Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ; Application Cleaning files
- ;
- ; Version: v1.0.110126
- ; Notes
- ; # of entries: 449
- ; Want to contribute entries you've written? Want to request a program be added? Register and post on the offical piriform forums ( this thread http://tinyurl.com/Winapp2-Thread )
- ; Valid commands:
- ; LangSecRef - The section under applications (see below)
- ; Detect - Location in the registry to activate an entry
- ; DetectFile - Location on a disk to activate an entry
- ; Default - Default on/off value (all false in this file)
- ; FileKey(x) - Files to be deleted
- ; RegKey(x) - Registry Values to be deleted
- ; ExcludeKey(x) - Files to NOT be deleted (used in tandum with a |*.* FileKey frequently )
- ; Section - Sets a specific (new) section
- ; Warning - Pops up a Warning when the checkmark is ticked
- ; ---------------------------------------
- ; LangSecRef
- ; 3021 = Applications
- ; 3022 = Internet
- ; 3023 = Multimedia
- ; 3024 = Utilities
- ; 3025 = Windows
- ; 3026 = Firefox/Mozilla
- ; 3027 = Opera
- ; 3028 = Safari
- [.NET Reflector*]
- LangSecRef=3021
- DetectFile=%LocalAppData%\Red Gate\.NET Reflector 6\Reflector.cfg
- Default=False
- FileKey1=%LocalAppData%\Red Gate\.NET Reflector 6\Cache|*.*|RECURSE
- FileKey2=%LocalAppData%\Red Gate\.NET Reflector 6|Reflector.cfg
- [32bit Web Browser*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\32BITWEB\32BW.exe
- Default=False
- FileKey1=%ProgramFiles%\32BITWEB\Data|LastURL.dat
- FileKey2=%ProgramFiles%\32BITWEB\Data|LastURL.da0
- [3GP Video Converter*]
- LangSecRef=3023
- Detect=HKCU\Software\ImTOO\3GP Video Converter
- Default=False
- RegKey1=HKCU\Software\ImTOO\3GP Video Converter\Settings|last_openpath
- RegKey2=HKCU\Software\ImTOO\3GP Video Converter\Settings|OuputDir
- [A-squared Free*]
- LangSecRef=3024
- Detect=HKLM\Software\Emsi Software GmbH\a-squared Free
- Default=False
- FileKey1=%UserProfile%\My Documents\a-squared\Reports|*.*
- FileKey2=%ProgramFiles%\a-squared Free\Logs|*.*
- FileKey3=%UserProfile%\Documents\a-squared\Reports|*.*
- [Ableton Live Decoding Cache*]
- LangSecRef=3024
- DetectFile=%AppData%\Ableton\Cache\
- Default=False
- FileKey1=%AppData%\Ableton\Cache|*.*|RECURSE
- [ACDSee 6.0 Standard*]
- Warning=This will remove the Database information, use with caution.
- Default=False
- Detect=HKCU\Software\ACD Systems\ACDSee 6.0
- FileKey1=%AppData%\ACD Systems\Catalogs\Default|*.*
- LangSecref=3023
- [Ace Utilities*]
- LangSecRef=3024
- Detect=HKCU\Software\Acelogix\Ace Utilities
- Default=False
- FileKey1=%UserProfile%\My Documents\Ace Utilities Backups|*.reg
- FileKey2=%UserProfile%\Documents\Ace Utilities Backups|*.reg
- [Acronis True Image Home*]
- LangSecRef=3024
- Detect=HKCU\Software\Acronis\TrueImageHome
- Default=False
- FileKey1=%CommonAppData%\Acronis\TrueImage\Logs|*.log
- [Adaptec's Audio CD*]
- LangSecRef=3024
- Detect=HKCU\Software\Adaptec
- Default=False
- RegKey1=HKCU\Software\Adaptec\AUDIO_CD_INFO
- [Adobe Acrobat Cache*]
- LangSecRef=3021
- DetectFile=%LocalAppData%\Adobe\Acrobat
- Default=False
- FileKey1=%LocalAppData%\Adobe\Acrobat|*.idx|RECURSE
- [Adobe Flash Player More*]
- LangSecRef=3023
- DetectFile=%AppData%\macromedia\flash player\
- Default=False
- FileKey1=%AppData%\macromedia\flash player\#sharedobjects|*.*|REMOVESELF
- FileKey2=%AppData%\Adobe\Flash Player\AssetCache|*.*|REMOVESELF
- [Adobe Photoshop 5.5*]
- LangSecRef=3021
- Detect=HKCU\Software\Adobe\Photoshop\5.5
- Default=False
- RegKey1=HKCU\Software\Adobe\Photoshop\5.5\VisitedDirs
- [Adobe Updater Logs*]
- LangSecRef=3021
- DetectFile=%ProgramFiles%\Adobe
- Default=False
- FileKey1=%LocalAppData%\Adobe\AAMUpdater|*.Log|RECURSE
- FileKey2=%LocalAppData%\Adobe\Updater6|*.log|RECURSE
- [Advanced Searchbar*]
- LangSecRef=3022
- Detect=HKCU\Software\Advanced Searchbar\Toolbar
- Default=False
- RegKey1=HKCU\Software\Advanced Searchbar\Toolbar\Historysearchbox1
- [Advanced Uninstaller 9 History*]
- LangSecRef=3024
- Detect=HKCU\Software\Innovative Solutions\Advanced Uninstaller PRO\9
- Default=False
- RegKey1=HKCU\Software\Innovative Solutions\Advanced Uninstaller PRO\9\compress|listHistoryText
- [Advanced Uninstaller 10 History*]
- LangSecRef=3024
- Detect=HKCU\Software\Innovative Solutions\Advanced Uninstaller PRO\10
- Default=False
- RegKey1=HKCU\Software\Innovative Solutions\Advanced Uninstaller PRO\10\compress|listHistoryText
- [Ahead Nero 8 Logs*]
- LangSecRef=3021
- Detect=HKCU\Software\Nero\Nero8
- Default=False
- FileKey1=%AppData%\Nero\Nero8\Nero Burning ROM|*.log
- [Ahead Nero 8 MRU*]
- LangSecRef=3021
- Detect=HKCU\Software\Nero\Nero8
- Default=False
- RegKey1=HKCU\Software\Nero\Nero8\Cover Designer\Recent File List
- RegKey2=HKCU\Software\Nero\Nero8\Nero - Burning Rom\Recent File List
- [Ahead Nero PhotoSnap*]
- LangSecRef=3021
- Detect=HKCU\Software\ahead\Nero PhotoSnap
- Default=False
- RegKey1=HKCU\Software\ahead\Nero PhotoSnap\Recent File List
- [Ahead NeroSearch*]
- LangSecRef=3021
- Detect=HKCU\Software\Ahead\NeroSearch
- Default=False
- RegKey1=HKCU\Software\Ahead\NeroSearch\NeroSavedSearches\SavedSearches
- [Ahead NeroVision 2.0*]
- LangSecRef=3021
- Detect=HKCU\Software\ahead\NeroVision\2.0
- Default=False
- RegKey1=HKCU\Software\ahead\NeroVision\2.0\RecentFiles
- [AI Roboform Search*]
- LangSecRef=3022
- Detect=HKCU\Software\Siber Systems
- Default=False
- RegKey1=HKCU\Software\Siber Systems\RoboForm\Query-MRU
- [AkelPad*]
- LangSecRef=3024
- Detect=HKCU\Software\Akelsoft\AkelPad
- Default=False
- RegKey1=HKCU\Software\Akelsoft\AkelPad\Recent
- RegKey2=HKCU\Software\Akelsoft\AkelPad\Search
- [Alcohol 52%*]
- LangSecRef=3023
- Detect=HKCU\Software\Alcohol Soft
- Default=False
- RegKey1=HKCU\Software\Alcohol Soft\Alcohol 52%\Images
- RegKey2=HKCU\Software\Alcohol Soft\Alcohol 52%\MountedMRU\0
- RegKey3=HKCU\Software\Alcohol Soft\Alcohol 52%\Basic|Image File Path
- RegKey4=HKCU\Software\Alcohol Soft\Alcohol 52%\Options\Image Making Wizard|ImageFilePath
- RegKey5=HKCU\Software\Alcohol Soft\Alcohol 52%\Options\Image Making Wizard|ImageName
- [Always Right*]
- LangSecRef=3024
- Detect=HKCU\Software\AlwaysRight
- Default=False
- FileKey1=%ProgramFiles%\Superhunter\Always Right\FileBackup|*.*
- FileKey2=%ProgramFiles%\Superhunter\Always Right\RegBackup|*.*
- [Amsn - Display Pictures*]
- LangSecRef=3021
- Default=False
- Detect=HKCU\Software\aMSN
- FileKey1=%UserProfile%\amsn\displaypic\cache|*.*
- [AMUST Registry Cleaner Undo Data*]
- LangSecRef=3024
- DetectFile=%LocalAppData%\AMUST\Registry Cleaner\UndoData\
- Default=False
- FileKey1=%LocalAppData%\AMUST\Registry Cleaner\UndoData|*.*
- [Anim8or*]
- LangSecRef=3021
- Detect=HKCU\Software\Silicon Valley Software\Anim8or
- Default=False
- RegKey1=HKCU\Software\Silicon Valley Software\Anim8or|File1
- RegKey2=HKCU\Software\Silicon Valley Software\Anim8or|File2
- RegKey3=HKCU\Software\Silicon Valley Software\Anim8or|File3
- RegKey4=HKCU\Software\Silicon Valley Software\Anim8or|File4
- [Anki Backups*]
- LangSecRef=3021
- DetectFile=%ProgramFiles%\Anki\Anki.exe
- Default=False
- FileKey1=%AppData%\.anki\backups|*.*|
- [AntiVir Personal 8*]
- LangSecRef=3024
- Detect=HKLM\SOFTWARE\Avira\AntiVir PersonalEdition Classic
- Default=False
- FileKey1=%CommonAppData%\Avira\AntiVir PersonalEdition Classic\BACKUP\FAILSAFE|*.tmp
- FileKey2=%CommonAppData%\Avira\AntiVir PersonalEdition Classic\LOGFILES|*.log
- FileKey3=%ProgramFiles%\Avira\AntiVir PersonalEdition Classic|*.tmp
- FileKey4=%ProgramFiles%\Avira\AntiVir PersonalEdition Classic\FAILSAFE|*.tmp
- [AOL 9.1*]
- LangSecRef=3022
- DetectFile=%CommonAppData%\AOL\C_AOL 9.1
- Default=False
- FileKey1=%AppData%\AOL\C_AOL 9.1|*.tmp|RECURSE
- FileKey2=%CommonAppData%\AOL\C_AOL 9.1|*.tmp|RECURSE
- [AOL Instant Messenger*]
- LangSecRef=3022
- Detect=HKCU\Software\America Online\AOL Instant Messenger ™\CurrentVersion
- Default=False
- RegKey1=HKCU\Software\America Online\AOL Instant Messenger ™\CurrentVersion\recent IM ScreenNames
- RegKey2=HKCU\Software\America Online\AOL Instant Messenger ™\CurrentVersion\recent ScreenNames
- RegKey3=HKCU\Software\America Online\AOL Instant Messenger ™\CurrentVersion\Users
- [AOL AIM Messenger*]
- LangSecRef=3022
- DetectFile=%AppData%\acccore\caches\bart
- Default=False
- FileKey1=%AppData%\acccore\caches\bart|*.*|RECURSE
- FileKey2=%LocalAppData%\AIM\Settings\aolbartcache|*.*|RECURSE
- [Apple Application Logs]
- LangSecRef=3021
- DetectFile=%AppData%\Apple Computer\
- Default=False
- FileKey1=%AppData%\Apple Computer\logs|*.log
- [Arasan Chess*]
- LangSecRef=3024
- Detect=HKCU\Software\Arasan\Arasan
- Default=False
- RegKey1=HKCU\Software\Arasan\Arasan\Recent File List
- [Ashampoo Burning Studio 5*]
- LangSecRef=3021
- Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 5
- Default=False
- RegKey1=HKCU\Software\Ashampoo\Ashampoo Burning Studio 5\Burn Image Project\SelectImage
- RegKey2=HKCU\Software\Ashampoo\Ashampoo Burning Studio 5\Data Disc Project\AddDialog
- RegKey3=HKCU\Software\Ashampoo\Ashampoo Burning Studio 5\Data Disc Project\DumpImage
- RegKey4=HKCU\Software\Ashampoo\Ashampoo Burning Studio 5\Unknown Project\AddDialog
- [Ashampoo Burning Studio 6*]
- LangSecRef=3021
- Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 6
- Default=False
- RegKey1=HKCU\Software\Ashampoo\Ashampoo Burning Studio 6\Burn Image Project\SelectImage
- RegKey2=HKCU\Software\Ashampoo\Ashampoo Burning Studio 6\Data Disc Project\AddDialog
- RegKey3=HKCU\Software\Ashampoo\Ashampoo Burning Studio 6\Unknown Project\AddDialog
- [Ashampoo Burning Studio 6 Free (Logs)*]
- LangSecRef=3023
- Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 6
- Default=False
- FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 6 Free\Logs|*.*
- [Ashampoo Burning Studio 7*]
- LangSecRef=3021
- Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 7
- Default=False
- RegKey1=HKCU\Software\Ashampoo\Ashampoo Burning Studio 7\Burn Image Project\SelectImage
- RegKey2=HKCU\Software\Ashampoo\Ashampoo Burning Studio 7\Data Disc Project\AddDialog
- RegKey3=HKCU\Software\Ashampoo\Ashampoo Burning Studio 7\Unknown Project\AddDialog
- [Ashampoo Burning Studio 8*]
- LangSecRef=3021
- Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 8
- Default=False
- RegKey1=HKCU\Software\Ashampoo\Ashampoo Burning Studio 8\Data Disc Project\AddDialog
- [Ashampoo Burning Studio 07*]
- LangSecRef=3021
- Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2007
- Default=False
- RegKey1=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2007\Burn Image Project\AddDialog
- RegKey2=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2007\Data Disc Project\AddDialog
- RegKey3=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2007\Dump Image Project\DumpImage
- RegKey4=HKCU\Software\Ashampoo\Ashampoo Burning Studio 2007\Unknown Project\AddDialog
- FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 2007\Logs|*.*
- [Ashampoo Burning Studio 09*]
- LangSecRef=3024
- Detect=HKLM\Software\Ashampoo\Ashampoo Burning Studio 2009
- Default=False
- FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 2009|backupmetainfo.xml
- FileKey2=%AppData%\Ashampoo\Ashampoo Burning Studio 2009\Logs|*.xml
- FileKey3=%AppData%\Ashampoo\Logs|*.txt
- [ATI/AMD Graphics Driver Install Files*]
- LangSecRef=3024
- Detect=HKLM\Software\Ati Technologies\Install
- Default=False
- FileKey1=%SystemDrive%\ATI\Support|*.*|RECURSE
- FileKey2=%SystemDrive%\AMD|*.*|RECURSE
- [ATI/AMD Graphics Card Driver Install Logs*]
- LangSecRef=3024
- Detect=HKLM\Software\Ati Technologies\Install
- Default=False
- FileKey1=%ProgramFiles%\ATI\CIM\Reports|*.xml
- [Auslogics BoostSpeed Logs*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Auslogics\Auslogics BoostSpeed\boostspeed.exe
- Default=False
- FileKey1=%AppData%\Auslogics\BoostSpeed\Logs|*.*
- [Auslogics Free Utilities*]
- LangSecRef=3024
- Detect=HKCU\Software\Auslogics
- Default=False
- FileKey1=%AppData%\Auslogics\Disk Defrag\Reports|*.*
- FileKey2=%AppData%\Auslogics\Disk Defrag\Logs|*.*
- FileKey3=%AppData%\Auslogics\Registry Defrag\Logs|*.*
- FileKey4=%AppData%\Auslogics\Registry Defrag\Reports|*.*
- FileKey5=%AppData%\Auslogics\System Information\Reports|*.*
- FileKey6=%ProgramFiles%\Auslogics\Auslogics Registry Defrag|*.log
- [Autodesk Design Review MRU*]
- LangSecRef=3023
- Detect=HKCU\SoftWare\AutoDesk\DWF Common
- Default=False
- RegKey1=HKCU\SoftWare\AutoDesk\DWF Common\Preferences\MRUList
- [AutoIt3*]
- LangSecRef=3021
- Detect=HKCU\Software\AutoIt v3
- Default=False
- RegKey1=HKCU\Software\AutoIt v3\Aut2Exe|LastExeDir
- RegKey2=HKCU\Software\AutoIt v3\Aut2Exe|LastIcon
- RegKey3=HKCU\Software\AutoIt v3\Aut2Exe|LastIconDir
- RegKey4=HKCU\Software\AutoIt v3\Aut2Exe|LastScriptDir
- FileKey1=%UserProfile%|SciTE.*
- [Avant Browser*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Avant Browser\avant.exe
- Default=False
- FileKey1=%AppData%\Avant Browser|keywords.dat
- FileKey2=%AppData%\Avant Browser|pages.dat
- FileKey3=%AppData%\Avant Browser|recents.dat
- FileKey4=%AppData%\Avant Browser|reopen.dat
- [Avi-Mux GUI*]
- LangSecRef=3023
- DetectFile=%ProgramFiles%\AVIMuxGUI\AVIMux_GUI.exe
- Default=False
- FileKey1=%ProgramFiles%\AVIMuxGUI|AVI-Mux GUI - Logfile*.*
- FileKey2=%ProgramFiles%\AVIMuxGUI|*.dmp
- [Avira RootKit Detection*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Avira GmbH\Avira RootKit Detection\avirarkd.exe
- Default=False
- FileKey1=%ProgramFiles%\Avira GmbH\Avira RootKit Detection|*.log|RECURSE
- [AVS Disc Creator (Logs)*]
- LangSecRef=3021
- Detect=HKLM\Software\AVS\DiscCreator
- Default=False
- FileKey1=%WinDir%|coredw.log
- FileKey2=%WinDir%|datawriter.log
- [Azureus*]
- LangSecRef=3022
- DetectFile=%AppData%\Azureus\
- Default=False
- FileKey1=%AppData%\Azureus\tmp|*.*
- FileKey2=%AppData%\Azureus|*.bak
- FileKey3=%AppData%\Azureus|*.log
- FileKey4=%AppData%\Azureus\active|*.bak
- FileKey5=%AppData%\Azureus\plugins\advancedstatistics|*.txt
- FileKey6=%AppData%\Azureus\plugins\progressbar|*.txt
- [Babylon*]
- LangSecRef=3024
- Detect=HKCU\Software\Babylon\Babylon Translator\UserInfo
- Default=False
- RegKey1=HKCU\Software\Babylon\Babylon Translator\UserInfo\History
- [Battle.Net Cache*]
- LangSecRef=3022
- Detect=HKCU\Software\Blizzard Entertainment\
- Default=False
- FileKey1=%LocalAppData%\Blizzard Entertainment\Battle.Net\Cache|*.*|RECURSE
- FileKey2=%CommonAppData%\Blizzard Entertainment\Battle.net\Cache|*.*|REMOVESELF
- [Belarc*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Belarc\Advisor\System\NPBelv32.dll
- Default=False
- FileKey1=%ProgramFiles%\Belarc\Advisor\INSTALL.Log
- [Beyond Compare 3*]
- LangSecRef=3021
- Detect=HKLM\Software\Scooter Software\Beyond Compare 3
- Default=False
- FileKey1=%AppData%\Scooter Software\Beyond Compare 3|*.bak
- FileKey2=%AppData%\Scooter Software\Beyond Compare 3|BCCommands.xml
- FileKey3=%AppData%\Scooter Software\Beyond Compare 3|BCSessions.xml
- [BitDefender 9*]
- LangSecRef=3024
- Detect=HKLM\Software\Softwin\BitDefender Antivirus
- Default=False
- FileKey1=%ProgramFiles%\Softwin\BitDefender9\Logs|*.*
- [BitTorrent*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\BitTorrent\bittorrent.exe
- Default=False
- FileKey1=%AppData%\BitTorrent\incomplete|*.*
- [Big Fish Games Logs*]
- LangSecRef=3023
- DetectFile=%CommonAppData%\BigFishGamesCache\
- Default=False
- FileKey1=%CommonAppData%\BigFishGamesCache\GameManager\log|*.*
- [Bluetack Blocklist Manager*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Bluetack\Blocklist Manager\BlockMgr.exe
- Default=False
- FileKey1=%ProgramFiles%\Bluetack\Blocklist Manager\Cache|*.*
- [Boinc*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\BOINC\boinc.exe
- Default=False
- FileKey1=%ProgramFiles%\BOINC|stdout*.*
- FileKey2=%ProgramFiles%\BOINC|stderr*.*
- [Borland C++ Builder 5.0*]
- LangSecRef=3024
- Detect=HKCU\Software\Borland\C++Builder\5.0
- Default=False
- RegKey1=HKCU\Software\Borland\C++Builder\5.0\Closed Files
- RegKey2=HKCU\Software\Borland\C++Builder\5.0\Closed Projects
- RegKey3=HKCU\Software\Borland\C++Builder\5.0\Session
- [Borland Delphi 7*]
- LangSecRef=3024
- Detect=HKCU\Software\Borland\Delphi\7.0
- Default=False
- RegKey1=HKCU\Software\Borland\Delphi\7.0\Closed Files
- RegKey2=HKCU\Software\Borland\Delphi\7.0\Closed Projects
- RegKey3=HKCU\Software\Borland\Delphi\7.0\Session
- [Borland Developer Studio 2006*]
- LangSecRef=3024
- Detect=HKCU\Software\Borland\BDS\4.0
- Default=False
- RegKey1=HKCU\Software\Borland\BDS\4.0\Closed Files
- RegKey2=HKCU\Software\Borland\BDS\4.0\Closed Projects
- RegKey3=HKCU\Software\Borland\BDS\4.0\Session
- [BreezeBrowser Pro*]
- LangSecRef=3021
- Detect=HKCU\Software\BreezeSystems\BreezeBrowserPro
- Default=False
- RegKey1=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU0
- RegKey2=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU1
- RegKey3=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU2
- RegKey4=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU3
- RegKey5=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU4
- RegKey6=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU5
- RegKey7=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU6
- RegKey8=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU7
- RegKey9=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU8
- RegKey10=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU9
- [CDex*]
- LangSecRef=3024
- Detect=HKLM\SOFTWARE\CDex
- Default=False
- FileKey1=%UserProfile%\My Documents\My Music\CDDB|*.txt
- FileKey2=%UserProfile%\My Music\CDDB|*.txt
- [Centarsia*]
- LangSecRef=3021
- Detect=HKCU\Software\Centarsia
- Default=False
- RegKey1=HKCU\Software\Centarsia|RecentImage0
- RegKey2=HKCU\Software\Centarsia|RecentImage1
- RegKey3=HKCU\Software\Centarsia|RecentImage2
- RegKey4=HKCU\Software\Centarsia|RecentImage3
- RegKey5=HKCU\Software\Centarsia|RecentImage4
- RegKey6=HKCU\Software\Centarsia|RecentImage5
- RegKey7=HKCU\Software\Centarsia|RecentImage6
- [Cheat Engine Temp Files*]
- LangSecRef=3021
- DetectFile=%ProgramFiles%\Cheat Engine\Cheat Engine.exe
- Default=False
- FileKey1=%ProgramFiles%\Cheat Engine|*.tmp
- [Jumplist icons temp files*]
- ID=2013
- Section=Google Chrome
- DetectFile=%LocalAppData%\Google\Chrome\Application\chrome.exe
- DetectFile2=%ProgramFiles%\Google\Chrome\Application\chrome.exe
- Default=False
- FileKey1=%LocalAppData%\Google\Chrome\User Data\Default\JumplistIcons|*.tmp
- FileKey2=%LocalAppData%\Google\Chrome\User Data\Default\JumpListIconsOld|*.tmp
- [Citrix ICA Client*]
- LangSecRef=3021
- Detect=HKLM\Software\Citrix\ICA Client
- Default=False
- FileKey1=%AppData%\Citrix\ICA Client\Cache|*.*
- FileKey2=%AppData%\Citrix\ICA Client\Cache\zlcache|*.*
- RegKey1=HKLM\Software\Citrix\ICA Client\Default
- [CleanMyPC Registry Cleaner (Backups)*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\CleanMyPC\Registry Cleaner\rcleaner.exe
- Default=False
- FileKey1=%ProgramFiles%\CleanMyPC\Registry Cleaner\UndoCenter|*.*
- [CNET Tech Tracker Backup*]
- LangSecRef=3024
- Detect=HKCU\Software\CBS Interactive\CNET TechTracker\
- Default=False
- FileKey1=%AppData%\CBS Interactive\CNET TechTracker|*.bak
- [CNET Tech Tracker Temp Files*]
- LangSecRef=3024
- Detect=HKCU\Software\CBS Interactive\CNET TechTracker\temp
- Default=False
- FileKey1=%AppData%\CBS Interactive\CNET TechTracker\temp|*.*|REMOVESELF
- [CodeGear RAD Studio 2009*]
- LangSecRef=3024
- Detect=HKCU\Software\CodeGear\BDS\6.0
- Default=False
- RegKey1=HKCU\Software\CodeGear\BDS\6.0\Closed Files
- RegKey2=HKCU\Software\CodeGear\BDS\6.0\Closed Projects
- RegKey3=HKCU\Software\CodeGear\BDS\6.0\Session
- [CoffeeCup GIF Animator*]
- LangSecRef=3024
- Detect=HKCU\Software\CoffeeCup Software\GIF Animator
- Default=False
- RegKey1=HKCU\Software\CoffeeCup Software\GIF Animator\Settings\MRU
- [Config.msi Folder*]
- LangSecRef=3025
- DetectFile=%WinDir%\System32\msiexec.exe
- Default=False
- FileKey1=%SystemDrive%\Config.msi|*.*|RECURSE
- [ConTEXT*]
- LangSecRef=3021
- Detect=HKCU\Software\Eden\ConTEXT
- Default=False
- RegKey1=HKCU\Software\Eden\ConTEXT\FileHistory
- RegKey2=HKCU\Software\Eden\ConTEXT\FindHistory
- [ConvertXToDVD*]
- LangSecRef=3023
- Detect=HKCU\Software\VSO\ConvertXToDVD
- Default=False
- FileKey1=%AppData%\Vso|*.log
- [Copernic Desktop Search*]
- LangSecRef=3021
- Detect=HKCU\Software\Copernic\DesktopSearch2
- Default=False
- RegKey1=HKCU\Software\Copernic\DesktopSearch2\Config\SearchHistory
- [CounterSpy*]
- LangSecRef=3024
- Detect=HKLM\SOFTWARE\Sunbelt Software\CounterSpy
- Default=False
- FileKey1=%CommonAppData%\Sunbelt Software\CounterSpy\Logs|*.*
- [Creative Pro Proteus VX*]
- LangSecRef=3023
- Detect=HKCU\Software\Creative Professional\Proteus VX
- Default=False
- RegKey1=HKCU\Software\Creative Professional\Proteus VX VSTi\Recent File List
- [Creative Soundblaster X-Fi XtremeMusic (Cache & Logs)*]
- LangSecRef=3024
- Detect=HKLM\Software\CREATIVE TECH\Software Installed\Software Update
- Default=False
- FileKey1=%CommonAppData%\Creative\Software Update\Cache|*.*|REMOVESELF
- FileKey2=%CommonAppData%\Creative\Software Update\Log|*.*
- [Curse Client Logs*]
- LangSecRef=3024
- Detect=HKCU\Software\Classes\Curse
- Default=False
- FileKey1=%LocalAppData%\Apps\2.0|*.Log|RECURSE
- [CursorFX Theme Editor Recent File List*]
- LangSecRef=3024
- Detect=HKCU\Software\CursorFX Theme Editor\
- Default=False
- RegKey1=HKCU\Software\CursorFX Theme Editor\Recent File List
- [CustomBrushesMini Paint.Net-Plunging*]
- LangSecRef=3021
- DetectFile=%AppData%\CustomBrushesMini
- Default=False
- FileKey1=%AppData%\CustomBrushesMini\ThumbCache|*.*|REMOVESELF
- FileKey2=%AppData%\CustomBrushesMini|*.*|REMOVESELF
- [CuteHTML 2.3*]
- LangSecRef=3024
- Detect=HKCU\Software\GlobalSCAPE\CuteHTML\2.3
- Default=False
- RegKey1=HKCU\Software\GlobalSCAPE\CuteHTML\2.3\Recent File List
- [DAMN NFO Viewer*]
- LangSecRef=3024
- Detect=HKCU\Software\DAMN\DAMN NFO Viewer\
- Default=False
- RegKey1=HKCU\Software\DAMN\DAMN NFO Viewer|WorkingDirectory
- RegKey2=HKCU\Software\DAMN\DAMN NFO Viewer\Recently Viewed Files
- [DC++*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\DC++\DCPlusPlus.exe
- Default=False
- FileKey1=%ProgramFiles%\DC++|files.xml.bz2
- FileKey2=%ProgramFiles%\DC++\FileLists|*.*
- FileKey3=%ProgramFiles%\DC++\Logs|*.*
- [Dependency Walker*]
- LangSecRef=3025
- Detect=HKCU\Software\Microsoft\Dependency Walker
- Default=False
- RegKey1=HKCU\Software\Microsoft\Dependency Walker\Recent File List
- [DisplayFusion (Debug Log)*]
- LangSecRef=3024
- Detect=HKCU\Software\Binary Fortress Software\DisplayFusion
- Default=False
- FileKey1=%AppData%\DisplayFusion|DisplayFusion.log
- [DivX Movies Cache*]
- LangSecRef=3023
- Detect=HKLM\Software\DivXNetworks
- Default=False
- FileKey1=%UserProfile%\My Documents\My Videos\DivX Movies|*.*|RECURSE
- RegKey1=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry1
- RegKey2=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry2
- RegKey3=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry3
- RegKey4=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry4
- RegKey5=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry5
- RegKey6=HKCU\Software\DivXNetworks\DivXBrowserPlugin|cacheEntry6
- FileKey2=%UserProfile%\My Videos\DivX Movies|*.*|RECURSE
- [Dogpile Toolbar*]
- LangSecRef=3022
- Detect=HKCU\Software\Infospace\DogpileToolbar
- Default=False
- RegKey1=HKCU\Software\Infospace\DogpileToolbar\History|1-terms
- [Dropbox Cache*]
- LangSecRef=3024
- DetectFile=%AppData%\Dropbox
- Default=False
- FileKey1=%AppData%\Dropbox\Cache|*.*|RECURSE
- [DU meter*]
- LangSecRef=3022
- Detect=HKCU\SOFTWARE\Hagel\DU Meter
- Default=False
- FileKey1=%CommonAppData%\Hagel Technologies\DU Meter|*.csv
- [Dup Detector*]
- LangSecRef=3023
- Detect=HKCU\Software\Prismatic Software\PhotoBatch
- Default=False
- RegKey1=HKCU\Software\Prismatic Software\PhotoBatch\Dups|LastBatFile
- RegKey2=HKCU\Software\Prismatic Software\PhotoBatch\Dups|LastFold
- RegKey3=HKCU\Software\Prismatic Software\PhotoBatch\Dups|LastSecFold
- RegKey4=HKCU\Software\Prismatic Software\PhotoBatch\Dups|LastSingleFold
- [dvdcss*]
- LangSecRef=3023
- DetectFile=%AppData%\dvdcss\.
- Default=False
- FileKey1=%AppData%\dvdcss|*.*|REMOVESELF
- FileKey2=%UserProfile%\.dvdcss|*.*|REMOVESELF
- [DVD Shrink (Analysis Results)*]
- LangSecRef=3023
- Detect=HKCU\Software\DVD Shrink
- Default=False
- FileKey1=%CommonAppData%\DVD Shrink|*.*
- [DVDVideoSoft TB Logs*]
- LangSecRef=3024
- DetectFile=%LocalAppData%\DVDVideoSoftTB
- Default=False
- FileKey1=%LocalAppData%\DVDVideoSoftTB\Logs|*.*|RECURSE
- [DVDx*]
- LangSecRef=3023
- Detect=HKCU\Software\DVDx
- Default=False
- RegKey1=HKCU\Software\DVDx\LastDir
- RegKey2=HKCU\Software\DVDx\LastOutput
- FileKey1=%ProgramFiles%\DVDx|*.tmp
- [Easy CD-DA Extractor*]
- LangSecRef=3024
- Default=False
- Detect=HKCU\Software\Poikosoft\Easy CD-DA Extractor 8
- RegKey1=HKCU\Software\Poikosoft\Easy CD-DA Extractor 8|k80
- RegKey2=HKCU\Software\Poikosoft\Easy CD-DA Extractor 8|k81
- RegKey3=HKCU\Software\Poikosoft\Easy CD-DA Extractor 8|k8c
- RegKey4=HKCU\Software\Poikosoft\Easy CD-DA Extractor 8|k91
- RegKey5=HKCU\Software\Poikosoft\Easy CD-DA Extractor 8|k92
- RegKey5=HKCU\Software\Poikosoft\Easy CD-DA Extractor 8|k92
- [eBay Toolbar*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\eBay\eBay Toolbar2\eBayTBDaemon.exe
- Default=False
- RegKey1=HKCU\Software\eBay\eBayToolbar\History
- RegKey2=HKCU\Software\eBay\eBayToolbar\RecentSearches
- FileKey1=%ProgramFiles%\eBay\eBay Toolbar2|*.log
- [eBay TurboLister Logs*]
- LangSecRef=3021
- Detect=HKCU\Software\eBay\Turbo lister
- Default=False
- FileKey1=%AllUsersProfile%\eBay\Turbo Lister|*.log|RECURSE
- [eBay TurboLister2 Logs*]
- LangSecRef=3021
- Detect=HKCU\Software\eBay\Turbo lister2
- Default=False
- FileKey1=%AllUsersProfile%\eBay\Turbo Lister2|*.log|RECURSE
- [Effective File Search*]
- LangSecRef=3021
- DetectFile=%ProgramFiles%\efs\search.exe
- Default=False
- FileKey1=%ProgramFiles%\efs|cblist*.dat
- [EmEditor*]
- LangSecRef=3024
- Detect=HKCU\Software\EmSoft\EmEditor v3
- Default=False
- RegKey1=HKCU\Software\EmSoft\EmEditor v3\Recent File List
- RegKey2=HKCU\Software\EmSoft\EmEditor v3\Recent Folder List
- RegKey3=HKCU\Software\EmSoft\EmEditor v3\Recent Font List
- [Eraser (Log)*]
- LangSecRef=3024
- Detect=HKCU\Software\Heidi Computers Ltd\Eraser\5.5
- Default=False
- FileKey1=%ProgramFiles%\Eraser|schedlog.txt
- [ESPN Motion*]
- LangSecRef=3023
- Detect=HKCU\SOFTWARE\Disney\DIGStream
- Default=False
- FileKey1=%CommonAppData%\DIGStream\ESPNMotion|*.wmv
- FileKey2=%CommonAppData%\DIGStream\ESPNMotion|*.tmp
- [Essential NetTools 3*]
- LangSecRef=3022
- Detect=HKCU\Software\ENT3
- Default=False
- RegKey1=HKCU\Software\ENT3\Recent
- [Eusing Free Registry Cleaner Backups*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Eusing Free Registry Cleaner\Regcleaner.exe
- Default=False
- FileKey1=%ProgramFiles%\Eusing Free Registry Cleaner\Backup|*.*|
- [Excel Viewer*]
- LangSecRef=3021
- Detect=HKCU\Software\Microsoft\Office\11.0\Excel Viewer\Recent Files
- Default=False
- RegKey1=HKCU\Software\Microsoft\Office\11.0\Excel Viewer\Recent Files
- [Exifer*]
- LangSecRef=3021
- Detect=HKCU\Software\Exifer
- Default=False
- RegKey1=HKCU\Software\Exifer\Browse\History
- [ExifPro*]
- LangSecRef=3023
- Detect=HKCU\Software\MKowalski\ExifPro
- Default=False
- RegKey1=HKCU\Software\MKowalski\ExifPro\1.0\RecentPaths
- RegKey2=HKCU\Software\MKowalski\ExifPro\1.0\ResizeDlg\RecentDestPaths
- RegKey3=HKCU\Software\MKowalski\ExifPro\1.0\HTMLAlbumGen\RecentDestPaths
- RegKey4=HKCU\Software\MKowalski\ExifPro\1.0\Browser\View 0|LastPath
- FileKey1=%CommonAppData%\MiK\ExifPro|Cache*
- [FAR Manager 1.7*]
- LangSecRef=3021
- Detect=HKCU\Software\Far\
- Default=False
- RegKey1=HKCU\Software\Far\SavedDialogHistory
- RegKey2=HKCU\Software\Far\SavedFolderHistory
- RegKey3=HKCU\Software\Far\SavedHistory
- RegKey4=HKCU\Software\Far\SavedViewHistory
- RegKey5=HKCU\Software\Far\Editor\LastPositions
- RegKey6=HKCU\Software\Far\Viewer\LastPositions
- RegKey7=HKCU\Software\Far\SavedDialogHistory\PersPath
- [FAR Manager 1.8*]
- LangSecRef=3021
- Detect=HKCU\Software\Far18\
- Default=False
- RegKey1=HKCU\Software\Far18\SavedDialogHistory
- RegKey2=HKCU\Software\Far18\SavedFolderHistory
- RegKey3=HKCU\Software\Far18\SavedHistory
- RegKey4=HKCU\Software\Far18\SavedViewHistory
- RegKey5=HKCU\Software\Far18\Editor\LastPositions
- RegKey6=HKCU\Software\Far18\Viewer\LastPositions
- RegKey7=HKCU\Software\Far18\SavedDialogHistory\PersPath
- [FAR Manager 2.0*]
- LangSecRef=3021
- Detect=HKCU\Software\Far2\
- Default=False
- RegKey1=HKCU\Software\Far2\SavedDialogHistory
- RegKey2=HKCU\Software\Far2\SavedFolderHistory
- RegKey3=HKCU\Software\Far2\SavedHistory
- RegKey4=HKCU\Software\Far2\SavedViewHistory
- RegKey5=HKCU\Software\Far2\Editor\LastPositions
- RegKey6=HKCU\Software\Far2\Viewer\LastPositions
- RegKey7=HKCU\Software\Far2\SavedDialogHistory\PersPath
- [FeedDemon*]
- LangSecRef=3022
- Detect=HKCU\Software\Bradbury\FeedDemon\1.0
- Default=False
- RegKey1=HKCU\Software\Bradbury\FeedDemon\1.0\SavedLists\TypedURLs
- RegKey2=HKCU\Software\Bradbury\FeedDemon\1.0\SavedLists\TabbedBrowserUrls
- [FileLocator Pro*]
- LangSecRef=3024
- Detect=HKCU\Software\Mythicsoft\FileLocatorPro
- Default=False
- RegKey1=HKCU\Software\Mythicsoft\FileLocatorPro\RecentContains
- RegKey2=HKCU\Software\Mythicsoft\FileLocatorPro\RecentFileName
- RegKey3=HKCU\Software\Mythicsoft\FileLocatorPro\RecentFolders
- [File Shredder*]
- LangSecRef=3024
- Detect=HKCU\Software\Shredder
- Default=False
- RegKey1=HKCU\Software\Shredder\{FF14D9EE-48EB-4873-80AC-8E224BEE5823}
- [File Type Doctor Last Selected*]
- LangSecRef=3024
- Detect=HKCU\Software\Creative Element\File Type Doctor
- Default=False
- RegKey1=HKCU\Software\Creative Element\File Type Doctor|LastSelected
- [FlashFXP*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\FlashFXP\flashfxp.exe
- Default=False
- FileKey1=%ProgramFiles%\FlashFXP|quick.dat
- [FlashGet*]
- LangSecRef=3022
- Detect=HKCU\Software\JetCar
- Default=False
- RegKey1=HKCU\Software\JetCar\JetCar|Recent File List
- FileKey1=%ProgramFiles%\FlashGet|Default.bk*
- FileKey2=%ProgramFiles%\FlashGet|Default.jcd
- FileKey3=%ProgramFiles%\FlashGet|Default.jcd.bak
- [Foobar2000 (Crash Log)*]
- LangSecRef=3023
- Detect=HKLM\Software\foobar2000
- Default=False
- FileKey1=%ProgramFiles%\foobar2000|failure.txt
- [Forward Observer*]
- LangSecRef=3021
- DetectFile=%ProgramFiles%\AAForwardObserver\AAForwardObserver.exe
- Default=False
- FileKey1=%ProgramFiles%\AAForwardObserver|FO.log
- [Foxit PDF Editor*]
- LangSecRef=3021
- DetectFile=%ProgramFiles%\Foxit Software\PDF Editor\PDFEdit.exe
- Default=False
- RegKey1=HKCU\Software\Foxit Software Company\Foxit PDF Editor|Recent File List
- [Free Download Manager*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Free Download Manager\fdm.exe
- Default=False
- RegKey1=HKCU\Software\FreeDownloadManager.ORG\Free Download Manager\Settings|Find
- RegKey2=HKCU\Software\FreeDownloadManager.ORG\Free Download Manager\Settings|View
- FileKey1=%AppData%\Free Download Manager|*.sav
- FileKey2=%AppData%\Free Download Manager|*.bak
- [Free Registry Defrag*]
- LangSecRef=3024
- Detect=HKCU\Software\Local AppWizard-Generated Applications\RegDefrag
- Default=False
- FileKey1=%WinDir%\$regcmp$|*.*
- [FrostWire*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\FrostWire\FrostWire.exe
- Default=False
- FileKey1=%AppData%\FrostWire|*.cache
- FileKey5=%AppData%\FrostWire|gnutella.net
- FileKey7=%AppData%\FrostWire|*.bak
- FileKey8=%AppData%\FrostWire|checkandupdate.txt
- [Game Maker 4*]
- LangSecRef=3021
- Detect=HKCU\Software\Game Maker 4
- Default=False
- RegKey1=HKCU\Software\Game Maker 4\Preferences|Recent0
- RegKey2=HKCU\Software\Game Maker 4\Preferences|Recent1
- RegKey3=HKCU\Software\Game Maker 4\Preferences|Recent2
- RegKey4=HKCU\Software\Game Maker 4\Preferences|Recent3
- RegKey5=HKCU\Software\Game Maker 4\Preferences|GameDir
- [Game Maker 5*]
- LangSecRef=3021
- Detect=HKCU\Software\Game Maker\Version 5
- Default=False
- RegKey1=HKCU\Software\Game Maker\Version 5\Preferences|Recent0
- RegKey2=HKCU\Software\Game Maker\Version 5\Preferences|Recent1
- RegKey3=HKCU\Software\Game Maker\Version 5\Preferences|Recent2
- RegKey4=HKCU\Software\Game Maker\Version 5\Preferences|Recent3
- RegKey5=HKCU\Software\Game Maker\Version 5\Preferences|Recent4
- RegKey6=HKCU\Software\Game Maker\Version 5\Preferences|Recent5
- RegKey7=HKCU\Software\Game Maker\Version 5\Preferences|Recent6
- RegKey8=HKCU\Software\Game Maker\Version 5\Preferences|Recent7
- RegKey9=HKCU\Software\Game Maker\Version 5\Preferences|GameDir
- [Game Maker 6*]
- LangSecRef=3021
- Detect=HKCU\Software\Game Maker\Version 6
- Default=False
- RegKey1=HKCU\Software\Game Maker\Version 6\Preferences|Recent0
- RegKey2=HKCU\Software\Game Maker\Version 6\Preferences|Recent1
- RegKey3=HKCU\Software\Game Maker\Version 6\Preferences|Recent2
- RegKey4=HKCU\Software\Game Maker\Version 6\Preferences|Recent3
- RegKey5=HKCU\Software\Game Maker\Version 6\Preferences|Recent4
- RegKey6=HKCU\Software\Game Maker\Version 6\Preferences|Recent5
- RegKey7=HKCU\Software\Game Maker\Version 6\Preferences|Recent6
- RegKey8=HKCU\Software\Game Maker\Version 6\Preferences|Recent7
- RegKey9=HKCU\Software\Game Maker\Version 6\Preferences|GameDir
- [Game Maker 7*]
- LangSecRef=3021
- Detect=HKCU\Software\Game Maker\Version 7
- Default=False
- RegKey1=HKCU\Software\Game Maker\Version 7\Preferences|Recent0
- RegKey2=HKCU\Software\Game Maker\Version 7\Preferences|Recent1
- RegKey3=HKCU\Software\Game Maker\Version 7\Preferences|Recent2
- RegKey4=HKCU\Software\Game Maker\Version 7\Preferences|Recent3
- RegKey5=HKCU\Software\Game Maker\Version 7\Preferences|Recent4
- RegKey6=HKCU\Software\Game Maker\Version 7\Preferences|Recent5
- RegKey7=HKCU\Software\Game Maker\Version 7\Preferences|Recent6
- RegKey8=HKCU\Software\Game Maker\Version 7\Preferences|Recent7
- RegKey9=HKCU\Software\Game Maker\Version 7\Preferences|GameDir
- [Game Maker 8*]
- LangSecRef=3021
- Detect=HKCU\Software\Game Maker\Version 8
- Default=False
- RegKey1=HKCU\Software\Game Maker\Version 8\Preferences|Recent0
- RegKey2=HKCU\Software\Game Maker\Version 8\Preferences|Recent1
- RegKey3=HKCU\Software\Game Maker\Version 8\Preferences|Recent2
- RegKey4=HKCU\Software\Game Maker\Version 8\Preferences|Recent3
- RegKey5=HKCU\Software\Game Maker\Version 8\Preferences|Recent4
- RegKey6=HKCU\Software\Game Maker\Version 8\Preferences|Recent5
- RegKey7=HKCU\Software\Game Maker\Version 8\Preferences|Recent6
- RegKey8=HKCU\Software\Game Maker\Version 8\Preferences|Recent7
- RegKey9=HKCU\Software\Game Maker\Version 8\Preferences|GameDir
- [gBurner*]
- LangSecRef=3021
- Detect=HKCU\Software\gBurner
- Default=False
- RegKey1=HKCU\Software\gBurner|Reopen0
- RegKey2=HKCU\Software\gBurner|Reopen1
- RegKey3=HKCU\Software\gBurner|Reopen2
- RegKey4=HKCU\Software\gBurner|Reopen3
- [Genie Backup Manager Pro 6.0*]
- LangSecRef=3024
- DetectFile=%AppData%\Genie-soft\GBMPro6
- Default=False
- FileKey1=%AppData%\Genie-soft\GBMPro6\logs|*.*
- [GetDiz Recent Files List*]
- LangSecRef=3021
- Detect=HKCU\Software\Outertech\GetDiz
- Default=False
- RegKey1=HKCU\Software\Outertech\GetDiz|Recent Files_1
- RegKey2=HKCU\Software\Outertech\GetDiz|Recent Files_2
- RegKey3=HKCU\Software\Outertech\GetDiz|Recent Files_3
- RegKey4=HKCU\Software\Outertech\GetDiz|Recent Files_4
- RegKey5=HKCU\Software\Outertech\GetDiz|Recent Files_5
- RegKey6=HKCU\Software\Outertech\GetDiz|Recent Files_6
- RegKey7=HKCU\Software\Outertech\GetDiz|Recent Files_7
- RegKey8=HKCU\Software\Outertech\GetDiz|Recent Files_8
- RegKey9=HKCU\Software\Outertech\GetDiz|Recent Files_9
- RegKey10=HKCU\Software\Outertech\GetDiz|Recent Files_10
- [GIANT AntiSpyware*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\GIANT Company Software\GIANT AntiSpyware\GIANTAntiSpywareMain.exe
- Default=False
- FileKey1=%ProgramFiles%\GIANT Company Software\GIANT AntiSpyware|errors.log
- FileKey2=%ProgramFiles%\GIANT Company Software\GIANT AntiSpyware|tracksEraser.log
- FileKey3=%ProgramFiles%\GIANT Company Software\GIANT AntiSpyware|cleaner.log
- [GIMP 2.6*]
- LangSecRef=3021
- Default=False
- DetectFile=%UserProfile%\.gimp-2.6
- FileKey1=%UserProfile%\.thumbnails\normal|*.*
- FileKey2=%UserProfile%\.gimp-2.6|documents
- FileKey3=%UserProfile%\.gegl-0.0|documents
- [GIMP 2.4*]
- LangSecRef=3021
- DetectFile=%UserProfile%\.gimp-2.4
- Default=False
- FileKey1=%UserProfile%\.thumbnails\normal|*.*
- FileKey2=%UserProfile%\.gimp-2.4|documents
- [Go!Zilla*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Go!Zilla
- Default=False
- FileKey1=%ProgramFiles%\Go!Zilla|golog.htm
- FileKey2=%ProgramFiles%\Go!Zilla|leech.hst
- FileKey3=%ProgramFiles%\Go!Zilla|download.log
- [Google Calendar Sync*]
- LangSecRef=3022
- Detect=HKCU\Software\Google\Google Calendar Sync
- Default=False
- FileKey1=%AppData%\Google\Google Calendar Sync\logs|*.log
- [Google Talk*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Google\Google Talk
- Default=False
- FileKey1=%LocalAppData%\Google\Google Talk\status|*.txt
- FileKey2=%LocalAppData%\Google\Google Talk\chatlogs|*.log
- [Google Video Player*]
- LangSecRef=3023
- DetectFile=%ProgramFiles%\Google\Google Video Player\GoogleVideoPlayer.exe
- Default=False
- RegKey1=HKCU\Software\Google\Google Video Player\MRUList
- [GroupWise Messenger*]
- LangSecRef=3021
- Detect=HKCU\Software\Novell\Messenger
- Default=False
- FileKey1=%LocalAppData%\Novell\GroupWise Messenger\history\%user%|*.*
- [GridinSoft Notepad*]
- LangSecRef=3021
- Detect=HKCU\Software\GridinSoft\Notepad3
- Default=False
- RegKey1=HKCU\Software\GridinSoft\Notepad3\Files
- RegKey2=HKCU\Software\GridinSoft\Notepad3\Search|ReplaceTextHistory
- RegKey3=HKCU\Software\GridinSoft\Notepad3\Search|TextHistory
- [GSpot*]
- LangSecRef=3024
- Detect=HKCU\Software\GSpot Appliance Corp
- Default=False
- RegKey1=HKCU\Software\GSpot Appliance Corp\GSpot\v2.6 Settings|LastMediaFile
- [HandBrake (Crash Log)*]
- LangSecRef=3023
- DetectFile=%ProgramFiles%\HandBrake\Handbrake.exe
- Default=False
- FileKey1=%ProgramFiles%\HandBrake|*.stackdump
- [HDD Thermometer*]
- LangSecRef=3024
- Detect=HKCU\SOFTWARE\RSD Software, Inc.\HDD Thermometer
- Default=False
- FileKey1=%CommonAppData%\HDD Thermometer|*.log
- FileKey2=%CommonAppData%\HDD Thermometer\logs|*.log
- [HijackThis (Backups)*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Trend Micro\HijackThis\HijackThis.exe
- Default=False
- FileKey1=%ProgramFiles%\Trend Micro\HijackThis\backups|*.*
- [HitManPro*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Hitman Pro\hitmanpro2.exe
- Default=False
- FileKey1=%ProgramFiles%\Hitman Pro\logs|*.htm
- FileKey2=%ProgramFiles%\Hitman Pro\updates|*.*
- FileKey3=%ProgramFiles%\Hitman Pro\downloads|*.*
- [HostsMan*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\HostsMan\hm.exe
- Default=False
- FileKey1=%AppData%\abelhadigital.com\HostsServer|*.log
- [Hotbar 3.0*]
- LangSecRef=3022
- Detect=HKCU\Software\Hotbar\
- Default=False
- RegKey1=HKCU\Software\Hotbar\hotbar\ImagesHistory
- FileKey1=%ProgramFiles%\Hotbar\v3.0\dynamic|*.*|RECURSE
- FileKey2=%ProgramFiles%\Hotbar\v3.0\static|*.*
- [HP Guide Cache*]
- LangSecRef=3024
- DetectFile=%LocalAppData%\HP Guide
- Default=False
- FileKey1=%LocalAppData%\HP Guide\mp_cache|*.*
- [HP Guide Log*]
- LangSecRef=3024
- DetectFile=%LocalAppData%\HP Guide
- Default=False
- FileKey1=%LocalAppData%\HP Guide|log1.*
- [HP Photosmart Premier*]
- LangSecRef=3021
- Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\HP Photo & Imaging
- Default=False
- FileKey1=%LocalAppData%\HP\Digital Imaging\cache|*.*
- [HxD Hexeditor*]
- LangSecRef=3021
- Detect=HKCU\Software\Mael\HxD
- Default=False
- RegKey1=HKCU\Software\Mael\HxD\History Lists\Recent Files
- [Icon Cache*]
- LangSecRef=3025
- Default=False
- FileKey1=%LocalAppData%|IconCache.db
- [IconCool Editor*]
- LangSecRef=3021
- DetectFile=%ProgramFiles%\IconCoolEditor\IconCooleditor.exe
- Default=False
- FileKey1=%ProgramFiles%\IconCoolEditor|IconFileList.src
- FileKey2=%ProgramFiles%\IconCoolEditor|Recentlyused.src
- [IdeaSoft Scrapbooks Plus 1.0*]
- LangSecRef=3021
- Detect=HKCU\Software\IdeaSoft\Scrapbooks Plus\1.0
- Default=False
- RegKey1=HKCU\Software\IdeaSoft\Scrapbooks Plus\1.0\Recent File List
- [IE7pro*]
- LangSecRef=3024
- Detect=HKCU\Software\IE7pro
- Default=False
- RegKey1=HKCU\Software\IE7pro\ClosedTabs
- [IE Toy*]
- LangSecRef=3024
- Detect=HKCU\Software\MySoftware\IEToy
- Default=False
- FileKey1=%ProgramFiles%\IE Toy\Data|history
- FileKey2=%ProgramFiles%\IE Toy\Data|history_ad
- RegKey1=HKCU\Software\MySoftware\IEToy|FRAGS_ad
- RegKey2=HKCU\Software\MySoftware\IEToy|FRAGS_popup
- [IISExpress Logs*]
- LangSecRef=3022
- DetectFile1=%UserProfile%\My Documents\IISExpress
- DetectFile2=%UserProfile%\Documents\IISExpress
- Default=False
- FileKey1=%UserProfile%\My Documents\IISExpress\Logs|*.*
- FileKey2=%UserProfile%\My Documents\IISExpress\TraceLogFiles|*.*|RECURSE
- FileKey3=%UserProfile%\Documents\IISExpress\Logs|*.*
- FileKey4=%UserProfile%\Documents\IISExpress\TraceLogFiles|*.*|RECURSE
- [IMVU Cache*]
- LangSecRef=3022
- DetectFile=%AppData%\IMVUClient\IMVUClient.exe
- Default=False
- FileKey1=%AppData%\IMVU\cache|*.*|REMOVESELF
- FileKey2=%AppData%\IMVU\AssetCache|*.*|REMOVESELF
- FileKey3=%AppData%\IMVU\PixmapCache|*.*|REMOVESELF
- FileKey4=%AppData%\IMVUClient\ui\profile\cache|*.*|REMOVESELF
- FileKey5=%AppData%\IMVU\HTTPCache|*.*|REMOVESELF
- [IMVU Downloaded Installer*]
- LangSecRef=3022
- Warning=This will only appear when IMVU has downloaded an update.
- DetectFile=%AppData%\IMVUClient\installer\
- Default=False
- FileKey1=%AppData%\IMVUClient\installer|*.*|REMOVESELF
- [IMVU Logs*]
- LangSecRef=3022
- DetectFile=%AppData%\IMVUClient\Imvuclient.exe
- Default=False
- FileKey1=%AppData%\IMVU|*.log.*
- [IMVU Profile Junk*]
- LangSecRef=3022
- DetectFile=%AppData%\IMVUClient\IMVUClient.exe
- Default=False
- FileKey1=%AppData%\IMVUClient\ui\profile|*.sqlite
- FileKey2=%AppData%\IMVUClient\ui\profile|*.mfl
- FileKey3=%AppData%\IMVUClient\ui\profile|*.dat
- FileKey4=%AppData%\IMVUClient\ui\profile|*.js
- FileKey5=%AppData%\IMVUClient|*.icns
- [Inno Setup*]
- LangSecRef=3021
- Detect=HKCU\Software\Jordan Russell\Inno Setup
- Default=False
- RegKey1=HKCU\Software\Jordan Russell\Inno Setup\ScriptFileHistoryNew
- [InstallShield Professional*]
- LangSecRef=3021
- Detect=HKCU\Software\InstallShield\InstallShield Professional
- Default=False
- RegKey1=HKCU\Software\InstallShield\InstallShield Professional\6.0\IsCabVu|MRU1
- RegKey2=HKCU\Software\InstallShield\InstallShield Professional\6.0\IsCabVu|MRU2
- RegKey3=HKCU\Software\InstallShield\InstallShield Professional\6.0\IsCabVu|MRU3
- RegKey4=HKCU\Software\InstallShield\InstallShield Professional\6.0\IsCabVu|MRU4
- [Internet Download Accelerator*]
- LangSecRef=3022
- Detect=HKCU\Software\2VG\Internet Download Accelerator
- Default=True
- FileKey1=%AppData%\Internet Download Accelerator|history.xml
- FileKey2=%AppData%\Internet Download Accelerator|nodelist.xmlc
- FileKey3=%AppData%\Internet Download Accelerator\temp|*.hnt
- FileKey4=%AppData%\Internet Download Accelerator\temp|lastnews.*
- FileKey5=%AppData%\Internet Download Accelerator\temp|playflv.html
- [Internet Download Manager*]
- LangSecRef=3022
- Detect=HKLM\SOFTWARE\Internet Download Manager
- Default=False
- FileKey1=%AppData%\IDM\UrlHistory*.txt
- [iSysCleaner*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Utils\iSysCleaner\iSysCleaner.exe
- Default=False
- FileKey1=%ProgramFiles%\Utils\iSysCleaner\traces|*.*
- [iTunes Logs*]
- LangSecRef=3023
- DetectFile=%AppData%\Apple Computer\iTunes
- Default=False
- FileKey1=%AppData%\Apple Computer\iTunes|*.log|RECURSE
- [iTunes Temp Files*]
- LangSecRef=3023
- DetectFile=%AppData%\Apple Computer\iTunes
- Default=False
- FileKey1=%UserProfile%\My Documents\My Music\iTunes|*.tmp|RECURSE
- [Jasc Animation Shop Cache*]
- LangSecRef=3023
- Detect=HKCU\software\Jasc\animation shop\
- Default=False
- RegKey1=HKCU\Software\JASC\Animation Shop\Cache
- [JDownloader .junique*]
- LangSecRef=3022
- Detect=HKLM\Software\JDownloader
- Default=False
- FileKey1=%ProgramFiles%\JDownloader\.junique|*.*
- [JDownloader Backup*]
- LangSecRef=3022
- Detect=HKLM\Software\JDownloader
- Default=False
- FileKey1=%ProgramFiles%\JDownloader\backup|*.*
- [JDownloader Capatchas*]
- LangSecRef=3022
- Detect=HKLM\Software\JDownloader
- Default=False
- FileKey1=%ProgramFiles%\JDownloader\captchas|*.*
- FileKey2=%ProgramFiles%\JDownloader\tmp\linksave|*.*
- [JDownloader Config*]
- LangSecRef=3022
- Detect=HKLM\Software\JDownloader
- Default=False
- FileKey1=%ProgramFiles%\JDownloader\config|*.*
- [JDownloader DLC*]
- LangSecRef=3022
- Detect=HKLM\Software\JDownloader
- Default=False
- FileKey1=%ProgramFiles%\JDownloader\container|*.*
- [JDownloader Downloads*]
- LangSecRef=3022
- Detect=HKLM\Software\JDownloader
- Default=False
- FileKey1=%ProgramFiles%\JDownloader\downloads|*.*
- [JDownloader Logs*]
- LangSecRef=3022
- Detect=HKLM\Software\JDownloader
- Default=False
- FileKey1=%ProgramFiles%\JDownloader|*.log
- FileKey2=%ProgramFiles%\JDownloader|*.lck
- [Jetico Personal Firewall (Logs)*]
- LangSecRef=3022
- Detect=HKLM\Software\Jetico\Personal Firewall
- Default=False
- FileKey1=%ProgramFiles%\Jetico\Jetico Personal Firewall|firewall*.log
- [Juniper Networks*]
- LangSecRef=3021
- Detect=HKLM\Software\Juniper Networks
- Default=False
- FileKey1=%AppData%\Juniper Networks|*.old|RECURSE
- FileKey2=%AppData%\Juniper Networks|*.log|RECURSE
- RegKey1=HKLM\Software\Juniper Networks\Default
- [jv16 PowerTools 2009*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\jv16 PowerTools 2009\jv16PT.exe
- Default=False
- FileKey1=%userprofile%|NTUSER.DAT.jv16pt_bak
- FileKey2=%userprofile%|NTUSER.DAT.jv16pt_bak2
- FileKey3=%userprofile%|NTUSER.DAT.jv16pt_bak.LOG1
- FileKey4=%userprofile%|NTUSER.DAT.jv16pt_bak.LOG2
- FileKey5=%LocalAppData%\Microsoft\Windows|UsrClass.dat.jv16pt_bak
- FileKey6=%LocalAppData%\Microsoft\Windows|UsrClass.dat.jv16pt_bak2
- FileKey7=%LocalAppData%\Microsoft\Windows|UsrClass.dat.jv16pt_bak.LOG1
- FileKey8=%LocalAppData%\Microsoft\Windows|UsrClass.dat.jv16pt_bak.LOG2
- FileKey9=%windir%\system32\config|Default.jv16pt_bak
- FileKey10=%windir%\system32\config|Default.jv16pt_bak2
- FileKey11=%windir%\system32\config|Default.jv16pt_bak.LOG1
- FileKey12=%windir%\system32\config|Default.jv16pt_bak.LOG2
- FileKey13=%windir%\system32\config|software.jv16pt_bak.LOG1
- FileKey14=%windir%\system32\config|software.jv16pt_bak.LOG2
- FileKey15=%windir%\system32\config|software.jv16pt_bak
- FileKey16=%windir%\system32\config|software.jv16pt_bak2
- FileKey17=%windir%\system32\config|system.jv16pt_bak
- FileKey18=%windir%\system32\config|system.jv16pt_bak2
- FileKey19=%windir%\system32\config|system.jv16pt_bak.LOG1
- FileKey20=%windir%\system32\config|system.jv16pt_bak.LOG2
- FileKey21=%windir%\System32\config|SAM.jv16pt_bak
- FileKey22=%windir%\System32\config|SAM.jv16pt_bak2
- FileKey23=%windir%\System32\config|SAM.jv16pt_bak.LOG1
- FileKey24=%windir%\System32\config|SAM.jv16pt_bak.LOG2
- FileKey25=%windir%\System32\config|COMPONENTS.jv16pt_bak
- FileKey26=%windir%\System32\config|COMPONENTS.jv16pt_bak2
- FileKey27=%windir%\System32\config|COMPONENTS.jv16pt_bak.LOG1
- FileKey28=%windir%\System32\config|COMPONENTS.jv16pt_bak.LOG2
- FileKey29=%windir%\ServiceProfiles\NetworkService|NTUSER.DAT.jv16pt_bak
- FileKey30=%windir%\ServiceProfiles\NetworkService|NTUSER.DAT.jv16pt_bak2
- FileKey31=%windir%\ServiceProfiles\NetworkService|NTUSER.DAT.jv16pt_bak.LOG1
- FileKey32=%windir%\ServiceProfiles\NetworkService|NTUSER.DAT.jv16pt_bak.LOG2
- FileKey33=%windir%\ServiceProfiles\LocalService|NTUSER.DAT.jv16pt_bak
- FileKey34=%windir%\ServiceProfiles\LocalService|NTUSER.DAT.jv16pt_bak2
- FileKey35=%windir%\ServiceProfiles\LocalService|NTUSER.DAT.jv16pt_bak.LOG1
- FileKey36=%windir%\ServiceProfiles\LocalService|NTUSER.DAT.jv16pt_bak.LOG2
- [jv16 PowerTools 2010*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\jv16 PowerTools 2010\jv16PT.exe
- Default=False
- FileKey1=%userprofile%|NTUSER.DAT.jv16pt_bak
- FileKey2=%userprofile%|NTUSER.DAT.jv16pt_bak2
- FileKey3=%userprofile%|NTUSER.DAT.jv16pt_bak.LOG1
- FileKey4=%userprofile%|NTUSER.DAT.jv16pt_bak.LOG2
- FileKey5=%LocalAppData%\Microsoft\Windows|UsrClass.dat.jv16pt_bak
- FileKey6=%LocalAppData%\Microsoft\Windows|UsrClass.dat.jv16pt_bak2
- FileKey7=%LocalAppData%\Microsoft\Windows|UsrClass.dat.jv16pt_bak.LOG1
- FileKey8=%LocalAppData%\Microsoft\Windows|UsrClass.dat.jv16pt_bak.LOG2
- FileKey9=%windir%\system32\config|Default.jv16pt_bak
- FileKey10=%windir%\system32\config|Default.jv16pt_bak2
- FileKey11=%windir%\system32\config|Default.jv16pt_bak.LOG1
- FileKey12=%windir%\system32\config|Default.jv16pt_bak.LOG2
- FileKey13=%windir%\system32\config|software.jv16pt_bak.LOG1
- FileKey14=%windir%\system32\config|software.jv16pt_bak.LOG2
- FileKey15=%windir%\system32\config|software.jv16pt_bak
- FileKey16=%windir%\system32\config|software.jv16pt_bak2
- FileKey17=%windir%\system32\config|system.jv16pt_bak
- FileKey18=%windir%\system32\config|system.jv16pt_bak2
- FileKey19=%windir%\system32\config|system.jv16pt_bak.LOG1
- FileKey20=%windir%\system32\config|system.jv16pt_bak.LOG2
- FileKey21=%windir%\System32\config|SAM.jv16pt_bak
- FileKey22=%windir%\System32\config|SAM.jv16pt_bak2
- FileKey23=%windir%\System32\config|SAM.jv16pt_bak.LOG1
- FileKey24=%windir%\System32\config|SAM.jv16pt_bak.LOG2
- FileKey25=%windir%\System32\config|COMPONENTS.jv16pt_bak
- FileKey26=%windir%\System32\config|COMPONENTS.jv16pt_bak2
- FileKey27=%windir%\System32\config|COMPONENTS.jv16pt_bak.LOG1
- FileKey28=%windir%\System32\config|COMPONENTS.jv16pt_bak.LOG2
- FileKey29=%windir%\ServiceProfiles\NetworkService|NTUSER.DAT.jv16pt_bak
- FileKey30=%windir%\ServiceProfiles\NetworkService|NTUSER.DAT.jv16pt_bak2
- FileKey31=%windir%\ServiceProfiles\NetworkService|NTUSER.DAT.jv16pt_bak.LOG1
- FileKey32=%windir%\ServiceProfiles\NetworkService|NTUSER.DAT.jv16pt_bak.LOG2
- FileKey33=%windir%\ServiceProfiles\LocalService|NTUSER.DAT.jv16pt_bak
- FileKey34=%windir%\ServiceProfiles\LocalService|NTUSER.DAT.jv16pt_bak2
- FileKey35=%windir%\ServiceProfiles\LocalService|NTUSER.DAT.jv16pt_bak.LOG1
- FileKey36=%windir%\ServiceProfiles\LocalService|NTUSER.DAT.jv16pt_bak.LOG2
- [Kantaris Media Player*]
- LangSecRef=3023
- DetectFile=%AppData%\Christofer Persson
- Default=False
- FileKey1=%AppData%\Christofer Persson\Kantaris Media Player|*.*|RECURSE
- [KMPlayer*]
- LangSecRef=3023
- Detect=HKCU\Software\KMPlayer
- Default=False
- RegKey1=HKCU\Software\KMPlayer\KMP2.0|LastFileName
- RegKey2=HKCU\Software\KMPlayer\WideAlbum\(Default Album)
- RegKey3=HKCU\Software\KMPlayer\albumart|LastAlbumName
- [Koffix Blocker*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Koffix Blocker\Koffix.exe
- Default=False
- FileKey1=%UserProfile%\My Documents\My Koffix Blocker Logs|*.*
- FileKey2=%UserProfile%\Documents\My Koffix Blocker Logs|*.*
- [Last.FM Client Cache*]
- LangSecRef=3023
- DetectFile=%ProgramFiles%\Last.fm\LastFM.exe
- Default=False
- FileKey1=%LocalAppData%\Last.fm\client\cache|*.*
- [Last.FM Client Log*]
- LangSecRef=3023
- DetectFile=%ProgramFiles%\Last.fm\LastFM.exe
- Default=False
- FileKey1=%LocalAppData%\Last.fm\client|*.log
- [LimeWire*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\LimeWire\LimeWire.exe
- Default=False
- FileKey1=%UserProfile%\Incomplete|*.*|RECURSE
- FileKey2=%AppData%\LimeWire|fileurns.cache
- FileKey3=%AppData%\LimeWire|createtimes.cache
- FileKey4=%AppData%\LimeWire|responses.cache
- FileKey5=%AppData%\LimeWire|ttree.cache
- FileKey6=%AppData%\LimeWire|gnutella.net
- [LogMeIn*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Logmein\x86\LogMeIn.exe
- Default=False
- FileKey1=%ProgramFiles%\Logmein|LMI*.log
- [LotR Online Launcher Logs*]
- LangSecRef=3022
- DetectFile=%LocalAppData%\Turbine\The Lord of the Rings Online\Launcher
- Default=False
- FileKey1=%LocalAppData%\Turbine\The Lord of the Rings Online\Launcher|*.log
- [Lyrik Cache Winamp-Plunging*]
- LangSecRef=3023
- Detect=HKLM\Software\Lyrik
- Default=False
- FileKey1=%LocalAppData%\Lyrik|*.*
- [Macromedia Shockwave 8*]
- LangSecRef=3023
- Detect=HKCU\Software\Macromedia\Shockwave 8
- Default=False
- RegKey1=HKCU\Software\Macromedia\Shockwave 8\movies
- [Macromedia Shockwave 9*]
- LangSecRef=3023
- Detect=HKCU\Software\Macromedia\Shockwave 9
- Default=False
- RegKey1=HKCU\Software\Macromedia\Shockwave 9\movies
- [MagicISO*]
- LangSecRef=3021
- Detect=HKCU\Software\MagicISO
- Default=False
- RegKey1=HKCU\Software\MagicISO\Reopen
- [MalwareBytes' Anti-Malware 1.50 (Logs)*]
- Section=3024
- Detect=HKCU\Software\Malwarebytes' Anti-Malware
- Default=False
- Filekey1=%CommonAppData%\Malwarebytes\Malwarebytes' Anti-Malware\Logs|*.*
- Filekey2=%AppData%\Malwarebytes\Malwarebytes' Anti-Malware\Logs|*.*
- [Maxthon Browser*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Maxthon\Maxthon.exe
- Default=False
- FileKey1=%ProgramFiles%\Maxthon\Temp|*.*
- [Maxthon Browser 2*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Maxthon2\Maxthon.exe
- Default=False
- FileKey1=%ProgramFiles%\Maxthon2\Temp|*.*
- [McAfee SiteAdvisor*]
- LangSecRef=3024
- DetectFile=%AppData%\SiteAdvisor
- Default=False
- FileKey1=%AppData%\SiteAdvisor|asserts.txt
- FileKey2=%CommonAppData%\SiteAdvisor|*.log
- FileKey3=%CommonAppData%\McAfee\MCLOGS|*.log|RECURSE
- [Media Player Classic Recent Files List*]
- LangSecRef=3023
- Detect=HKCU\Software\Gabest\Media Player Classic
- Default=False
- RegKey1=HKCU\Software\Gabest\Media Player Classic\Recent File List
- [Messenger Plus! Live (Logs)*]
- LangSecRef=3022
- Detect=HKCU\Software\Patchou
- Default=False
- FileKey1=%UserProfile%\My Documents\My Chat Logs|*.*|RECURSE
- FileKey2=%UserProfile%\Documents\My Chat Logs|*.*|RECURSE
- [Metamorphose*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\metamorphose\metamorphose.exe
- Default=False
- FileKey1=%AppData%\.metamorphose\undo|*.*
- [Microangelo*]
- LangSecRef=3021
- Detect=HKCU\Software\Impact\Microangelo
- Default=False
- RegKey1=HKCU\Software\Impact\Microangelo\Animator\MRU List
- RegKey2=HKCU\Software\Impact\Microangelo\Librarian\MRU List
- RegKey3=HKCU\Software\Impact\Microangelo\Studio\MRU List
- [Microangelo 6*]
- LangSecRef=3021
- Detect=HKCU\Software\Eclipsit\Microangelo\Toolset 6
- Default=False
- RegKey1=HKCU\Software\Eclipsit\Microangelo\Toolset 6\Animator\MRU List
- RegKey2=HKCU\Software\Eclipsit\Microangelo\Toolset 6\Librarian\MRU List
- RegKey3=HKCU\Software\Eclipsit\Microangelo\Toolset 6\Studio\MRU List
- [Microsoft AntiMalware Logs*]
- LangSecRef=3025
- DetectFile=%CommonAppData%\Microsoft\Microsoft antimalware\support
- Default=False
- FileKey1=%CommonAppData%\Microsoft\Microsoft antimalware\support|*.log
- [Microsoft AntiMalware Scan Results*]
- LangSecRef=3025
- DetectFile=%CommonAppData%\Microsoft\Microsoft antimalware\scans\history\results\
- Default=False
- FileKey1=%CommonAppData%\Microsoft\Microsoft antimalware\scans\history\results\Quick|*.*|REMOVESELF
- FileKey2=%CommonAppData%\Microsoft\Microsoft antimalware\scans\history\results\System|*.*|REMOVESELF
- FileKey3=%CommonAppData%\Microsoft\Microsoft antimalware\scans\history\results\resource|*.*|REMOVESELF
- [Microsoft Windows Game Statistics*]
- LangSecRef=3025
- DetectOS=6.0
- DetectFile=%LocalAppData%\Microsoft Games\
- Default=False
- FileKey1=%LocalAppData%\Microsoft Games\Chess Titans|ChessTitans.xml
- FileKey3=%LocalAppData%\Microsoft Games\FreeCell|FreeCellSettings.xml
- FileKey5=%LocalAppData%\Microsoft Games\Hearts|HeartsSettings.xml
- FileKey6=%LocalAppData%\Microsoft Games\Hearts|HearsSettings.xml
- FileKey7=%LocalAppData%\Microsoft Games\Mahjong Titans|MahjongTitans.xml
- FileKey8=%LocalAppData%\Microsoft Games\Mahjong Titans|MahJongTitansStats.xml
- FileKey10=%LocalAppData%\Microsoft Games\Minesweeper|MinesweeperSettings.xml
- FileKey12=%LocalAppData%\Microsoft Games\Purble Place|ComfyCakesScoresAndSettings.xml
- FileKey14=%LocalAppData%\Microsoft Games\Purble Place|ConcentrationScoresAndSettings.xml
- FileKey16=%LocalAppData%\Microsoft Games\Purble Place|PurblePlaceSettings.xml
- FileKey18=%LocalAppData%\Microsoft Games\Purble Place|PurbleShopScoresAndSettings.xml
- FileKey20=%LocalAppData%\Microsoft Games\Solitaire|SolitaireSettings.xml
- FileKey22=%LocalAppData%\Microsoft Games\Spider Solitaire|SpiderSolitaireSettings.xml
- [mIRC Logs*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\mIRC\mIRC.exe
- Default=False
- FileKey1=%ProgramFiles%\mIRC\logs|*.*
- FileKey2=%AppData%\mIRC\Logs|*.*
- [MiTeC DFM Editor*]
- LangSecRef=3021
- Detect=HKCU\Software\MiTeC\DFM Editor
- Default=False
- RegKey1=HKCU\Software\MiTeC\DFM Editor\5.x\Main\MRUHistory
- [MMOUI Minion Logs*]
- LangSecRef=3024
- DetectFile=%AppData%\MMOUI\Minion
- Default=False
- FileKey1=%AppData%\MMOUI\Minion|log.*
- [More Opera*]
- LangSecRef=3027
- Detect=HKLM\SOFTWARE\Opera Software
- Default=False
- FileKey1=%LocalAppData%\Opera\Opera\icons|*.*|REMOVESELF
- FileKey2=%LocalAppData%\Opera\Opera\thumbnails|*.*|REMOVESELF
- FileKey3=%LocalAppData%\Opera\Opera\vps|*.*|REMOVESELF
- FileKey4=%LocalAppData%\Opera\Opera\temporary_downloads|*.*|REMOVESELF
- [More Recent Items*]
- Warning=Running this will remove tasklists from the start menu (the expandable triangle next to some applications)
- LangSecRef=3025
- DetectFile=%AppData%\Microsoft\windows\recent\customdestinations\
- Default=False
- FileKey1=%AppData%\Microsoft\windows\recent\customdestinations|*.*|RECURSE
- FileKey2=%AppData%\Microsoft\windows\recent\automaticdestinations|*.*|RECURSE
- [More Windows Explorer*]
- LangSecRef=3025
- Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\
- Default=False
- RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StreamMRU
- [More Windows Live Messenger*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Windows live\messenger\msnmsgr.exe
- Default=False
- FileKey1=%LocalAppData%\Microsoft\Messenger|*.uccapilog|RECURSE
- FileKey2=%LocalAppData%\Microsoft\Messenger|*.bak|RECURSE
- FileKey3=%LocalAppData%\Microsoft\Messenger|*.txt|RECURSE
- FileKey4=%LocalAppData%\Microsoft\Windows Live Contacts|*.log|RECURSE
- FileKey5=%LocalAppData%\Microsoft\Windows Live Contacts|*.jrs|RECURSE
- FileKey6=%LocalAppData%\Microsoft\Windows Live|*.log|RECURSE
- FileKey7=%LocalAppData%\Microsoft\Windows Live|*.jrs|RECURSE
- FileKey8=%ProgramFiles%\Common Files\Windows Live\.cache|*.*|RECURSE
- FileKey9=%LocalLowAppData%\Microsoft\Windows Live\Setup|*.*|REMOVESELF
- [Mozilla FireFox Crash Reports*]
- LangSecRef=3026
- DetectFile=%AppData%\Mozilla\FireFox\Crash Reports\
- Default=False
- FileKey1=%AppData%\Mozilla\FireFox\Crash Reports\pending|*.*
- FileKey2=%AppData%\Mozilla\FireFox\Crash Reports\submitted|*.*
- FileKey3=%AppData%\Mozilla\FireFox\Crash Reports|*.*
- [Mozilla TestPilot Error Logs*]
- LangSecRef=3026
- DetectFile=%AppData%\Mozilla\FireFox\Profiles
- Default=False
- FileKey1=%AppData%\Mozilla\FireFox\Profiles|TestPilotErrorLog.*|RECURSE
- [MP3Gain (Logs)*]
- LangSecRef=3023
- Detect=HKCU\Software\VB and VBA Program Settings\MP3GainAnalysis
- Default=False
- FileKey1=%ProgramFiles%\MP3Gain|*.log
- [Mp3tag (Log)*]
- LangSecRef=3023
- Detect=HKLM\Software\Florian Heidenreich\Mp3tag
- Default=False
- FileKey1=%AppData%\Mp3tag|Mp3tagError.log
- [MPEG Audio Collection*]
- LangSecRef=3023
- Detect=HKCU\Software\MPEG Audio Collection
- Default=False
- RegKey1=HKCU\Software\MPEG Audio Collection|LastNameText1
- RegKey2=HKCU\Software\MPEG Audio Collection|LastNameText2
- RegKey3=HKCU\Software\MPEG Audio Collection|LastNameText3
- RegKey4=HKCU\Software\MPEG Audio Collection|LastNameText4
- RegKey5=HKCU\Software\MPEG Audio Collection|LastNameText5
- RegKey6=HKCU\Software\MPEG Audio Collection|LastNameText6
- [MS Backup (Logs)*]
- LangSecRef=3025
- DetectFile=%SystemRoot%\System32\ntbackup.exe
- Default=False
- FileKey1=%LocalAppData%\Microsoft\Windows NT\NTBackup\Data|*.log
- [MS Baseline Analyzer (Cache)*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Microsoft Baseline Security Analyzer 2\mbsa.exe
- Detect=HKLM\Software\Microsoft\Microsoft Baseline Security Analyzer
- Default=False
- FileKey1=%LocalAppData%\Microsoft\MBSA\Cache|*.*
- FileKey2=%UserProfile%\SecurityScans|*.mbsa
- [MSConfig*]
- LangSecRef=3025
- Detect=HKLM\Software\Microsoft\Shared Tools\MSConfig
- Default=False
- RegKey1=HKLM\Software\Microsoft\Shared Tools\MSConfig\ExpandFrom
- RegKey2=HKLM\Software\Microsoft\Shared Tools\MSConfig\ExpandTo
- RegKey3=HKLM\Software\Microsoft\Windows\CurrentVersion\Run|MSConfig
- [MS Direct Draw*]
- LangSecRef=3021
- Detect=HKCU\Software\Microsoft\DirectDraw
- Default=False
- RegKey1=HKCU\Software\Microsoft\DirectDraw\MostRecentApplicationName
- [MS Help Workshop*]
- LangSecRef=3025
- Detect=HKCU\Software\Microsoft\Microsoft Help Workshop
- Default=False
- RegKey1=HKCU\Software\Microsoft\Microsoft Help Workshop\Cnt Files
- RegKey2=HKCU\Software\Microsoft\Microsoft Help Workshop\Forage Files
- RegKey3=HKCU\Software\Microsoft\Microsoft Help Workshop\Hlp Files
- RegKey4=HKCU\Software\Microsoft\Microsoft Help Workshop\Hpj Files
- RegKey5=HKCU\Software\Microsoft\Microsoft Help Workshop\Map Files
- RegKey6=HKCU\Software\Microsoft\Microsoft Help Workshop\Recent File List
- [MS HTML Help Workshop*]
- LangSecRef=3025
- Detect=HKCU\Software\Microsoft\HTML Help Workshop
- Default=False
- RegKey1=HKCU\Software\Microsoft\HTML Help Workshop\Compressed HTML
- RegKey2=HKCU\Software\Microsoft\HTML Help Workshop\Html Titles
- RegKey3=HKCU\Software\Microsoft\HTML Help Workshop\Project Files
- RegKey4=HKCU\Software\Microsoft\HTML Help Workshop\Recent File List
- RegKey5=HKCU\Software\Microsoft\HTML Help Workshop\Settings|LastProject
- RegKey6=HKCU\Software\Microsoft\Microsoft HTML Help Image Editor\Folders
- RegKey7=HKCU\Software\Microsoft\Microsoft HTML Help Image Editor\Recent File List
- [MS Imaging*]
- LangSecRef=3024
- Detect=HKCU\Software\Kodak\Imaging
- Default=False
- RegKey1=HKCU\Software\Kodak\Imaging\Recent File List
- [MS Office 2003 Script Editor*]
- LangSecRef=3021
- Detect=HKCU\Software\Microsoft\Office\11.0\MSE
- Default=False
- RegKey1=HKCU\Software\Microsoft\Office\11.0\MSE|LastLoadedSolution
- RegKey2=HKCU\Software\Microsoft\Office\11.0\MSE\FileMRUList
- RegKey3=HKCU\Software\Microsoft\Office\11.0\MSE\ProjectMRUList
- RegKey4=HKCU\Software\Microsoft\Office\11.0\MSE\SolutionMRUList
- [MS Office Publisher 2003*]
- LangSecRef=3021
- Detect=HKCU\Software\Microsoft\Office\11.0\Publisher
- Default=False
- RegKey1=HKCU\Software\Microsoft\Office\11.0\Publisher\Recent File List
- [MS PhotoDraw 2000*]
- LangSecRef=3025
- Detect=HKCU\Software\Microsoft\PhotoDraw\1.0
- Default=False
- RegKey1=HKCU\Software\Microsoft\PhotoDraw\1.0\Recent File List
- [MS SmallBasic*]
- LangSecRef=3021
- DetectFile=%LocalAppData%\SmallBasic\SB.exe.settings.catalog
- Default=False
- FileKey1=%LocalAppData%\SmallBasic|*.*
- [MS SQL Server 2005*]
- LangSecRef=3021
- Detect=HKCU\Software\Microsoft\Microsoft SQL Server\90\Tools\Shell
- Default=False
- RegKey1=HKCU\Software\Microsoft\Microsoft SQL Server\90\Tools\Shell\FileMRUList
- RegKey2=HKCU\Software\Microsoft\Microsoft SQL Server\90\Tools\Shell\ProjectMRUList
- [MS Visual Studio.NET 2003*]
- LangSecRef=3021
- Detect=HKCU\Software\Microsoft\VisualStudio\7.1
- Default=False
- RegKey1=HKCU\Software\Microsoft\VisualStudio\7.1\ProjectMRUList
- RegKey2=HKCU\Software\Microsoft\VisualStudio\7.1\FileMRUList
- RegKey3=HKCU\Software\Microsoft\VisualStudio\7.1|LastLoadedSolution
- FileKey1=%LocalAppData%\ApplicationHistory|*.*|REMOVESELF
- [MS Visual Studio 2005*]
- LangSecRef=3021
- Detect=HKCU\Software\Microsoft\VisualStudio\8.0
- Default=False
- RegKey1=HKCU\Software\Microsoft\VisualStudio\8.0\FileMRUList
- RegKey2=HKCU\Software\Microsoft\VisualStudio\8.0\ProjectMRUList
- [MS Windows Wallpaper*]
- LangSecRef=3025
- Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Wallpaper
- Default=False
- RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Wallpaper\MRU
- [MS Works Suite 2006*]
- LangSecRef=3021
- Detect=HKCU\Software\Microsoft\Works\8.0
- Default=False
- RegKey1=HKCU\Software\Microsoft\Works\8.0\Recent File List
- [MS XML Notepad*]
- LangSecRef=3025
- Detect=HKCU\Software\Microsoft\XML Notepad
- Default=False
- RegKey1=HKCU\Software\Microsoft\XML Notepad\Recent File List
- [MUICache*]
- LangSecRef=3025
- Detect=HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache
- Default=False
- RegKey1=HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\
- [Multi-Edit 9.0*]
- LangSecref=3021
- Detect=HKCU\Software\American Cybernetics\Multi-Edit\9.0
- Default=False
- FileKey1=%ProgramFiles%\Multi-Edit 9\Config\Tmp|*.*
- [MySpaceIM Dump Files*]
- LangSecRef=3021
- Detect=HKCU\Software\Myspace\IM
- Default=False
- FileKey1=%AppData%\MySpace\IM\Dump|*.*
- [MySpaceIM Images*]
- LangSecref=3021
- Detect=HKCU\Software\MySpace\IM
- Default=False
- FileKey1=%AppData%\MySpace\IM\Images|*.*
- [MySpaceIM Install Files*]
- LangSecref=3021
- Detect=HKCU\Software\MySpace\IM
- Default=False
- FileKey1=%AppData%\MySpace\IM\Install|*.*
- [MySpaceIM Logs*]
- LangSecref=3021
- Detect=HKCU\Software\MySpace\IM
- Default=False
- FileKey1=%AppData%\MySpace\IM\Logs|*.*
- [MusicMatch Jukebox*]
- LangSecRef=3023
- Detect=HKLM\Software\MUSICMATCH\MUSICMATCH Jukebox
- Default=False
- FileKey1=%LocalAppData%\Musicmatch\Jukebox|*.log
- FileKey2=%LocalAppData%\Musicmatch\Jukebox|*log.txt
- FileKey3=%LocalAppData%\Musicmatch\Jukebox\Cache|*.*
- FileKey4=%ProgramFiles%\MUSICMATCH\Musicmatch Jukebox\TEMP|*.*
- FileKey5=%ProgramFiles%\MUSICMATCH\Musicmatch Jukebox\MMRadio\Cache|*.*
- [MyToolkit*]
- LangSecRef=3024
- Detect=HKCU\Software\FutureFog\MyToolkit\Options
- Default=False
- RegKey1=HKCU\Software\FutureFog\MyToolkit\Options|LastUsedFolder
- [NA Framework Agent*]
- LangSecRef=3021
- Detect=HKLM\Software\Network Associates\TVD\Shared Components\Framework
- Default=False
- FileKey1=%CommonAppData%\Network Associates\Common Framework\AgentEvents|*.*
- FileKey2=%CommonAppData%\McAfee\Common Framework\AgentEvents|*.*
- [neXBC*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\neXBC\neXBC.exe
- Default=False
- FileKey1=%ProgramFiles%\neXBC|messages.txt
- FileKey2=%ProgramFiles%\neXBC\Logs\Hosted|*.*
- FileKey3=%ProgramFiles%\neXBC\Logs\Joined|*.*
- [Nitro PDF Reader*]
- LangSecRef=3024
- Detect=HKCU\Software\Nitro PDF\Reader\1.0
- Default=False
- RegKey1=HKCU\Software\Nitro PDF\Reader\1.0\Recent File List
- [Notepad++ Session*]
- LangSecRef=3021
- DetectFile=%ProgramFiles%\notepad++\notepad++.exe
- Default=False
- FileKey1=%AppData%\notepad++|session.xml
- [NoteXpad*]
- LangSecRef=3021
- Detect=HKLM\Software\NoteXpad
- Default=False
- RegKey1=HKLM\Software\NoteXpad\Recent
- [NSIS*]
- LangSecRef=3021
- Detect=HKLM\Software\NSIS
- Default=False
- RegKey1=HKLM\Software\NSIS\MRU
- [NVIDIA (Play On My TV)*]
- LangSecRef=3023
- Detect=HKLM\Software\NVIDIA Corporation
- Default=False
- RegKey1=HKCR\AVIFile\shellex\ContextMenuHandlers\PlayOnMyTV
- RegKey2=HKCR\mpegfile\shellex\ContextMenuHandlers\PlayOnMyTV
- RegKey3=HKCR\WMVFile\shellex\ContextMenuHandlers\PlayOnMyTV
- RegKey4=HKLM\SOFTWARE\Classes\AVIFile\shellex\ContextMenuHandlers\PlayOnMyTV
- RegKey5=HKLM\SOFTWARE\Classes\mpegfile\shellex\ContextMenuHandlers\PlayOnMyTV
- RegKey6=HKLM\SOFTWARE\Classes\WMVFile\shellex\ContextMenuHandlers\PlayOnMyTV
- RegKey7=HKCR\AVIFile\shellex\ContextMenuHandlers\NvPlayOnMyTV
- RegKey8=HKCR\mpegfile\shellex\ContextMenuHandlers\NvPlayOnMyTV
- RegKey9=HKCR\WMVFile\shellex\ContextMenuHandlers\NvPlayOnMyTV
- RegKey10=HKLM\SOFTWARE\Classes\AVIFile\shellex\ContextMenuHandlers\NvPlayOnMyTV
- RegKey11=HKLM\SOFTWARE\Classes\mpegfile\shellex\ContextMenuHandlers\NvPlayOnMyTV
- RegKey12=HKLM\SOFTWARE\Classes\WMVFile\shellex\ContextMenuHandlers\NvPlayOnMyTV
- [NVIDIA (Startup)*]
- LangSecRef=3023
- Detect=HKLM\Software\NVIDIA Corporation
- Default=False
- RegKey1=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|NvMediaCenter
- [O&O Defrag*]
- LangSecRef=3024
- Detect=HKCU\Software\O&O\O&O Defrag
- Default=False
- FileKey1=%UserProfile%\My Documents\O&O\O&O Defrag\data\reports|*.*|RECURSE
- FileKey2=%UserProfile%\Documents\O&O\O&O Defrag\data\reports|*.*|RECURSE
- [Online Armor*]
- LangSecRef=3024
- Detect=HKLM\Software\Tall Emu\Online Armor
- Default=False
- FileKey1=%ProgramFiles%\Tall Emu\Online Armor\Logs|*.*
- [ooVoo Cache*]
- LangSecRef=3022
- DetectFile=%AppData%\ooVoo Details\
- Default=False
- FileKey1=%AppData%\ooVoo Details\cache|*.*
- [ooVoo Chat History*]
- LangSecRef=3022
- DetectFile=%AppData%\ooVoo Details\
- Default=False
- FileKey1=%AppData%\ooVoo Details\Users|chathistory.db|RECURSE
- [ooVoo Logs*]
- LangSecRef=3022
- DetectFile=%AppData%\ooVoo Details\
- Default=False
- FileKey1=%AppData%\ooVoo Details\logs|*.*
- [OpenOffice 2.3*]
- LangSecRef=3021
- Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\2.3
- Default=False
- FileKey1=%AppData%\OpenOffice.org2\user\registry\data\org\openoffice\Office|Common.xcu
- [OpenOffice 3.2*]
- LangSecRef=3021
- Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.2
- Default=False
- FileKey1=%AppData%\OpenOffice.org3\user\registry\data\org\openoffice\Office|Common.xcu
- [Opera 9 (Classic)*]
- LangSecRef=3027
- DetectFile=%ProgramFiles%\Opera 9\Opera.exe
- Default=False
- FileKey1=%ProgramFiles%\Opera 9\profile|cookies4.dat
- FileKey2=%ProgramFiles%\Opera 9\profile|global.dat
- FileKey3=%ProgramFiles%\Opera 9\profile|vlink4.dat
- FileKey4=%ProgramFiles%\Opera 9\profile\cache4|*.*
- FileKey5=%ProgramFiles%\Opera 9\profile\cacheOp|*.*
- [Orbit Downloader*]
- LangSecRef=3022
- Detect=HKLM\SOFTWARE\Orbit
- Default=False
- FileKey1=%AppData%\Orbit|fileinfo.dat
- FileKey2=%AppData%\Orbit|history.dat
- FileKey3=%AppData%\Orbit|unfinish.dat
- FileKey4=%AppData%\Orbit\flink|*.*
- [Outlook 2003*]
- LangSecRef=3021
- Detect=HKCU\Software\Microsoft\Office\11.0\Outlook
- Default=False
- RegKey1=HKCU\Software\Microsoft\Office\11.0\Outlook\Contact|QuickFindMRU
- RegKey2=HKCU\Software\Microsoft\Office\11.0\Outlook\Contact|StripSearchMRU
- RegKey3=HKCU\Software\Microsoft\Office\11.0\Outlook\Preferences|LocationMRU
- RegKey4=HKCU\Software\Microsoft\Office\11.0\Outlook\Office Finder|MRU 1
- RegKey5=HKCU\Software\Microsoft\Office\11.0\Outlook\Office Finder|MRU 3
- FileKey1=%AppData%\Microsoft\Outlook|Outlook.NK2
- [Paint.Net*]
- LangSecRef=3023
- Detect=HKCU\Software\Paint.Net
- Default=False
- FileKey1=%LocalAppData%\Paint.NET|*.*
- [PDFCreator*]
- LangSecRef=3024
- Detect=HKCU\Software\PDFCreator
- Default=False
- RegKey1=HKCU\Software\PDFCreator\Program|LastsaveDirectory
- [PDF-XChange Viewer*]
- LangSecRef=3021
- Detect=HKCU\Software\Tracker Software\PDFViewer
- Default=False
- RegKey1=HKCU\Software\Tracker Software\PDFViewer\Documents\LastOpened
- RegKey2=HKCU\Software\Tracker Software\PDFViewer\Documents\LatestView\Bars
- RegKey3=HKCU\Software\Tracker Software\PDFViewer\Documents\LatestView\Panes
- [Peerblock*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Peerblock
- Default=False
- FileKey1=%ProgramFiles%\Peerblock|*.log
- FileKey2=%ProgramFiles%\Peerblock|History.db
- [PE Module Explorer*]
- LangSecRef=3024
- Detect=HKCU\Software\Woozle\PE Module Explorer
- Default=False
- RegKey1=HKCU\Software\Woozle\PE Module Explorer\Recent Files
- [Pelles C*]
- LangSecRef=3021
- Detect=HKCU\Software\Pelle Orinius\PellesC
- Default=False
- RegKey1=HKCU\Software\Pelle Orinius\PellesC\Recent File List
- RegKey2=HKCU\Software\Pelle Orinius\PellesC\Recent Project List
- RegKey3=HKCU\Software\Pelle Orinius\PellesC\Recent Search List
- [PerfectDisk 8*]
- LangSecRef=3024
- Detect=HKCU\Software\Raxco\PerfectDisk\8.0
- Default=False
- FileKey1=%CommonAppData%\Raxco\PerfectDisk\8.0|*.log
- FileKey2=%CommonAppData%\Raxco\PerfectDisk\8.0|PDBootLog
- [PerfectDisk 9*]
- LangSecRef=3024
- Detect=HKCU\Software\Raxco\PerfectDisk\9.0
- Default=False
- FileKey1=%CommonAppData%\Raxco\PerfectDisk\9.0|*.log
- FileKey2=%CommonAppData%\Raxco\PerfectDisk\9.0|PDBootLog
- [PerfectDisk 10*]
- LangSecRef=3024
- Detect=HKCU\Software\Raxco\PerfectDisk\10.0
- Default=False
- FileKey1=%CommonAppData%\Raxco\PerfectDisk\10.0|*.log
- FileKey2=%CommonAppData%\Raxco\PerfectDisk\10.0|PDBootLog
- [PerfectDisk 11*]
- LangSecRef=3024
- Detect=HKCU\Software\Raxco\PerfectDisk\11.0
- Default=False
- FileKey1=%CommonAppData%\Raxco\PerfectDisk\11.0|*.log
- FileKey2=%CommonAppData%\Raxco\PerfectDisk\11.0|PDBootLog
- [Phorest*]
- LangSecRef=3024
- Detect=HKCU\Software\FutureFog\Phorest\Options
- Default=False
- RegKey1=HKCU\Software\FutureFog\Phorest\Options|LastUsedFolder
- RegKey2=HKCU\Software\FutureFog\Phorest\Layout|SelectionLeft
- RegKey3=HKCU\Software\FutureFog\Phorest\Layout|SelectionTop
- RegKey4=HKCU\Software\FutureFog\Phorest\Layout|SelectionWidth
- RegKey5=HKCU\Software\FutureFog\Phorest\Layout|SelectionHeight
- [Photo Print Calendar 3.00E Beta*]
- LangSecRef=3021
- Detect=HKLM\SOFTWARE\Computer Institute of Japan, Ltd.\Photo Print Calendar from YOKOHAMA Ver.3.00E beta\3.00E beta
- Default=False
- FileKey1=%ProgramFiles%\Photo Print Calendar|update.bmp
- [Photoshop CS Filebrowser*]
- LangSecRef=3021
- Default=False
- Detect=HKLM\SOFTWARE\Adobe\Photoshop
- FileKey1=%AppData%\Adobe\FileBrowser\PhotoshopCS|*.*
- [Pidgin Autoaccept Files*]
- LangSecRef=3022
- DetectFile=%AppData%\.purple\autoaccept\
- Default=False
- FileKey1=%AppData%\.purple\autoaccept|*.*|REMOVESELF
- [Pidgin Icons*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Pidgin\pidgin.exe
- Default=False
- FileKey1=%AppData%\.purple\icons|*.*
- [Pidgin Logs*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Pidgin\pidgin.exe
- Default=False
- FileKey1=%AppData%\.purple\logs|*.*|REMOVESELF
- [Pok3D*]
- LangSecRef=3021
- DetectFile=%ProgramFiles%\Pok3d\
- Default=False
- FileKey1=%AppData%\Pok3d|*.log
- FileKey2=%AppData%\Pok3d|*.dmp
- [PokerStars Cache*]
- LangSecRef=3022
- DetectFile=%LocalAppData%\PokerStars
- Default=False
- FileKey1=%LocalAppData%\PokerStars\ImgCache|*.*
- [PokerStars Logs*]
- LangSecRef=3022
- DetectFile=%LocalAppData%\PokerStars
- Default=False
- FileKey1=%LocalAppData%\PokeStars|*.log.*
- [PowerDVD*]
- LangSecRef=3021
- DetectFile=%ProgramFiles%\Cyberlink\PowerDVD\PowerDVD.exe
- Default=False
- FileKey1=%ProgramFiles%\CyberLink\PowerDVD|*.pls
- FileKey2=%UserProfile%\My Documents\CyberLink\PowerDVD|*.pls
- FileKey3=%UserProfile%\Documents\CyberLink\PowerDVD|*.pls
- [PowerZip*]
- LangSecRef=3024
- Detect=HKCU\Software\Trident Software\PowerZip
- Default=False
- RegKey1=HKCU\Software\Trident Software\PowerZip\Recent File List
- [PSPad Recent Files*]
- LangSecRef=3024
- DetectFile=%AppData%\PSpad
- Default=False
- FileKey1=%AppData%\PSpad|Recent.ini
- [QuickPAR*]
- LangSecRef=3024
- Detect=HKCU\Software\QuickPar
- Default=False
- FileKey1=%LocalAppData%\QuickPar|*.*
- [Qwest QuickCare*]
- LangSecRef=3022
- Detect=HKLM\Software\QuickCare
- Default=False
- FileKey1=%CommonAppData%\Support.com|*.tmp|RECURSE
- FileKey2=%LocalAppData%\SupportSoft|*.tmp|RECURSE
- [RegAlyzer*]
- LangSecRef=3024
- Detect=HKCU\Software\PepiMK Software\Analysis tools\RegAlyzer
- Default=False
- RegKey1=HKCU\Software\PepiMK Software\Analysis tools\RegAlyzer|LastKey
- RegKey2=HKCU\Software\PepiMK Software\Analysis tools\RegAlyzer|RemoteListHistory
- RegKey3=HKCU\Software\PepiMK Software\Analysis tools\RegAlyzer|SearchTerm
- [RegCleaner 4.3*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\RegCleaner\RegCleanr.exe
- Default=False
- FileKey1=%ProgramFiles%\RegCleaner\Backups|*.*
- [ReGet Deluxe*]
- LangSecRef=3022
- Detect=HKCU\Software\ReGet Software\ReGetDx
- Default=False
- FileKey1=%ProgramFiles%\ReGet Deluxe\history|*.*
- RegKey1=HKCU\Software\ReGet Software\ReGetDx\FtpExplorer\Hist
- RegKey2=HKCU\Software\ReGet Software\ReGetDx\History
- RegKey3=HKCU\Software\ReGet Software\ReGetDx\Search\HistFind
- [RegistryFix*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\RegistryFix\RegistryFix.exe
- Default=False
- FileKey1=%ProgramFiles%\RegistryFix\logs|*.*
- [Registry Mechanic*]
- LangSecRef=3024
- Detect=HKLM\Software\PCTools\Registry Mechanic
- Default=False
- FileKey1=%SystemDrive%\Documents and Settings|*.rmbak|RECURSE
- FileKey2=%SystemDrive%\Documents and Settings|*.rrr|RECURSE
- FileKey3=%SystemDrive%\Documents and Settings|*.rrr.bak|RECURSE
- FileKey4=%WinDir%\System32\config|*.rmbak
- FileKey5=%WinDir%\System32\config|*.rrr*
- FileKey6=%ProgramFiles%\Registry Mechanic\logs|*.*
- [Remote Desktop Connection*]
- LangSecRef=3025
- DetectFile=%WinDir%\System32\mstsc.exe
- Default=False
- FileKey1=%UserProfile%\My Documents|*.rdp
- FileKey2=%UserProfile%\Documents|*.rdp
- [Restorator 2007*]
- LangSecRef=3021
- Detect=HKCU\Software\Bomers\Restorator
- Default=False
- RegKey1=HKCU\Software\Bomers\Restorator\Restorator\Current|LastSearchString
- RegKey2=HKCU\Software\Bomers\Restorator\Restorator\FindDialog
- RegKey3=HKCU\Software\Bomers\Restorator\Restorator\GrabDialog
- RegKey4=HKCU\Software\Bomers\Restorator\Restorator\LastFoundFiles
- RegKey5=HKCU\Software\Bomers\Restorator\Restorator\MRUList
- [Revo Uninstaller Backups*]
- LangSecRef=3024
- DetectFile=%LocalAppData%\VS Revo group
- Default=False
- FileKey1=%LocalAppData%\VS Revo Group\Revo Uninstaller Free\RegBackup\Last|*.*
- FileKey2=%LocalAppData%\VS Revo Group\Revo Uninstaller Pro\RegBackup\Last|*.*
- FileKey3=%LocalAppData%\VS Revo Group\Revo Uninstaller Free\BackupsData|*.*|RECURSE
- FileKey4=%LocalAppData%\VS Revo Group\Revo Uninstaller Pro\BackupsData|*.*|RECURSE
- [Revo Uninstaller Logs*]
- LangSecRef=3024
- DetectFile=%LocalAppData%\VS Revo group
- Default=False
- FileKey1=%LocalAppData%\VS Revo Group\Revo Uninstaller Free\Logs|*.*
- FileKey2=%LocalAppData%\VS Revo Group\Revo Uninstaller Pro\Logs|*.*
- [Sauerbraten Map backups*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Sauerbraten\bin\sauerbraten.exe
- Default=False
- FileKey1=%ProgramFiles%\Sauerbraten\packages\base|*.bak
- [ScanDefrag (Logs)*]
- LangSecRef=3024
- Detect=HKLM\Software\ScanDefrag
- Default=False
- FileKey1=%SystemDrive%\ScanDefrag|*.log
- FileKey2=%SystemDrive%\ScanDefrag\logs|*.txt
- [Search Everything Error Log*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Everything\Everything.exe
- Default=False
- FileKey1=%ProgramFiles%\Everything|Errorlog.txt
- [Second Copy 2000*]
- LangSecRef=3021
- Detect=HKCU\Software\Centered Systems\Second Copy 2000
- Default=False
- FileKey1=%ProgramFiles%\SecCopy|log.rtf
- FileKey2=%ProgramFiles%\SecCopy|log-old.rtf
- RegKey1=HKCU\Software\Centered Systems\Second Copy 2000\MRU
- [SecureCRT*]
- LangSecRef=3021
- Detect=HKCU\Software\VanDyke\SecureCRT
- Default=False
- FileKey1=%AppData%\VanDyke\SecureCRT\Config|Recent File List.ini
- FileKey2=%AppData%\VanDyke\SecureCRT\Config|Recent Script List.ini
- [Shareaza*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Shareaza\Shareaza.exe
- Default=False
- FileKey1=%LocalAppData%\Shareaza\Incomplete|*.*
- [Shattered Horizon Crash files*]
- LangSecRef=3022
- DetectFile=%LocalAppData%\Futuremark\Shattered Horizon
- Default=False
- FileKey1=%LocalAppData%\Futuremark\Shattered Horizon\crash_dumps|*.*
- [Sims 3 DCBackup Files*]
- LangSecRef=3021
- DetectFile=%ProgramFiles%\Electronic Arts\The Sims 3\Game\Bin\TS3.exe
- Default=False
- FileKey1=%UserProfile%\My Documents\electronic arts\The sims 3\DCBackup|*.package
- FileKey2=%UserProfile%\Documents\electronic arts\The sims 3\DCBackup|*.package
- [SkypePM Logs*]
- LangSecRef=3022
- DetectFile=%AppData%\SkypePM\
- Default=False
- FileKey1=%AppData%\SkypePM|*.ezlog
- [SmartFTP*]
- LangSecRef=3022
- Detect=HKCU\Software\SmartFTP
- Default=False
- FileKey1=%AppData%\SmartFTP\Cache|*.*|RECURSE
- FileKey2=%AppData%\SmartFTP|History.dat
- [Smart Installer Maker*]
- LangSecRef=3024
- Detect=HKCU\Software\InstallBuilders\Smart Install Maker
- Default=False
- RegKey1=HKCU\Software\InstallBuilders\Smart Install Maker\Reopen
- [SMPlayer Screenshots*]
- LangSecRef=3023
- DetectFile=%ProgramFiles%\smplayer\smplayer.exe
- Default=False
- FileKey1=%UserProfile%\.smplayer\screenshots|*.*|REMOVESELF
- [SMPlayer File Settings*]
- LangSecRef=3023
- DetectFile=%ProgramFiles%\smplayer\smplayer.exe
- Default=False
- FileKey1=%UserProfile%\.smplayer\file_settings|*.*|REMOVESELF
- [SnagIt 10 (Saved Captures)*]
- LangSecRef=3024
- Detect=HKCU\Software\TechSmith\SnagIt
- Default=False
- FileKey1=%LocalAppData%\TechSmith\SnagIt\DataStore|*.*
- FileKey2=%LocalAppData%\TechSmith\SnagIt\DataStore\AppIcons|*.*
- FileKey3=%LocalAppData%\TechSmith\SnagIt\DataStore\WebSiteIcons|*.*
- [SoftThinks CD Creator*]
- LangSecRef=3021
- Detect=HKLM\SOFTWARE\SoftThinks
- Default=False
- FileKey1=%WinDir%\CREATOR|*.log
- [Soulseek*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Soulseek\slsk.exe
- Default=False
- FileKey1=%ProgramFiles%\Soulseek|search.cfg
- [Soulseek Beta*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Soulseek-Test\slsk.exe
- Default=False
- FileKey1=%ProgramFiles%\Soulseek-Test|search.cfg
- [SpyDefense*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Everest Labs\Spydefense\sdc.exe
- Default=False
- FileKey1=%AppData%\Everest Labs\Spydefense\Backups|BF7.tmp
- FileKey2=%AppData%\Everest Labs\Spydefense|SpyDefense.log
- FileKey3=%AppData%\Everest Labs\Spydefense|History.ini
- FileKey3=%AppData%\Everest Labs\Spydefense|Backups.ini
- [Spyware Doctor*]
- LangSecRef=3024
- Detect=HKCU\Software\PCTools\Spyware Doctor
- Default=False
- FileKey1=%ProgramFiles%\Spyware Doctor\Log|*.*
- [Spyware Terminator*]
- LangSecRef=3024
- Detect=HKCU\Software\Spyware Terminator
- Default=False
- FileKey1=%ProgramFiles%\Spyware Terminator|*.err
- FileKey2=%ProgramFiles%\Spyware Terminator|*.old
- FileKey3=%ProgramFiles%\Spyware Terminator\update|*.*
- FileKey4=%AppData%\Spyware Terminator\Reports|*.*
- FileKey5=%ProgramFiles%\Spyware Terminator\Clamav|*.old
- [Starcraft II Editor Recent Files*]
- LangSecRef=3022
- Detect=HKCU\Software\Blizzard Entertainment\StarCraft II Editor\
- Default=False
- RegKey1=HKCU\Software\Blizzard Entertainment\StarCraft II Editor\Recent Files
- [Starcraft II Map Cache*]
- LangSecRef=3022
- Detect=HKCU\Software\Blizzard Entertainment\StarCraft II Editor\
- Default=False
- FileKey1=%AllUsersProfile%\Blizzard Entertainment\Starcraft II\Maps\Cache|*.*|RECURSE
- [StarOffice 8*]
- LangSecRef=3021
- DetectFile=%ProgramFiles%\Sun\StarOffice 8\program\soffice.exe
- Default=False
- FileKey1=%AppData%\StarOffice8\user\registry\data\org\openoffice\Office|Common.xcu
- [StarOffice 9*]
- LangSecRef=3021
- DetectFile=%ProgramFiles%\Sun\StarOffice 9\program\soffice.exe
- Default=False
- FileKey1=%AppData%\StarOffice9\user\registry\data\org\openoffice\Office|Common.xcu
- [Steam Cache*]
- LangSecRef=3023
- DetectFile=%ProgramFiles%\Steam
- Default=False
- FileKey1=%ProgramFiles%\Steam\Appcache\httpcache|*.*|RECURSE
- FileKey2=%ProgramFiles%\Steam\Config\htmlcache|*.*|RECURSE
- FileKey3=%ProgramFiles%\Steam\Config\cookies|*.*|RECURSE
- FileKey4=%ProgramFiles%\Steam\Config\overlaycookies|*.*|RECURSE
- FileKey5=%ProgramFiles%\Steam\Config\overlayhtmlcache|*.*|RECURSE
- [Steam Error Dumps*]
- LangSecRef=3023
- DetectFile=%ProgramFiles%\Steam
- Default=False
- FileKey1=%ProgramFiles%\Steam|*.mdmp
- FileKey2=%ProgramFiles%\Steam\Dumps|*.*|RECURSE
- [Steam Games*]
- LangSecRef=3023
- DetectFile=%ProgramFiles%\Steam
- Default=False
- FileKey1=%ProgramFiles%\Steam\steamapps\common\left 4 dead\left4dead\downloads\|*.*|RECURSE
- FileKey2=%ProgramFiles%\Steam\steamapps\common\left 4 dead 2\config\html\|*.*|RECURSE
- FileKey3=%ProgramFiles%\Steam\steamapps\common\left 4 dead 2\left4dead2\downloads\|*.*|RECURSE
- FileKey4=%ProgramFiles%\Steam\steamapps\accountname\counter-strike source\config\html\|*.*|RECURSE
- FileKey5=%ProgramFiles%\Steam\steamapps\accountname\counter-strike source\cstrike\downloads\|*.*|RECURSE
- FileKey6=%ProgramFiles%\Steam\steamapps\accountname\garrysmod\config\html\|*.*|RECURSE
- FileKey7=%ProgramFiles%\Steam\steamapps\accountname\garrysmod\garrysmod\cache\|*.*|RECURSE
- FileKey8=%ProgramFiles%\Steam\steamapps\accountname\garrysmod\garrysmod\downloads\|*.*|RECURSE
- FileKey9=%ProgramFiles%\Steam\steamapps\accountname\half-life 2 deathmatch\config\html\|*.*|RECURSE
- FileKey10=%ProgramFiles%\Steam\steamapps\accountname\half-life 2 deathmatch\hl2mp\downloads\|*.*|RECURSE
- FileKey11=%ProgramFiles%\Steam\steamapps\accountname\team fortress 2\config\html\|*.*|RECURSE
- FileKey12=%ProgramFiles%\Steam\steamapps\accountname\team fortress 2\tf\downloads\|*.*|RECURSE
- [Steam Logs*]
- LangSecRef=3023
- DetectFile=%ProgramFiles%\Steam
- Default=False
- FileKey1=%ProgramFiles%\Steam|*.log
- FileKey2=%ProgramFiles%\Steam\Logs|*.*|RECURSE
- [StepMania Logs*]
- LangSecRef=3023
- DetectFile=%AppData%\StepMania
- Default=False
- FileKey1=%AppData%\Stepmania\Logs|*.
- [StepMania 4 Logs*]
- LangSecRef=3023
- DetectFile=%AppData%\StepMania 4
- Default=False
- FileKey1=%AppData%\Stepmania 4\Logs|*.*
- [STOIK Smart Resizer*]
- LangSecRef=3023
- Detect=HKCU\Software\STOIK Smart Resizer 1.0\STOIK Smart Resizer\Recent File List
- Default=False
- RegKey1=HKCU\Software\STOIK Smart Resizer 1.0\STOIK Smart Resizer\Recent File List
- [STOIK Smart Resizer 2*]
- LangSecRef=3023
- Detect=HKCU\Software\STOIK Smart Resizer 2.0\STOIK Smart Resizer\Recent File List
- Default=False
- RegKey1=HKCU\Software\STOIK Smart Resizer 2.0\STOIK Smart Resizer\Recent File List
- [STOIK Video Converter 2*]
- LangSecRef=3023
- Detect=HKCU\Software\STOIK
- Default=False
- FileKey1=%AppData%\STOIK\videopak2|*.ini
- [Streamripper Winamp*]
- LangSecRef=3023
- Detect=HKCU\Software\Streamripper
- Default=False
- FileKey1=%AppData%\Streamripper|*.*|REMOVESELF
- [Style Jukebox*]
- LangSecRef=3023
- DetectFile=%AppData%\Style Jukebox Settings
- Default=False
- FileKey1=%AppData%\Style Jukebox Settings|*.bmp|RECURSE
- [Sun Java Cache*]
- LangSecRef=3022
- DetectOS=6.0
- Detect=HKLM\SOFTWARE\JavaSoft\Java Plug-in
- Default=False
- FileKey1=%LocalLowAppData%\Sun\Java\Deployment\cache|*.*|RECURSE
- [SUPERAntiSpyware (Logs)*]
- LangSecRef=3024
- Detect=HKLM\Software\SUPERAntiSpyware.com\SUPERAntiSpyware
- Default=False
- FileKey1=%AppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\Logs|*.log
- FileKey2=%CommonAppData%\!SASCORE\Applogs|*.SDB
- FileKey3=%CommonAppData%\!SASCORE|*.SDB
- FileKey4=%AppData%\SuperantiSpyware.com\SUPERAntiSpyware\AppLogs|*.*
- [Symantec Ghost*]
- LangSecRef=3024
- Detect=HKCU\Software\Symantec\Symantec Ghost
- Default=False
- RegKey1=HKCU\Software\Symantec\Symantec Ghost\Explorer\Ghost Explorer\Recent File List
- [Synchronize It!*]
- LangSecRef=3021
- Detect=HKCU\Software\grigsoft.com\Synchronize It!
- Default=False
- RegKey1=HKCU\Software\grigsoft.com\Synchronize It!\Synchronize It!\Combos
- RegKey2=HKCU\Software\grigsoft.com\Synchronize It!\Combos
- [Tag&Rename*]
- LangSecRef=3024
- Detect=HKCU\Software\Softpointer\Tag&Rename\Config
- Default=False
- RegKey1=HKCU\Software\Softpointer\Tag&Rename\Config|FCurrentFolder
- RegKey2=HKCU\Software\Softpointer\Tag&Rename\Config|FHistoryList
- [Tag&Rename 2*]
- LangSecRef=3024
- Detect=HKCU\Software\Softpointer\Tag&Rename2\Config
- Default=False
- RegKey1=HKCU\Software\Softpointer\Tag&Rename2\Config|FCurrentFolder
- RegKey2=HKCU\Software\Softpointer\Tag&Rename2\Config|FHistoryList
- [Tag&Rename 3*]
- LangSecRef=3024
- Detect=HKCU\Software\Softpointer\Tag&Rename3\Config
- Default=False
- RegKey1=HKCU\Software\Softpointer\Tag&Rename3\Config|FCurrentFolder
- RegKey2=HKCU\Software\Softpointer\Tag&Rename3\Config|FHistoryList
- [Talkback (Crash Reports)*]
- LangSecRef=3026
- Detect=HKLM\SOFTWARE\FullCircle\TalkBack
- Default=False
- RegKey1=HKLM\SOFTWARE\FullCircle\TalkBack
- FileKey1=%AppData%\Talkback\MozillaOrg\Firefox15|*.*|RECURSE
- FileKey2=%AppData%\Talkback\MozillaOrg\Firefox2|*.*|RECURSE
- FileKey3=%AppData%\Talkback\MozillaOrg\Thunderbird2|*.*|RECURSE
- [TeamSpeak3 Cache*]
- LangSecRef=3022
- DetectFile=%AppData%\TS3Client\
- Default=False
- FileKey1=%AppData%\TS3Client\cache|*.*|REMOVESELF
- [TeamSpeak3 Chats*]
- LangSecRef=3022
- DetectFile=%AppData%\TS3Client\
- Default=False
- FileKey1=%AppData%\TS3Client\chats|*.*|REMOVESELF
- [TeamSpeak3 Logs*]
- LangSecRef=3022
- DetectFile=%AppData%\TS3Client\
- Default=False
- FileKey1=%AppData%\TS3Client\Logs|*.*
- [TeamViewer*]
- Warning=This will also clear out your past connections!
- LangSecRef=3024
- DetectFile=%AppData%\Teamviewer\
- Default=False
- FileKey1=%AppData%\TeamViewer|*.*
- [TeamViewer 5 Logs*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Teamviewer\version5\teamviewer.exe
- Default=False
- FileKey1=%ProgramFiles%\Teamviewer\version5|*.log
- [Teamviewer 5 Past Connections*]
- LangSecRef=3024
- Detect=HKCU\Software\TeamViewer\Version5
- Default=False
- RegKey1=HKCU\Software\TeamViewer\Version5|Last_Machine_Connections
- [TeamViewer 5.1 Past Connections*]
- LangSecRef=3024
- Detect=HKCU\Software\TeamViewer\Version5.1
- Default=False
- RegKey1=HKCU\Software\TeamViewer\Version5.1|Last_Machine_Connections
- [TechSmith DubIt*]
- LangSecRef=3023
- Detect=HKCU\Software\TechSmith\DubIt
- Default=False
- FileKey1=%ProgramFiles%\TechSmith\DubIt|*.gid
- RegKey1=HKCU\Software\TechSmith\DubIt\Recent Audio Files
- RegKey2=HKCU\Software\TechSmith\DubIt\Recent Video Files
- [Teeworlds Demos*]
- LangSecRef=3021
- DetectFile=%AppData%\Teeworlds
- Default=False
- FileKey1=%AppData%\Teeworlds\demos|*.*|REMOVESELF
- [Teeworlds Downloaded Maps*]
- LangSecRef=3021
- DetectFile=%AppData%\Teeworlds
- Default=False
- FileKey1=%AppData%\Teeworlds\downloadedmaps|*.*|REMOVESELF
- [Teeworlds Maps*]
- LangSecRef=3021
- DetectFile=%AppData%\Teeworlds
- Default=False
- FileKey1=%AppData%\Teeworlds\maps|*.*|REMOVESELF
- [Teeworlds Screenshots*]
- LangSecRef=3021
- DetectFile=%AppData%\Teeworlds
- Default=False
- FileKey1=%AppData%\Teewords\Screenshots|*.*|REMOVESELF
- [TeraCopy*]
- LangSecRef=3024
- Detect=HKCU\Software\Code Sector\TeraCopy
- Default=False
- RegKey1=HKCU\Software\Code Sector\TeraCopy|LastTargetFolder
- FileKey1=%AppData%\TeraCopy|FileList.dat
- FileKey2=%AppData%\TeraCopy|Transfer.log
- [The Bat*]
- LangSecRef=3022
- Detect=HKCU\Software\RIT\The Bat!
- Default=False
- FileKey1=%AppData%\The Bat!\cache|*.*
- [The Cleaner*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\The Cleaner\cleaner.exe
- Default=False
- FileKey1=%ProgramFiles%\The Cleaner|logfile.txt
- FileKey2=%ProgramFiles%\The Cleaner|moolive.log
- FileKey3=%ProgramFiles%\The Cleaner|tca.log
- [The GIMP 2.2*]
- LangSecRef=3021
- DetectFile=%UserProfile%\.gimp-2.2\gimprc
- Default=False
- FileKey1=%UserProfile%\.gimp-2.2|documents
- [ThumbsPlus 8*]
- LangSecRef=3023
- Detect=HKCU\Software\Cerious Software Inc.
- Default=False
- FileKey1=%AppData%\Thumbsplus|*.log
- FileKey2=%AppData%\Thumbsplus|*.bak
- [Thunderbird Crash Reports*]
- LangSecRef=3026
- DetectFile=%AppData%\Thunderbird
- Default=False
- FileKey1=%AppData%\Thunderbird\Crash Reports|*.*
- [Tomahawk PDF+*]
- LangSecRef=3021
- Detect=HKCU\Software\NativeWinds\Tomahawk
- Default=False
- RegKey1=HKCU\Software\NativeWinds\Tomahawk\MRU
- [TortoiseSVN*]
- LangSecRef=3024
- Detect=HKCU\Software\TortoiseSVN
- Default=False
- FileKey1=%AppData%\TortoiseSVN|*.*
- FileKey2=%LocalAppData%\TSVNCache|*.*
- [Total Recorder*]
- LangSecRef=3023
- Detect=HKCU\Software\HighCriteria\TotalRecorder\Recent File List
- Default=False
- RegKey1=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File1
- RegKey2=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File2
- RegKey3=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File3
- RegKey4=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File4
- RegKey5=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File5
- RegKey6=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File6
- RegKey7=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File7
- RegKey8=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File8
- RegKey9=HKCU\Software\HighCriteria\TotalRecorder\Recent File list|File9
- [Total Uninstall*]
- LangSecRef=3024
- Detect=HKCU\Software\MartS\Total Uninstall
- Default=False
- FileKey1=%ProgramFiles%\Total Uninstall|Log.txt
- FileKey2=%ProgramFiles%\Total Uninstall|*.GID
- [Trakmania Forever Cache*]
- LangSecRef=3021
- DetectFile=%CommonAppData%\TrackMania
- Default=False
- FileKey1=%CommonAppData%\TrackMania\Cache|*.*
- FileKey2=%CommonAppData%\TrackMania\Cache\ManiaCode|*.*
- [Trakmania Forever CampaignsScores*]
- LangSecRef=3021
- DetectFile=%CommonAppData%\TrackMania
- Default=False
- FileKey1=%CommonAppData%\TrackMania\CampaignsScores|*.*
- FileKey2=%CommonAppData%\TrackMania\CampaignsScores\General|*.*
- FileKey3=%CommonAppData%\TrackMania\CampaignsScores\UnitedRace|*.*
- [Trakmania Forever Manialinks*]
- LangSecRef=3021
- DetectFile=%CommonAppData%\TrackMania
- Default=False
- FileKey1=%CommonAppData%\TrackMania\Manialinks|*.*
- [Trakmania Forever LadderScores*]
- LangSecRef=3021
- DetectFile=%CommonAppData%\TrackMania
- Default=False
- FileKey1=%CommonAppData%\TrackMania\LadderScores|*.*
- [Trillian*]
- LangSecRef=3024
- Detect=HKLM\Software\Clients\IM\Trillian
- Default=False
- FileKey1=%ProgramFiles%\Trillian\Users\Default\instantlookup|*.*
- FileKey2=%ProgramFiles%\Trillian\Users\Default\logs|*.*|RECURSE
- FileKey3=%ProgramFiles%\Trillian\Users\Default\buddyicons|*.*|RECURSE
- FileKey4=%ProgramFiles%\Trillian\Crash Files|*.*|RECURSE
- [TrojanHunter (Scan Logs)*]
- LangSecRef=3024
- Detect=HKCU\Software\TrojanHunter
- Default=False
- FileKey2=%ProgramFiles%\TrojanHunter 5.3\Scan Reports|*.*
- [TuneUp Utilities*]
- LangSecRef=3024
- Detect=HKCU\Software\TuneUp
- Default=False
- FileKey1=%AppData%\TuneUp Software\TuneUp Utilities\Backups|*.rcb
- FileKey2=%AppData%\TuneUp Software\TU2011\Backups|*.rcb
- [TweakNow PowerPack 2005*]
- LangSecRef=3024
- Detect=HKCU\Software\TweakNow PowerPack
- Default=False
- FileKey1=%ProgramFiles%\TweakNow PowerPack\Backup|*.*
- [Ulead GIF Animator 5.05*]
- LangSecRef=3024
- Detect=HKCU\Software\Ulead Systems\Ulead GIF Animator\5.05
- Default=False
- RegKey1=HKCU\Software\Ulead Systems\Ulead GIF Animator\5.05\Recent File List
- [UltraISO 5*]
- LangSecRef=3024
- Detect=HKCU\Software\EasyBoot Systems\UltraISO\5.0
- Default=False
- RegKey1=HKCU\Software\EasyBoot Systems\UltraISO\5.0|Reopen
- RegKey2=HKCU\Software\EasyBoot Systems\UltraISO\5.0|a
- RegKey3=HKCU\Software\EasyBoot Systems\UltraISO\5.0|b
- RegKey4=HKCU\Software\EasyBoot Systems\UltraISO\5.0|c
- RegKey5=HKCU\Software\EasyBoot Systems\UltraISO\5.0|d
- RegKey6=HKCU\Software\EasyBoot Systems\UltraISO\5.0|e
- RegKey7=HKCU\Software\EasyBoot Systems\UltraISO\5.0|f
- RegKey8=HKCU\Software\EasyBoot Systems\UltraISO\5.0|g
- RegKey9=HKCU\Software\EasyBoot Systems\UltraISO\5.0|h
- RegKey10=HKCU\Software\EasyBoot Systems\UltraISO\5.0|i
- [UltraISO 6*]
- LangSecRef=3024
- Detect=HKCU\Software\EasyBoot Systems\UltraISO\6.0
- Default=False
- RegKey1=HKCU\Software\EasyBoot Systems\UltraISO\6.0|Reopen
- RegKey2=HKCU\Software\EasyBoot Systems\UltraISO\6.0|a
- RegKey3=HKCU\Software\EasyBoot Systems\UltraISO\6.0|b
- RegKey4=HKCU\Software\EasyBoot Systems\UltraISO\6.0|c
- RegKey5=HKCU\Software\EasyBoot Systems\UltraISO\6.0|d
- RegKey6=HKCU\Software\EasyBoot Systems\UltraISO\6.0|e
- RegKey7=HKCU\Software\EasyBoot Systems\UltraISO\6.0|f
- RegKey8=HKCU\Software\EasyBoot Systems\UltraISO\6.0|g
- RegKey9=HKCU\Software\EasyBoot Systems\UltraISO\6.0|h
- RegKey10=HKCU\Software\EasyBoot Systems\UltraISO\6.0|i
- [UltraISO 7*]
- LangSecRef=3024
- Detect=HKCU\Software\EasyBoot Systems\UltraISO\7.0
- Default=False
- RegKey1=HKCU\Software\EasyBoot Systems\UltraISO\7.0|Reopen
- RegKey2=HKCU\Software\EasyBoot Systems\UltraISO\7.0|a
- RegKey3=HKCU\Software\EasyBoot Systems\UltraISO\7.0|b
- RegKey4=HKCU\Software\EasyBoot Systems\UltraISO\7.0|c
- RegKey5=HKCU\Software\EasyBoot Systems\UltraISO\7.0|d
- RegKey6=HKCU\Software\EasyBoot Systems\UltraISO\7.0|e
- RegKey7=HKCU\Software\EasyBoot Systems\UltraISO\7.0|f
- RegKey8=HKCU\Software\EasyBoot Systems\UltraISO\7.0|g
- RegKey9=HKCU\Software\EasyBoot Systems\UltraISO\7.0|h
- RegKey10=HKCU\Software\EasyBoot Systems\UltraISO\7.0|i
- [UltraISO 8*]
- LangSecRef=3024
- Detect=HKCU\Software\EasyBoot Systems\UltraISO\8.0
- Default=False
- RegKey1=HKCU\Software\EasyBoot Systems\UltraISO\8.0|Reopen
- RegKey2=HKCU\Software\EasyBoot Systems\UltraISO\8.0|a
- RegKey3=HKCU\Software\EasyBoot Systems\UltraISO\8.0|b
- RegKey4=HKCU\Software\EasyBoot Systems\UltraISO\8.0|c
- RegKey5=HKCU\Software\EasyBoot Systems\UltraISO\8.0|d
- RegKey6=HKCU\Software\EasyBoot Systems\UltraISO\8.0|e
- RegKey7=HKCU\Software\EasyBoot Systems\UltraISO\8.0|f
- RegKey8=HKCU\Software\EasyBoot Systems\UltraISO\8.0|g
- RegKey9=HKCU\Software\EasyBoot Systems\UltraISO\8.0|h
- RegKey10=HKCU\Software\EasyBoot Systems\UltraISO\8.0|i
- [UltraISO 9*]
- LangSecRef=3024
- Detect=HKCU\Software\EasyBoot Systems\UltraISO\9.0
- Default=False
- RegKey1=HKCU\Software\EasyBoot Systems\UltraISO\9.0|Reopen
- RegKey2=HKCU\Software\EasyBoot Systems\UltraISO\9.0|a
- RegKey3=HKCU\Software\EasyBoot Systems\UltraISO\9.0|b
- RegKey4=HKCU\Software\EasyBoot Systems\UltraISO\9.0|c
- RegKey5=HKCU\Software\EasyBoot Systems\UltraISO\9.0|d
- RegKey6=HKCU\Software\EasyBoot Systems\UltraISO\9.0|e
- RegKey7=HKCU\Software\EasyBoot Systems\UltraISO\9.0|f
- RegKey8=HKCU\Software\EasyBoot Systems\UltraISO\9.0|g
- RegKey9=HKCU\Software\EasyBoot Systems\UltraISO\9.0|h
- RegKey10=HKCU\Software\EasyBoot Systems\UltraISO\9.0|i
- [Uniblue Registry Booster(Backups)*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Uniblue\RegistryBooster\RegistryBooster.exe
- Default=False
- FileKey1=%AppData%\Uniblue\Registry Booster|*.zip
- [Uniblue Registry Booster 2(Backups)*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Uniblue\RegistryBooster 2\RegistryBooster.exe
- Default=False
- FileKey1=%AppData%\Uniblue\Registry Booster2|*.zip
- [Universal Share Downloader*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\USDownloader\USDownloader.exe
- Default=False
- FileKey1=%ProgramFiles%\USDownloader|USDownloader.log
- FileKey2=%ProgramFiles%\USDownloader|*.bak
- FileKey3=%ProgramFiles%\USDownloader|*.bmp
- FileKey4=%ProgramFiles%\USDownloader|*.jpg
- FileKey5=%ProgramFiles%\USDownloader|*.png
- [Unlocker (List)*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Unlocker\Unlocker.exe
- Default=False
- FileKey1=%ProgramFiles%\Unlocker|Unlocker-List.txt
- [UPX Shell*]
- LangSecRef=3024
- Detect=HKCU\Software\ION Tek\UPX Shell
- Default=False
- RegKey1=HKCU\Software\ION Tek\UPX Shell\3.x|History
- [uTorrent*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\uTorrent\uTorrent.exe
- Default=False
- FileKey1=%ProgramFiles%\uTorrent|*.dmp
- FileKey2=%AppData%\utorrent|*.old
- FileKey3=%AppData%\utorrent\dlimagecache|*.*|RECURSE
- [Valve - Steam (Logs)*]
- LangSecRef=3023
- Detect=HKCU\Software\Valve\Steam
- Default=False
- FileKey1=%ProgramFiles%\Valve\Steam\SteamLogs|*.log
- FileKey2=%ProgramFiles%\Valve\Steam|Steam.log
- [Venis IX*]
- LangSecRef=3021
- Detect=HKCU\Software\Spaceblue\Venis IX
- Default=False
- RegKey1=HKCU\Software\Spaceblue\Venis IX\FileHistory
- [Ventrilo Chat Logs*]
- LangSecRef=3021
- Detect=HKCU\Software\Ventrilo
- Default=False
- FileKey1=%AppData%\ventrilo\chatlogs|*.*|REMOVESELF
- [Ventrilo Client*]
- LangSecRef=3021
- Detect=HKCU\Software\Ventrilo
- Default=False
- FileKey1=%AppData%\Ventrilo|ventrilo.log
- FileKey2=%AppData%\Ventrilo\temp|*.*
- FileKey3=%AppData%\Ventrilo\recordings|*.*
- [Ventrilo Server*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\VentSrv\ventrilo_srv.exe
- Default=False
- FileKey1=%ProgramFiles%\VentSrv|ventrilo_srv.log
- [VideoGet*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\VideoGet\VideoGet.exe
- Default=False
- FileKey1=%ProgramFiles%\VideoGet\Temp|*.*
- [Vim (History)*]
- LangSecRef=3021
- Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vim
- Default=False
- FileKey1=%UserProfile%|_viminfo
- FileKey2=%UserProfile%|.viminfo
- [VirtualCloneDrive*]
- LangSecRef=3021
- Detect=HKLM\Software\Elaborate Bytes\VirtualCloneDrive
- Default=False
- RegKey1=HKLM\Software\Elaborate Bytes\VirtualCloneDrive\0
- RegKey2=HKCU\Software\Elaborate Bytes\VirtualCloneDrive\LRU
- [VirtualDub*]
- LangSecRef=3023
- Detect=HKCU\Software\VirtualDub.org\VirtualDub
- Default=False
- RegKey1=HKCU\Software\VirtualDub.org\VirtualDub\MRU List
- [VirtualFDD*]
- LangSecRef=3024
- Detect=HKCU\Software\Korbos\VirtualFDD
- Default=False
- RegKey1=HKCU\Software\Korbos\VirtualFDD\Recent File List
- [WallWatcher (Logs)*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\Wall Watcher\WallWatcher.exe
- Default=False
- FileKey1=%ProgramFiles%\Wall Watcher\Logs|*.*
- [Wavosaur (Logs)*]
- LangSecRef=3023
- DetectFile=%ProgramFiles%\Wavosaur\wavosaur.exe
- Default=False
- FileKey1=%ProgramFiles%\Wavosaur|wavosaur.log
- [Western Digital SmartWare*]
- LangSecRef=3024
- DetectFile=%CommonAppData%\Western Digital\
- Default=False
- FileKey1=%CommonAppData%\Western Digital\WD SmartWare|*.log
- FileKey2=%CommonAppData%\Western Digital\WDFME|*.*
- [WinAVI Video Converter (Log)*]
- LangSecRef=3023
- Detect=HKCU\Software\ZjSoft\WinAVI
- Default=False
- FileKey1=%LocalAppData%\winavi|debug.log
- [WinCHM*]
- LangSecRef=3021
- Detect=HKCU\Software\Softany\WinCHM
- Default=False
- RegKey1=HKCU\Software\Softany\WinCHM|RecentFile1
- RegKey2=HKCU\Software\Softany\WinCHM|RecentFile2
- RegKey3=HKCU\Software\Softany\WinCHM|RecentFile3
- RegKey4=HKCU\Software\Softany\WinCHM|RecentFile4
- RegKey5=HKCU\Software\Softany\WinCHM|RecentFile5
- RegKey6=HKCU\Software\Softany\WinCHM|RecentFile6
- [WinDiff*]
- LangSecRef=3024
- Detect=HKCU\Software\Microsoft\Windiff
- Default=False
- RegKey1=HKCU\Software\Microsoft\Windiff|NameLeft
- RegKey2=HKCU\Software\Microsoft\Windiff|NameRight
- [Windows 7 QuickLaunch*]
- LangSecRef=3025
- DetectOS=6.1
- DetectFile=%ProgramFiles%\Internet Explorer\iexplore.exe
- Default=False
- FileKey1=%AppData%\Microsoft\Internet Explorer\Quick Launch|*.lnk
- [Windows Backup*]
- LangSecRef=3025
- Detect=HKCU\Software\Microsoft\Windows\DWM
- Default=False
- FileKey1=%WinDir%\Logs\WindowsBackup|*.etl
- [Windows ME*]
- LangSecRef=3025
- DetectFile=%WinDir%\WINFILE.EXE
- Default=False
- FileKey1=%RootDir%|SCANDISK.LOG
- FileKey2=%WinDir%|*.tmp
- FileKey3=%WinDir%\Application Data|dw.log
- FileKey4=%WinDir%\All Users\Application Data\Spybot - Search & Destroy\Logs|*.*
- FileKey5=%WinDir%\APPLOG|*.LGC
- FileKey6=%WinDir%\Windows Update Setup Files|*.*
- [Windows Live Mail*]
- LangSecRef=3025
- Detect=HKCU\Software\Microsoft\Windows Live Mail
- Default=False
- Warning=this will reset the read counts, which will be recaculated when WLMail is started.
- RegKey1=HKCU\Software\Microsoft\Windows Live Mail|SearchFolderVersion
- [Windows Mail*]
- LangSecRef=3025
- DetectFile=%LocalAppData%\Microsoft\Windows Mail\
- Default=False
- FileKey1=%LocalAppData%\Microsoft\Windows Mail|*.log|RECURSE
- FileKey2=%LocalAppData%\Microsoft\Windows Mail|*.jrs|RECURSE
- [Windows Power Efficiency Diagnostics*]
- LangSecRef=3025
- DetectFile=%AllUsersProfile%\Microsoft\Windows\Power Efficiency Diagnostics\
- Default=False
- FileKey1=%AllUsersProfile%\Microsoft\Windows\Power Efficiency Diagnostics|*.xml
- ExcludeKey1=FILE|%AllUsersProfile%\Microsoft\Windows\Power Efficiency Diagnostics\energy-report-latest.xml
- [Windows Search*]
- LangSecRef=3025
- DetectFile=%AllUsersProfile%\Microsoft\Search
- Default=False
- FileKey1=%AllUsersProfile%\Microsoft\Search|*.log|RECURSE
- FileKey2=%AllUsersProfile%\Microsoft\Search|*.jrs|RECURSE
- [Windows Sidebar Cache*]
- LangSecRef=3025
- DetectFile=%LocalAppData%\Microsoft\Windows Sidebar
- Default=False
- FileKey1=%LocalAppData%\Microsoft\Windows Sidebar\Cache|*.*|RECURSE
- [Windows Update Logs*]
- LangSecRef=3025
- DetectFile=%WinDir%\SoftwareDistribution\DataStore\Logs
- Default=False
- FileKey1=%WinDir%\SoftwareDistribution\DataStore\Logs|*.*
- [Windows XP Error Reporting*]
- LangSecRef=3025
- LangRef=3149
- Default=False
- DetectOS=|5.2
- FileKey1=%windir%\pchealth\ERRORREP\|*.*|RECURSE
- [WinImage*]
- LangSecRef=3024
- Detect=HKCU\Software\WinImage
- Default=False
- RegKey1=HKCU\Software\WinImage|File1
- RegKey2=HKCU\Software\WinImage|File2
- RegKey3=HKCU\Software\WinImage|File3
- RegKey4=HKCU\Software\WinImage|File4
- RegKey5=HKCU\Software\WinImage|File5
- RegKey6=HKCU\Software\WinImage|File6
- RegKey7=HKCU\Software\WinImage|File7
- RegKey8=HKCU\Software\WinImage|File8
- RegKey9=HKCU\Software\WinImage|File9
- RegKey10=HKCU\Software\WinImage|PathExtract
- [WinMerge*]
- LangSecRef=3024
- Detect=HKCU\Software\Thingamahoochie\WinMerge\Files
- Default=False
- RegKey1=HKCU\Software\Thingamahoochie\WinMerge\Files\Ext
- RegKey2=HKCU\Software\Thingamahoochie\WinMerge\Files\Left
- RegKey3=HKCU\Software\Thingamahoochie\WinMerge\Files\Right
- [WinRAR Comment*]
- LangSecRef=3024
- Detect=HKCU\Software\WinRAR
- Default=False
- RegKey1=HKCU\Software\WinRAR\General\Info|CommentFile
- [WinRAR History*]
- LangSecRef=3024
- Detect=HKCU\Software\WinRAR
- Default=False
- RegKey1=HKCU\Software\WinRAR\ArcHistory|0
- [WinRAR SFX*]
- LangSecRef=3024
- Detect=HKCU\Software\WinRAR SFX
- Default=False
- RegKey1=HKCU\Software\WinRAR SFX
- [WinWAP*]
- LangSecRef=3022
- Detect=HKCU\Software\Winwap Technologies
- Default=False
- FileKey1=%UserProfile%\WinWAP Temporary Files|*.*
- [WinZip MRU*]
- LangSecRef=3024
- Detect=HKCU\Software\Nico Mal Computing\WinZip
- Default=False
- RegKey1=HKCU\Sofrware\Nico Mal Computing\WinZip\Mru
- [Wirecast Logs*]
- LangSecRef=3023
- DetectFile=%AppData%\Wirecast
- Default=False
- FileKey1=%AppData%\Wirecast|*.txt
- [WLSetup Logs*]
- LangSecRef=3022
- DetectFile=%LocalAppData%\Microsoft\WLSetup\Logs\
- Default=False
- FileKey1=%LocalAppData%\Microsoft\WLSetup\Logs|*.log
- FileKey2=%CommonAppData%\Microsoft\WLSetup\Logs\
- [WMP Art Cache*]
- LangSecRef=3023
- Detect=HKCU\Software\Microsoft\MediaPlayer\Player
- Default=False
- FileKey1=%LocalAppData%\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE
- [WMP (TFC)*]
- LangSecRef=3023
- Detect=HKCU\Software\Microsoft\MediaPlayer\Player
- Default=False
- FileKey1=%LocalAppData%\Microsoft\Media Player\Transcoded Files Cache|*.*
- [WM Recorder 10*]
- LangSecRef=3023
- DetectFile=%ProgramFiles%\WM Recorder 10\WMR.exe
- Default=False
- FileKey1=%ProgramFiles%\WM Recorder 10|log.txt
- FileKey2=%ProgramFiles%\WM Recorder 10|urls.txt
- [Wordweb*]
- LangSecRef=3021
- DetectFile=%ProgramFiles%\WordWeb\wweb32.exe
- Default=False
- FileKey1=%AppData%\WordWeb|History.txt
- [World of Warcraft ADB Cache Files*]
- LangSecRef=3022
- Detect=HKCU\Software\Blizzard Entertainment\World of Warcraft
- Default=False
- FileKey1=%ProgramFiles%\World of Warcraft\Cache\adb|*.*|REMOVESELF
- FileKey2=%Public%\games\World of Warcraft\cache\adb|*.*|REMOVESELF
- FileKey3=%HomeDrive%\World of Warcraft\cache\adb|*.*|REMOVESELF
- [World of Warcraft Backup Files*]
- Warning=This will delete all the .lua.bak files in your world of warcraft folder, so and you wont be able to restore from them if something goes wrong.
- LangSecRef=3022
- Detect=HKCU\Software\Blizzard Entertainment\World of Warcraft
- Default=False
- FileKey1=%ProgramFiles%\World of Warcraft\Errors|*.lua.bak|RECURSE
- FileKey2=%Public%\games\World of Warcraft\Errors|*.lua.bak|RECUSE
- FileKey3=%HomeDrive%\World of Warcraft|*.lua.bak|RECURSE
- [World of Warcraft Error Files*]
- LangSecRef=3022
- Detect=HKCU\Software\Blizzard Entertainment\World of Warcraft
- Default=False
- FileKey1=%ProgramFiles%\World of Warcraft\Errors|*.*
- FileKey2=%Public%\games\World of Warcraft\Errors|*.*
- FileKey3=%HomeDrive%\World of Warcraft\Errors|*.*
- [World of Warcraft Logfiles*]
- LangSecRef=3022
- Detect=HKCU\Software\Blizzard Entertainment\World of Warcraft
- Default=False
- FileKey1=%ProgramFiles%\World of Warcraft\Logs|*.log
- FileKey2=%Public%\games\World of Warcraft\Logs|*.log
- FileKey3=%HomeDrive%\World of Warcraft\Logs|*.log
- [World of Warcraft WDB Cache Files*]
- LangSecRef=3022
- Detect=HKCU\Software\Blizzard Entertainment\World of Warcraft
- Default=False
- FileKey1=%ProgramFiles%\World of Warcraft\Cache\wdb|*.*|REMOVESELF
- FileKey2=%Public%\games\World of Warcraft\cache\wdb|*.*|REMOVESELF
- FileKey3=%HomeDrive%\World of Warcraft\cache\wdb|*.*|REMOVESELF
- [Wowhead Client*]
- LangSecRef=3022
- DetectFile=%CommonAppData%\wowhead\wowhead client\
- Default=False
- FileKey1=%CommonAppData%\wowhead\wowhead client\log|*.*|REMOVESELF
- FileKey2=%CommonAppData%\wowhead\wowhead client\cache|*.*|REMOVESELF
- [WS FTP (Pro)*]
- LangSecRef=3022
- Detect=HKCU\Software\Ipswitch\WS_FTP
- Default=False
- FileKey1=%AppData%\Ipswitch\WS_FTP\Logs|*.*
- [X-Cleaner (free)*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\X-Cleaner\
- Default=False
- FileKey1=%ProgramFiles%\X-Cleaner|XCL_LOG.txt
- [X-NetStat (Logs)*]
- LangSecRef=3024
- DetectFile=%ProgramFiles%\X-NetStat Professional\xns5.exe
- Default=False
- FileKey1=%AppData%\Roaming\X-NetStat\Logs|*.*
- [Xfire (Channels)*]
- LangSecRef=3022
- Detect=HKLM\Software\Xfire
- Default=False
- FileKey1=%CommonAppData%\xfire\channels|*.ini
- [Xfire (Downloads)*]
- LangSecRef=3022
- Detect=HKLM\Software\Xfire
- Default=False
- FileKey1=%CommonAppData%\xfire\downloads|*.zip
- [Xfire (Logs)*]
- LangSecRef=3022
- Detect=HKLM\Software\Xfire
- Default=False
- FileKey1=%AppData%\Xfire\chatlog|*.*|RECURSE
- [Xfire (Recorded Media)*]
- LangSecRef=3022
- Warning=Selecting this will delete any screen shots and videos you have taken, make sure you upload or move any you want to keep so they're not deleted.
- Detect=HKLM\Software\Xfire\
- Default=False
- FileKey1=%CommonAppData%\xfire\videos|*.*
- [XN Resource Editor*]
- LangSecRef=3024
- Detect=HKCU\Software\Woozle\XN Resource Editor
- Default=False
- RegKey1=HKCU\Software\Woozle\XN Resource Editor\Recent Files
- [XnView - Database*]
- LangSecRef=3023
- Detect=HKCU\Software\XnView
- Default=False
- FileKey1=%AppData%\XnView|XnView.db
- FileKey2=%AppData%\XnView|category.bak
- [Xplorer2*]
- LangSecRef=3024
- Detect=HKCU\Software\ZabaraKatranemia Plc\xplorer2\MainFrame Settings
- Default=False
- RegKey1=HKCU\Software\ZabaraKatranemia Plc\xplorer2\MainFrame Settings\Folder History
- [XviD Stats*]
- LangSecRef=3023
- Detect=HKCU\Software\GNU\Xvid
- Default=False
- RegKey1=HKCU\Software\GNU\Xvid|stats
- [Yahoo! Autosync*]
- LangSecRef=3022
- Detect=HKCU\Software\Yahoo!\Autosync for Yahoo!
- Default=False
- FileKey1=%ProgramFiles%\Yahoo!\Yahoo! Autosync\Logs
- [Yahoo Messenger Cache*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Yahoo!\Messenger\
- Default=False
- FileKey1=%ProgramFiles%\Yahoo!\Messenger\Cache|*.*|RECURSE
- FileKey2=%ProgramFiles%\Yahoo!\Messenger\IMVCache|*.*|RECURSE
- [Yahoo Messenger Logs*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Yahoo!\Messenger\
- Default=False
- FileKey1=%ProgramFiles%\Yahoo!\Messenger|ypager.log
- FileKey2=%ProgramFiles%\Yahoo!\Messenger\Logs|*.*
- [Yahoo Messenger Profiles*]
- LangSecRef=3022
- DetectFile=%ProgramFiles%\Yahoo!\Messenger\
- Warning=This will also delete your saved chat histories.
- Default=False
- FileKey1=%ProgramFiles%\Yahoo!\Messenger\Profiles|*.*|RECURSE
- [Yahoo Messenger Profiles Registry Key*]
- ;uses its cleaning path as a detect path as well.
- LangSecRef=3022
- Detect=HKCU\Software\Yahoo\Profiles
- Default=False
- RegKey1=HKCU\Software\Yahoo\Profiles
- [YPOPs*]
- LangSecRef=3021
- DetectFile=%ProgramFiles%\YPOPs\ypops.exe
- Default=False
- FileKey1=%ProgramFiles%\YPOPs|ypops.log
- [ZipGenius*]
- LangSecRef=3024
- Detect=HKCU\Software\M.Dev Software\ZG5
- Default=False
- RegKey1=HKCU\Software\M.Dev Software\ZG5\MRU Items
- FileKey1=%AppData%\ZipGenius|mru.dat
- [ZoneAlarm Internet Logs*]
- LangSecRef=3025
- DetectFile=%WinDir%\Internet Logs
- Default=False
- FileKey1=%WinDir%\Internet Logs|*.dmp
- FileKey2=%WinDir%\Internet Logs|*.log
- FileKey3=%WinDir%\Internet Logs|*.tmp
- FileKey4=%WinDir%\Internet Logs|*.zip
- [Zune Art Cache*]
- LangSecRef=3023
- DetectFile=%ProgramFiles%\Zune\Zune.exe
- Default=False
- FileKey1=%LocalAppData%\Microsoft\zune\art cache|*.*|REMOVESELF
- [Zuse Logs*]
- LangSecRef=3023
- DetectFile=%AppData%\Zuse\
- Default=False
- FileKey1=%AppData%\Zuse\logs|*.*
- [ZX32 ZX Spectrum Emulator v1.03*]
- LangSecRef=3021
- Detect=HKCU\Software\VK\zx32\1.03
- Default=False
- RegKey1=HKCU\Software\VK\zx32\1.03\FileMRU
Add Comment
Please, Sign In to add comment