DDS:: - used to process psuedo HJT entries in dds.txt


Domains:: - for resetting the following keys to Windows default:

* Domains
* Ranges
* EscDomains



Extra:: - include this directive alongside other directives in a CFScript if you want to see an updated Supplementary scan in the resultant CF.txt


Firefox:: - used to fix Supplementary Scan Firefox entries


Mia:: - used to locate and restore a file to a specific location


NoOrphans:: - This will instruct CF to avoid autofixing O4 & MsConfig\StartupReg entries


Quit:: - used in conjunction with DeQuarantine:: if all you're doing in your script is restoring from Qoobox.


RegLock:: - used to unlock keys


RegLockDel:: - used to unlock and delete the keys


Regnull:: - used to delete null embedded keys


Restore:: - - used for searching and replacing from Vista Volume Shadow Copy


RestoreRun:: - to restore the HKLM\~\Run and the HKCU\~\Run registry branches



SkipFix:: - This invokes CF's Reduced Functionality Mode. Using this switch will disable most of CF's autofixes.


Snapshot:: - will cause CF to produce the Snapshot Report for you. The first time CF runs, it creates a snapshot of the files from C:\Windows. The second time Cf runs, it compares the earlier snapshot with current file listing.


SnapshotB:: - CF will use old snapshot to create the snapshot section. When that's done, it creates a new snapshot for future use.


SRPeek:: - This will search System Restore's cache for matches to replace a file.


TDL:: - Used for specific variant of TDSS infection