 9]
  4249. ID=2390
  4250. LangSecRef=3024
  4251. Detect=HKCU\Software\Nitro\Pro\9.0
  4252. Default=True
  4253. RegKey1=HKCU\Software\Nitro\Pro\9.0\Recent File List
  4254. RegKey2=HKCU\Software\Nitro\Pro\9.0\Settings\Preferences\kPreferences|kCurrentOpenPath
  4255. FileKey1=%CommonProgramFiles%\Nitro\Pro\9.0|*.backup
  4256. FileKey2=%CommonAppData%\Package Cache|*.rsm
  4257. FileKey3=%AppData%\Downloaded Installations|*_temp.msi|RECURSE
  4258. FileKey4=%AppData%\Nitro\Pro\9.0|DocLog.txt
  4259.  
  4260. [Nitro PDF Reader 3]
  4261. ID=2392
  4262. LangSecRef=3024
  4263. Detect=HKCU\Software\Nitro\Reader\3.0
  4264. Default=True
  4265. RegKey1=HKCU\Software\Nitro PDF\Reader\3.0\Recent File List
  4266.  
  4267. [VirtualDJ 7]
  4268. ID=2393
  4269. LangSecRef=3023
  4270. Detect=HKCU\Software\VirtualDJ
  4271. Default=True
  4272. FileKey1=%Documents%\VirtualDJ\TrackListing|tracklist.txt
  4273.  
  4274. [Format Factory 3.3.5]
  4275. ID=2394
  4276. LangSecRef=3023
  4277. Detect=HKCU\Software\FreeTime\FormatFactory
  4278. Default=True
  4279. RegKey1=HKCU\Software\FreeTime\FormatFactory|LastUse
  4280. FileKey1=%Documents%\FormatFactory|*.task
  4281.  
  4282. [TeamViewer]
  4283. ID=2395
  4284. LangSecRef=3024
  4285. Detect=HKCU\Software\TeamViewer
  4286. Default=True
  4287. RegKey1=HKCU\Software\TeamViewer\Version9|MRU
  4288. FileKey1=%ProgramFiles%\TeamViewer\*|*.tmp|RECURSE
  4289. FileKey2=%LocalAppData%\VirtualStore\Program Files*\TeamViewer\*|*.tmp|RECURSE
  4290. FileKey3=%ProgramFiles%\TeamViewer\Version9|Connections_incoming.txt
  4291. FileKey4=%AppData%\TeamViewer|Connections.txt
  4292. FileKey5=%AppData%\TeamViewer\MRU\RemoteSupport|*.tvc
  4293.  
  4294. [MS OneDrive]
  4295. ID=2396
  4296. LangSecRef=3021
  4297. Detect=HKCU\Software\Microsoft\SkyDrive
  4298. Default=True
  4299. FileKey1=%LocalAppData%\Microsoft\SkyDrive\logs|*.log;*.etl
  4300.  
  4301. [VNCViewer 5]
  4302. ID=2397
  4303. LangSecRef=3024
  4304. Detect=HKCU\Software\RealVNC\vncviewer
  4305. Default=True
  4306. RegKey1=HKCU\Software\RealVNC\vncviewer\MRU
  4307. FileKey1=%LocalAppData%\RealVNC|vncviewer.log
  4308.  
  4309. [Tag&Rename 3.8]
  4310. ID=2398
  4311. LangSecRef=3024
  4312. Detect=HKCU\Software\Softpointer\Tag&Rename3.7\Config
  4313. Default=True
  4314. RegKey1=HKCU\Software\Softpointer\Tag&Rename3.7\Config|CurrentFolder
  4315. RegKey2=HKCU\Software\Softpointer\Tag&Rename3.7\Config|HistoryList
  4316.  
  4317. [Tango]
  4318. ID=2399
  4319. LangSecRef=3022
  4320. DetectFile=%ProgramFiles%\Tango\Tango.exe
  4321. Default=True
  4322. FileKey1=%LocalAppData%\tango|call_log.dat
  4323.  
  4324. [PhotoScape 3.6.5]
  4325. ID=2400
  4326. LangSecRef=3023
  4327. Detect=HKCU\Software\Mooii\PhotoScape
  4328. Default=True
  4329. FileKey1=%AppData%\PhotoScape|*.lst;*.cfg;*.jpg
  4330.  
  4331. [BlueStacks]
  4332. ID=2401
  4333. LangSecRef=3021
  4334. Detect=HKLM\Software\Bluestacks
  4335. Default=True
  4336. FileKey1=%CommonAppData%\BlueStacks\logs|*.log;*.log.*|RECURSE
  4337. FileKey2=%LocalAppData%\BlueStacks\logs|*.log
  4338. FileKey3=%CommonAppData%\BlueStacksSetup\Images\|*.*|REMOVESELF
  4339. FileKey4=%CommonAppData%\BlueStacksSetup|runtimedata_*.zip;runtimedata_*.zip.manifest
  4340. FileKey5=%CommonAppData%\BlueStacksSetup|bstInstall.log
  4341.  
  4342. [ManyCam 4.0.109]
  4343. ID=2402
  4344. LangSecRef=3023
  4345. Detect=HKCU\Software\Visicom Media\ManyCam
  4346. Default=True
  4347. RegKey1=HKCU\Software\Visicom Media\ManyCam\ui|open_media_folder
  4348. RegKey2=HKCU\Software\Visicom Media\ManyCam\ui|open_audio_folder
  4349. RegKey3=HKCU\Software\Visicom Media\ManyCam\ui|open_game_folder
  4350. RegKey4=HKCU\Software\Visicom Media\ManyCam\ui|open_playlist_folder
  4351. FileKey1=%LocalAppData%\ManyCam\game_capture|*.log
  4352.  
  4353. [XnView]
  4354. ID=2406
  4355. LangSecRef=3024
  4356. Detect=HKLM\Software\XnView
  4357. Default=True
  4358. FileKey1=%AppData%\XnView|XnView.db;category.bak
  4359. FileKey2=%ProgramFiles%\XnView|category.bak
  4360. FileKey3=%LocalAppData%\VirtualStore\Program Files*\XnView|category.bak
  4361. FileKey4=%ProgramFiles%\XnView\cache|*.db
  4362. FileKey5=%LocalAppData%\VirtualStore\Program Files*\XnView\cache|*.db