I don't have any idea as to what you're asking me to look for... so here's the file where Chrome is mentioned... it's the winapp file..
; CCleaner - Application Cleaning file
[Global]
Revision=2175
NextIDValue=2414
;
; WARNING - DO NOT EDIT THIS FILE
; If you would like to create custom entries then create a new file
; called winapp2.ini which follows the same format as this one.
; CCleaner will automatically pick up the new file.
;
; Copyright ©2004-2016 Piriform Ltd, All Rights Reserved.
; This file and it’s contents may not be copied or distributed
; without the express permission of the author.
;
; Notes
; ---------------------------------------
; LangSecRef
; 3021 = Applications
; 3022 = Internet
; 3023 = Multimedia
; 3024 = Utilities
; 3025 = Windows
; 3026 = Firefox/Mozilla
; 3027 = Opera
; 3028 = Safari
; 3029 = Google Chrome
; 3030 = Thunderbird
; 3031 = Windows Store
[Mozilla - Internet Cache]
ID=2001
LangSecRef=3026
LangRef=3161
Default=True
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_CACHE
[Mozilla - Internet History]
ID=2002
LangSecRef=3026
LangRef=3162
Default=True
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_HISTORY
[Mozilla - Download History]
ID=2003
LangSecRef=3026
LangRef=3163
Default=True
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_DOWNLOAD
[Mozilla - Cookies]
ID=2004
LangSecRef=3026
LangRef=3102
Default=True
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_COOKIES
[Mozilla - Saved Form Information]
ID=2005
LangSecRef=3026
LangRef=3164
Default=False
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_FORM
[Mozilla - Saved Passwords]
ID=2181
LangSecRef=3026
LangRef=3109
WarningRef=3202
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_PASSWORD
[Mozilla - Session]
ID=2153
LangSecRef=3026
LangRef=3167
Default=True
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_SESSION
[Mozilla - Site Preferences]
ID=2222
LangSecRef=3026
LangRef=3168
Default=False
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_SITE_PREFERENCES
[Mozilla - Compact Databases]
ID=2146
LangSecRef=3026
LangRef=3165
Default=False
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_COMPACT_DATABASES
[Thunderbird - Internet Cache]
ID=2297
LangSecRef=3030
LangRef=3161
Default=True
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_CACHE
[Thunderbird - Internet History]
ID=2298
LangSecRef=3030
LangRef=3162
Default=True
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_HISTORY
[Thunderbird - Download History]
ID=2299
LangSecRef=3030
LangRef=3163
Default=True
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_DOWNLOAD
[Thunderbird - Cookies]
ID=2300
LangSecRef=3030
LangRef=3102
Default=True
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_COOKIES
[Thunderbird - Saved Form Information]
ID=2301
LangSecRef=3030
LangRef=3164
Default=False
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_FORM
[Thunderbird - Saved Passwords]
ID=2302
LangSecRef=3030
LangRef=3109
WarningRef=3202
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_PASSWORD
[Thunderbird - Session]
ID=2303
LangSecRef=3030
LangRef=3167
Default=True
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_SESSION
[Thunderbird - Site Preferences]
ID=2304
LangSecRef=3030
LangRef=3168
Default=False
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_SITE_PREFERENCES
[Thunderbird - Compact Databases]
ID=2305
LangSecRef=3030
LangRef=3165
Default=False
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_COMPACT_DATABASES
[Opera - Internet Cache]
ID=2006
LangSecRef=3027
LangRef=3161
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_CACHE
[Opera - Internet History]
ID=2007
LangSecRef=3027
LangRef=3162
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_HISTORY
[Opera - Cookies]
ID=2008
LangSecRef=3027
LangRef=3102
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_COOKIES
[Opera - Download History]
ID=2342
LangSecRef=3027
LangRef=3163
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_DOWNLOAD
[Opera - Recently Typed URLs]
ID=2224
LangSecRef=3027
LangRef=3104
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_RECENTLY_TYPED_URLS
[Opera - Last Download Location]
ID=2223
LangSecRef=3027
LangRef=3108
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_LAST_DOWNLOAD_LOCATION
[Opera - Saved Passwords]
ID=2182
LangSecRef=3027
LangRef=3109
WarningRef=3202
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_PASSWORD
[Opera - Session]
ID=2225
LangSecRef=3027
LangRef=3167
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_SESSION
[Opera - Saved Form Information]
ID=2343
LangSecRef=3027
LangRef=3164
Default=False
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_FORM
[Opera - Website Icons]
ID=2149
LangSecRef=3027
LangRef=3166
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_WEBSITE_ICONS
[Opera - Compact Databases]
ID=2344
LangSecRef=3027
LangRef=3165
Default=False
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_COMPACT_DATABASES
[Safari - Internet Cache]
ID=2009
LangSecRef=3028
LangRef=3161
Default=True
DetectFile=%ProgramFiles%\Safari\Safari.exe
FileKey1=%localappdata%\Apple Computer\Safari|Cache.db
[Safari - Internet History]
ID=2010
LangSecRef=3028
LangRef=3162
Default=True
DetectFile=%ProgramFiles%\Safari\Safari.exe
FileKey1=%appdata%\Apple Computer\Safari|History.plist
FileKey2=%appdata%\Apple Computer\Safari|LastSession.plist
FileKey3=%appdata%\Apple Computer\Safari|TopSites.plist
FileKey4=%appdata%\Apple Computer\Safari|Downloads.plist
FileKey5=%localappdata%\Apple Computer\Safari\History|.
FileKey6=%localappdata%\Apple Computer\Safari\Webpage Previews|.|RECURSE
SpecialKey1=N_SAFARI_HISTORY
[Safari - Cookies]
ID=2011
LangSecRef=3028
LangRef=3102
Default=True
DetectFile=%ProgramFiles%\Safari\Safari.exe
SpecialKey1=N_SAFARI_COOKIES
[Safari - Saved Form Information]
ID=2012
LangSecRef=3028
LangRef=3164
Default=False
DetectFile=%ProgramFiles%\Safari\Safari.exe
FileKey1=%appdata%\Apple Computer\Safari|Form Values.plist
[Safari - Saved Passwords]
ID=2183
LangSecRef=3028
LangRef=3109
WarningRef=3202
SpecialDetect=DET_SAFARI_PASSWORD
SpecialKey1=N_SAFARI_PASSWORD
[Google Chrome - Internet Cache]
ID=2013
LangSecRef=3029
LangRef=3161
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_CACHE
[Google Chrome - Internet History]
ID=2014
LangSecRef=3029
LangRef=3162
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_HISTORY
[Google Chrome - Download History]
ID=2015
LangSecRef=3029
LangRef=3163
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_DOWNLOAD
[Google Chrome - Last Download Location]
ID=2345
LangSecRef=3029
LangRef=3108
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_LAST_DOWNLOAD_LOCATION
[Google Chrome - Cookies]
ID=2016
LangSecRef=3029
LangRef=3102
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_COOKIES
[Google Chrome - Saved Form Information]
ID=2017
LangSecRef=3029
LangRef=3164
Default=False
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_FORM
[Google Chrome - Saved Passwords]
ID=2184
LangSecRef=3029
LangRef=3109
WarningRef=3202
Default=False
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_PASSWORD
[Google Chrome - Session]
ID=2152
LangSecRef=3029
LangRef=3167
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_SESSION
[Google Chrome - Compact Databases]
ID=2147
LangSecRef=3029
LangRef=3165
Default=False
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_COMPACT_DATABASES
[Adobe Acrobat Reader 5.0]
ID=2018
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\5.0\AVGeneral\cRecentFiles
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\5.0\AVGeneral\cRecentFiles
[Adobe Acrobat Reader 6.0]
ID=2019
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\6.0\AVGeneral
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\6.0\AVGeneral\cRecentFiles
[Adobe Acrobat Reader 7.0]
ID=2020
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\7.0\AVGeneral
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\7.0\AVGeneral\cRecentFiles
FileKey1=%localappdata%\Adobe\Acrobat\7.0\Cache\Search70|.
FileKey2=%ProgramFiles%\Adobe\Acrobat 7.0\Reader|.bak
FileKey3=%ProgramFiles%\Adobe\Acrobat 7.0\ActiveX|.bak
FileKey4=%ProgramFiles%\Adobe\Acrobat 7.0\Reader\plug_ins|.bak
FileKey5=%ProgramFiles%\Adobe\Acrobat 7.0\Reader\Updater|.bak
[Adobe Reader 8.0]
ID=2021
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\8.0
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\8.0\AVGeneral\cRecentFiles
FileKey1=%localappdata%\Adobe\Acrobat\8.0\Cache\Search80|.
[Adobe Reader 9.0]
ID=2137
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\9.0
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\9.0\AVGeneral\cRecentFiles
FileKey1=%LocalAppData%\Adobe\Acrobat\9.0\Cache\Search|.
FileKey2=%LocalLowAppData%\Adobe\Acrobat\9.0\Search|.
[Adobe Reader 10.0]
ID=2176
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\10.0
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\10.0\AVGeneral\cRecentFiles
FileKey1=%LocalAppData%\Adobe\Acrobat\10.0\Cache\Search|.
FileKey2=%LocalLowAppData%\Adobe\Acrobat\10.0\Search|.
[Adobe Reader 11.0]
ID=2317
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\11.0
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\11.0\AVGeneral\cRecentFiles
FileKey1=%LocalAppData%\Adobe\Acrobat\11.0\Cache\Search|.
FileKey2=%LocalLowAppData%\Adobe\Acrobat\11.0\Search|.
[Adobe Reader DC]
ID=2407
LangSecRef=3021
Detect=HKLM\Software\Adobe\Acrobat Reader\DC
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles
RegKey2=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFolders
FileKey1=%LocalAppData%\Adobe\Acrobat\DC\Cache|.lst
FileKey2=%LocalAppData%\Adobe\Acrobat\DC|.lst
FileKey3=%LocalLowAppData%\Adobe\Acrobat\DC\Search|.
[Adobe Acrobat 8.0]
ID=2022
LangSecRef=3021
Detect=HKCU\Software\Adobe\Adobe Acrobat\8.0
Default=True
RegKey1=HKCU\Software\Adobe\Adobe Acrobat\8.0\AVGeneral\cRecentFiles
FileKey1=%localappdata%\Adobe\Acrobat\8.0\Cache\Search80|.
[Adobe Acrobat 9.0]
ID=2185
LangSecRef=3021
Detect=HKCU\Software\Adobe\Adobe Acrobat\9.0
Default=True
RegKey1=HKCU\Software\Adobe\Adobe Acrobat\9.0\AVGeneral\cRecentFiles
FileKey1=%LocalAppData%\Adobe\Acrobat\9.0\Cache\Search|.
FileKey2=%LocalLowAppData%\Adobe\Acrobat\9.0\Search|.
FileKey3=%LocalAppData%\Adobe\Acrobat\9.0\Cache|*.lst
[Adobe Acrobat 10.0]
ID=2186
LangSecRef=3021
Detect=HKCU\Software\Adobe\Adobe Acrobat\10.0
Default=True
RegKey1=HKCU\Software\Adobe\Adobe Acrobat\10.0\AVGeneral\cRecentFiles
FileKey1=%LocalAppData%\Adobe\Acrobat\10.0\Cache\Search|.
FileKey2=%LocalLowAppData%\Adobe\Acrobat\10.0\Search|.
FileKey3=%LocalAppData%\Adobe\Acrobat\10.0\Cache|*.lst
[Adobe Acrobat XI]
ID=2326
LangSecRef=3021
Detect=HKCU\Software\Adobe\Adobe Acrobat\11.0
Default=True
RegKey1=HKCU\Software\Adobe\Adobe Acrobat\11.0\AVGeneral\cRecentFiles
RegKey2=HKCU\Software\Adobe\Adobe Acrobat\11.0\CompoundDocs\cStoredBinder
FileKey1=%LocalAppData%\Adobe\Acrobat\11.0\Cache|.
FileKey2=%LocalLowAppData%\Adobe\Acrobat\11.0\Search|.
[Adobe ImageReady 7.0]
ID=2023
LangSecRef=3021
Default=True
Detect=HKCU\Software\Adobe\ImageReady 7.0
RegKey1=HKCU\Software\Adobe\ImageReady 7.0\Preferences\URLHistory
RegKey2=HKCU\Software\Adobe\ImageReady 7.0\Preferences|SaveDir
RegKey3=HKCU\Software\Adobe\ImageReady 7.0\Preferences\RecentFiles
[Adobe ImageReady CS]
ID=2154
LangSecRef=3021
Detect=HKCU\Software\Adobe\ImageReady 8.0
Default=True
RegKey1=HKCU\Software\Adobe\ImageReady 8.0\Preferences\URLHistory
RegKey2=HKCU\Software\Adobe\ImageReady 8.0\Preferences|SaveDir
RegKey3=HKCU\Software\Adobe\ImageReady 8.0\Preferences\RecentFiles
[Adobe Photoshop 6.0]
ID=2024
LangSecRef=3021
Default=True
Detect=HKCU\Software\Adobe\Photoshop\6.0
RegKey1=HKCU\Software\Adobe\Photoshop\6.0\VisitedDirs
[Adobe Photoshop 7.0]
ID=2025
LangSecRef=3021
Default=True
Detect=HKCU\Software\Adobe\Photoshop\7.0
RegKey1=HKCU\Software\Adobe\Photoshop\7.0\VisitedDirs
[Adobe Photoshop CS]
ID=2026
LangSecRef=3021
Default=True
Detect=HKCU\Software\Adobe\Photoshop\8.0
RegKey1=HKCU\Software\Adobe\Photoshop\8.0\VisitedDirs
[Adobe Photoshop CS2]
ID=2027
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop\9.0
Default=True
RegKey1=HKCU\Software\Adobe\Photoshop\9.0\VisitedDirs
RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList
FileKey1=%appdata%\Adobe\CameraRaw\Cache|.
[Adobe Photoshop CS3]
ID=2139
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop\10.0
Default=True
RegKey1=HKCU\Software\Adobe\Photoshop\10.0\VisitedDirs
RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList
[Adobe Photoshop CS4]
ID=2140
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop\11.0
Default=True
RegKey1=HKCU\Software\Adobe\Photoshop\11.0\VisitedDirs
RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList
[Adobe Photoshop CS5]
ID=2156
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop\12.0
Default=True
RegKey1=HKCU\Software\Adobe\Photoshop\12.0\VisitedDirs
RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList
[Adobe Photoshop CS6]
ID=2323
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop\60.0
Default=True
RegKey1=HKCU\Software\Adobe\Photoshop\60.0\VisitedDirs
RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList
[Adobe Photoshop Elements 12]
ID=2367
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop Elements\12.0
Default=True
RegKey1=HKCU\Software\Adobe\Elements Organizer\12.0\CurrentMediaFilePath
RegKey2=HKCU\Software\Adobe\Photoshop Elements\12.0\CurrentMediaFilePath
RegKey3=HKCU\Software\Adobe\Photoshop Elements\12.0\common\settings\Elements MRU
RegKey4=HKCU\Software\Adobe\Photoshop Elements\12.0\VisitedDirs|STARTUPIMAGEDIRECTORY
FileKey1=%CommonAppData%\Adobe\Photoshop Elements\12.0\Locale*_\Photo Creations\temp|.dat
FileKey2=%AppData%\Adobe\Elements Organizer\12.0\Organizer|Log.txt
FileKey3=%CommonAppData%\Adobe\Elements Organizer\Catalogs\My Catalog|face.thumb.9.cache;thumb.5.cache
[Adobe Illustrator]
ID=2144
LangSecRef=3021
Detect=HKCU\Software\Adobe\MediaBrowser\MRU\illustrator
Default=True
RegKey1=HKCU\Software\Adobe\MediaBrowser\MRU\illustrator\FileList
[Adobe Air]
ID=2201
LangSecRef=3024
DetectFile=%LocalAppData%\Adobe\Air
Default=True
FileKey1=%LocalAppData%\Adobe\Air\Logs|.
[Adobe Dreamweaver]
ID=2314
LangSecRef=3021
Detect=HKCU\Software\Adobe\MediaBrowser\MRU\Dreamweaver
Default=True
RegKey1=HKCU\Software\Adobe\MediaBrowser\MRU\Dreamweaver\FileList
RegKey2=HKCU\Software\Adobe\Dreamweaver CS6\Recent File List
[Adobe Premiere Pro CC]
ID=2354
LangSecRef=3021
Default=True
Detect=HKLM\SOFTWARE\Adobe\Premiere Pro\7.0
Detect2=HKCU\Software\Adobe\Premiere Pro\7.0
FileKey1=%ProgramFiles%\Adobe\Adobe Premiere Pro CC\cache|--.cache
FileKey2=%ProgramFiles%\Adobe\Adobe Premiere Pro CC\Required\data\cache|.pcache
FileKey3=%AppData%\Adobe\dynamiclinkmanager\7.0\logs|.log
FileKey4=%AppData%\Adobe\Lumetri\7.0\log|.log
FileKey5=%AppData%\Adobe\Premiere Pro\7.0\logs|.log
FileKey6=%AppData%\Adobe\Premiere Pro\7.0|Plugin Loading.log
FileKey7=%AppData%\Adobe\Common\Media Cache Files|.mediasrc
FileKey8=%AppData%\Adobe\Common\Media Cache|*.mediasrc
[Adobe Premiere Elements 12]
ID=2369
LangSecRef=3021
Default=False
Detect=HKCU\Software\Adobe\Premiere Elements\12.0
RegKey1=HKCU\Software\Adobe\Premiere Elements\12.0\MRUDocuments
FileKey1=%AppData%\Adobe\Common\Thumbnail Cache|thumbnailDB
FileKey2=%AppData%\Adobe\Premiere Elements\12.0\logs|.log
FileKey3=%AppData%\Adobe\Premiere Elements\12.0|Plugin Loading.log;CAHeadless Plugin Loading.log
FileKey4=%AppData%\Adobe\Premiere Elements 12.0\12.0\logs|.log
[Acrobat Distiller 10]
ID=2264
LangSecRef=3021
DetectFile=%AppData%\Adobe\Acrobat\Distiller 10
Default=True
FileKey1=%AppData%\Adobe\Acrobat\Distiller 10|messages.log
FileKey2=%AppData%\Adobe\Acrobat\Distiller 10\Cache|.|RECURSE
[Advanced Searchbar]
ID=2202
LangSecRef=3022
DetectFile=%ProgramFiles%\AdvancedSearchbar\advancedsearchbar.dll
Default=True
FileKey1=%ProgramFiles%\AdvancedSearchbar\Cache|.
RegKey1=HKCU\Software\Advanced Searchbar\Toolbar\Historysearchbox1
[Yahoo Toolbar]
ID=2028
LangSecRef=3022
Detect=HKCU\Software\Yahoo\Companion
Default=True
RegKey1=HKCU\Software\Yahoo\Companion\SearchHistory
[Windows Live Toolbar]
ID=2029
LangSecRef=3022
Detect=HKCU\Software\Microsoft\MSN Apps\SearchBox
Default=True
RegKey1=HKCU\Software\Microsoft\MSN Apps\SearchBox|History
RegKey2=HKCU\Software\Microsoft\MSN Apps\MSN Toolbar|SearchStrings
[Google Toolbar]
ID=2030
LangSecRef=3022
Detect=HKCU\Software\Google\NavClient\1.1
Default=True
RegKey1=HKCU\Software\Google\NavClient\1.1\History
RegKey2=HKCU\Software\Google\NavClient\1.1\Options|KillPopupCount
[Google Toolbar IE]
ID=2031
LangSecRef=3022
Detect=HKCU\Software\Google\Google Toolbar
Default=True
FileKey1=%appdata%\Google\Local Search History|.
[Google Deskbar]
ID=2032
LangSecRef=3022
Detect=HKCU\Software\Google\Deskbar
Default=True
RegKey1=HKCU\Software\Google\Deskbar\termhistory
RegKey2=HKCU\Software\Google\Deskbar\urlhistory
[Google Calendar Sync]
ID=2159
LangSecRef=3022
Detect=HKCU\Software\Google\Google Calendar Sync
Default=True
FileKey1=%localappdata%\Google\Google Calendar Sync\logs|*.log
[Google Talk]
ID=2158
LangSecRef=3022
Detect=HKCU\Software\Google\Google Talk
DetectFile1=%ProgramFiles%\Google\Google Talk
DetectFile2=%appdata%\Google\Google Talk
DetectFile3=%localappdata%\Google\Google Talk
Default=False
FileKey1=%localappdata%\Google\Google Talk\status|.txt
FileKey2=%localappdata%\Google\Google Talk\chatlogs|.log
[Kantaris Media Player]
ID=2232
LangSecRef=3023
DetectFile=%AppData%\Christofer Persson\Kantaris Media Player
Default=True
FileKey1=%AppData%\Christofer Persson\Kantaris Media Player|*.jpg
[KMPlayer]
ID=2233
LangSecRef=3023
Detect=HKCU\Software\KMPlayer
Default=True
RegKey1=HKCU\Software\KMPlayer\KMP2.0|LastFileName
RegKey2=HKCU\Software\KMPlayer\WideAlbum(Default Album)
RegKey3=HKCU\Software\KMPlayer\albumart|LastAlbumName
[Windows Media Player]
ID=2033
LangSecRef=3023
Detect=HKCU\Software\Microsoft\MediaPlayer\Player
Default=True
RegKey1=HKCU\Software\Microsoft\MediaPlayer\Player\RecentFileList
RegKey2=HKCU\Software\Microsoft\MediaPlayer\Player\RecentURLList
RegKey3=HKCU\Software\Microsoft\MediaPlayer\Preferences|LastPlayList
RegKey4=HKCU\Software\Microsoft\MediaPlayer\Preferences|LastPlayListIndex
RegKey5=HKCU\Software\Microsoft\MediaPlayer\Player\Settings|SaveAsDir
RegKey6=HKCU\Software\Microsoft\MediaPlayer\AutoComplete\MediaEdit
RegKey7=HKCU\Software\Microsoft\MediaPlayer\Radio\MRUList
RegKey8=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedIconPath
RegKey9=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedLargeLogoPath
FileKey1=%LocalAppData%\Microsoft\Media Player|lastplayed.wpl
FileKey2=%LocalAppData%\Microsoft\Media Player|cacheentry*.|RECURSE
FileKey3=%LocalAppData%\Microsoft\Media Player\Art Cache\LocalMLS|.|RECURSE
FileKey4=%LocalAppData%\Microsoft\Media Player\Transcoded Files Cache|.*|RECURSE
[Windows Media Center]
ID=2278
LangSecRef=3023
DetectFile=%windir%\ehome\ehshell.exe
Default=True
FileKey1=%CommonAppData%\Microsoft\eHome\logs|.
FileKey2=%LocalAppData%\Microsoft\eHome|playlistcache.db
FileKey3=%PUBLIC%\Recorded TV\TempRec\TempSBE|.|RECURSE
[Real Player]
ID=2034
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\6.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins1
RegKey10=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins2
RegKey11=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins3
RegKey12=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins4
RegKey13=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins5
RegKey14=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins6
RegKey15=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins7
RegKey16=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins8
RegKey17=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\LastOpenFileDir
RegKey18=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips1
RegKey19=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips2
RegKey20=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips3
RegKey21=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips4
RegKey22=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips5
RegKey23=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips6
RegKey24=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips7
FileKey1=%AppData%\Real\RealOne Player|cookies.txt;ctd.dat;realplayer.ste
FileKey2=%AppData%\Real\RealOne Player\History|.
FileKey3=%AppData%\Real\RealPlayer|cookies.txt;ctd.dat;realplayer.ste
FileKey4=%AppData%\Real\RealPlayer\History|.
FileKey5=%AppData%\Real\RealPlayer\ErrorLogs|.
FileKey6=%AppData%\Real\RealPlayer\WatchFolders|*.log|RECURSE
FileKey7=%ProgramFiles%\Common Files\Real\Update_OB|RealPlayer-log.txt
[Real Player SP]
ID=2150
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\12.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins1
RegKey10=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins2
RegKey11=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins3
RegKey12=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins4
RegKey13=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins5
RegKey14=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins6
RegKey15=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins7
RegKey16=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins8
RegKey17=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\LastOpenFileDir
RegKey18=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips1
RegKey19=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips2
RegKey20=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips3
RegKey21=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips4
RegKey22=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips5
RegKey23=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips6
RegKey24=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips7
RegKey25=HKCU\Software\RealNetworks\RealConverter\12.0\Preferences\BrowsePath
RegKey26=HKCU\Software\RealNetworks\RealConverter\12.0\Preferences\DestinationPath
RegKey27=HKCU\Software\RealNetworks\RealTrimmer\12.0\Preferences\BrowsePath
FileKey1=%AppData%\Real\RealPlayer|cookies.txt;ctd.dat;realplayer.ste;RealPlayer-log.txt
FileKey2=%AppData%\Real\RealPlayer\History|.
FileKey3=%AppData%\Real\RealPlayer\ErrorLogs|.
FileKey4=%AppData%\Real\RealPlayer\WatchFolders|*.log|RECURSE
[Real Player 15]
ID=2276
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\15.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\LastOpenFileDir
RegKey10=HKCU\Software\RealNetworks\RealConverter\15.0\Preferences\BrowsePath
RegKey11=HKCU\Software\RealNetworks\RealConverter\15.0\Preferences\DestinationPath
RegKey12=HKCU\Software\RealNetworks\RealTrimmer\15.0\Preferences\BrowsePath
FileKey1=%AppData%\Real\RealPlayer|realplayer.ste;RealPlayer-log.txt
FileKey2=%AppData%\Real\RealPlayer\History|.
FileKey3=%AppData%\Real\RealPlayer\ErrorLogs|.
FileKey4=%AppData%\Real\RealPlayer\WatchFolders|*.log
[Real Player 16]
ID=2325
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\16.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\LastOpenFileDir
RegKey10=HKCU\Software\RealNetworks\RealConverter\16.0\Preferences\BrowsePath
RegKey11=HKCU\Software\RealNetworks\RealConverter\16.0\Preferences\DestinationPath
RegKey12=HKCU\Software\RealNetworks\RealTrimmer\16.0\Preferences\BrowsePath
FileKey1=%AppData%\Real\RealPlayer|realplayer.ste;RealPlayer-log.txt
FileKey2=%AppData%\Real\RealPlayer\History|.
FileKey3=%AppData%\Real\RealPlayer\ErrorLogs|.
FileKey4=%AppData%\Real\RealPlayer\WatchFolders|*.log
[Real Player Cloud]
ID=2034
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\17.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\LastOpenFileDir
RegKey10=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips1
RegKey11=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips2
RegKey12=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips3
RegKey13=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips4
RegKey14=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips5
RegKey15=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips6
RegKey16=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips7
FileKey1=%AppData%\Real\RealPlayer\Temp|.
FileKey2=%ProgramFiles%\Real\RealPlayer\RPDS|install.log
FileKey3=%CommonAppData%\Real\RealPlayer|-log.txt;S-
FileKey4=%CommonAppData%\RPDS\Content\images|.jpg
FileKey5=%CommonAppData%\Real\RPDS\Logs|.log;error.log*
FileKey6=%AppData%\Real\RealPlayer|RealPlayer-log.txt
FileKey7=%AppData%\Real\RealPlayer\ErrorLogs|.log
FileKey8=%AppData%\Real\RealPlayer\History|.*
FileKey9=%AppData%\Real\RealPlayer\ThumbsCache|.|RECURSE
FileKey10=%AppData%\Real\RealPlayer\WatchFolders|_scan
FileKey11=%ProgramFiles%\Real\RealPlayer\common|cookies.txt
ExcludeKey1=FILE|%AppData%\Real\RealPlayer\WatchFolders*scan.out
[RealTimes]
ID=2409
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\18.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\LastOpenFileDir
RegKey10=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips1
RegKey11=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips2
RegKey12=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips3
RegKey13=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips4
RegKey14=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips5
RegKey15=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips6
RegKey16=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips7
RegKey17=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips8
FileKey1=%AppData%\Real\RealPlayer\Temp|.
FileKey2=%ProgramFiles%\Real\RealPlayer\RPDS|install.log
FileKey3=%CommonAppData%\Real\RealPlayer|-log.txt;S-
FileKey4=%CommonAppData%\Real\RPDS\Content\images|.jpg
FileKey5=%CommonAppData%\Real\RPDS\Logs|.log;error.log*
FileKey6=%AppData%\Real\RealPlayer|RealPlayer-log.txt
FileKey7=%AppData%\Real\RealPlayer\ErrorLogs|.log
FileKey8=%AppData%\Real\RealPlayer\History|.*
FileKey9=%AppData%\Real\RealPlayer\ThumbsCache|.|RECURSE
FileKey10=%AppData%\Real\RealPlayer\WatchFolders|_scan
FileKey11=%ProgramFiles%\Real\RealPlayer\common|cookies.txt
ExcludeKey1=FILE|%AppData%\Real\RealPlayer\WatchFolders*scan.out
[Quicktime Player]
ID=2035
LangSecRef=3023
Detect=HKLM\Software\Apple Computer, Inc.\QuickTime
Default=True
RegKey1=HKLM\Software\Apple Computer, Inc.\QuickTime\Recent Movies
FileKey1=%LocalLowAppData%\Apple Computer\QuickTime\downloads|.|RECURSE
FileKey2=%localappdata%\Apple Computer\QuickTime\downloads|.|RECURSE
FileKey3=%localappdata%\Apple Computer\QuickTime|QTPlayerSession.xml
FileKey4=%appdata%\Apple Computer\QuickTime|QTPlayerSession.xml
FileKey5=%CommonAppData%\Apple Computer\Installer Cache\QuickTime*|QuickTime.msi.backup
FileKey6=%userprofile%|QTPlayerSession.xml
[AVI Preview]
ID=2037
LangSecRef=3023
Detect=HKCU\Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more
Default=True
RegKey1=HKCU\Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more\Recent File List
[Steam]
ID=2203
LangSecRef=3023
DetectFile=%ProgramFiles%\Steam\Steam.exe
Default=True
FileKey1=%ProgramFiles%\Steam|.mdmp;.log
FileKey2=%ProgramFiles%\Steam\Dumps|.|RECURSE
FileKey3=%ProgramFiles%\Steam\Logs|.|RECURSE
[Xfire]
ID=2204
LangSecRef=3023
DetectFile=%ProgramFiles%\Xfire\Xfire.exe
Default=True
FileKey1=%CommonAppData%\Xfire|------.log;xfire_exe_log.txt;xfire_toucan_log.txt
FileKey2=%ProgramFiles%\Xfire|------.log;xfire_exe_log.txt;xfire_toucan_log.txt
[XML Spy]
ID=2038
LangSecRef=3021
Detect=HKCU\Software\Altova\XML Spy
Default=True
RegKey1=HKCU\Software\Altova\XML Spy\Recent File List
RegKey2=HKCU\Software\Altova\XML Spy\Recent Project List
[Oxygen XML Editor]
ID=2327
LangSecRef=3021
DetectFile=%AppData%\com.oxygenxml
Default=True
FileKey1=%AppData%\com.oxygenxml\usageData|usageData.xml
FileKey2=%AppData%\com.oxygenxml|file.history
FileKey3=%AppData%\com.oxygenxml|project.history
[SWiSH]
ID=2039
LangSecRef=3023
Detect=HKCU\Software\DJJ Holdings\SWiSH
Default=True
RegKey1=HKCU\Software\DJJ Holdings\SWiSH\Recent File List
[Paint Shop Pro 7.0]
ID=2040
LangSecRef=3023
Detect=HKCU\Software\Jasc\Paint Shop Pro 7
Default=True
RegKey1=HKCU\Software\Jasc\Paint Shop Pro 7\Recent File List
RegKey2=HKCU\Software\Jasc\Animation Shop 3\Recent File List
RegKey3=HKCU\Software\Jasc\Paint Shop Pro 7\General|FolderHistory
RegKey4=HKCU\Software\Jasc\Paint Shop Pro 7\General|SaveAsDirectory
RegKey5=HKCU\Software\Jasc\Paint Shop Pro 7\General|SaveCopyDirectory
[Paint Shop Pro 8.0]
ID=2041
LangSecRef=3023
Detect=HKCU\Software\Jasc\Paint Shop Pro 8
Default=True
RegKey1=HKCU\Software\Jasc\Paint Shop Pro 8\Recent File List
RegKey2=HKCU\Software\Jasc\Paint Shop Pro 8\WorkspaceMRU
RegKey3=HKCU\Software\Jasc\Paint Shop Pro 8\JascCmdPyScript\RunScript|FileName
RegKey4=HKCU\Software\Jasc\Paint Shop Pro 8\JascCmdFile\FileSaveAs|FileFolder
RegKey5=HKCU\Software\Jasc\Paint Shop Pro 8\JascCmdNonGraphic\SaveWorkspace|WorkspaceFilename
RegKey6=HKCU\Software\Jasc\Paint Shop Pro 8\ScriptMRU
[Paint Shop Pro 9.0]
ID=2042
LangSecRef=3023
Detect=HKCU\Software\Jasc\Paint Shop Pro 9
Default=True
RegKey1=HKCU\Software\Jasc\Paint Shop Pro 9\Recent File List
RegKey2=HKCU\Software\Jasc\Paint Shop Pro 9\WorkspaceMRU
RegKey3=HKCU\Software\Jasc\Paint Shop Pro 9\JascCmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Jasc\Paint Shop Pro 9\JascCmdFile\FileOpen|Folder
[Paint Shop Pro X]
ID=2043
LangSecRef=3023
Detect=HKCU\Software\Corel\Paint Shop Pro\10
Default=True
RegKey1=HKCU\Software\Corel\Paint Shop Pro\10\Recent File List
RegKey2=HKCU\Software\Corel\Paint Shop Pro\10\WorkspaceMRU
RegKey3=HKCU\Software\Corel\Paint Shop Pro\10\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\Paint Shop Pro\10\CmdFile\FileOpen|Folder
[Paint Shop Pro XI]
ID=2044
LangSecRef=3023
Detect=HKCU\Software\Corel\Paint Shop Pro\11
Default=True
RegKey1=HKCU\Software\Corel\Paint Shop Pro\11\Recent File List
RegKey2=HKCU\Software\Corel\Paint Shop Pro\11\WorkspaceMRU
RegKey3=HKCU\Software\Corel\Paint Shop Pro\11\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\Paint Shop Pro\11\CmdFile\FileOpen|Folder
[Paint Shop Pro X2]
ID=2148
LangSecRef=3023
Detect=HKCU\Software\Corel\Paint Shop Pro\12
Detect2=HKCU\Software\Corel\Paint Shop Pro\12.5
Default=True
RegKey1=HKCU\Software\Corel\Paint Shop Pro\12\Recent File List
RegKey2=HKCU\Software\Corel\Paint Shop Pro\12\WorkspaceMRU
RegKey3=HKCU\Software\Corel\Paint Shop Pro\12\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\Paint Shop Pro\12\CmdFile\FileOpen|Folder
RegKey5=HKCU\Software\Corel\Paint Shop Pro\12.5\Recent File List
RegKey6=HKCU\Software\Corel\Paint Shop Pro\12.5\WorkspaceMRU
RegKey7=HKCU\Software\Corel\Paint Shop Pro\12.5\CmdFile\FileSaveAs|FileFolder
RegKey8=HKCU\Software\Corel\Paint Shop Pro\12.5\CmdFile\FileOpen|Folder
[Paint Shop Pro X3]
ID=2167
LangSecRef=3023
Detect=HKCU\Software\Corel\Paint Shop Pro\13
Default=True
RegKey1=HKCU\Software\Corel\Paint Shop Pro\13\Recent File List
RegKey2=HKCU\Software\Corel\Paint Shop Pro\13\WorkspaceMRU
RegKey3=HKCU\Software\Corel\Paint Shop Pro\13\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\Paint Shop Pro\13\CmdFile\FileOpen|Folder
[Corel PaintShop Pro X4]
ID=2273
LangSecRef=3023
Detect=HKCU\Software\Corel\PaintShop Pro\X4
Default=True
RegKey1=HKCU\Software\Corel\PaintShop Pro\X4\Recent File List
RegKey2=HKCU\Software\Corel\PaintShop Pro\X4\UI Customization\EN\WorkspaceMRU
RegKey3=HKCU\Software\Corel\PaintShop Pro\X4\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\PaintShop Pro\X4\CmdFile\FileOpen|Folder
RegKey5=HKCU\Software\Corel\PaintShop Pro\X4\ScriptMRU
[Corel PaintShop Pro X5]
ID=2316
LangSecRef=3023
Detect=HKCU\Software\Corel\PaintShop Pro\X5
Default=True
RegKey1=HKCU\Software\Corel\PaintShop Pro\X5\Recent File List
RegKey2=HKCU\Software\Corel\PaintShop Pro\X5\UI Customization\EN\WorkspaceMRU
RegKey3=HKCU\Software\Corel\PaintShop Pro\X5\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\PaintShop Pro\X5\CmdFile\FileOpen|Folder
RegKey5=HKCU\Software\Corel\PaintShop Pro\X5\ScriptMRU
[Corel PaintShop Pro X6]
ID=2364
LangSecRef=3023
Detect=HKCU\Software\Corel\PaintShop Pro\X6
Default=True
RegKey1=HKCU\Software\Corel\PaintShop Pro\X6\Recent File List
RegKey2=HKCU\Software\Corel\PaintShop Pro\X6\CmdFile\FileSaveAs|FileFolder
RegKey3=HKCU\Software\Corel\PaintShop Pro\X6\CmdFile\FileOpen|Folder
RegKey4=HKCU\Software\Corel\PaintShop Pro\X6\ScriptMRU
FileKey1=%ProgramFiles%\Corel\Corel PaintShop Pro X6\PlugIns*|.log
FileKey2=%LocalAppData%\Corel PaintShop Pro\16.0\Thumbs|.*|RECURSE
[MS Works 4.0]
ID=2045
LangSecRef=3021
Detect= HKCU\Software\Microsoft\Works\4.0
Default=True
RegKey1=HKCU\Software\Microsoft\Works\4.0\Recent File List
[Office 97]
ID=2046
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\8.0\Common
Default=True
FileKey1=%appdata%\Microsoft\Office\Recent|.
RegKey1=HKCU\Software\Microsoft\Office\8.0\Excel\Recent File List
RegKey2=HKCU\Software\Microsoft\Office\8.0\Project\Recent File List
RegKey3=HKCU\Software\Microsoft\Office\8.0\PowerPoint\Recent File List
RegKey4=HKCU\Software\Microsoft\Office\8.0\PowerPoint\Recent Folder List
RegKey5=HKCU\Software\Microsoft\Office\8.0\Common\Internet\LocationOfComponents
RegKey6=HKCU\Software\Microsoft\Office\8.0\Access\Settings
[Office XP]
ID=2047
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\10.0\Common
Default=True
FileKey1=%appdata%\Microsoft\Office\Recent|.
RegKey1=HKCU\Software\Microsoft\Office\10.0\PowerPoint\Recent File List
RegKey2=HKCU\Software\Microsoft\Office\10.0\Excel\Recent Files
RegKey3=HKCU\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent File List
RegKey4=HKCU\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent Page List
RegKey5=HKCU\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent Web List
RegKey6=HKCU\Software\Microsoft\Office\10.0\Word\Recent Templates
RegKey7=HKCU\Software\Microsoft\Office\10.0\Common\Internet|UseRWHlinkNavigation
[Office 2003]
ID=2048
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\11.0\Common
Default=True
FileKey1=%AppData%\Microsoft\Office\Recent|.
FileKey2=%AppData%\Microsoft\Office|*.tmp|RECURSE
RegKey1=HKCU\Software\Microsoft\Office\11.0\Excel\Recent Files
RegKey2=HKCU\Software\Microsoft\Office\11.0\Common\Open Find\Microsoft Office Word\Settings\Save As\File Name MRU
RegKey3=HKCU\Software\Microsoft\Office\11.0\PowerPoint\Recent File List
RegKey4=HKCU\Software\Microsoft\Office\11.0\Publisher\Recent File List
RegKey5=HKCU\Software\Microsoft\Office\11.0\InfoPath\Recent File List
RegKey6=HKCU\Software\Microsoft\Office\11.0\Common\Internet\Server Cache
RegKey7=HKCU\Software\Microsoft\Office\11.0\Common\Internet|UseRWHlinkNavigation
RegKey8=HKCU\Software\Microsoft\MSPaper 11.0\Persist File Name
RegKey9=HKCU\Software\Microsoft\MSPaper 11.0\Recent File List
RegKey10=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile1
RegKey11=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile2
RegKey12=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile3
RegKey13=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile4
RegKey14=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile5
RegKey15=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile6
RegKey16=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile7
RegKey17=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile8
RegKey18=HKCU\Software\Microsoft\Office\11.0\Outlook\Contact|QuickFindMRU
RegKey19=HKCU\Software\Microsoft\Office\11.0\Outlook\Contact|StripSearchMRU
RegKey20=HKCU\Software\Microsoft\Office\11.0\Outlook\Preferences|LocationMRU
RegKey21=HKCU\Software\Microsoft\Office\11.0\Excel Viewer\Recent Files
RegKey22=HKCU\Software\Microsoft\Office\Common|FontBmpCache
[Office 2007]
ID=2049
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\12.0\Common
Default=True
FileKey1=%AppData%\Microsoft\Office\Recent|.
FileKey2=%AppData%\Microsoft\Office|*.tmp|RECURSE
RegKey1=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Word\Settings\Save As\File Name MRU
RegKey2=HKCU\Software\Microsoft\Office\12.0\Word\File MRU
RegKey3=HKCU\Software\Microsoft\Office\12.0\Excel\File MRU
RegKey4=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU1
RegKey5=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU2
RegKey6=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU3
RegKey7=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU4
RegKey8=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU5
RegKey9=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU6
RegKey10=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU7
RegKey11=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU8
RegKey12=HKCU\Software\Microsoft\Office\12.0\PowerPoint\File MRU
RegKey13=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Save As\File Name MRU
RegKey14=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office InfoPath\Settings\Open\File Name MRU
RegKey15=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office InfoPath\Settings\Save As\File Name MRU
RegKey16=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Excel\Settings\Save As\File Name MRU
RegKey17=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Publisher\Settings\Save As\File Name MRU
RegKey18=HKCU\Software\Microsoft\Office\12.0\Publisher\Recent File List
RegKey19=HKCU\Software\Microsoft\Office\12.0\InfoPath\Recent File List
RegKey20=HKCU\Software\Microsoft\Office\12.0\Excel Viewer\Viewer File MRU
RegKey21=HKCU\Software\Microsoft\Office\12.0\Clip Organizer\Search\Last Query
RegKey22=HKCU\Software\Microsoft\Office\Common|FontBmpCache
[Office 2010]
ID=2151
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\14.0\Common
Default=True
FileKey1=%AppData%\Microsoft\Office\Recent|.
FileKey2=%AppData%\Microsoft\Office|.tmp|RECURSE
FileKey3=%LocalAppData%\Microsoft\Office\14.0\OfficeFileCache|.*|RECURSE
RegKey1=HKCU\Software\Microsoft\Office\14.0\Access\File MRU
RegKey2=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Default Database Path\File Name MRU
RegKey3=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Default Theme for New Databases\File Name MRU
RegKey4=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\File New Database\File Name MRU
RegKey5=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\File Open\File Name MRU
RegKey6=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\File Save\File Name MRU
RegKey7=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Open\File Name MRU
RegKey8=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Save As\File Name MRU
RegKey9=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Default Database Path\File Name MRU
RegKey10=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Default Theme for New Databases\File Name MRU
RegKey11=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\File New Database\File Name MRU
RegKey12=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\File Open\File Name MRU
RegKey13=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\File Save\File Name MRU
RegKey14=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Open\File Name MRU
RegKey15=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Save As\File Name MRU
RegKey16=HKCU\Software\Microsoft\Office\14.0\Word\File MRU
RegKey17=HKCU\Software\Microsoft\Office\14.0\Word\Place MRU
RegKey18=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\Browse\File Name MRU
RegKey19=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\File Open\File Name MRU
RegKey20=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\File Save\File Name MRU
RegKey21=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\Modify Location\File Name MRU
RegKey22=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\Save As\File Name MRU
RegKey23=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\Browse\File Name MRU
RegKey24=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\File Open\File Name MRU
RegKey25=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\File Save\File Name MRU
RegKey26=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\Modify Location\File Name MRU
RegKey27=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\Save As\File Name MRU
RegKey28=HKCU\Software\Microsoft\Office\14.0\Excel\File MRU
RegKey29=HKCU\Software\Microsoft\Office\14.0\Excel\Place MRU
RegKey30=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\Browse\File Name MRU
RegKey31=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\File Open\File Name MRU
RegKey32=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\File Save\File Name MRU
RegKey33=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\Modify Location\File Name MRU
RegKey34=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\Save As\File Name MRU
RegKey35=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\Browse\File Name MRU
RegKey36=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\File Open\File Name MRU
RegKey37=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\File Save\File Name MRU
RegKey38=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\Modify Location\File Name MRU
RegKey39=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\Save As\File Name MRU
RegKey40=HKCU\Software\Microsoft\Office\14.0\Publisher\File MRU
RegKey41=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\File Open\File Name MRU
RegKey42=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\File Save\File Name MRU
RegKey43=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\Open Publication\File Name MRU
RegKey44=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\Save As\File Name MRU
RegKey45=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\File Open\File Name MRU
RegKey46=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\File Save\File Name MRU
RegKey47=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\Open Publication\File Name MRU
RegKey48=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\Save As\File Name MRU
RegKey49=HKCU\Software\Microsoft\Office\14.0\PowerPoint\File MRU
RegKey50=HKCU\Software\Microsoft\Office\14.0\PowerPoint\Place MRU
RegKey51=HKCU\Software\Microsoft\Office\14.0\PowerPoint\RecentFolderList
RegKey52=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\Browse\File Name MRU
RegKey53=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\File Open\File Name MRU
RegKey54=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\File Save\File Name MRU
RegKey55=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\Open\File Name MRU
RegKey56=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\Save As\File Name MRU
RegKey57=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Browse\File Name MRU
RegKey58=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\File Open\File Name MRU
RegKey59=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\File Save\File Name MRU
RegKey60=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Open\File Name MRU
RegKey61=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Save As\File Name MRU
RegKey62=HKCU\Software\Microsoft\Office\14.0\InfoPath\Designer File MRU
RegKey63=HKCU\Software\Microsoft\Office\14.0\InfoPath\Filler File MRU
RegKey64=HKCU\Software\Microsoft\Office\14.0\InfoPath\Recent Templates
RegKey65=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Browse\File Name MRU
RegKey66=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\File Open\File Name MRU
RegKey67=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\File Save\File Name MRU
RegKey68=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Open\File Name MRU
RegKey69=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Open in Design Mode\File Name MRU
RegKey70=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Save As\File Name MRU
RegKey71=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Browse\File Name MRU
RegKey72=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\File Open\File Name MRU
RegKey73=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\File Save\File Name MRU
RegKey74=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Open\File Name MRU
RegKey75=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Open in Design Mode\File Name MRU
RegKey76=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Save As\File Name MRU
RegKey77=HKCU\Software\Microsoft\Office\14.0\OneNote\OpenNotebooks
RegKey78=HKCU\Software\Microsoft\Office\14.0\OneNote\RecentNotebooks
RegKey79=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\File Open\File Name MRU
RegKey80=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\File Save\File Name MRU
RegKey81=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Open Backup\File Name MRU
RegKey82=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Open Notebook\File Name MRU
RegKey83=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Save As\File Name MRU
RegKey84=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Select File\File Name MRU
RegKey85=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Select Folder\File Name MRU
RegKey86=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\File Open\File Name MRU
RegKey87=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\File Save\File Name MRU
RegKey88=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Open Backup\File Name MRU
RegKey89=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Open Notebook\File Name MRU
RegKey90=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Save As\File Name MRU
RegKey91=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Select File\File Name MRU
RegKey92=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Select Folder\File Name MRU
RegKey93=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\Create or Open Outlook Data File\File Name MRU
RegKey94=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\File Open\File Name MRU
RegKey95=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\File Save\File Name MRU
RegKey96=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\Open Calendar\File Name MRU
RegKey97=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\Open Outlook Data File\File Name MRU
RegKey98=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\Create or Open Outlook Data File\File Name MRU
RegKey99=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\File Open\File Name MRU
RegKey100=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\File Save\File Name MRU
RegKey101=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\Open Calendar\File Name MRU
RegKey102=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\Open Outlook Data File\File Name MRU
RegKey103=HKCU\Software\Microsoft\Office\14.0\Clip Organizer\Search\Last Query
RegKey104=HKCU\Software\Microsoft\Office\Common|FontBmpCache
RegKey105=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly1
RegKey106=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly2
RegKey107=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly3
RegKey108=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly4
RegKey109=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template1
RegKey110=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template2
RegKey111=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template3
RegKey112=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template4
RegKey113=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile1
RegKey114=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile2
RegKey115=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile3
RegKey116=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile4
RegKey117=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile5
RegKey118=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile6
RegKey119=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile7
RegKey120=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile8
RegKey121=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile9
RegKey122=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile10
RegKey123=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile11
RegKey124=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile12
RegKey125=HKCU\Software\Microsoft\Office\14.0\Outlook\Search
[Office 2013]
ID=2318
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\15.0\Common
Default=True
FileKey1=%AppData%\Microsoft\Office\Recent|.
FileKey2=%LocalAppData%\Microsoft\MSOIdentityCRL\production\temp|._sync
FileKey3=%AppData%\Microsoft\PowerPoint\Sync\Temp|.
RegKey1=HKCU\Software\Microsoft\Office\15.0\Access\File MRU
RegKey2=HKCU\Software\Microsoft\Office\15.0\Word\File MRU
RegKey3=HKCU\Software\Microsoft\Office\15.0\Word\Place MRU
RegKey4=HKCU\Software\Microsoft\Office\15.0\Excel\File MRU
RegKey5=HKCU\Software\Microsoft\Office\15.0\Excel\Place MRU
RegKey6=HKCU\Software\Microsoft\Office\15.0\Publisher\File MRU
RegKey7=HKCU\Software\Microsoft\Office\15.0\PowerPoint\File MRU
RegKey8=HKCU\Software\Microsoft\Office\15.0\PowerPoint\Place MRU
RegKey9=HKCU\Software\Microsoft\Office\15.0\OneNote\RecentNotebooks
RegKey10=HKCU\Software\Microsoft\Office\15.0\Word\User MRU
RegKey11=HKCU\Software\Microsoft\Office\15.0\Excel\User MRU
RegKey12=HKCU\Software\Microsoft\Office\15.0\Access\User MRU
RegKey13=HKCU\Software\Microsoft\Office\15.0\Publisher\User MRU
RegKey14=HKCU\Software\Microsoft\Office\15.0\PowerPoint\User MRU
ExcludeKey1=FILE|%AppData%\Microsoft\Office\Recent|Welcome to Word.LNK
ExcludeKey2=FILE|%AppData%\Microsoft\Office\Recent|Welcome to Publisher.LNK
ExcludeKey3=FILE|%AppData%\Microsoft\Office\Recent|Welcome to OneNote.LNK
[Office 2016]
ID=2412
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\16.0\Common
Default=False
FileKey1=%AppData%\Microsoft\Office\Recent|.
FileKey2=%LocalAppData%\Microsoft\MSOIdentityCRL\production\temp|._sync
FileKey3=%AppData%\Microsoft\PowerPoint\Sync\Temp|.
FileKey4=%LocalAppData%\Microsoft\Office\16.0\WebServiceCache|.|RECURSE
FileKey5=%LocalAppData%\Microsoft\Office\16.0\OfficeFileCache|.
RegKey1=HKCU\Software\Microsoft\Office\16.0\Access\File MRU
RegKey2=HKCU\Software\Microsoft\Office\16.0\Word\File MRU
RegKey3=HKCU\Software\Microsoft\Office\16.0\Word\Place MRU
RegKey4=HKCU\Software\Microsoft\Office\16.0\Excel\File MRU
RegKey5=HKCU\Software\Microsoft\Office\16.0\Excel\Place MRU
RegKey6=HKCU\Software\Microsoft\Office\16.0\Publisher\File MRU
RegKey7=HKCU\Software\Microsoft\Office\16.0\PowerPoint\File MRU
RegKey8=HKCU\Software\Microsoft\Office\16.0\PowerPoint\Place MRU
RegKey9=HKCU\Software\Microsoft\Office\16.0\OneNote\RecentNotebooks
RegKey10=HKCU\Software\Microsoft\Office\16.0\Word\User MRU
RegKey11=HKCU\Software\Microsoft\Office\16.0\Excel\User MRU
RegKey12=HKCU\Software\Microsoft\Office\16.0\Access\User MRU
RegKey13=HKCU\Software\Microsoft\Office\16.0\Publisher\User MRU
RegKey14=HKCU\Software\Microsoft\Office\16.0\PowerPoint\User MRU
ExcludeKey1=FILE|%AppData%\Microsoft\Office\Recent|Welcome to Word.LNK
ExcludeKey2=FILE|%AppData%\Microsoft\Office\Recent|Welcome to Publisher.LNK
ExcludeKey3=FILE|%AppData%\Microsoft\Office\Recent|Welcome to OneNote.LNK
[Installshield Developer 7.0]
ID=2050
LangSecRef=3021
Detect=HKCU\Software\InstallShield\Developer\7.0
Default=True
RegKey1=HKCU\Software\InstallShield\Developer\7.0\Recent File List
[Macromedia Flash 4.0]
ID=2051
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Flash 4
Default=True
RegKey1=HKCU\Software\Macromedia\Flash 4\Recent File List
[Macromedia Flash 5.0]
ID=2052
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Flash 5
Default=True
RegKey1=HKCU\Software\Macromedia\Flash 5\Recent File List
[Macromedia Flash MX]
ID=2053
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Flash 6
Default=True
RegKey1=HKCU\Software\Macromedia\Flash 6\Recent File List
[Macromedia Flash MX 2004]
ID=2054
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Flash 7
Default=True
RegKey1=HKCU\Software\Macromedia\Flash 7\Recent File List
[Adobe Flash Player]
ID=2055
LangSecRef=3023
Detect=HKCR\CLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}
Detect2=HKCU\Software\Macromedia\FlashPlayer
DetectFile=%SystemDirectory%\Macromed\flash\flashplayer.xpt
Default=True
SpecialKey1=N_FLASH_COOKIES
RegKey1=HKCU\Software\Macromedia\FlashPlayer|RecentMovie1
RegKey2=HKCU\Software\Macromedia\FlashPlayer|RecentMovie2
RegKey3=HKCU\Software\Macromedia\FlashPlayer|RecentMovie3
RegKey4=HKCU\Software\Macromedia\FlashPlayer|RecentMovie4
RegKey5=HKCU\Software\Macromedia\FlashPlayer|RecentMovie5
RegKey6=HKCU\Software\Macromedia\FlashPlayer|RecentMovie6
RegKey7=HKCU\Software\Macromedia\FlashPlayer|RecentMovie7
RegKey8=HKCU\Software\Macromedia\FlashPlayer|RecentMovie8
RegKey9=HKCU\Software\Macromedia\FlashPlayer|RecentMovie9
[Macromedia Homesite 5.0]
ID=2056
LangSecRef=3021
Detect=HKCU\Software\Macromedia\HomeSite5
Default=True
RegKey1=HKCU\Software\Macromedia\HomeSite5\RecentFiles
[Macromedia Fireworks 6.0]
ID=2057
LangSecRef=3021
Default=True
Detect=HKCU\Software\Macromedia\Firework 6
RegKey1=HKCU\Software\Macromedia\Firework 6\Recent File List
[Adobe Fireworks 6.0]
ID=2334
LangSecRef=3021
Detect=HKCU\Software\Adobe\Fireworks\12.0
Default=True
RegKey1=HKCU\Software\Adobe\Fireworks\12.0\ini\Recent File List
FileKey1=%AppData%\Adobe\Fireworks CS6|Project_Log.htm;Web_Log.htm
[Macromedia Dreamweaver MX]
ID=2058
LangSecRef=3021
Default=True
Detect=HKCU\Software\Macromedia\Dreamweaver MX 2004
RegKey1=HKCU\Software\Macromedia\Dreamweaver MX 2004\Recent File List
[Macromedia Shockwave 10]
ID=2189
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Shockwave 10
Detect2=HKLM\Software\Macromedia\Shockwave 10
Default=True
RegKey1=HKCU\Software\Macromedia\Shockwave 10\movies
RegKey2=HKCU\Software\AppDataLow\Software\Macromedia\Shockwave 10\movies
RegKey3=HKCU\Software\AppDataLow\Software\Macromedia\Shockwave 10\statistics
FileKey1=%LocalLowAppData%\Macromedia\Shockwave Player|Shockwave Log
[Macromedia Shockwave 11]
ID=2190
LangSecRef=3023
Detect=HKLM\Software\Adobe\Shockwave 11
Detect2=HKCU\Software\Adobe\Shockwave 11
Default=True
RegKey1=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\moviestats\movies
RegKey2=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\moviestats\sessions
RegKey3=HKCU\Software\Adobe\Shockwave 11\moviestats\movies
RegKey4=HKCU\Software\Adobe\Shockwave 11\moviestats\sessions
RegKey5=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\movies
RegKey6=HKCU\Software\Adobe\Shockwave 11\movies
RegKey7=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\statistics
FileKey1=%LocalLowAppData%\Adobe\Shockwave Player 11|Shockwave Log
[Microsoft Silverlight]
ID=2169
LangSecRef=3023
DetectFile=%LocalAppData%\Microsoft\Silverlight\is
DetectFile2=%LocalLowAppData%\Microsoft\Silverlight\is
Detect=HKLM\Software\Microsoft\Silverlight
Default=True
FileKey1=%LocalAppData%\Microsoft\Silverlight\is|.|RECURSE
FileKey2=%LocalLowAppData%\Microsoft\Silverlight\is|.|RECURSE
FileKey3=%LocalLowAppData%\Microsoft\Silverlight|*.tmp
ExcludeKey1=FILE|%LocalAppData%\Microsoft\Silverlight\is*|disabled.dat
ExcludeKey2=FILE|%LocalLowAppData%\Microsoft\Silverlight\is*|disabled.dat
[Ulead Smart Saver Pro 3.0]
ID=2059
LangSecRef=3023
Detect=HKCU\Software\Ulead Systems\Ulead SmartSaver Pro\3.0
Default=True
RegKey1=HKCU\Software\Ulead Systems\Ulead SmartSaver Pro\3.0\Recent File List
[Norton AntiVirus]
ID=2060
LangSecRef=3024
Detect=HKLM\SOFTWARE\Symantec\Norton AntiVirus NT\Install\7.50
Default=True
FileKey1=%commonappdata%\Symantec\Norton AntiVirus Corporate Edition\7.5\Logs|.log
FileKey2=%localappdata%\Symantec\Norton AntiVirus Corporate Edition\7.5\Logs|.log
FileKey3=%commonappdata%\Symantec\LiveUpdate\Downloads|.
[Symantec AntiVirus]
ID=2061
LangSecRef=3024
Detect=HKLM\SOFTWARE\Symantec\Symantec AntiVirus\Install\7.50
Default=True
FileKey1=%commonappdata%\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs|.log
FileKey2=%localappdata%\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs|.log
FileKey3=%commonappdata%\Symantec\LiveUpdate\Downloads|.
[MS Snapshot Viewer]
ID=2062
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Snapshot Viewer
Default=True
RegKey1=HKCU\Software\Microsoft\Snapshot Viewer\Recent File List
[Remote Desktop]
ID=2063
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Terminal Server Client
Default=True
FileKey1=%localappdata%\Microsoft\Terminal Server Client\Cache|.
RegKey1=HKCU\Software\Microsoft\Terminal Server Client\Default
ExcludeKey1=REG|HKCU\Software\Microsoft\Terminal Server Client\Default\AddIns
[MS Management Console]
ID=2064
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Microsoft Management Console
Default=True
RegKey1=HKCU\Software\Microsoft\Microsoft Management Console\Recent File List
[MS Wordpad]
ID=2065
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad
Default=True
RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Recent File List
[MS Paint]
ID=2066
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Paint
Default=True
RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Paint\Recent File List
[MS Photo Editor]
ID=2067
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor
Default=True
RegKey1=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile1
RegKey2=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile2
RegKey3=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile3
RegKey4=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile4
RegKey5=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType1
RegKey6=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType2
RegKey7=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType3
RegKey8=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType4
[MS Search]
ID=2266
LangSecRef=3025
DetectFile=%CommonAppData%\Microsoft\Search
Default=True
FileKey1=%CommonAppData%\Microsoft\Search|*.log|RECURSE
[Search Charm History]
ID=2411
LangSecRef=3025
Default=True
DetectOS=6.3|6.3
FileKey1=%LocalAppData%\Microsoft\Windows\ConnectedSearch\History|*.lnk
[Nero Burning ROM]
ID=2068
LangSecRef=3021
Detect=HKCU\Software\ahead\Nero - Burning Rom
Default=True
RegKey1=HKCU\Software\ahead\Nero - Burning Rom\Settings|BrowserDir
RegKey2=HKCU\Software\ahead\Nero - Burning Rom\Settings|ImageDir
RegKey3=HKCU\Software\ahead\Nero - Burning Rom\Settings|WorkingDir
RegKey4=HKLM\Software\Ahead\Nero - Burning Rom\Settings|ImageDir
RegKey5=HKLM\Software\Ahead\Nero - Burning Rom\Settings|BootImageDir
RegKey6=HKCU\Software\Ahead\Nero - Burning Rom\Recent File List
RegKey7=HKCU\Software\Ahead\Cover Designer\Recent File List
RegKey8=HKCU\Software\Ahead\Nero Wave Editor\Recent File List
FileKey1=%ProgramFiles%\Ahead\Nero|NeroHistory.log
[Nero Burning ROM 9]
ID=2142
LangSecRef=3021
Detect=HKCU\Software\Nero\Nero 9
Default=True
RegKey1=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|BrowserDir
RegKey2=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|ImageDir
RegKey3=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|WorkingDir
RegKey4=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|BootImageDir
RegKey5=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Recent File List
FileKey1=%appdata%\Nero\Nero 9\Nero Burning ROM|*.log
[Nero Burning ROM 10]
ID=2155
LangSecRef=3021
Detect=HKCU\Software\Nero\Nero 10
Default=True
RegKey1=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|BrowserDir
RegKey2=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|ImageDir
RegKey3=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|WorkingDir
RegKey4=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|BootImageDir
RegKey5=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|NeroCompilation
RegKey6=HKCU\Software\Nero\Nero 10\Nero\Recent File List
FileKey1=%appdata%\Nero\Nero 10\Nero Burning ROM|*.log
[Nero Burning ROM 2014]
ID=2365
LangSecRef=3021
Detect=HKCU\Software\Nero\Nero 15\Nero Burning ROM
Default=True
RegKey1=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BrowserDir
RegKey2=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|ImageDir
RegKey3=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|WorkingDir
RegKey4=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BootImageDir
RegKey5=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|NeroCompilation
RegKey6=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings\NeroIsoListView|IsoPath
RegKey7=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Recent File List
RegKey8=HKCU\Software\Nero\Nero 15\Nero Burning ROM\AutoSave|LastAutoSave
RegKey9=HKCU\Software\Nero\Nero 15\Nero Burning ROM\General|LastSaveTrackPath
FileKey1=%AppData%\Nero\Nero 15\Nero Burning ROM|NeroHistory.log
[Nero 12 Platinum HD Suite]
ID=2331
LangSecRef=3021
Detect=HKLM\Software\Nero\Nero 12
Default=True
RegKey1=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Recent File List
RegKey2=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|BrowserDir
RegKey3=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|ImageDir
RegKey4=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|NeroCompilation
RegKey5=HKCU\Software\Nero\Nero 12\Nero Express\Recent File List
RegKey6=HKCU\Software\Nero\Nero 12\Nero Express\Settings|WorkingDir
RegKey7=HKCU\Software\Nero\Nero 12\Nero Express\Settings|BrowserDir
RegKey8=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastISODir
RegKey9=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastAudioDir
RegKey10=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastVideoDVDKey
RegKey11=HKCU\Software\Nero\Nero 12\Nero WaveEditor\Recent File List
RegKey12=HKCU\Software\Nero\Nero 12\Nero CoverDesigner\Recent File List
FileKey1=%CommonAppData%\Nero\PeakFiles|.tmp
FileKey2=%AppData%\Nero\Nero 12\Nero Recode\AnalysisData|.jpg;.xml
FileKey3=%AppData%\Nero\Nero 12\Nero BackItUp\Cache|.txt
FileKey4=%AppData%\Nero\Nero 12\Nero Burning ROM|.log;Burning.dmp
FileKey5=%AppData%\Nero\Nero 12\Nero3D|Direct3D.log
FileKey6=%AppData%\Nero\Nero 12\Nero Vision|NeroVideoLog.txt
FileKey7=%SystemDrive%\Windows\SysWOW64|-NeroRescueAgent.txt
[Nero 14 Platinum HD Suite]
ID=2375
LangSecRef=3021
Detect=HKLM\Software\Nero\Nero 15
Default=True
RegKey1=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|WorkingDir
RegKey2=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BootImageDir
RegKey3=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings\NeroIsoListView|IsoPath
RegKey4=HKCU\Software\Nero\Nero 15\Nero Burning ROM\AutoSave|LastAutoSave
RegKey5=HKCU\Software\Nero\Nero 15\Nero Burning ROM\General|LastSaveTrackPath
RegKey6=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Recent File List
RegKey7=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BrowserDir
RegKey8=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|ImageDir
RegKey9=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|NeroCompilation
RegKey10=HKCU\Software\Nero\Nero 15\Nero Express\Recent File List
RegKey11=HKCU\Software\Nero\Nero 15\Nero Express\Settings|WorkingDir
RegKey12=HKCU\Software\Nero\Nero 15\Nero Express\Settings|BrowserDir
RegKey13=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastISODir
RegKey14=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastAudioDir
RegKey15=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastVideoDVDKey
RegKey16=HKCU\Software\Nero\Nero 15\Nero WaveEditor\Recent File List
RegKey17=HKCU\Software\Nero\Nero 15\Nero CoverDesigner\Recent File List
FileKey1=%CommonAppData%\Nero\PeakFiles|.tmp
FileKey2=%AppData%\Nero\Nero 15\Nero Recode\AnalysisData|.jpg;.xml
FileKey3=%AppData%\Nero\Nero 15\Nero BackItUp\Cache|.txt
FileKey4=%AppData%\Nero\Nero 15\Nero Burning ROM|.log;Burning.dmp
FileKey5=%SystemDrive%\Windows\SysWOW64|-NeroRescueAgent.txt
FileKey6=%AppData%\Nero\Nero 15\Nero3D|Direct3D.log
FileKey7=%AppData%\Nero\Nero 15\Nero Vision|NeroVideoLog.txt
FileKey8=%AppData%\Nero\Nero 15\Nero Welcome|LogFile.txt
FileKey9=%AppData%\Nero\Nero Blu-ray Player|LogFile.txt
FileKey10=%AppData%\Nero\OnlineServices|LoadData.tmp;LoadData_bak.tmp
FileKey11=%AppData%\Nero\ControlCenter|Sync.log
FileKey12=%CommonAppData%\Nero\Nero 11\ACME|ACME.log
FileKey13=%CommonAppData%\Nero\ACME|ACME.log
[Nero Video 11]
ID=2274
LangSecRef=3023
Detect=HKCU\Software\Nero\Nero 11\Nero Vision
Default=True
FileKey1=%AppData%\Nero\Nero 11\Nero Vision|.log;.txt
FileKey2=%AppData%\Nero\Nero 11\Nero Vision\Log|.
FileKey3=%AppData%\Nero\Nero 11\Nero Vision\NVFACache|.
FileKey4=%AppData%\Nero\Nero 11\Nero3D|*.log
[Nero Vision 10]
ID=2275
LangSecRef=3023
Detect=HKCU\Software\Nero\Nero 10\Nero Vision
Default=True
FileKey1=%AppData%\Nero\Nero 10\Nero Vision\Log|.
FileKey2=%AppData%\Nero\Nero 10\Nero Vision\NVFACache|.
FileKey3=%AppData%\Nero\Nero 10\Nero Vision|.txt
FileKey4=%AppData%\Nero\Nero 10\Nero3D|.log
[Nero BackItUp 2014]
ID=2370
LangSecRef=3021
Detect=HKLM\SOFTWARE\Wow6432Node\Nero\Nero 15\Nero BackItUp
Detect2=HKCU\Software\Nero\Nero 15\Nero BackItUp
Default=True
FileKey1=%AppData%\Nero\Nero 15\Nero BackItUp\Cache|*.txt
[Nero Express 2014]
ID=2371
LangSecRef=3021
Detect=HKLM\SOFTWARE\Wow6432Node\Nero\Nero 15\Nero Express
Detect2=HKCU\Software\Nero\Nero 15\Nero Express
Default=True
RegKey1=HKCU\Software\Nero\Nero 15\Nero Express\Recent File List
RegKey2=HKCU\Software\Nero\Nero 15\Nero Express\Settings|WorkingDir
RegKey3=HKCU\Software\Nero\Nero 15\Nero Express\Settings|BrowserDir
RegKey4=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastISODir
RegKey5=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastAudioDir
RegKey6=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastVideoDVDKey
[WinAce 2.0]
ID=2069
LangSecRef=3024
Detect=HKCU\Software\e-merge\WinAce\2.0
Default=True
RegKey1=HKCU\Software\e-merge\WinAce\2.0\Favorites
RegKey2=HKCU\Software\e-merge\WinAce\2.0\MRU Items
[SpyBot Search and Destroy]
ID=2070
LangSecRef=3024
Detect=HKCU\Software\Safer Networking Limited\SpybotSnD
Default=True
FileKey1=%commonappdata%\Spybot - Search & Destroy\Logs|.
FileKey2=%ProgramFiles%\Spybot - Search & Destroy|advdebug.txt
FileKey3=%commonappdata%\Spybot - Search & Destroy|Statistics.ini
FileKey4=%windir%\All Users\Application Data\Spybot - Search & Destroy\Logs|.
FileKey5=%windir%\All Users\Application Data\Spybot - Search & Destroy|Statistics.ini
FileKey6=%commonappdata%\Spybot - Search & Destroy\Backups|*.log
[Ad-Aware SE Personal]
ID=2071
LangSecRef=3024
DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
Default=True
FileKey1=%ProgramFiles%\Lavasoft\Ad-Aware SE Personal|defs.ref.old
FileKey2=%appdata%\Lavasoft\Ad-Aware\Logs|*.txt
[Ad-Aware SE Professional]
ID=2072
LangSecRef=3024
DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe
Default=True
FileKey1=%ProgramFiles%\Lavasoft\Ad-Aware SE Professional|defs.ref.old
FileKey2=%appdata%\Lavasoft\Ad-Aware\Logs|*.txt
[Ad-Aware SE Plus]
ID=2073
LangSecRef=3024
DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware SE Plus\Ad-Aware.exe
Default=True
FileKey1=%ProgramFiles%\Lavasoft\Ad-Aware SE Plus|defs.ref.old
FileKey2=%appdata%\Lavasoft\Ad-Aware\Logs|*.txt
[Ad-Aware]
ID=2163
LangSecRef=3024
DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware\Ad-Aware.exe
Default=True
Filekey1=%commonappdata%\Lavasoft\Ad-Aware\Logs|*.log
[Webroot SpySweeper]
ID=2074
LangSecRef=3024
Detect=HKCU\Software\Webroot\SpySweeper
FileKey1=%ProgramFiles%\Webroot\Spy Sweeper\Temp|.
FileKey2=%appdata%\Webroot\Spy Sweeper\Logs|*Log.txt
[Driver Cleaner Pro]
ID=2075
LangSecRef=3024
DetectFile=%ProgramFiles%\Driver Cleaner Pro\DCleaner.exe
Default=True
FileKey1=%ProgramFiles%\Driver Cleaner Pro\Log|*.log
[Kazaa (Search History)]
ID=2076
LangSecRef=3022
Detect=HKCU\Software\Kazaa
Default=True
RegKey1=HKCU\Software\Kazaa\Search
[Netscape Navigator 4.x]
ID=2077
LangSecRef=3022
Detect=HKCU\Software\Netscape\Netscape Navigator\Main
Default=True
FileKey1=%ProgramFiles%\Netscape\Users\default|netscape.hst;cookies.txt
FileKey2=%ProgramFiles%\Netscape\Users\default\cache|.
[Microsoft Visual Studio 6.0]
ID=2078
LangSecRef=3021
Detect=HKCU\Software\Microsoft\VisualStudio\6.0
Default=True
RegKey1=HKCU\Software\Microsoft\VisualStudio\6.0\FileMRUList
RegKey2=HKCU\Software\Microsoft\VisualStudio\6.0\MenuMRUList
RegKey3=HKCU\Software\Microsoft\VisualStudio\6.0\ProjectMRUList
RegKey4=HKCU\Software\Microsoft\Visual Basic\6.0\RecentFiles
[Axialis IconWorkshop]
ID=2079
LangSecRef=3023
Detect=HKCU\Software\Axialis\IconWorkshop
Default=True
RegKey1=HKCU\Software\Axialis\IconWorkshop\Recent File List
RegKey2=HKCU\Software\Axialis\IconWorkshop\Axialis Recent Files
RegKey3=HKCU\Software\Axialis\IconWorkshop\CoolBarList
FileKey1=%appdata%\Axialis\Temporary Preview Files|.|RECURSE
FileKey2=%LocalAppData%\Axialis\Temporary Preview Files|.|RECURSE
[eMule (Search History)]
ID=2080
LangSecRef=3022
Detect=HKCU\Software\eMule
Default=True
FileKey1=%ProgramFiles%\eMule\config|AC_SearchStrings.dat
FileKey2=%LocalAppData%\eMule\config|AC_SearchStrings.dat
FileKey3=%CommonAppData%\eMule\config|AC_SearchStrings.dat
[eMule (File Hashes)]
ID=2081
LangSecRef=3022
Detect=HKCU\Software\eMule
Default=False
FileKey1=%ProgramFiles%\eMule\config|known.met;known2.met;known2_64.met
FileKey2=%LocalAppData%\eMule\config|known.met;known2.met;known2_64.met
FileKey3=%CommonAppData%\eMule\config|known.met;known2.met;known2_64.met
[WinISO]
ID=2082
LangSecRef=3024
Detect=HKLM\Software\WinISO
Default=True
RegKey1=HKLM\Software\WinISO\Reopen
[IsoBuster]
ID=2083
LangSecRef=3021
Detect=HKCU\Software\Smart Projects\IsoBuster
Default=True
RegKey1=HKCU\Software\Smart Projects\IsoBuster|ImageFilePath
[Media Player Classic]
ID=2084
LangSecRef=3023
Detect=HKCU\Software\Gabest\Media Player Classic
Detect2=HKCU\Software\MPC-HC\MPC-HC
Detect3=HKCU\Software\MPC-BE\MPC-BE
Default=True
RegKey1=HKCU\Software\Gabest\Media Player Classic\Recent File List
RegKey2=HKCU\Software\Gabest\Media Player Classic\Recent Dub List
RegKey3=HKCU\Software\Gabest\Media Player Classic\Capture|FileName
RegKey4=HKCU\Software\MPC-HC\MPC-HC\Recent File List
RegKey5=HKCU\Software\MPC-HC\MPC-HC\Recent Dub List
RegKey6=HKCU\Software\MPC-HC\MPC-HC\Capture|FileName
RegKey7=HKCU\Software\MPC-BE\Recent File List
RegKey8=HKCU\Software\MPC-BE\Recent Dub List
RegKey9=HKCU\Software\MPC-BE\Capture|FileName
RegKey10=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 0
RegKey11=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 1
RegKey12=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 2
RegKey13=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 3
RegKey14=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 4
RegKey15=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 5
RegKey16=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 6
RegKey17=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 7
RegKey18=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 8
RegKey19=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 9
RegKey20=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 10
RegKey21=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 11
RegKey22=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 12
RegKey23=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 13
RegKey24=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 14
RegKey25=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 15
RegKey26=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 16
RegKey27=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 17
RegKey28=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 18
RegKey29=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 19
RegKey30=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 20
RegKey31=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 0
RegKey32=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 1
RegKey33=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 2
RegKey34=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 3
RegKey35=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 4
RegKey36=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 5
RegKey37=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 6
RegKey38=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 7
RegKey39=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 8
RegKey40=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 9
RegKey41=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 10
RegKey42=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 11
RegKey43=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 12
RegKey44=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 13
RegKey45=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 14
RegKey46=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 15
RegKey47=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 16
RegKey48=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 17
RegKey49=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 18
RegKey50=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 19
RegKey51=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 20
RegKey52=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|LastOpenDir
RegKey53=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|DVDPath
FileKey1=%appdata%\Media Player Classic|default.mpcpl
FileKey2=%appdata%\MPC-HC|default.mpcpl
FileKey3=%appdata%\MPC-BE|default.mpcpl
[BSPlayer]
ID=2085
LangSecRef=3023
Detect=HKCU\Software\BST\bsplayer
Default=True
RegKey1=HKCU\Software\BST\bsplayer|File0
RegKey2=HKCU\Software\BST\bsplayer|File1
RegKey3=HKCU\Software\BST\bsplayer|File2
RegKey4=HKCU\Software\BST\bsplayer|File3
RegKey5=HKCU\Software\BST\bsplayer|File4
RegKey6=HKCU\Software\BST\bsplayer|File5
RegKey7=HKCU\Software\BST\bsplayer|File6
RegKey8=HKCU\Software\BST\bsplayer|File7
RegKey9=HKCU\Software\BST\bsplayer|File8
RegKey10=HKCU\Software\BST\bsplayer|File9
[VLC Media Player]
ID=2164
LangSecRef=3023
Detect=HKLM\Software\VideoLAN\VLC
DetectFile=%ProgramFiles%\videolan\vlc\vlc.exe
Default=True
FileKey1=%appdata%\vlc\art\artistalbum|.|REMOVESELF
FileKey2=%appdata%\vlc\art\arturl|.|REMOVESELF
[MediaMonkey]
ID=2165
LangSecRef=3023
Detect=HKCU\Software\MediaMonkey
DetectFile=%ProgramFiles%\MediaMonkey\MediaMonkey.exe
Default=True
FileKey1=%localappdata%\MediaMonkey|MediaMonkey.m3u
FileKey2=%localappdata%\MediaMonkey\Previews|.|RECURSE
[Winamp]
ID=2166
LangSecRef=3023
Detect=HKCU\Software\Winamp
Default=True
FileKey1=%ProgramFiles%\Winamp\Plugins\ml|recent.dat
FileKey2=%ProgramFiles%\Winamp\Plugins\ml\cache|.|RECURSE
FileKey3=%AppData%\Winamp\Plugins\ml|recent.dat
FileKey4=%AppData%\Winamp\Plugins\ml\Cache|.|RECURSE
[MusicMatch Jukebox]
ID=2231
LangSecRef=3023
Detect=HKCU\Software\Musicmatch\Musicmatch Jukebox
Default=True
FileKey1=%LocalAppData%\Musicmatch\Jukebox|.log;log.txt
FileKey2=%ProgramFiles%\MUSICMATCH\Musicmatch Jukebox\TEMP|.
[Sound Forge 6.0]
ID=2086
LangSecRef=3022
Detect=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics
Default=True
RegKey1=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30110
RegKey2=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30111
RegKey3=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30112
RegKey4=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30113
RegKey5=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30114
RegKey6=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30115
[Audacity]
ID=2171
LangSecRef=3023
Detect=HKCU\Software\Audacity
Default=True
RegKey1=HKCU\Software\Audacity\Audacity\RecentFiles
[Windows Live Messenger]
ID=2087
LangSecRef=3022
Detect=HKCU\Software\Microsoft\MSNMessenger\PerPassportSettings
Default=True
RegKey1=HKCU\Software\Microsoft\MessengerService\ListCache.NET Messenger Service
FileKey1=%AppData%\Microsoft\MSN Messenger|.sqm|RECURSE
FileKey2=%LocalAppData%\Microsoft\Messenger|.uccapilog;.bak
FileKey3=%UserProfile%\Tracing|WindowsLiveMessenger.uccapilog;WindowsLiveMessenger*.uccapilog.bak
[Skype]
ID=2205
LangSecRef=3022
DetectFile=%ProgramFiles%\Skype\Phone\Skype.exe
Default=True
FileKey1=%AppData%\Skype|temp*
[AOL Instant Messenger]
ID=2206
LangSecRef=3022
DetectFile=%ProgramFiles%\AIM\aim.exe
Default=True
FileKey1=%AppData%\acccore\caches\bart|.|RECURSE
FileKey2=%AppData%\acccore\caches\users|.|REMOVESELF
FileKey3=%LocalAppData%\AIM\Settings\aolbartcache|.|RECURSE
[Camfrog Video Chat]
ID=2207
LangSecRef=3022
DetectFile=%ProgramFiles%\Camfrog\Camfrog Video Chat
DetectFile2=%AppData%\Camfrog\history.db
Default=True
FileKey1=%LocalAppData%\CrashRpt|.|REMOVESELF
FileKey2=%AppData%\Camfrog\cache|.|RECURSE
[Miranda Instant Messenger]
ID=2208
LangSecRef=3022
DetectFile1=%ProgramFiles%\Miranda IM\miranda32.exe
DetectFile2=%ProgramFiles%\Miranda IM\miranda64.exe
Default=True
FileKey1=%AppData%\Miranda|*.jpg|REMOVESELF
[Pidgin]
ID=2209
LangSecRef=3022
DetectFile=%ProgramFiles%\Pidgin\pidgin.exe
Default=True
FileKey1=%AppData%.purple\autoaccept|.|REMOVESELF
FileKey2=%AppData%.purple\icons|.
[Yahoo Messenger]
ID=2210
LangSecRef=3022
DetectFile=%ProgramFiles%\Yahoo!\Messenger\YahooMessenger.exe
Default=True
FileKey1=%ProgramFiles%\Yahoo!\Messenger\Cache|.|RECURSE
FileKey2=%ProgramFiles%\Yahoo!\Messenger\IMVCache|.|RECURSE
FileKey3=%ProgramFiles%\Yahoo!\Messenger|ypager.log
FileKey4=%ProgramFiles%\Yahoo!\Messenger\Logs|.
FileKey5=%ProgramFiles%\Yahoo!\Messenger\Games|*.gif|RECURSE
[ooVoo]
ID=2211
LangSecRef=3022
DetectFile=%ProgramFiles%\ooVoo\ooVoo.exe
Default=True
FileKey1=%AppData%\ooVoo Details\cache|.
FileKey2=%AppData%\ooVoo Details\logs|.
[TeamSpeak]
ID=2212
LangSecRef=3022
DetectFile1=%ProgramFiles%\TeamSpeak 3 Client\ts3client_win32.exe
DetectFile2=%ProgramFiles%\TeamSpeak 3 Client\ts3client_win64.exe
Default=True
FileKey1=%AppData%\TS3Client\cache|.|REMOVESELF
FileKey2=%AppData%\TS3Client\Logs|.
[Ventrilo Client]
ID=2213
LangSecRef=3022
DetectFile=%ProgramFiles%\Ventrilo\Ventrilo.exe
Default=True
FileKey1=%AppData%\Ventrilo|ventrilo.log
FileKey2=%AppData%\Ventrilo\temp|.
FileKey3=%AppData%\Ventrilo\recordings|.
[Ventrilo Server]
ID=2214
LangSecRef=3022
DetectFile=%ProgramFiles%\VentSrv\ventrilo_srv.exe
Default=True
FileKey1=%ProgramFiles%\VentSrv|ventrilo_srv.log
[MySpaceIM]
ID=2230
LangSecRef=3022
Detect=HKCU\Software\MySpace\IM
Default=True
FileKey1=%AppData%\MySpace\IM\Install|.
FileKey2=%AppData%\MySpace\IM\Logs|.
[Acronis True Image]
ID=2175
LangSecRef=3024
Detect=HKCU\Software\Acronis\TrueImage
Detect2=HKCU\Software\Acronis\TrueImageHome
Detect3=HKCU\Software\Acronis\ True Image Home
Detect4=HKLM\Software\Acronis\TrueImage
Default=False
FileKey1=%AppData%\Acronis\TrueImage\Logs|.log
FileKey2=%AppData%\Acronis\TrueImageHome\Logs|.log
FileKey3=%CommonAppData%\Acronis\TrueImage\Logs|.log
FileKey4=%CommonAppData%\Acronis\TrueImageHome\Logs|.log
[WinZip]
ID=2088
LangSecRef=3024
Detect=HKCU\Software\Nico Mak Computing\WinZip
Default=True
RegKey1=HKCU\Software\Nico Mak Computing\WinZip\filemenu
RegKey2=HKCU\Software\Nico Mak Computing\WinZip\extract
RegKey3=HKCU\Software\Nico Mak Computing\WinZip\directories|DefDir
RegKey4=HKCU\Software\Nico Mak Computing\WinZip\directories|ExtractTo
RegKey5=HKCU\Software\Nico Mak Computing\WinZip\directories|gzAddDir
RegKey6=HKCU\Software\Nico Mak Computing\WinZip\directories|zDefDir
RegKey7=HKCU\Software\Nico Mak Computing\WinZip\directories|AddDir
RegKey8=HKCU\Software\Nico Mak Computing\WinZip\directories|gzExtractTo
RegKey9=HKCU\Software\Nico Mak Computing\WinZip\rrs\Opened
RegKey10=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|0
RegKey11=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|1
RegKey12=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|2
RegKey13=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|3
RegKey14=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|4
RegKey15=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|5
RegKey16=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|6
RegKey17=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|7
RegKey18=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|8
RegKey19=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|9
RegKey20=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|10
RegKey21=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|11
RegKey22=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|12
RegKey23=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|13
RegKey24=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|14
RegKey25=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|15
RegKey26=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|16
RegKey27=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|17
RegKey28=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|18
RegKey29=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|19
RegKey30=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|20
FileKey1=%AppData%\WinZip\WINZIPSCANNER\Registry Cleaner|log_.log
FileKey2=%AppData%\WinZip\WINZIPSCANNER\System Cleaner|log_.log
[WinRAR]
ID=2089
LangSecRef=3024
Detect=HKCU\Software\WinRAR
Default=True
RegKey1=HKCU\Software\WinRAR\ArcHistory
RegKey2=HKCU\Software\WinRAR\General|LastFolder
RegKey3=HKCU\Software\WinRAR\DialogEditHistory\Arcname
RegKey4=HKCU\Software\WinRAR\DialogEditHistory\ExtrPath
RegKey5=HKCU\Software\WinRAR\DialogEditHistory\FindArcNames
RegKey6=HKCU\Software\WinRAR\DialogEditHistory\FindNames
RegKey7=HKCU\Software\WinRAR\DialogEditHistory\FindText
RegKey8=HKCU\Software\WinRAR\DialogEditHistory\ArcCmtName
[7-Zip]
ID=2090
LangSecRef=3024
Default=True
Detect=HKCU\Software\7-Zip
RegKey1=HKCU\Software\7-Zip\Compression\ArcHistory
RegKey2=HKCU\Software\7-Zip\Extraction\PathHistory
RegKey3=HKCU\Software\7-Zip\FM|CopyHistory
RegKey4=HKCU\Software\7-Zip\FM|FolderHistory
RegKey5=HKCU\Software\7-Zip\FM|PanelPath0
RegKey6=HKCU\Software\7-Zip\Compression|ArcHistory
RegKey7=HKCU\Software\7-Zip\Extraction|PathHistory
[BitZipper]
ID=2270
LangSecRef=3024
Detect=HKCU\Software\Bitberry\BitZipper
Default=True
RegKey1=HKCU\Software\Bitberry\BitZipper\Open
RegKey2=HKCU\Software\Bitberry\BitZipper\Preferences|ExtractLastFolder
RegKey3=HKCU\Software\Bitberry\BitZipper\Preferences|AddLastFolder
RegKey4=HKCU\Software\Bitberry\BitZipper\Preferences|NewLastFolder
RegKey5=HKCU\Software\Bitberry\BitZipper\Preferences|OpenLastFolder
RegKey6=HKCU\Software\Bitberry\BitZipper\Preferences\FolderMRU
RegKey7=HKCU\Software\Bitberry\BitZipper\Preferences\FilterMRU
[PowerArchiver]
ID=2091
LangSecRef=3024
Detect=HKCU\Software\PowerArchiver
Default=True
RegKey1=HKCU\Software\PowerArchiver\Files|Active_File1
RegKey2=HKCU\Software\PowerArchiver\Files|Active_File2
RegKey3=HKCU\Software\PowerArchiver\Files|Active_File3
RegKey4=HKCU\Software\PowerArchiver\Files|Active_File4
RegKey5=HKCU\Software\PowerArchiver\Files|Active_File5
RegKey6=HKCU\Software\PowerArchiver\Files|Extract1
RegKey7=HKCU\Software\PowerArchiver\Files|Extract2
RegKey8=HKCU\Software\PowerArchiver\Files|Extract3
RegKey9=HKCU\Software\PowerArchiver\Files|Extract4
RegKey10=HKCU\Software\PowerArchiver\Files|Extract5
RegKey11=HKCU\Software\PowerArchiver\Files|Last open dir
RegKey12=HKCU\Software\PowerArchiver\Files|Last backup dir
RegKey13=HKCU\Software\PowerArchiver\Files|Last add dir
[PowerArchiver 2013]
ID=2388
LangSecRef=3024
Detect=HKLM\SOFTWARE\PowerArchiverInt
Default=True
RegKey1=HKCU\Software\PowerArchiverInt\Files|Last open dirW
RegKey2=HKCU\Software\PowerArchiverInt\Files|Last backup dirW
RegKey3=HKCU\Software\PowerArchiverInt\Files|Last add dirW
RegKey4=HKCU\Software\PowerArchiverInt\Files|Active_File1W
RegKey5=HKCU\Software\PowerArchiverInt\Files|Active_File2W
RegKey6=HKCU\Software\PowerArchiverInt\Files|Active_File3W
RegKey7=HKCU\Software\PowerArchiverInt\Files|Active_File4W
RegKey8=HKCU\Software\PowerArchiverInt\Files|Active_File5W
RegKey9=HKCU\Software\PowerArchiverInt\Files|Active_File6W
RegKey10=HKCU\Software\PowerArchiverInt\Files|Active_File7W
RegKey11=HKCU\Software\PowerArchiverInt\Files|Active_File8W
RegKey12=HKCU\Software\PowerArchiverInt\Files|Active_File9W
RegKey13=HKCU\Software\PowerArchiverInt\Files|Active_File10W
RegKey14=HKCU\Software\PowerArchiverInt\Files|Active_File11W
RegKey15=HKCU\Software\PowerArchiverInt\Files|Active_File12W
RegKey16=HKCU\Software\PowerArchiverInt\Files|Active_File13W
RegKey17=HKCU\Software\PowerArchiverInt\Files|Active_File14W
RegKey18=HKCU\Software\PowerArchiverInt\Files|Active_File15W
RegKey19=HKCU\Software\PowerArchiverInt\Files|Extract1W
RegKey20=HKCU\Software\PowerArchiverInt\Files|Extract2W
RegKey21=HKCU\Software\PowerArchiverInt\Files|Extract3W
RegKey22=HKCU\Software\PowerArchiverInt\Files|Extract4W
RegKey23=HKCU\Software\PowerArchiverInt\Files|Extract5W
RegKey24=HKCU\Software\PowerArchiverInt\Files|Extract6W
RegKey25=HKCU\Software\PowerArchiverInt\Files|Extract7W
RegKey26=HKCU\Software\PowerArchiverInt\Files|Extract8W
RegKey27=HKCU\Software\PowerArchiverInt\Files|Extract9W
RegKey28=HKCU\Software\PowerArchiverInt\Files|Extract10W
RegKey29=HKCU\Software\PowerArchiverInt\Files|SelDir1W
RegKey30=HKCU\Software\PowerArchiverInt\Files|SelDir2W
RegKey31=HKCU\Software\PowerArchiverInt\Files|SelDir3W
RegKey32=HKCU\Software\PowerArchiverInt\Files|SelDir4W
RegKey33=HKCU\Software\PowerArchiverInt\Files|SelDir5W
RegKey34=HKCU\Software\PowerArchiverInt\Files|BFile1W
RegKey35=HKCU\Software\PowerArchiverInt\Files|BFile2W
RegKey36=HKCU\Software\PowerArchiverInt\Files|BFile3W
RegKey37=HKCU\Software\PowerArchiverInt\Files|BFile4W
RegKey38=HKCU\Software\PowerArchiverInt\Files|BFile5W
[ZipMagic]
ID=2092
LangSecRef=3024
Default=True
Detect=HKCU\Software\Mijenix\ZipMagic
RegKey1=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\Recent
RegKey2=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\Archive Manager\UnZip To
RegKey3=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\UnZip To
RegKey4=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\Zip To
[PicoZip]
ID=2093
LangSecRef=3024
Detect=HKCU\Software\PicoZip
Default=True
RegKey1=HKCU\Software\PicoZip\MRU Items
RegKey2=HKCU\Software\PicoZip\MRUExtract
[PKZip]
ID=2312
LangSecRef=3024
Detect=HKCU\Software\PKWARE\PKZIP70
Default=True
RegKey1=HKCU\Software\PKWARE\PKZIP70\History
[Java]
ID=2094
LangSecRef=3022
Detect=HKLM\SOFTWARE\JavaSoft\Java Plug-in
Detect2=HKLM\SOFTWARE\JavaSoft\Java Runtime Environment
Detect3=HKLM\SOFTWARE\JavaSoft\Java Web Start
Default=False
FileKey1=%AppData%\Sun\Java\Deployment\cache|.|RECURSE
FileKey2=%AppData%\Sun\Java\Deployment\javaws\cache|.|RECURSE
FileKey3=%AppData%\Sun\Java\Deployment\Log|.
FileKey4=%AppData%\Sun\Java\Deployment\tmp|.|RECURSE
FileKey5=%LocalLowAppData%\Sun\Java\Deployment\cache|.|RECURSE
FileKey6=%LocalLowAppData%\Sun\Java\Deployment\Log|.
FileKey7=%WinDir%\System32|jupdate*.log
FileKey8=%WinDir%\SysWOW64|jupdate*.log
FileKey9=%AppData%\java\webview|.
ExcludeKey1=FILE|%AppData%\java\webview.lock
[FreshDownload]
ID=2095
LangSecRef=3022
Detect=HKCU\Software\FreshDevices\FreshDownload
Default=True
RegKey1=HKCU\Software\FreshDevices\FreshDownload\History
[Windows Movie Maker]
ID=2096
LangSecRef=3023
Detect=HKCU\Software\Microsoft\MovieMaker
Default=True
FileKey1=%localappdata%\Microsoft\Movie Maker|MEDIATAB0.DAT
[TextPad]
ID=2097
LangSecRef=3021
Detect=HKCU\Software\Helios\TextPad 4
Default=True
RegKey1=HKCU\Software\Helios\TextPad 4\Recent File List
RegKey2=HKCU\Software\Helios\TextPad 4\Recent Strings
[VirtualDub]
ID=2098
LangSecRef=3023
Default=True
Detect=HKCU\Software\Freeware\VirtualDub
RegKey1=HKCU\Software\Freeware\VirtualDub\MRU List
[RegEdit]
ID=2099
LangSecRef=3025
Default=True
RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit|LastKey
[Game Explorer]
ID=2174
LangSecRef=3025
DetectOS=6.0
DetectFile=%%LocalAppData%\Microsoft Games
DetectFile2=%LocalAppData%\Microsoft\Windows\GameExplorer
DetectFile3=%LocalAppData%\Microsoft\GFWLive
Default=False
FileKey1=%LocalAppData%\Microsoft Games|.xml.bak|RECURSE
FileKey2=%LocalAppData%\Microsoft\Windows\GameExplorer\GameStatistics|.|REMOVESELF
FileKey3=%LocalAppData%\Microsoft\GFWLive|.log|RECURSE
[AceHTML 5]
ID=2100
LangSecRef=3024
Default=True
Detect=HKCU\Software\Visicom Media\AceHTML 5 Freeware
RegKey1=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last URLs
RegKey2=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last Projects
RegKey3=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last Open
RegKey4=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last Files
[Alcohol 120%]
ID=2101
LangSecRef=3024
Detect=HKCU\Software\Alcohol Soft\Alcohol 120%
Default=True
RegKey1=HKCU\Software\Alcohol Soft\Alcohol 120%\MountedMRU
RegKey2=HKCU\Software\Alcohol Soft\Alcohol 120%\Basic\Image Finder|Current Dir
RegKey3=HKCU\Software\Alcohol Soft\Alcohol 120%\Options\Burning Wizard|ImageFile
FileKey1=%ProgramFiles%\Alcohol Soft\Alcohol 120|alcohol.log
[Alcohol 52%]
ID=2373
LangSecRef=3023
Detect=HKCU\Software\Alcohol Soft\Alcohol 52%
Default=True
RegKey1=HKCU\Software\Alcohol Soft\Alcohol 52%\MountedMRU
RegKey2=HKCU\Software\Alcohol Soft\Alcohol 52%\Options\Image Making Wizard|ImageFilePath
RegKey3=HKCU\Software\Alcohol Soft\Alcohol 52%\Options\Image Making Wizard|ImageFileName
RegKey4=HKCU\Software\Alcohol Soft\Alcohol 52%\Basic\Image Finder|Current Dir
[LeechGet]
ID=2102
LangSecRef=3022
Default=True
Detect=HKCU\Software\Cronosoft\LeechGet
RegKey1=HKCU\Software\Cronosoft\LeechGet\History
[GetRight]
ID=2103
LangSecRef=3022
Default=True
Detect=HKCU\Software\Headlight\GetRight
RegKey1=HKCU\Software\Headlight\GetRight\MRU
RegKey2=HKCU\Software\Headlight\GetRight\TypedURLS
RegKey3=HKCU\Software\Headlight\GetRight\Recent File List
FileKey1=%ProgramFiles%\GetRight|GetRight.hst
[Download Accelerator Plus]
ID=2104
LangSecRef=3022
Detect=HKCU\Software\SpeedBit\Download Accelerator
DetectFile=%CommonAppData%\Speedbit\DAP
Default=True
RegKey1=HKLM\SOFTWARE\SpeedBit\Download Accelerator\FileList
RegKey2=HKCU\Software\SpeedBit\Download Accelerator\HistoryCombo
RegKey3=HKCU\Software\SpeedBit\Download Accelerator\ADS\SecondMedia
FileKey1=%ProgramFiles%\DAP\Temp|.
FileKey2=%ProgramFiles%\DAP\Ads|.
FileKey3=%ProgramFiles%\DAP\Log|.
FileKey4=%CommonAppData%\Speedbit\DAP\Log|.
FileKey5=%CommonAppData%\Speedbit\DAP\temp|.tmp
FileKey6=%CommonAppData%\Speedbit\DAP\History|.dat|RECURSE
[Free Download Manager]
ID=2194
LangSecRef=3022
DetectFile=%ProgramFiles%\Free Download Manager\fdm.exe
DetectFile2=%AppData%\Free Download Manager
Default=True
RegKey1=HKCU\Software\FreeDownloadManager.ORG\Free Download Manager\Settings|Find
RegKey2=HKCU\Software\FreeDownloadManager.ORG\Free Download Manager\Settings|History
FileKey1=%AppData%\Free Download Manager|*.bak;dlmgrsi.sav;downloads.his.sav;history.sav;spider.sav
[Internet Download Accelerator]
ID=2195
LangSecRef=3022
Detect=HKCU\Software\2VG\Internet Download Accelerator
Default=True
FileKey1=%AppData%\Internet Download Accelerator|history.xml
FileKey2=%AppData%\Internet Download Accelerator\temp|.hnt;lastnews.;playflv.html
FileKey3=%AppData%\Internet Download Accelerator\temp\Preview|.
FileKey4=%AppData%\Internet Download Accelerator\lists|default.xml
[Internet Download Manager]
ID=2196
LangSecRef=3022
Detect=HKLM\Software\Internet Download Manager
Default=True
FileKey1=%AppData%\IDM|UrlHistory*.txt;foldresHistory.txt
FileKey2=%AppData%\IDM\DwnlData*|Log.log
FileKey3=%CommonAppData%\IDM\Cache|.
FileKey4=%AppData%\IDM\Grabber\Projects|project*.bak
[Orbit Downloader]
ID=2234
LangSecRef=3022
Detect=HKLM\SOFTWARE\Orbit
Default=True
FileKey1=%AppData%\Orbit|fileinfo.dat;filesave.dat
[Morpheus]
ID=2105
LangSecRef=3022
Default=True
Detect=HKCU\Software\Morpheus
RegKey1=HKCU\Software\Morpheus\Morpheus\Recent File List
[VNCViewer 3]
ID=2106
LangSecRef=3024
Default=True
Detect=HKCU\Software\ORL\VNCviewer
RegKey1=HKCU\Software\ORL\VNCviewer\MRU
[VNCViewer 4]
ID=2107
LangSecRef=3024
Default=True
Detect=HKCU\Software\RealVNC\VNCviewer4
RegKey1=HKCU\Software\RealVNC\VNCviewer4\MRU
[DVD Shrink]
ID=2108
LangSecRef=3023
Default=True
Detect=HKCU\Software\DVD Shrink
RegKey1=HKCU\Software\DVD Shrink\DVD Shrink 3.2\Recent Targets
RegKey2=HKCU\Software\DVD Shrink\DVD Shrink 3.2\Recent File List
RegKey3=HKCU\Software\DVD Shrink\DVDSHRINK103\TargetFiles
RegKey4=HKCU\Software\DVD Shrink\DVDSHRINK103\SourceFolders
[Tivo Desktop]
ID=2109
LangSecRef=3023
Default=True
Detect=HKCU\SOFTWARE\TiVo\Desktop
FileKey1=%localappdata%\TiVo Desktop\Cache|.
[CA Anti-Virus]
ID=2110
LangSecRef=3024
Default=True
Detect=HKLM\SOFTWARE\ComputerAssociates\Anti-Virus
FileKey1=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus|.log;log.txt
FileKey2=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ArcTemp|.tmp
FileKey3=%CommonAppData%\CA\Consumer\AV|.tmp;.txt|RECURSE
FileKey4=%CommonAppData%\CA\Consumer\CCube|.tmp;.txt|RECURSE
FileKey5=%CommonAppData%\CA\Consumer\ISS\FeedStore|.txt|RECURSE
FileKey6=%ProgramFiles%\CA\CA Internet Security Suite\CA Anti-Virus\ArcTemp|.
FileKey7=%ProgramFiles%\CA\CA Internet Security Suite\CA Anti-Virus\tmp|.
[ZoneAlarm (Logs)]
ID=2111
LangSecRef=3022
Detect=HKLM\SOFTWARE\Zone Labs\ZoneAlarm
Default=True
FileKey1=%windir%\Internet Logs|ZALog*.*
FileKey2=%ProgramData%\CheckPoint\ZoneAlarm\logs|ZALog.txt
FileKey3=C:\Documents and Settings\All Users\Application Data\CheckPoint\ZoneAlarm\Logs|ZALog.txt
[Google Earth]
ID=2112
LangSecRef=3021
Detect=HKLM\SOFTWARE\Google\Google Earth Plus
Detect2=HKLM\SOFTWARE\Google\Google Earth Pro
Detect3=HKCU\SOFTWARE\Google\Google Earth Plus
Detect4=HKCU\SOFTWARE\Google\Google Earth Pro
Default=True
RegKey1=HKCU\Software\Google\Google Earth Plus\Search
RegKey2=HKCU\Software\Google\Google Earth Pro\Search
FileKey1=%AppData%\Google\GoogleEarth|dbcache.dat
FileKey2=%AppData%\Google\GoogleEarth|dbcache.dat.index
FileKey3=%LocalAppData%\Google\GoogleEarth|dbcache.dat
FileKey4=%localappdata%\Google\GoogleEarth|dbcache.dat.index
FileKey5=%LocalLowAppData%\Google\GoogleEarth|dbcache.dat
FileKey6=%LocalLowAppData%\Google\GoogleEarth|dbcache.dat.index
FileKey7=%LocalLowAppData%\Google\GoogleEarth\webdata|.
FileKey8=%LocalLowAppData%\Google\GoogleEarth\unified_cache_leveldb_|.*
[PerfectDisk 7.0]
ID=2114
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\7.0
Default=True
FileKey1=%commonappdata%\Raxco\PerfectDisk\7.0|PerfectDisk.log
[Daemon Tools]
ID=2187
LangSecRef=3024
Detect=HKCU\Software\DT Soft
DetectFile=%AppData%\DAEMON Tools Lite
DetectFile2=%AppData%\DAEMON Tools Pro
DetectFile3=%AppData%\DAEMON Tools
Default=True
FileKey1=%AppData%\Daemon Tools lite\iconscache|.
FileKey2=%AppData%\DAEMON Tools Lite|imagecatalog.xml
FileKey3=%AppData%\DAEMON Tools|imagecatalog.xml
FileKey4=%AppData%\DAEMON Tools Pro|imagecatalog.xml
[Vuze]
ID=2115
LangSecRef=3022
Detect=HKCU\Software\Azureus
DetectFile=%AppData%\Azureus.lock
Default=True
FileKey1=%AppData%\Azureus\logs|.|RECURSE
FileKey2=%AppData%\Azureus\logs\save|.log
FileKey3=%AppData%\Azureus\tmp|.|RECURSE
FileKey4=%AppData%\Azureus|.bak;.log
FileKey5=%AppData%\Azureus\active|.bak
[BitTorrent]
ID=2173
LangSecRef=3022
Detect=HKCU\Software\BitTorrent\BitTorrent
DetectFile=%ProgramFiles%\BitTorrent\BitTorrent.exe
Default=true
FileKey1=%appdata%\BitTorrent|*.old
[FrostWire]
ID=2215
LangSecRef=3022
DetectFile=%ProgramFiles%\FrostWire\FrostWire.exe
Default=True
FileKey1=%AppData%\FrostWire|.cache;.bak;gnutella.net;checkandupdate.txt
FileKey2=%AppData%\FrostWire\image_cache|.|REMOVESELF
[uTorrent]
ID=2216
LangSecRef=3022
DetectFile=%ProgramFiles%\uTorrent\uTorrent.exe
Detect=HKCU\Software\BitTorrent\uTorrent
Default=True
FileKey1=%ProgramFiles%\uTorrent|.dmp
FileKey2=%AppData%\utorrent|.old
FileKey3=%AppData%\utorrent\dlimagecache|.|RECURSE
FileKey4=%AppData%\uTorrent\ie|.tmp
FileKey5=%LocalLowAppData%\uTorrentBar\CacheIcons|.*
[Shareaza]
ID=2217
LangSecRef=3022
DetectFile=%ProgramFiles%\Shareaza Applications\Shareaza\Shareaza.exe
Default=True
FileKey1=%LocalAppData%\Shareaza\Temp|.
FileKey2=%LocalAppData%\Shareaza|shistory.im
FileKey3=%LocalAppData%\Shareaza\Artwork|.
[iMesh]
ID=2218
LangSecRef=3022
DetectFile=%ProgramFiles%\iMesh Applications\iMesh\iMesh.exe
Default=True
FileKey1=%LocalAppData%\iMesh\Temp|.
FileKey2=%LocalAppData%\iMesh|shistory.im
FileKey3=%LocalAppData%\iMesh\Artwork|.
[BearShare]
ID=2219
LangSecRef=3022
DetectFile=%ProgramFiles%\BearShare Applications\BearShare\BearShare.exe
Default=True
FileKey1=%LocalAppData%\BearShare\Temp|.
FileKey2=%LocalAppData%\BearShare|shistory.im
FileKey3=%LocalAppData%\BearShare\Artwork|.
[DC++]
ID=2220
LangSecRef=3022
DetectFile=%ProgramFiles%\DC++\DCPlusPlus.exe
Default=True
FileKey1=%ProgramFiles%\DC++|files.xml.bz2
FileKey2=%ProgramFiles%\DC++\FileLists|.
FileKey3=%ProgramFiles%\DC++\Logs|.
FileKey4=%LocalAppData%\DC++|files.xml.bz2
FileKey5=%LocalAppData%\DC++\FileLists|.
FileKey6=%LocalAppData%\DC++\Logs|.
[Ares]
ID=2221
LangSecRef=3022
DetectFile=%ProgramFiles%\Ares\Ares.exe
Default=True
Regkey1=HKCU\Software\Ares\Search.History
[CuteFTP Pro 7.0]
ID=2116
LangSecRef=3022
Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 7 Professional
Default=True
FileKey1=%localappdata%\GlobalSCAPE\CuteFTP Pro\7.0\Cache|.|RECURSE
FileKey2=%localappdata%\GlobalSCAPE\CuteFTP Pro\7.0\CacheThumbs|.|RECURSE
[CuteFTP Home 7.0]
ID=2117
LangSecRef=3022
Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 7 Home
Default=True
FileKey1=%localappdata%\GlobalSCAPE\CuteFTP\7.0\Cache|.|RECURSE
FileKey2=%localappdata%\GlobalSCAPE\CuteFTP\7.0\CacheThumbs|.|RECURSE
[CuteFTP Pro 8.0]
ID=2118
LangSecRef=3022
Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 8 Professional
Default=True
FileKey1=%localappdata%\GlobalSCAPE\CuteFTP Pro\8.0\Cache|.|RECURSE
FileKey2=%localappdata%\GlobalSCAPE\CuteFTP Pro\8.0\CacheThumbs|.|RECURSE
[CuteFTP Home 8.0]
ID=2119
LangSecRef=3022
Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 8 Home
Default=True
RegKey1=HKCU\Software\GlobalSCAPE\CuteFTP 8 Home\Recent|LastSiteID
FileKey1=%localappdata%\GlobalSCAPE\CuteFTP Home\8.0\Cache|.|RECURSE
FileKey2=%localappdata%\GlobalSCAPE\CuteFTP Home\8.0\CacheThumbs|.|RECURSE
FileKey3=%AppData%\GlobalSCAPE\CuteFTP Home\8.0|*.log|RECURSE
[CuteFTP 9]
ID=2355
LangSecRef=3022
Detect=HKU.DEFAULT\Software\Globalscape\CuteFTP 9
Detect2=HKLM\SOFTWARE\Wow6432Node\Globalscape\CuteFTP 9
Default=True
RegKey1=HKCU\Software\Globalscape\CuteFTP 9\Recent|LastSiteID
FileKey1=%LocalAppData%\Globalscape\CuteFTP\9.0\Cache|.
FileKey2=%LocalAppData%\Globalscape\CuteFTP\9.0\CacheThumbs|.
FileKey3=%AppData%\Globalscape\CuteFTP\9.0\Logs|-_*.log
FileKey4=%CommonAppData%\Globalscape\CuteFTP 9|TRB_BACKUP.dat;TR_BACKUP.dat
[Core FTP]
ID=2226
LangSecRef=3022
Detect=HKCU\Software\FTPWare
Default=True
FileKey1=%AppData%\CoreFTP|*.dir
FileKey2=%ProgramFiles%\CoreFTP|COREFTP.LOG
[FileZilla]
ID=2227
LangSecRef=3022
Detect=HKLM\SOFTWARE\FileZilla Client
Detect2=HKCU\SOFTWARE\FileZilla Client
Default=True
FileKey1=%AppData%\FileZilla|recentservers.xml;search.xml
[SmartFTP]
ID=2228
LangSecRef=3022
Detect=HKCU\Software\SmartFTP
Default=True
RegKey1=HKCU\Software\SmartFTP\Client 2.0\Settings\History\Items
FileKey1=%AppData%\SmartFTP\Client 2.0\Log|.|RECURSE
FileKey2=%AppData%\SmartFTP\Client 2.0\Storage|.
[ClamWin]
ID=2120
LangSecRef=3024
Detect=HKCU\Software\ClamWin
Default=True
FileKey1=%allusersprofile%.clamwin\log|.
FileKey2=%userprofile%.clamwin\log|.
FileKey3=%windir%\All Users.clamwin\log|.
[Ewido Anti-Malware (Log)]
ID=2121
LangSecRef=3024
Detect=HKLM\Software\ewido
Default=True
FileKey1=%ProgramFiles%\Ewido\Security Suite|logfile.txt
FileKey2=%ProgramFiles%\Ewido Anti-Malware|logfile.txt
[AVG Anti-Spyware]
ID=2122
LangSecRef=3024
Detect=HKLM\SOFTWARE\Grisoft\AVGAntiSpyware
Default=True
FileKey1=%ProgramFiles%\Grisoft\AVG Anti-Spyware 7.5|logfile.txt
[Malwarebytes Anti-Malware]
ID=2162
LangSecRef=3024
Detect=HKLM\Software\Malwarebytes’ Anti-Malware
DetectFile1=%ProgramFiles%\Malwarebytes’ Anti-Malware\mbam.exe
DetectFile2=%ProgramFiles%\Malwarebytes Anti-Malware\mbam.exe
Default=False
FileKey1=%appdata%\Malwarebytes\Malwarebytes’ Anti-Malware\Logs|.txt
FileKey2=%appdata%\Malwarebytes\Malwarebytes’ Anti-Malware\Quarantine|.*
FileKey3=%CommonAppData%\Malwarebytes\Malwarebytes Anti-Malware\Logs|.xml
FileKey4=%CommonAppData%\Malwarebytes\Malwarebytes Anti-Malware\Quarantine|.*
[Spyware Terminator]
ID=2262
LangSecRef=3024
Detect=HKCU\Software\Spyware Terminator
Default=False
FileKey1=%ProgramFiles%\Spyware Terminator\update|.
FileKey2=%AppData%\Spyware Terminator\Reports|.
[SUPERAntiSpyware]
ID=2263
LangSecRef=3024
Detect=HKLM\Software\SUPERAntiSpyware.com\SUPERAntiSpyware
Default=True
FileKey1=%AppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\Logs|.log
FileKey2=%AppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs|.dmp;*.SDB
[A-Squared]
ID=2229
LangSecRef=3024
Detect=HKLM\Software\Emsi Software GmbH\a-squared Free
Default=True
FileKey1=%MyDocuments%\a-squared Free\Reports|*.txt
[Foxit Reader]
ID=2123
LangSecRef=3021
Detect=HKCU\Software\Foxit Software\Foxit Reader
Default=True
RegKey1=HKCU\Software\Foxit Software\Foxit Reader\Recent File List
RegKey2=HKCU\Software\Foxit Software\Foxit Reader\History
[Foxit Reader 6.0]
ID=2332
LangSecRef=3021
Detect=HKCU\Software\Foxit Software\Foxit Reader 6.0
Default=True
RegKey1=HKCU\Software\Foxit Software\Foxit Reader 6.0\Recent File List
RegKey2=HKCU\Software\Foxit Software\Foxit Reader 6.0\RecentFiles
RegKey3=HKCU\Software\Foxit Software\Foxit Reader 6.0\Preferences\History\LastOpen
RegKey4=HKCU\Software\Foxit Software\Foxit Reader 6.0\Preferences\History\LastSession
RegKey5=HKCU\Software\Foxit Software\Foxit Reader 6.0\Preferences\Others|csInitialOpenDir
RegKey6=HKCU\Software\Foxit Software\Foxit Reader 6.0\ImageTool|ImageDefPath
FileKey1=%LocalAppData%\Foxit Reader|_old.DMP
FileKey2=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud\DownloadCache|.cache
FileKey3=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud\FileIDCache|*.ids
FileKey4=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud|foxitcloud.log
[Foxit Reader 7.0]
ID=2408
LangSecRef=3021
Detect=HKCU\Software\Foxit Software\Foxit Reader 7.0
Default=True
RegKey1=HKCU\Software\Foxit Software\Foxit Reader 7.0\Recent File List
RegKey2=HKCU\Software\Foxit Software\Foxit Reader 7.0\RecentFiles
RegKey3=HKCU\Software\Foxit Software\Foxit Reader 7.0\Preferences\History\LastOpen
RegKey4=HKCU\Software\Foxit Software\Foxit Reader 7.0\Preferences\History\LastSession
RegKey5=HKCU\Software\Foxit Software\Foxit Reader 7.0\Preferences\Others|csInitialOpenDir
RegKey6=HKCU\Software\Foxit Software\Foxit Reader 7.0\ImageTool|ImageDefPath
FileKey1=%LocalAppData%\Foxit Reader|_old.DMP
FileKey2=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud\DownloadCache|.cache
FileKey3=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud\FileIDCache|*.fcd
FileKey4=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud|foxitcloud.log
[Paint.NET]
ID=2124
LangSecRef=3021
Detect=HKCU\Software\Paint.NET
Default=True
RegKey1=HKCU\Software\Paint.NET|MRU0
RegKey2=HKCU\Software\Paint.NET|MRU1
RegKey3=HKCU\Software\Paint.NET|MRU2
RegKey4=HKCU\Software\Paint.NET|MRU3
RegKey5=HKCU\Software\Paint.NET|MRU4
RegKey6=HKCU\Software\Paint.NET|MRU5
RegKey7=HKCU\Software\Paint.NET|MRU6
RegKey8=HKCU\Software\Paint.NET|MRU7
RegKey9=HKCU\Software\Paint.NET|MRU0Thumb
RegKey10=HKCU\Software\Paint.NET|MRU1Thumb
RegKey11=HKCU\Software\Paint.NET|MRU2Thumb
RegKey12=HKCU\Software\Paint.NET|MRU3Thumb
RegKey13=HKCU\Software\Paint.NET|MRU4Thumb
RegKey14=HKCU\Software\Paint.NET|MRU5Thumb
RegKey15=HKCU\Software\Paint.NET|MRU6Thumb
RegKey16=HKCU\Software\Paint.NET|MRU7Thumb
RegKey17=HKCU\Software\Paint.NET|File/MostRecent/Path0
RegKey18=HKCU\Software\Paint.NET|File/MostRecent/Path1
RegKey19=HKCU\Software\Paint.NET|File/MostRecent/Path2
RegKey20=HKCU\Software\Paint.NET|File/MostRecent/Path3
RegKey21=HKCU\Software\Paint.NET|File/MostRecent/Path4
RegKey22=HKCU\Software\Paint.NET|File/MostRecent/Path5
RegKey23=HKCU\Software\Paint.NET|File/MostRecent/Path6
RegKey24=HKCU\Software\Paint.NET|File/MostRecent/Path7
RegKey25=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail0
RegKey26=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail1
RegKey27=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail2
RegKey28=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail3
RegKey29=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail4
RegKey30=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail5
RegKey31=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail6
RegKey32=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail7
[OpenOffice 1.14]
ID=2125
LangSecRef=3021
DetectFile=%ProgramFiles%\OpenOffice.org1.1.4\program\soffice.exe
Default=True
FileKey1=%ProgramFiles%\OpenOffice.org1.1.4\user\registry\data\org\openoffice\Office|Common.xcu
[OpenOffice 2.0]
ID=2126
LangSecRef=3021
Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\2.0
Default=True
FileKey1=%appdata%\OpenOffice.org2\user\registry\data\org\openoffice\Office|Common.xcu
[OpenOffice 2.1]
ID=2127
LangSecRef=3021
Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\2.1
Default=True
FileKey1=%appdata%\OpenOffice.org2\user\registry\data\org\openoffice\Office|Common.xcu
[OpenOffice 3]
ID=2143
LangSecRef=3021
Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.0
Detect2=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.1
Detect3=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.2
Detect4=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.0
Detect5=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.1
Detect6=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.2
Detect7=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.3
Detect8=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.3
Default=True
FileKey1=%appdata%\OpenOffice.org\3\user\registry\data\org\openoffice\Office|Histories.xcu
[OpenOffice 4]
ID=2356
LangSecRef=3021
Detect=HKLM\SOFTWARE\Wow6432Node\OpenOffice\OpenOffice\4.0.0
Detect2=HKLM\SOFTWARE\OpenOffice\OpenOffice\4.0.0
Default=True
FileKey1=%AppData%\OpenOffice\4\user\backup|.ubackup
FileKey2=%AppData%\OpenOffice\4\user\temp|document_io_logring.txt
FileKey3=%AppData%\OpenOffice\4\user\uno_packages\cache|log.txt;.cache
FileKey4=%ProgramFiles%\OpenOffice 4\presets\backup|.cbackup
FileKey5=%ProgramFiles%\OpenOffice 4\presets\temp|.tmp
FileKey6=%ProgramFiles%\OpenOffice 4\presets\uno_packages\cache|log.txt
[Grisoft AVG 7.0]
ID=2128
LangSecRef=3024
Detect=HKLM\SOFTWARE\Grisoft\Avg7
Default=True
FileKey1=%commonappdata%\Grisoft\Avg7Data|.log
FileKey2=%commonappdata%\Grisoft\Avg7Data\upd7bin|.*
FileKey3=%commonappdata%\Grisoft\Avg7Data$history|.
FileKey4=%commonappdata%\Grisoft\Avg7Data\avg7upd|.log
FileKey5=%windir%\All Users\Application Data\Grisoft\Avg7Data\upd7bin|.*
FileKey6=%windir%\All Users\Application Data\Grisoft\Avg7Data\avg7upd|$history
FileKey7=%windir%\All Users\Application Data\Grisoft\Avg7Data\avg7upd|.log
FileKey8=%windir%\All Users\Application Data\Grisoft\Avg7Data|.log
FileKey9=%windir%\Application Data\AVG7\Log|*.log
[AVG AntiVirus 8.0]
ID=2141
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\Avg8
Default=True
FileKey1=%CommonAppData%\avg8\Log|.log;.xml
FileKey2=%CommonAppData%\avg8\scanlogs|.log
FileKey3=%CommonAppData%\avg8\update\backup|.*
FileKey4=%CommonAppData%\avg8\Emc\Log|*.log
[AVG AntiVirus 9.0]
ID=2145
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\Avg9
Default=True
FileKey1=%CommonAppData%\avg9\Log|.log;.xml
FileKey2=%CommonAppData%\avg9\scanlogs|.log
FileKey3=%CommonAppData%\avg9\update\backup|.*
FileKey4=%CommonAppData%\avg9\Emc\Log|*.log
[AVG AntiVirus 10.0]
ID=2170
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\Avg10
Default=True
FileKey1=%CommonAppData%\avg10\Log|.log;.xml
FileKey2=%CommonAppData%\avg10\scanlogs|.log
FileKey3=%CommonAppData%\avg10\update\backup|.*
FileKey4=%CommonAppData%\avg10\Emc\Log|*.log
FileKey5=%CommonAppData%\avg10\IDS\config|List.zip.bak
FileKey6=%CommonAppData%\avg10\IDS\profile|globalLoadable.bak
FileKey7=%CommonAppData%\avg10\Temp|.tmp
[AVG AntiVirus 2012]
ID=2268
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\AVG2012
Default=True
FileKey1=%CommonAppData%\AVG2012\Log|.log;history.xml
FileKey2=%CommonAppData%\AVG2012\scanlogs|.log
FileKey3=%CommonAppData%\AVG2012\update\backup|.
FileKey4=%CommonAppData%\AVG2012\Emc\Log|*.log
FileKey5=%CommonAppData%\AVG2012\IDS\config|List.zip.bak
FileKey6=%CommonAppData%\AVG2012\IDS\profile|globalLoadable.bak
FileKey7=%CommonAppData%\AVG2012\Temp|.tmp
[AVG AntiVirus 2013]
ID=2313
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\AVG2013
Default=True
FileKey1=%CommonAppData%\AVG2013\Log|.log;history.xml
FileKey2=%CommonAppData%\AVG2013\scanlogs|.log
FileKey3=%CommonAppData%\AVG2013\update\backup|.
FileKey4=%CommonAppData%\AVG2013\Emc\Log|*.log
FileKey5=%CommonAppData%\AVG2013\IDS\config|List.zip.bak
FileKey6=%CommonAppData%\AVG2013\IDS\profile|globalLoadable.bak
FileKey7=%CommonAppData%\AVG2013\Temp|.tmp
[AntiVir Desktop]
ID=2138
LangSecRef=3024
Detect=HKLM\SOFTWARE\Avira\AntiVir Desktop
Detect2=HKCU\SOFTWARE\Avira\AntiVirus
Default=True
FileKey1=%CommonAppData%\Avira\AntiVir Desktop|.old
FileKey2=%CommonAppData%\Avira\AntiVir Desktop|.tmp
FileKey3=%CommonAppData%\Avira\Antivir Desktop\BACKUP\FAILSAFE|.tmp
FileKey4=%CommonAppData%\Avira\AntiVir Desktop\LOGFILES|.*
FileKey5=%CommonAppData%\Avira\AntiVir Desktop\TEMP|.
FileKey6=%CommonAppData%\Avira\My Avira\Logfiles|.
FileKey7=%CommonAppData%\Avira\My Avira\Temp|.
FileKey8=%ProgramFiles%\Avira\AntiVir Desktop|.old
FileKey9=%ProgramFiles%\Avira\AntiVir Desktop|.tmp
FileKey10=%ProgramFiles%\Avira\AntiVir Desktop\FAILSAFE|.tmp
FileKey11=%CommonAppData%\Avira\Antivirus|.old
FileKey12=%CommonAppData%\Avira\Antivirus|.tmp
FileKey13=%CommonAppData%\Avira\Antivirus\BACKUP\FAILSAFE|.tmp
FileKey14=%CommonAppData%\Avira\Antivirus\LOGFILES|.
FileKey15=%CommonAppData%\Avira\Antivirus\TEMP|.
FileKey16=%CommonAppData%\Avira\Launcher\Logfiles|.
FileKey17=%CommonAppData%\Avira\Launcher\Temp|.
FileKey18=%ProgramFiles%\Avira\Antivirus|.old
FileKey19=%ProgramFiles%\Avira\Antivirus|.tmp
FileKey20=%ProgramFiles%\Avira\Antivirus\FAILSAFE|*.tmp
[Avast! Antivirus 4]
ID=2160
LangSecRef=3024
Detect=HKCU\Software\ALWIL Software\Avast\4.0
Default=True
FileKey1=%ProgramFiles%\Alwil Software\Avast4\DATA\report|avast.xsl;Resident protection.txt;Simple user interface.txt;Simple user interface*.xml
FileKey2=%ProgramFiles%\Alwil Software\Avast4\DATA\log|.
[Avast! Antivirus 5]
ID=2161
LangSecRef=3024
Detect=HKCU\Software\ALWIL Software\Avast\5.0
Default=True
FileKey1=%ProgramData%\Alwil Software\Avast5\report|avast.xsl;avast.xsl;Resident protection.txt;Simple user interface.txt;Simple user interface*.xml
FileKey2=%ProgramData%\Alwil Software\Avast5\log|.
[Avast! Antivirus]
ID=2410
LangSecRef=3024
Detect=HKLM\Software\Avast Software\Avast
Detect2=HKCU\Software\Avast Software\Avast
Default=True
FileKey1=%CommonAppData%\AVAST Software\Avast\log|.txt;.log
FileKey2=%CommonAppData%\AVAST Software\Avast\Spamconf|.bin.tmp
FileKey3=%CommonAppData%\AVAST Software\Avast\report|.txt
FileKey4=%AppData%\AVAST Software\Avast\Cache|.*
ExcludeKey1=FILE|%AppData%\AVAST Software\Avast\Cache\Cookies
ExcludeKey2=FILE|%AppData%\AVAST Software\Avast\Cache\Cookies-journal
[BitDefender]
ID=2306
LangSecRef=3024
Detect=HKLM\Software\Softwin\BitDefender Desktop
Default=False
FileKey1=%ProgramFiles%\BitDefender\BitDefender 2009\Logs|.|RECURSE
FileKey2=%CommonAppData%\BitDefender\Desktop\Profiles\Logs|.xml|RECURSE
FileKey3=%AppData%\BitDefender\Desktop\Profiles\Logs|.xml|RECURSE
[TUGZip]
ID=2131
LangSecRef=3024
Detect=HKCU\Software\TUGZip
Default=True
RegKey1=HKCU\Software\TUGZip|mainRecent
RegKey2=HKCU\Software\TUGZip|extrRecent
RegKey3=HKCU\Software\TUGZip|cmpWorkingDir
[Windows Defender]
ID=2132
LangSecRef=3024
Detect=HKLM\SOFTWARE\Microsoft\Windows Defender
DetectFile=%ProgramFiles%\Microsoft AntiSpyware\GIANTAntiSpywareMain.exe
Default=True
FileKey1=%CommonAppData%\Microsoft\Windows Defender\Scans\History\Results\Quick|.
FileKey2=%CommonAppData%\Microsoft\Windows Defender\Scans\History\Results\Resource|.
FileKey3=%CommonAppData%\Microsoft\Windows Defender\Support|*.log
FileKey4=%ProgramFiles%\Microsoft AntiSpyware|errors.log;tracksEraser.log;cleaner.log
[IZArc]
ID=2133
LangSecRef=3024
Detect=HKCU\Software\IZSoftware\IZArc
Default=True
RegKey1=HKCU\Software\IZSoftware\IZArc|AppCurrentDir
RegKey2=HKCU\Software\IZSoftware\IZArc\Recent
RegKey3=HKCU\Software\IZSoftware\IZArc\History
[Google Toolbar Firefox]
ID=2134
LangSecRef=3022
Default=True
SpecialDetect=DET_MOZILLA_GOOGLE_TOOLBAR
SpecialKey1=N_MOZ_GOOGLE_TOOLBAR
[MS Search Helper Extension]
ID=2191
LangSecRef=3021
DetectFile=%ProgramFiles%\Microsoft\Search Enhancement Pack\Search Helper
Default=True
FileKey1=%LocalAppData%\Microsoft\Search Enhancement Pack\Search Box Extension|searchhs.dat
FileKey2=%LocalLowAppData%\Microsoft\Search Enhancement Pack\Search Box Extension|searchhs.dat
[MS Office Picture Manager]
ID=2135
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office
Default=True
FileKey1=%LocalAppData%\Microsoft\OIS|OIScatalog.cag
FileKey2=%LocalAppData%\Microsoft\OIS\thumbnails|.
[imgBurn]
ID=2136
LangSecRef=3021
Detect=HKCU\Software\ImgBurn
DetectFile=%ProgramFiles%\Imgburn\imgburn.exe
Default=False
RegKey1=HKCU\Software\ImgBurn|ISOBUILD_MRUBootImage
RegKey2=HKCU\Software\ImgBurn|ISOBUILD_MRUDeviceName
RegKey3=HKCU\Software\ImgBurn|ISOBUILD_MRUSourceFile
RegKey4=HKCU\Software\ImgBurn|ISOBUILD_MRUSourceFolder
RegKey5=HKCU\Software\ImgBurn|ISOBUILD_RecentFiles_Destination
RegKey6=HKCU\Software\ImgBurn|ISOBUILD_RecentFiles_Source
RegKey7=HKCU\Software\ImgBurn|ISOBUILD_RecentFolders_Destination
RegKey8=HKCU\Software\ImgBurn|ISOWRITE_MRUDeviceName
RegKey9=HKCU\Software\ImgBurn|ISOWRITE_RecentFiles_Source
RegKey10=HKCU\Software\ImgBurn|FILELOCATIONS_ProjectFiles
RegKey11=HKCU\Software\ImgBurn|FILELOCATIONS_QueueFiles
FileKey1=%AppData%\ImgBurn|ImgBurn.log
FileKey2=%AppData%\ImgBurn\IBG Files|.
FileKey3=%AppData%\imgburn\graph data files|.
FileKey4=%AppData%\imgburn\Log Files|.
[CloneCD]
ID=2177
LangSecRef=3021
Detect=HKLM\Software\SlySoft\CloneCD
Default=False
RegKey1=HKCU\Software\SlySoft\CloneCD\Settings|ImageFileName
[Virtual Clone Drive]
ID=2333
LangSecRef=3021
Default=True
Detect=HKCU\Software\Elaborate Bytes\VirtualCloneDrive
RegKey1=HKCU\Software\Elaborate Bytes\VirtualCloneDrive\LRU
[WinPatrol]
ID=2168
LangSecRef=3024
Detect=HKCU\Software\BillP Studios\WinPatrol
Default=True
FileKey1=%ProgramFiles%\BillP Studios\WinPatrol|WinPatrolLog.*
FileKey2=%SystemDrive%|HijackPatrol.log
[LogMeIn]
ID=2172
LangSecRef=3022
Detect=HKCU\Software\LogMeIn
Detect2=HKLM\SOFTWARE\LogMeIn, Inc.
Default=True
FileKey1=%LocalAppData%\LogMeIn Hamachi|.log
FileKey2=%LocalAppData%\LogMeIn Hamachi|.old
FileKey3=%LocalAppData%\LogMeIn Hamachi|.bak
FileKey4=%ProgramFiles%\Logmein|LMI.log
FileKey5=%ProgramData%\Logmein|LMI*.log
[Ashampoo Burning Studio 10]
ID=2178
LangSecRef=3024
Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 10
Default=False
FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 10|backupmetainfo.xml
FileKey2=%AppData%\Ashampoo\Ashampoo Burning Studio 10\Log|.xml
FileKey3=%AppData%\Ashampoo\Log|.txt
[Ashampoo Burning Studio 11]
ID=2281
LangSecRef=3024
Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 11
Default=True
FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 11|backupmetainfo.xml
FileKey2=%AppData%\Ashampoo\Ashampoo Burning Studio 11\Log|.xml
FileKey3=%AppData%\Ashampoo\Log|.txt
[Ashampoo Burning Studio 14]
ID=2403
LangSecRef=3024
Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14
Default=True
FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 14\log|log.txt
FileKey2=%AppData%\Ashampoo\Ashampoo Burning Studio 14\log|.xml
[ExamDiff]
ID=2179
LangSecRef=3024
Detect=HKCU\Software\PrestoSoft\ExamDiff
Default=False
RegKey1=HKCU\Software\PrestoSoft\ExamDiff\AutoPick
RegKey2=HKCU\Software\PrestoSoft\ExamDiff\Recent Find Strings
RegKey3=HKCU\Software\PrestoSoft\ExamDiff\Recent Left Files
RegKey4=HKCU\Software\PrestoSoft\ExamDiff\Recent Right Files
RegKey5=HKCU\Software\PrestoSoft\ExamDiff\Settings|File 1
RegKey6=HKCU\Software\PrestoSoft\ExamDiff\Settings|File 2
[ExamDiff Pro]
ID=2180
LangSecRef=3024
Detect=HKCU\Software\PrestoSoft\ExamDiff Pro
Default=False
RegKey1=HKCU\Software\PrestoSoft\ExamDiff Pro\AutoPick
RegKey2=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Find Strings Bin
RegKey3=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Left Directories
RegKey4=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Left Files
RegKey5=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Right Directories
RegKey6=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Right Files
RegKey7=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Session Files
RegKey8=HKCU\Software\PrestoSoft\ExamDiff Pro\Settings|File 1
RegKey9=HKCU\Software\PrestoSoft\ExamDiff Pro\Settings|File 2
[Compare It!]
ID=2188
LangSecRef=3024
Detect=HKCU\Software\grigsoft.com\Compare It!
Default=False
RegKey1=HKCU\Software\grigsoft.com\Compare It!\Combos
RegKey2=HKCU\Software\grigsoft.com\Compare It!\dirs
RegKey3=HKCU\Software\grigsoft.com\Compare It!\options|Recent0
RegKey4=HKCU\Software\grigsoft.com\Compare It!\options|Recent1
RegKey5=HKCU\Software\grigsoft.com\Compare It!\options|Recent2
RegKey6=HKCU\Software\grigsoft.com\Compare It!\options|Recent3
RegKey7=HKCU\Software\grigsoft.com\Compare It!\options|Recent4
RegKey8=HKCU\Software\grigsoft.com\Compare It!\options|Recent5
RegKey9=HKCU\Software\grigsoft.com\Compare It!\options|Recent6
RegKey10=HKCU\Software\grigsoft.com\Compare It!\options|Recent7
RegKey11=HKCU\Software\grigsoft.com\Compare It!\options|Recent8
RegKey12=HKCU\Software\grigsoft.com\Compare It!\options|Recent9
RegKey13=HKCU\Software\grigsoft.com\Compare It!\options|Recent10
[WinDiff]
ID=2198
LangSecRef=3024
Detect=HKCU\Software\Microsoft\Windiff
Default=True
RegKey1=HKCU\Software\Microsoft\Windiff|NameLeft
RegKey2=HKCU\Software\Microsoft\Windiff|NameRight
[FeedDemon]
ID=2193
LangSecRef=3022
Detect=HKCU\Software\Bradbury\FeedDemon\1.0
DetectFile=%LocalAppData%\FeedDemon\v1
Default=True
RegKey1=HKCU\Software\Bradbury\FeedDemon\1.0\SavedLists\TypedURLs
RegKey2=HKCU\Software\Bradbury\FeedDemon\1.0\SavedLists\TabbedBrowserUrls
RegKey3=HKCU\Software\Bradbury\FeedDemon\1.0\SearchFeedKeywords
[Last.FM]
ID=2200
LangSecRef=3023
DetectFile=%ProgramFiles%\Last.fm\LastFM.exe
Default=True
FileKey1=%LocalAppData%\Last.fm\client\cache|.
FileKey2=%LocalAppData%\Last.fm\client|*.log
[Pando]
ID=2235
LangSecRef=3021
DetectFile=%LocalAppData%\Pando\Pando Files
Default=True
FileKey1=%LocalAppData%\Pando\Pando Files|*.log
[Sandboxie]
ID=2236
LangSecRef=3024
DetectFile=%ProgramFiles%\Sandboxie\Start.exe
Default=False
FileKey1=%SystemDrive%\Sandbox%UserName%|.|RECURSE
ExcludeKey1=FILE|%SystemDrive%\Sandbox%UserName%\DONT-USE.TXT
ExcludeKey2=FILE|%SystemDrive%\Sandbox%UserName%\desktop.ini
[Snagit 9]
ID=2237
LangSecRef=3024
Detect=HKCU\Software\TechSmith\SnagIt\9
Default=True
RegKey1=HKCU\Software\TechSmith\SnagIt\9\Recent Captures
RegKey2=HKCU\Software\TechSmith\SnagIt\9\SnagItEditor\Recent File List
FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin
[Snagit 10]
ID=2238
LangSecRef=3024
Detect=HKCU\Software\TechSmith\SnagIt\10
Default=True
RegKey1=HKCU\Software\TechSmith\SnagIt\10\Recent Captures
RegKey2=HKCU\Software\TechSmith\SnagIt\10\SnagItEditor\Recent File List
FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin
FileKey2=%LocalAppData%\TechSmith\SnagIt\DataStore\AppIcons|.
FileKey3=%LocalAppData%\TechSmith\SnagIt\DataStore\WebSiteIcons|.
FileKey4=%LocalAppData%\TechSmith\SnagIt\Thumbnails|.
[Snagit 11]
ID=2293
LangSecRef=3024
Detect=HKCU\Software\TechSmith\SnagIt\11
Default=True
RegKey1=HKCU\Software\TechSmith\SnagIt\11\Recent Captures
RegKey2=HKCU\Software\TechSmith\SnagIt\11\SnagItEditor\Recent File List
FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin
FileKey2=%LocalAppData%\TechSmith\SnagIt\DataStore\AppIcons|.
FileKey3=%LocalAppData%\TechSmith\SnagIt\DataStore\WebSiteIcons|.
FileKey4=%LocalAppData%\TechSmith\SnagIt\Thumbnails|.
[Snagit 12]
ID=2391
LangSecRef=3024
Detect=HKCU\Software\TechSmith\SnagIt\12
Default=True
RegKey1=HKCU\Software\TechSmith\SnagIt\12\Recent Captures
RegKey2=HKCU\Software\TechSmith\SnagIt\12\SnagItEditor\Recent File List
FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin
FileKey2=%LocalAppData%\TechSmith\SnagIt\DataStore\AppIcons|.ico
FileKey3=%LocalAppData%\TechSmith\SnagIt\DataStore\WebSiteIcons|.ico
FileKey4=%LocalAppData%\TechSmith\SnagIt\Thumbnails|.
[Ditto]
ID=2239
LangSecRef=3021
DetectFile=%AppData%\Ditto
Default=False
FileKey1=%AppData%\Ditto|ditto.db
[Evernote]
ID=2240
LangSecRef=3021
Detect=HKCU\Software\Evernote
Default=True
FileKey1=%LocalAppData%\Evernote\Evernote\Logs|.
[I2P]
ID=2241
LangSecRef=3022
DetectFile=%AppData%\I2P
Default=True
FileKey1=%AppData%\I2P\logs|.
[McAfee AntiVirus]
ID=2242
LangSecRef=3021
DetectFile=%CommonAppData%\McAfee\MCLOGS
Default=True
FileKey1=%CommonAppData%\McAfee\MCLOGS|*.log|RECURSE
[PerfectDisk 8]
ID=2244
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\8.0
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\8.0|PDBootLog
[PerfectDisk 9]
ID=2245
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\9.0
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\9.0|PDBootLog
[PerfectDisk 10]
ID=2246
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\10.0
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\10.0|PDBootLog
[PerfectDisk 11]
ID=2247
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\11.0
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\11.0|PDBootLog
[PerfectDisk 12]
ID=2248
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\12.0
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\12.0|PDBootLog
[PerfectDisk 12.5]
ID=2277
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\12.5
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\12.5|PDBootLog
[PowerISO]
ID=2249
LangSecRef=3024
Detect=HKCU\Software\PowerISO
Default=True
RegKey1=HKCU\Software\PowerISO|Reopen0
RegKey2=HKCU\Software\PowerISO|Reopen1
RegKey3=HKCU\Software\PowerISO|Reopen2
RegKey4=HKCU\Software\PowerISO|Reopen3
RegKey5=HKCU\Software\PowerISO|ExtractPath0
RegKey6=HKCU\Software\PowerISO|ExtractPath1
RegKey7=HKCU\Software\PowerISO|ExtractPath2
RegKey8=HKCU\Software\PowerISO|ExtractPath3
RegKey9=HKCU\Software\PowerISO|ExtractPath4
RegKey10=HKCU\Software\PowerISO|ExtractPath5
RegKey11=HKCU\Software\PowerISO|ExtractPath6
RegKey12=HKCU\Software\PowerISO|ExtractPath7
[UltraISO]
ID=2250
LangSecRef=3024
Detect=HKCU\Software\EasyBoot Systems\UltraISO\5.0
Default=True
RegKey1=HKCU\Software\EasyBoot Systems\UltraISO\5.0|Reopen
RegKey2=HKCU\Software\EasyBoot Systems\UltraISO\5.0|a
RegKey3=HKCU\Software\EasyBoot Systems\UltraISO\5.0|b
RegKey4=HKCU\Software\EasyBoot Systems\UltraISO\5.0|c
RegKey5=HKCU\Software\EasyBoot Systems\UltraISO\5.0|d
RegKey6=HKCU\Software\EasyBoot Systems\UltraISO\5.0|e
RegKey7=HKCU\Software\EasyBoot Systems\UltraISO\5.0|f
RegKey8=HKCU\Software\EasyBoot Systems\UltraISO\5.0|g
RegKey9=HKCU\Software\EasyBoot Systems\UltraISO\5.0|h
RegKey10=HKCU\Software\EasyBoot Systems\UltraISO\5.0|i
[GIMP 2.4]
ID=2251
LangSecRef=3021
DetectFile=%UserProfile%.gimp-2.4
Default=True
FileKey1=%UserProfile%.thumbnails\normal|.
FileKey2=%UserProfile%.gimp-2.4|documents
[GIMP 2.6]
ID=2252
LangSecRef=3021
Default=True
DetectFile=%UserProfile%.gimp-2.6
FileKey1=%UserProfile%.thumbnails\normal|.
[GIMP 2.8]
ID=2295
LangSecRef=3021
Default=True
DetectFile=%UserProfile%.gimp-2.8
FileKey1=%UserProfile%.thumbnails\normal|.
[Go!Zilla]
ID=2253
LangSecRef=3022
DetectFile=%AppData%\Go!Zilla
Default=True
FileKey1=%AppData%\Go!Zilla|GoZilla.hst
[MagicISO]
ID=2254
LangSecRef=3024
Detect=HKCU\Software\MagicISO
Default=True
RegKey1=HKCU\Software\MagicISO\Reopen
[Zune]
ID=2255
LangSecRef=3023
DetectFile=%LocalAppData%\Microsoft\zune
Default=True
FileKey1=%LocalAppData%\Microsoft\zune\art cache|.|REMOVESELF
FileKey2=%LocalAppData%\Microsoft\Zune|NowPlaying.dat
[BreezeBrowser Pro]
ID=2256
LangSecRef=3021
Detect=HKCU\Software\BreezeSystems\BreezeBrowserPro
Default=True
RegKey1=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU0
RegKey2=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU1
RegKey3=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU2
RegKey4=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU3
RegKey5=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU4
RegKey6=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU5
RegKey7=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU6
RegKey8=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU7
RegKey9=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU8
RegKey10=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU9
[FastStone Image Viewer]
ID=2257
LangSecRef=3023
DetectFile=%AppData%\FastStone\FSIV
Default=True
FileKey1=%AppData%\FastStone\FSIV|HisFolderList.db
[FastStone Capture]
ID=2404
LangSecRef=3024
Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\FSCapture.exe
Default=True
RegKey1=HKCU\Software\FastStone|_GrbId
FileKey1=%LocalAppData%\FastStone\FSC\EditWith|.
FileKey2=%LocalAppData%\FastStone\FSC\Email|.
FileKey3=%LocalAppData%\FastStone\FSC\FTP|.
[AkelPad]
ID=2267
LangSecRef=3021
Detect=HKCU\Software\Akelsoft\AkelPad
Default=True
RegKey1=HKCU\Software\Akelsoft\AkelPad\Recent
RegKey2=HKCU\Software\Akelsoft\AkelPad\Search
[Notepad++]
ID=2258
LangSecRef=3021
DetectFile=%AppData%\notepad++
Default=False
FileKey1=%AppData%\notepad++|session.xml
[NoteXpad]
ID=2259
LangSecRef=3021
Detect=HKLM\Software\NoteXpad
Default=False
RegKey1=HKLM\Software\NoteXpad\Recent
[RegEditX]
ID=2260
LangSecRef=3024
Detect=HKLM\SOFTWARE\DCSoft\RegEditX
Default=True
FileKey1=%ProgramFiles%\DCSoft\RegEditX\x86|RegEditX.sav
FileKey2=%ProgramFiles%\DCSoft\RegEditX\x64|RegEditX.sav
FileKey3=%ProgramFiles%\DCSoft\RegEditX\x86|RegEditX.bak
FileKey4=%ProgramFiles%\DCSoft\RegEditX\x64|RegEditX.bak
[Foxit Reader 5.0]
ID=2265
LangSecRef=3021
Detect=HKCU\Software\Foxit Software\Foxit Reader 5.0
Default=True
RegKey1=HKCU\Software\Foxit Software\Foxit Reader 5.0\Recent File List
RegKey2=HKCU\Software\Foxit Software\Foxit Reader 5.0\RecentFiles
RegKey3=HKCU\Software\Foxit Software\Foxit Reader 5.0\Preferences\History\LastOpen
RegKey4=HKCU\Software\Foxit Software\Foxit Reader 5.0\Preferences\History\LastSession
RegKey5=HKCU\Software\Foxit Software\Foxit Reader 5.0\Preferences\Others|csInitialOpenDir
[ACDSee 14]
ID=2269
LangSecRef=3021
Default=True
DetectFile=%ProgramFiles%\ACD Systems\ACDSee\14.0\ACDSeeInTouch2.exe
Detect=HKLM\SOFTWARE\ACD Systems\ACDSee\140
RegKey1=HKCU\Software\ACD Systems\ACDSee\140|LastOptionPage
RegKey2=HKCU\Software\ACD Systems\ACDSee\140|LastOptionPageName
RegKey3=HKCU\Software\ACD Systems\ACDSee\140|OpenFolder
RegKey4=HKCU\Software\ACD Systems\ACDSee\140|HistSearchFileName
RegKey5=HKCU\Software\ACD Systems\ACDSee\140|HistSearchQuickText
RegKey6=HKCU\Software\ACD Systems\ACDSee\140|SimpleSearchHistory
[Camtasia Studio 7.0]
ID=2279
LangSecRef=3024
Detect=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio
Default=True
RegKey1=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|FileSaveAsMru
RegKey2=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|ExportAsZipMru
RegKey3=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUImportFolder
RegKey4=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUOpenProjectFolder
RegKey5=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUBatchAddFilesProjectsFolder
RegKey6=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUImportExportCaptions
[Camtasia Studio 8]
ID=2413
LangSecRef=3024
Detect=HKCU\Software\TechSmith\Camtasia Studio\8.0
Default=True
RegKey1=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Recorder\8.0\General|lstLastSaveDir
RegKey2=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Studio\8.0|ExportAsZipMru
RegKey3=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Studio\8.0|FileSaveAsMru
RegKey4=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Studio\8.0|MRUImportFolder
RegKey5=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Studio\8.0|MRUOpenProjectFolder
RegKey6=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Studio\8.0|RecentRecordingsMru
[CoffeeCup HTML Editor]
ID=2280
LangSecRef=3024
DetectFile=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor
Default=True
FileKey1=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|mru.ini
FileKey2=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|links.ini
FileKey3=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|lastopen.dat
[Any Video Converter Ultimate]
ID=2282
LangSecRef=3023
Detect=HKCU\Software\AnvSoft\Any Video Converter Ultimate
Default=True
FileKey1=%appdata%\AnvSoft\Any Video Converter Ultimate|history*.db
FileKey2=%appdata%\AnvSoft\Any Video Converter Ultimate|*.log
[Freemake Video Downloader]
ID=2283
LangSecRef=3022
Detect=HKCU\Software\Freemake\FreemakeVideoDownloader
Default=True
FileKey1=%ProgramFiles%\Freemake\Freemake Video Downloader|trace.log
FileKey2=%CommonAppData%\Freemake\FreemakeVideoDownloader|.txt
FileKey3=%Documents%\Freemake\FreemakeVideoDownloader\History\Thumbnails|.*
FileKey4=%Documents%\Freemake\FreemakeVideoDownloader\History|*.xml
[Freemake Audio Converter]
ID=2284
LangSecRef=3023
Detect=HKCU\Software\Freemake\FreemakeAudioConverter
Default=True
FileKey1=%CommonAppData%\Freemake\FreemakeAudioConverter|*.txt
RegKey1=HKCU\Software\Freemake\FreemakeAudioConverter|InitVideoFileDirectory
RegKey2=HKCU\Software\Freemake\FreemakeAudioConverter|InitAudioFileDirectory
RegKey3=HKCU\Software\Freemake\FreemakeAudioConverter|InitImageFileDirectory
[Freemake Video Converter]
ID=2285
LangSecRef=3023
Detect=HKCU\Software\Freemake\FreemakeVideoConverter
Default=True
FileKey1=%CommonAppData%\Freemake\FreemakeVideoConverter|*.txt
RegKey1=HKCU\Software\Freemake\FreemakeVideoConverter|InitVideoFileDirectory
RegKey2=HKCU\Software\Freemake\FreemakeVideoConverter|InitAudioFileDirectory
RegKey3=HKCU\Software\Freemake\FreemakeVideoConverter|InitImageFileDirectory
RegKey4=HKCU\Software\Freemake\FreemakeVideoConverter|CurrentDVDDirectory
RegKey5=HKCU\Software\Freemake\FreemakeVideoConverter|AudioForSlideshow_0
RegKey6=HKCU\Software\Freemake\FreemakeVideoConverter|AudioForSlideshow_1
RegKey7=HKCU\Software\Freemake\FreemakeVideoConverter|AudioForSlideshow_2
RegKey8=HKCU\Software\Freemake\FreemakeVideoConverter|InitAudioDirectoryForSlideshow
RegKey9=HKCU\Software\Freemake\FreemakeVideoConverter|OutputDVDDirectory
RegKey10=HKCU\Software\Freemake\FreemakeVideoConverter|DVDOutputPath_0
RegKey11=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath1
RegKey12=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath2
RegKey13=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath3
RegKey14=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath4
RegKey15=HKCU\Software\Freemake\FreemakeVideoConverter|OutputDirectory
[ConvertXToDVD]
ID=2286
LangSecRef=3023
Detect=HKCU\Software\VSO\ConvertXToDVD
Detect2=HKCU\Software\VSO\ConvertXtoDVD\5
Default=True
FileKey1=%AppData%\Vso|.log
FileKey2=%Documents%\PcSetup|.log|REMOVESELF
FileKey3=%CommonAppData%\VSO|.cache
FileKey4=%CommonAppData%\VSO\ConvertXToDVD\5\log|.log;*.crashlist|REMOVESELF
RegKey1=HKCU\Software\VSO\ConvertXtoDVD\4.0|Dvd_Folder
RegKey2=HKCU\Software\VSO\ConvertXtoDVD\4.0\settings\Gen_MRU_Pathes
RegKey3=HKCU\Software\VSO\ConvertXtoDVD\5\Gen_MRU_Pathes
[VSO Blu-ray Converter Ultimate]
ID=2328
LangSecRef=3023
Detect=HKCU\Software\VSO\Blu-ray Converter Ultimate\2
Default=True
FileKey1=%CommonAppData%\VSO\Blu-ray Converter Ultimate\2\Log|*.log
[VSO DVD Converter Ultimate]
ID=2329
LangSecRef=3023
Detect=HKCU\Software\VSO\DVD Converter Ultimate\2
Default=True
FileKey1=%CommonAppData%\VSO\DVD Converter Ultimate\2\Log|*.log
[AIMP 3]
ID=2287
LangSecRef=3023
DetectFile=%AppData%\AIMP3
Default=True
FileKey1=%AppData%\AIMP3|AIMP3.bak
FileKey2=%AppData%\AIMP3|AIMP3ate.bak
FileKey3=%AppData%\AIMP3|AIMP3lib.bak
FileKey4=%AppData%\AIMP3|AIMP3ac.bak
[Corel VideoStudio Pro X4]
ID=2288
LangSecRef=3023
Detect=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0
Default=True
FileKey1=%AppData%\Corel\Messages|.|RECURSE
FileKey2=%AppData%\Ulead Systems\Corel VideoStudio Pro\14.0\en-US|VS_Pro.log
FileKey3=%Documents%\Corel VideoStudio Pro\14.0\SmartProxy|.upx
RegKey1=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\HerRFL
RegKey2=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\Library Manager|Latest Export Folder
RegKey3=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\VIO\Recent Dir
ExcludeKey1=FILE|%AppData%\Corel\Messages|.policy
[Corel VideoStudio Pro X5]
ID=2296
LangSecRef=3023
Detect=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0
Default=True
FileKey1=%AppData%\Corel\Messages|.|RECURSE
FileKey2=%AppData%\Ulead Systems\Corel VideoStudio Pro\15.0\en-US|VS_Pro.log
FileKey3=%Documents%\Corel VideoStudio Pro\15.0\SmartProxy|.upx
RegKey1=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\HerRFL
RegKey2=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\Library Manager|Latest Export Folder
RegKey3=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\VIO\Recent Dir
ExcludeKey1=FILE|%AppData%\Corel\Messages|.policy
[AlZip]
ID=2289
LangSecRef=3024
Detect=HKCU\Software\ESTsoft\ALZip
Default=True
RegKey1=HKCU\Software\ESTsoft\ALZip\MRUOpen
RegKey2=HKCU\Software\ESTsoft\ALZip\MRUExtract
[CyberLink PhotoDirector 3]
ID=2290
LangSecRef=3023
Detect=HKCU\Software\CyberLink\PhotoDirector3
Default=True
FileKey1=%LocalAppData%\Cyberlink\PhotoDirector\3.0|*.cache
[CyberLink PowerDirector 10]
ID=2291
LangSecRef=3023
Detect=HKCU\Software\CyberLink\PowerDirector\10.0
Default=True
FileKey1=%AppData%\CyberLink\MediaCache|.
FileKey2=%AppData%\CyberLink\PowerDirector\10.0|Recentfiles.ini
FileKey3=%AppData%\CyberLink\PowerDirector\10.0\DSPCache|.|RECURSE
FileKey4=%AppData%\CyberLink\PowerDirector\10.0\photoTmp|.|RECURSE
FileKey5=%AppData%\CyberLink\PowerDirector\10.0\SpltrCache|.|RECURSE
RegKey1=HKCU\Software\CyberLink\Hanuman\Waveform
RegKey2=HKCU\Software\CyberLink\MediaCache5\Data5
RegKey3=HKCU\Software\CyberLink\MediaCache5\Thumbnail5
[CyberLink PowerDirector 12]
ID=2368
LangSecRef=3023
Detect=HKCU\Software\CyberLink\PowerDirector12
Default=True
RegKey1=HKCU\Software\CyberLink\PowerDirector12\MediaObj\MediaCache5\Data5
RegKey2=HKCU\Software\CyberLink\PowerDirector12\MediaObj\MediaCache5\Thumbnail5
RegKey3=HKCU\Software\CyberLink\PowerDirector12|ImportFilePath
FileKey1=%CommonAppData%\CyberLink\PowerDirector\12.0\AnalyzeCacheFiles|CLZoetrope.fdb
FileKey2=%AppData%\CyberLink\PowerDirector\12.0\DSPCache|.|RECURSE
FileKey3=%AppData%\CyberLink\PowerDirector\12.0\photoTmp|.
FileKey4=%AppData%\CyberLink\PowerDirector\12.0\SpltrCache|.
FileKey5=%AppData%\CyberLink\PowerDirector\12.0\WaveForms|PD_0000.txt
FileKey6=%AppData%\CyberLink\PowerDirector\12.0|Recentfiles.ini
FileKey7=%AppData%\CyberLink\MediaCache|.
[CyberLink AudioDirector 4]
ID=2366
LangSecRef=3023
Detect=HKCU\Software\CyberLink\AudioDirector4
Default=True
RegKey1=HKCU\Software\CyberLink\AudioDirector4\MediaObj\MediaCache5\Data5
FileKey1=%CommonAppData%\CyberLink\Downloader|Item0.bak;Item1.bak;Item2.bak;Item3.bak;Item4.bak
FileKey2=%CommonAppData%\install_clap|.|RECURSE
FileKey3=%LocalAppData%\Cyberlink\AudioDirector\4.0\Temp|.txt;.pk
[DivX player]
ID=2292
LangSecRef=3023
DetectFile=%AppData%\DivX\Player
Default=True
FileKey1=%AppData%\DivX\Player|Media Library
[Universal Extractor]
ID=2307
LangSecRef=3024
Detect=HKCU\Software\UniExtract
Default=False
RegKey1=HKCU\Software\UniExtract\Directory
RegKey2=HKCU\Software\UniExtract\File
[4Sync]
ID=2308
LangSecRef=3024
Detect=HKCU\Software\4Sync
Default=True
FileKey1=%AppData%\4Sync|*.log
[Copernic]
ID=2309
LangSecRef=3021
DetectFile1=%AppData%\Copernic\Agent
DetectFile2=%AppData%\Copernic\Agent Pro
Detect=HKCU\Software\Copernic\DesktopSearch2
Default=False
FileKey1=%AppData%\Copernic*\Searches|.|RECURSE
RegKey1=HKCU\Software\Copernic\DesktopSearch2\Config\SearchHistory
[DVDFab]
ID=2310
LangSecRef=3023
Detect1=HKLM\Software\DVDFab
Detect2=HKCU\Software\DVDFab
Default=True
FileKey1=%Documents%\DVDFab|.log|RECURSE
FileKey2=%Documents%\DVDFab Passkey|.log|RECURSE
[InkScape]
ID=2311
LangSecRef=3023
Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\inkscape.exe
Default=True
FileKey1=%AppData%\InkScape|*.log|RECURSE
FileKey2=%UserProfile%|.recently-used.xbel
[Anonymizer]
ID=2315
LangSecRef=3022
DetectFile=%AppData%\Anonymizer\Anonymizer Universal
Default=True
FileKey1=%AppData%\Anonymizer\Anonymizer Universal|*.log
[Gadu-Gadu]
ID=2319
LangSecRef=3022
Detect1=HKCU\Software\GG
Detect2=HKCU\Software\Gadu-Gadu 10
Detect3=HKCU\Software\Nowe Gadu-Gadu
Detect4=HKCU\Software\Gadu-Gadu
Default=True
FileKey1=%AppData%\GG\Profiles**Cache||RECURSE
FileKey2=%AppData%\GG\logs|.log
FileKey3=%AppData%\GG\Crash Reports||RECURSE
FileKey4=%AppData%\Gadu-Gadu 10\Profiles**Cache||RECURSE
FileKey5=%AppData%\Gadu-Gadu 10\logs|.log
FileKey6=%AppData%\Gadu-Gadu 10\Crash Reports||RECURSE
FileKey7=%AppData%\Gadu-Gadu\Profiles**Cache||RECURSE
FileKey8=%AppData%\Gadu-Gadu\logs|.log
FileKey9=%AppData%\Gadu-Gadu\Crash Reports||RECURSE
FileKey10=%AppData%\Nowe Gadu-Gadu\Profiles**Cache||RECURSE
FileKey11=%AppData%\Nowe Gadu-Gadu\logs|.log
FileKey12=%AppData%\Nowe Gadu-Gadu\Crash Reports||RECURSE
FileKey13=%LocalAppData%\GG\Profiles**Cache||RECURSE
FileKey14=%LocalAppData%\GG\logs|.log
FileKey15=%LocalAppData%\GG\Crash Reports||RECURSE
FileKey16=%LocalAppData%\Gadu-Gadu 10\Profiles**Cache||RECURSE
FileKey17=%LocalAppData%\Gadu-Gadu 10\logs|.log
FileKey18=%LocalAppData%\Gadu-Gadu 10\Crash Reports||RECURSE
FileKey19=%LocalAppData%\Gadu-Gadu\Profiles**Cache||RECURSE
FileKey20=%LocalAppData%\Gadu-Gadu\logs|.log
FileKey21=%LocalAppData%\Gadu-Gadu\Crash Reports||RECURSE
FileKey22=%LocalAppData%\Nowe Gadu-Gadu\Profiles**Cache||RECURSE
FileKey23=%LocalAppData%\Nowe Gadu-Gadu\logs|.log
FileKey24=%LocalAppData%\Nowe Gadu-Gadu\Crash Reports||RECURSE
[Foxit Phantom PDF]
ID=2320
LangSecRef=3021
Detect1=HKCU\Software\Foxit Software\Foxit PhantomPDF 5.0
Detect2=HKLM\Software\Foxit Software\Foxit PhantomPDF
Detect3=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0
Default=True
RegKey1=HKCU\Software\Foxit Software\Foxit PhantomPDF 5.0\Recent File List
RegKey2=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0\Recent File List
RegKey3=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0\Foxit PhantomPDF Advanced Editor\Recent File List
[PDFCreator]
ID=2335
LangSecRef=3021
Default=True
Detect1=HKCU\Software\PDFCreator
Detect2=HKCU\Software\PDFCreator.net
Detect3=HKCU\Software\pdfforge\PDFCreator
FileKey1=%ProgramFiles%\PDFCreator|SetupLog.txt
FileKey2=%AppData%\pdfforge\Images2PDF|Print-.log
FileKey3=%AppData%\pdfforge\Images2PDF|PrintPDF-.log
FileKey4=%AppData%\pdfforge\Images2PDF\Tmp|.prnt|REMOVESELF
FileKey5=%LocalAppData%\Temp\PDFCreator\Spool|.*
FileKey6=%LocalAppData%\PDFCreator|PDFCreator.log
RegKey1=HKCU\Software\PDFCreator\Program|LastsaveDirectory
[PDF Architect]
ID=2336
LangSecRef=3021
Default=True
Detect1=HKCU\Software\PDF Architect
Detect2=HKCU\Software\PDF Architect 2
FileKey1=%AppData%\PDF Architect\Thumbnails|.
RegKey1=HKCU\Software\PDF Architect\Recent File List
RegKey2=HKCU\Software\PDF Architect 2\Options\RecentDocuments\List
[MailWasher Pro]
ID=2321
LangSecRef=3022
Detect1=HKCU\Software\FireTrust\MailWasher Pro
Detect2=HKCU\Software\FireTrust\MailWasher
Detect3=HKCU\Software\FireTrust\MailWasherPro
Default=True
FileKey1=%AppData%\Firetrust\MailWasher\logs|.|RECURSE
FileKey2=%AppData%\Firetrust\MailWasher|log_*|RECURSE
FileKey3=%AppData%\Firetrust\MailWasher|regex.txt
FileKey4=%AppData%\Firetrust\MailWasher|updatesAIU.txt
ExcludeKey1=FILE|%AppData%\Firetrust\MailWasher\cache|*mwp_exw.dat;*mwp_conv.dat;*mwp_inw.dat;*mwp_pmap.dat;*MWP.db3
[Samsung Kies]
ID=2322
LangSecRef=3023
Detect=HKCU\Software\Samsung\Kies2.0
Default=True
FileKey1=%AppData%\Samsung\Kies|UpdateLog.txt;UpdateList.txt;.log|RECURSE
FileKey2=%AppData%\Samsung\Kies\UpdateTemp|.|RECURSE
FileKey3=%CommonAppData%\Samsung\Kies|ConnectionManager.log;Kiesairmessage.log
FileKey4=%AppData%\Samsung\Kies\TempFiles|.|RECURSE
FileKey5=%CommonAppData%\Samsung\Device Error Recovery|.log
FileKey6=%LocalAppData%\Temp\KiesTemporary|*.dll
[Connectify Hotspot]
ID=2330
LangSecRef=3022
Detect=HKLM\SOFTWARE\Connectify
Default=True
FileKey1=%ProgramFiles%\Connectify|install.log
FileKey2=%CommonAppData%\Connectify\logs|*.log
ExcludeKey1=%CommonAppData%\Connectify\logs|deamon.log
[Express Scribe]
ID=2340
LangSecRef=3021
Detect=HKCU\Software\NCH Software\Scribe
Default=False
FileKey1=%AppData%\NCH Software\Scribe\Logs|.
[Gom Player]
ID=2341
LangSecRef=3023
Detect=HKCU\Software\GRETECH\GomPlayer
Default=False
FileKey1=%AppData%\GRETECH\GomPlayer\Log|.
FileKey2=%AppData%\GRETECH\GomPlayer\DCache|.
RegKey1=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME000
RegKey2=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME001
RegKey3=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME002
RegKey4=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME003
RegKey5=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME004
RegKey6=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME005
RegKey7=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME006
RegKey8=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME007
RegKey9=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME008
RegKey10=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME009
RegKey11=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME010
RegKey12=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME011
RegKey13=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME012
RegKey14=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME013
RegKey15=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME014
RegKey16=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME015
RegKey17=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME016
RegKey18=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME017
RegKey19=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME018
RegKey20=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME019
RegKey21=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME020
RegKey22=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME021
RegKey23=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME022
RegKey24=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME023
RegKey25=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME024
RegKey26=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME025
RegKey27=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME026
RegKey28=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME027
RegKey29=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME028
RegKey30=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME029
RegKey31=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME030
RegKey32=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME031
RegKey33=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME032
RegKey34=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME033
RegKey35=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME034
RegKey36=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME035
RegKey37=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME036
RegKey38=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME037
RegKey39=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME038
RegKey40=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME039
RegKey41=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME040
RegKey42=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME041
RegKey43=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME042
RegKey44=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME043
RegKey45=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME044
RegKey46=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME045
RegKey47=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME046
RegKey48=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME047
RegKey49=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME048
RegKey50=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME049
RegKey51=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS000
RegKey52=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS001
RegKey53=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS002
RegKey54=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS003
RegKey55=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS004
RegKey56=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS005
RegKey57=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS006
RegKey58=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS007
RegKey59=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS008
RegKey60=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS009
RegKey61=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS010
RegKey62=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS011
RegKey63=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS012
RegKey64=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS013
RegKey65=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS014
RegKey66=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS015
RegKey67=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS016
RegKey68=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS017
RegKey69=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS018
RegKey70=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS019
RegKey71=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS020
RegKey72=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS021
RegKey73=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS022
RegKey74=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS023
RegKey75=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS024
RegKey76=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS025
RegKey77=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS026
RegKey78=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS027
RegKey79=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS028
RegKey80=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS029
RegKey81=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS030
RegKey82=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS031
RegKey83=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS032
RegKey84=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS033
RegKey85=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS034
RegKey86=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS035
RegKey87=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS036
RegKey88=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS037
RegKey89=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS038
RegKey90=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS039
RegKey91=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS040
RegKey92=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS041
RegKey93=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS042
RegKey94=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS043
RegKey95=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS044
RegKey96=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS045
RegKey97=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS046
RegKey98=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS047
RegKey99=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS048
RegKey100=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS049
RegKey101=HKCU\Software\GRETECH\GomPlayer\OPTION|sRecentFolder
RegKey102=HKCU\Software\GRETECH\GomPlayer\OPTION|sRecentFile
RegKey103=HKCU\Software\GRETECH\GomPlayer\OPTION|sRecentURL
[Skype Metro App]
ID=2337
LangSecRef=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.SkypeApp_kzf8qxf38zg5c
DetectFile=%LocalAppData%\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.SkypeApp_\AC\Temp|.*
FileKey2=%LocalAppData%\Packages\Microsoft.SkypeApp_\AC\Microsoft\CryptnetUrlCache\Content|.*
FileKey3=%LocalAppData%\Packages\Microsoft.SkypeApp_\LocalState*\logs|.skypelog
FileKey4=%LocalAppData%\Packages\Microsoft.SkypeApp_\TempState\Sync_TempCache|.|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.SkypeApp_*\Settings|LastModified.txt
RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.SkypeApp_kzf8qxf38zg5c\SearchHistory
RegKey2=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.SkypeApp_kzf8qxf38zg5c\PSR\AddedContactSince
[Twitter Metro]
ID=2338
LangSecRef=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\9E2F88E3.Twitter_wgeqdkkx372wm
DetectFile=%LocalAppData%\Packages\9E2F88E3.Twitter_wgeqdkkx372wm
Default=True
FileKey1=%LocalAppData%\Packages*Twitter_\AC\Microsoft\CLR_v4.0|Twitter-.LOG|RECURSE
FileKey2=%LocalAppData%\Packages*Twitter_\AC\Microsoft\CryptnetUrlCache\Content|.*
FileKey3=%LocalAppData%\Packages*Twitter_\AC\Microsoft\CryptnetUrlCache\MetaData|Twitter-.*
FileKey4=%LocalAppData%\Packages*Twitter_\AC\Temp|.*
FileKey5=%LocalAppData%\Packages*Twitter_\LocalState\CameraPicker|.png|RECURSE
FileKey6=%LocalAppData%\Packages*Twitter_\TempState|.|RECURSE
RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\9E2F88E3.Twitter_wgeqdkkx372wm\SearchHistory
ExcludeKey1=FILE|%LocalAppData%\Packages*Twitter_\AC\Microsoft\CryptnetUrlCache\Content|Twitter-SyncNow.db
[Adobe Reader Touch]
ID=2339
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_ynb6jyjzte8ga
Default=True
FileKey1=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_\AC\INetCache|.*
FileKey2=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_\AC\INetCookies|.*
FileKey3=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_\AC\INetHistory|.*
FileKey4=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_\AC\Microsoft\CLR_v4.0\UsageLogs|AdobeReader.log
FileKey5=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_\AC\Temp|.*
FileKey6=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_\LocalState*\logs|Adobe-.log
FileKey7=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_\TempState|.*|RECURSE
[Bing Search]
ID=2346
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.Bing_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.Bing_\AC\Microsoft\CryptnetUrlCache\Content|.*
FileKey2=%LocalAppData%\Packages\Microsoft.Bing_\AC\Microsoft\CryptnetUrlCache\MetaData|.*
FileKey3=%LocalAppData%\Packages\Microsoft.Bing_\AC\INetCache|.|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.Bing_\AC\INetCookies|.|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.Bing_\AC\INetHistory|.|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.Bing_\AC\AppCache|.
FileKey7=%LocalAppData%\Packages\Microsoft.Bing_\AC\Temp|.*
FileKey8=%LocalAppData%\Packages\Microsoft.Bing_\AC\Microsoft\Internet Explorer\DOMStore|.|RECURSE
FileKey9=%LocalAppData%\Packages\Microsoft.Bing_\AC\PRICache|sync.dac
FileKey10=%LocalAppData%\Packages\Microsoft.Bing\TempState|.|RECURSE
[Bing Finance]
ID=2347
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.BingFinance_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.BingFinance_\AC\Microsoft\CryptnetUrlCache\Content|.*
FileKey2=%LocalAppData%\Packages\Microsoft.BingFinance_\AC\Microsoft\CryptnetUrlCache\MetaData|.*
FileKey3=%LocalAppData%\Packages\Microsoft.BingFinance_\AC\INetCache|.|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.BingFinance_\AC\INetCookies|.|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.BingFinance_\AC\INetHistory|.|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.BingFinance_\AC\Temp|.
FileKey7=%LocalAppData%\Packages\Microsoft.BingFinance_\LocalState\Cache|.*
FileKey8=%LocalAppData%\Packages\Microsoft.BingFinance_\LocalState\navigationHistory|.|RECURSE
FileKey9=%LocalAppData%\Packages\Microsoft.BingFinance_\AC\Microsoft\Internet Explorer\DOMStore|.
FileKey10=%LocalAppData%\Packages\Microsoft.BingFinance_\AC\PriAppCache|.*
RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.bingfinance_8wekyb3d8bbwe\Internet Explorer\DOMStorage\microsoft.bingfinance\SearchHistory
RegKey2=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.bingfinance_8wekyb3d8bbwe\Internet Explorer\DOMStorage\microsoft.bingfinance\RecentVisit
[Bing Maps]
ID=2348
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.BingMaps_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.BingMaps_\AC\Microsoft\CryptnetUrlCache\Content|.*
FileKey2=%LocalAppData%\Packages\Microsoft.BingMaps_\AC\Microsoft\CryptnetUrlCache\MetaData|.*
FileKey3=%LocalAppData%\Packages\Microsoft.BingMaps_\AC\INetCache|.|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.BingMaps_\AC\INetCookies|.|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.BingMaps_\AC\INetHistory|.|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.BingMaps_\LocalState\Cache|.|RECURSE
FileKey7=%LocalAppData%\Packages\Microsoft.BingMaps_\TempState|.state
[Bing News]
ID=2349
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.BingNews_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.BingNews_\AC\Microsoft\CryptnetUrlCache\Content|.*
FileKey2=%LocalAppData%\Packages\Microsoft.BingNews_\AC\Microsoft\CryptnetUrlCache\MetaData|.*
FileKey3=%LocalAppData%\Packages\Microsoft.BingNews_\AC\INetCache|.|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.BingNews_\AC\INetCookies|.|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.BingNews_\AC\INetHistory|.|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.BingNews_\AC\AppCache|.|RECURSE
FileKey7=%LocalAppData%\Packages\Microsoft.BingNews_\AC\Temp|.*
FileKey8=%LocalAppData%\Packages\Microsoft.BingNews_\LocalState\Cache|.|RECURSE
FileKey9=%LocalAppData%\Packages\Microsoft.BingNews_\AC\Microsoft\Internet Explorer\DOMStore|.|RECURSE
FileKey10=%LocalAppData%\Packages\Microsoft.BingNews_\TempState|.sync
FileKey11=%LocalAppData%\Packages\Microsoft.BingNews*\LocalState\appCache|.rfc
FileKey12=%LocalAppData%\Packages\Microsoft.BingNews_\AC\Microsoft\CLR_v4.0\UsageLogs|*.log
[Bing Sports]
ID=2350
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.BingSports_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.BingSports_\AC\Microsoft\CryptnetUrlCache\Content|.*
FileKey2=%LocalAppData%\Packages\Microsoft.BingSports_\AC\Microsoft\CryptnetUrlCache\MetaData|.*
FileKey3=%LocalAppData%\Packages\Microsoft.BingSports_\AC\INetCache|.|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.BingSports_\AC\INetCookies|.|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.BingSports_\AC\INetHistory|.|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.BingSports_\AC\Temp|.
FileKey7=%LocalAppData%\Packages\Microsoft.BingSports_\LocalState\Cache|.|RECURSE
FileKey8=%LocalAppData%\Packages\Microsoft.BingSports_\AC\Microsoft\Internet Explorer\DOMStore|.|RECURSE
ExcludeKey1=FILE|%LocalAppData%\Packages\Microsoft.BingSports_*\LocalState\Cache|_sessionState2.xml
[Bing Travel]
ID=2351
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.BingTravel_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.BingTravel_\AC\Microsoft\CryptnetUrlCache\Content|.*
FileKey2=%LocalAppData%\Packages\Microsoft.BingTravel_\AC\Microsoft\CryptnetUrlCache\MetaData|.*
FileKey3=%LocalAppData%\Packages\Microsoft.BingTravel_\AC\INetCache|.|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.BingTravel_\AC\INetCookies|.|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.BingTravel_\AC\INetHistory|.|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.BingTravel_\AC\Temp|.
FileKey7=%LocalAppData%\Packages\Microsoft.BingTravel_\LocalState\Cache|.|RECURSE
FileKey8=%LocalAppData%\Packages\Microsoft.BingTravel_\LocalState\navigationHistory|.|RECURSE
FileKey9=%LocalAppData%\Packages\Microsoft.BingTravel_\AC\Microsoft\Internet Explorer\DOMStore|.*|RECURSE
[Sony Vegas Pro 12.0]
ID=2352
LangSecRef=3023
Detect=HKLM\SOFTWARE\Sony Creative Software\Vegas Pro\12.0
Default=True
FileKey1=%LocalAppData%\Sony\ErrorReport|.erpt
FileKey2=%LocalAppData%\Sony\Vegas Pro\12.0|.log
FileKey3=%AppData%\Sony|SCS_INSTALLER_1.log
FileKey4=%AppData%\Sony|.dmp
FileKey5=%AppData%\Sony\Vegas Pro\12.0|localstorage_.tmp
FileKey6=%AppData%\Sony\Vegas Pro\12.0|_lastsession.log
[Directory Opus 10]
ID=2353
LangSecRef=3024
Detect=HKLM\SOFTWARE\GPSoftware\Directory Opus
Default=True
FileKey1=%AppData%\GPSoftware\Directory Opus\Logs|.
FileKey2=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|find_name.osd
FileKey3=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|find_path.osd
FileKey4=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|zippy.osd
FileKey5=%AppData%\GPSoftware\Directory Opus\Thumbnail Cache|*_do.cache
RegKey1=HKLM\SOFTWARE\Wow6432Node\GPSoftware\Directory Opus\10.5.2.0|ItemListFilter
[NVIDIA Install Files]
ID=2357
LangSecRef=3024
Detect=HKCU\Software\NVIDIA Corporation
Default=True
FileKey1=%SystemDrive%\NVIDIA|.|REMOVESELF
FileKey2=%SystemDrive%\NV|.|REMOVESELF
[CDBurnerXP]
ID=2358
LangSecRef=3024
Detect=HKLM\SOFTWARE\Wow6432Node\Canneverbe Limited\CDBurnerXP
Detect2=HKCU\Software\Canneverbe Limited\CDBurnerXP
Default=True
FileKey1=%ProgramData%\Canneverbe Limited\CDBurnerXP*...|OperationLog.log
FileKey2=%AppData%\Canneverbe Limited\CDBurnerXP|StarBurn.log
FileKey3=%AppData%\Canneverbe Limited\CDBurnerXP*...|*.tmp
RegKey1=HKCU\Software\Canneverbe Limited\CDBurnerXP\PathsPrev
[UltraEdit]
ID=2359
LangSecRef=3021
Detect=HKCU\Software\IDM Computer Solutions\UltraEdit
Default=True
FileKey1=%AppData%\IDMComp\UltraEdit|projects.lst
FileKey2=%AppData%\IDMComp\Common\FTP Accounts|IdmFTPAccounts_bak.txt
FileKey3=%LocalAppData%\Downloaded Installations\UltraEdit*|UltraEdit_.msi
[Photodex ProShow Producer]
ID=2360
LangSecRef=3021
Detect=HKLM\SOFTWARE\Photodex Media Sources
Detect2=HKLM\SOFTWARE\Wow6432Node\Photodex Media Sources
Default=True
FileKey1=%CommonAppData%\Photodex\ProShow|photodex-presenter-install.log
FileKey2=%CommonAppData%\Photodex\ProShow Producer|photodex-presenter-install.log
FileKey3=%ProgramFiles%\Photodex\ProShow Producer|install.log
[SketchUp Make 2013]
ID=2361
LangSecRef=3021
Detect=HKCU\Software\SketchUp
Default=True
FileKey1=%AppData%\SketchUp\SketchUp 2013\SketchUp|~*.tmp
RegKey1=HKCU\Software\SketchUp\SketchUp 2013\Recent File List
[HandBrake]
ID=2362
LangSecRef=3021
Detect=HKLM\SOFTWARE\Microsoft\Tracing\Handbrake_RASAPI32
Detect2=HKLM\SOFTWARE\Microsoft\Tracing\Handbrake_RASMANCS
Detect3=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Handbrake.exe
Default=True
FileKey1=%AppData%\HandBrake\logs|.txt
FileKey2=%AppData%\HandBrake\HandBrake*|.tmp
[ABBYY FineReader 11.0]
ID=2363
LangSecRef=3021
Detect=HKCU\Software\ABBYY\FineReader\11.00
Default=True
RegKey1=HKCU\Software\ABBYY\FineReader\11.00\Shell\MainFrame\RecentFileList
RegKey2=HKCU\Software\ABBYY\FineReader\11.00\Shell\Dialogs|LoadImagePath
RegKey3=HKCU\Software\ABBYY\FineReader\11.00\Shell\Dialogs|SaveImagePath
FileKey1=%ProgramFiles%\ABBYY FineReader 11|ABBYY FineReader 11.log
FileKey2=%ProgramData%\ABBYY\Bonus.ScreenshotReader\11.00|*.thumbnail
FileKey3=%ProgramData%\ABBYY\FineReader\11.00\Licenses|ProductLicensing.log
[The Bat]
ID=2374
LangSecRef=3022
Detect=HKCU\Software\RIT\The Bat!
Default=True
FileKey1=%AppData%\The Bat!|TheBat_Exceptions.log
FileKey2=%AppData%\The Bat!*|ACCOUNT_LOG.TXT
[Wondershare Video Converter Ultimate]
ID=2376
LangSecRef=3023
Detect=HKLM\SOFTWARE\Wondershare\Wondershare Video Converter Ultimate
Default=True
FileKey1=%commonprogramfiles%\Wondershare\Wondershare Helper Compact\log\Data|.|RECURSE
FileKey2=%ProgramFiles%\Wondershare\Video Converter Ultimate\Log|.
FileKey3=%CommonAppData%\Wondershare Video Converter Ultimate|.dat.bak
FileKey4=%CommonAppData%\Wondershare Video Converter Ultimate\TempSiteIconDir|.*
FileKey5=%CommonAppData%\Wondershare Video Converter Ultimate\TempThumbDir|.
[Sublime Text]
ID=2377
LangSecRef=3024
DetectFile=%AppData%\Sublime Text 3
Default=True
FileKey1=%LocalAppData%\Sublime Text 3\Index|LOG.old
FileKey2=%LocalAppData%\Sublime Text 3\Index|00*.log
[Picasa 3]
ID=2378
LangSecRef=3021
Detect=HKLM\SOFTWARE\Wow6432Node\Google\Picasa
Default=True
FileKey1=%LocalAppData%\Google\Picasa2|network.log;network_expwebsites.log
FileKey2=%LocalAppData%\Google\GBScreensaver|network.log
FileKey3=%LocalAppData%\Google\Google+ Auto Backup|network.log
FileKey4=%LocalAppData%\Google\Picasa2\cache|.|RECURSE
FileKey5=%LocalAppData%\Google\Picasa2\temp|.|RECURSE
FileKey6=%LocalAppData%\Google\Picasa2\tmp|PluginRec.dat;PluginRec.dat_bak
[Kingsoft Office 2013]
ID=2379
LangSecRef=3021
Detect=HKCU\SOFTWARE\Kingsoft\Kingsoft\Office\6.0
Detect2=HKLM\SOFTWARE\Wow6432Node\Kingsoft\Office\6.0
Default=True
RegKey1=HKCU\Software\Kingsoft\Office\6.0\et\RecentFiles
RegKey2=HKCU\Software\Kingsoft\Office\6.0\et\RecentFunction
RegKey3=HKCU\Software\Kingsoft\Office\6.0\wpp\RecentFiles
RegKey4=HKCU\Software\Kingsoft\Office\6.0\wps\RecentFiles
FileKey1=%AppData%\Kingsoft*|.bak2
FileKey2=%CommonAppData%\Kingsoft\Office6\LocalTemp|.*
FileKey3=%LocalAppData%\Kingsoft\et\cache\http|.|RECURSE
FileKey4=%LocalAppData%\Kingsoft\et\cache\https|.|RECURSE
FileKey5=%LocalAppData%\Kingsoft\wpp\cache\http|.|RECURSE
FileKey6=%LocalAppData%\Kingsoft\wps\cache\http|.|RECURSE
FileKey7=%LocalAppData%\Kingsoft\wps\cache\https|.|RECURSE
FileKey8=%AppData%\Kingsoft\office6\backup|.
FileKey9=%AppData%\Kingsoft\office6\log*|.log
FileKey10=%AppData%\Kingsoft\office6\update\log|.log
FileKey11=%AppData%\Kingsoft\office6\update\down|.src
FileKey12=%AppData%\Kingsoft\office6\update\dump|.dmp
FileKey13=%AppData%\Kingsoft\office6\update\log\package|*.pkg
[Facebook Metro]
ID=2380
LangSecRef=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Facebook.Facebook_8xx8rvfyw5nnt
Default=True
FileKey1=%LocalAppData%\Packages*Facebook_\AC\AppCache|.|RECURSE
FileKey2=%LocalAppData%\Packages*Facebook_\AC\INetCache|.|RECURSE
FileKey3=%LocalAppData%\Packages*Facebook_\AC\INetCookies|.|RECURSE
FileKey4=%LocalAppData%\Packages*Facebook_\AC\INetHistory|.|RECURSE
FileKey5=%LocalAppData%\Packages*Facebook_\AC\Microsoft\CLR_v4.0|.log|RECURSE
FileKey6=%LocalAppData%\Packages*Facebook_\AC\Microsoft\CryptnetUrlCache\Content|.*
FileKey7=%LocalAppData%\Packages*Facebook_\AC\Microsoft\CryptnetUrlCache\MetaData|.*
FileKey8=%LocalAppData%\Packages*Facebook_\AC\PRICache|.*
FileKey9=%LocalAppData%\Packages*Facebook_\AC\Temp|.*
[Xilisoft Video Converter]
ID=2381
LangSecRef=3023
Detect=HKLM\Software\Xilisoft\Video Converter Platinum
Detect2=HKLM\Software\Xilisoft\Video Converter Ultimate
Detect3=HKCU\Software\Xilisoft\Video Converter Ultimate
Detect4=HKLM\Software\Xilisoft\Video Converter Standard
Default=True
RegKey1=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_output_dir
RegKey2=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_profile_group
RegKey3=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_profile_url
RegKey4=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|recent_profiles
RegKey5=HKCU\Software\Xilisoft\Video Converter Platinum\Settings\output
RegKey6=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_openfile_dir
RegKey7=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_snapshot_dir
RegKey8=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_openpicture_dir
RegKey9=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_imported_dir
RegKey10=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings\output
RegKey11=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_openfile_dir
RegKey12=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_output_dir
RegKey13=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_profile_group
RegKey14=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_profile_url
RegKey15=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|recent_profiles
RegKey16=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_snapshot_dir
RegKey17=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_openpicture_dir
RegKey18=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_imported_dir
RegKey19=HKCU\Software\Xilisoft\video Converter Ultimate\Settings|LastOpenSoundFileFolder
Filekey1=%CommonAppData%\Xilisoft\Video Converter Platinum\customdata|settings.old
[Xilisoft DVD Ripper]
ID=2382
LangSecRef=3023
Detect=HKLM\Software\Xilisoft\DVD Ripper Ultimate SE
Default=True
RegKey1=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|last_output_dir
RegKey2=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|last_profile_group
RegKey3=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|last_profile_url
RegKey4=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|recent_profiles
RegKey5=Software\Xilisoft\DVD Ripper Ultimate SE\Settings\output
FileKey1=%CommonAppData%\Xilisoft\DVD Ripper Ultimate SE\customdata|settings.old
[dBpoweramp]
ID=2383
LangSecRef=3023
Detect=HKCU\Software\Illustrate\dBpoweramp
Default=True
RegKey1=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder0
RegKey2=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder1
RegKey3=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder2
RegKey4=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder3
RegKey5=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder4
RegKey6=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder5
RegKey7=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder6
RegKey8=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder7
RegKey9=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder8
RegKey10=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder9
RegKey11=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder10
RegKey12=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\AAC (Advanced Audio Compression)|DMCUserFolderStr
RegKey13=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Aiff|DMCUserFolderStr
RegKey14=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Apple Lossless|DMCUserFolderStr
RegKey15=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\FLAC|DMCUserFolderStr
RegKey16=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\mp3 (Lame)|DMCUserFolderStr
RegKey17=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\ogg vorbis|DMCUserFolderStr
RegKey18=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Wave|DMCUserFolderStr
RegKey19=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Windows Media Audio 10|DMCUserFolderStr
RegKey20=HKCU\Software\Illustrate\dBpoweramp\dMCCodec[Multi Encoder]|DMCUserFolderStr
RegKey21=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Test Conversion|DMCUserFolderStr
RegKey22=HKCU\Software\Illustrate\dBpoweramp|LastAccessedFolder
[SyncBackFree]
ID=2384
LangSecRef=3024
Detect=HKCU\Software\2BrightSparks\SyncBackFree
Default=True
FileKey1=%LocalAppData%\2BrightSparks\SyncBackFree\Logs|.
FileKey2=%LocalAppData%\2BrightSparks\SyncBackFree|Debug*.txt
[Wondershare Video Converter Pro]
ID=2385
LangSecRef=3023
Detect=HKLM\SOFTWARE\Wondershare\Wondershare Video Converter Pro
Default=True
FileKey1=%ProgramFiles%\Wondershare Video Converter Pro\TempThumbDir|.|RECURSE
FileKey2=%ProgramFiles%\Wondershare Video Converter Pro\Log|.|RECURSE
FileKey3=%CommonAppData%\Wondershare Video Converter Pro|.dat.bak
FileKey4=%CommonAppData%\Wondershare Video Converter Pro\TempSiteIconDir|.*
FileKey5=%CommonAppData%\Wondershare Video Converter Pro\TempThumbDir|.
FileKey6=%CommonProgramFiles%\Wondershare\Wondershare Helper Compact\Temp|video*.exe
FileKey7=%ProgramFiles%\Wondershare\Video Converter Pro\Output|Thumbnail.dat
[Aimersoft Video Converter Ultimate]
ID=2386
LangSecRef=3023
Detect=HKLM\SOFTWARE\Aimersoft\Aimersoft Video Converter Ultimate
Default=True
FileKey1=%ProgramFiles%\Aimersoft\Video Converter Ultimate\Log|.
FileKey2=%ProgramFiles%\Aimersoft\Video Converter Ultimate\Snapshot|snap*.dat
FileKey3=%ProgramFiles%\Common Files\Aimersoft\Aimersoft Helper Compact\log|.|RECURSE
FileKey4=%CommonAppData%\Aimersoft Video Converter Ultimate\TempSiteIconDir|.
FileKey5=%CommonAppData%\Aimersoft Video Converter Ultimate\TempThumbDir|.
FileKey6=%CommonAppData%\Aimersoft Video Converter Ultimate|.dat.bak
FileKey7=%LocalAppData%\Aimersoft\ASHelper|.exe.tmp
FileKey8=%AppData%\Aimersoft Video Converter Ultimate\Temp|.
[Stardock WindowBlinds]
ID=2389
LangSecRef=3021
Detect=HKCU\Software\Stardock\WindowBlinds
Default=True
RegKey1=HKCU\Software\Stardock\WindowBlinds\WB5.ini\Recent
FileKey1=%Public%\Documents\Stardock\WindowBlinds|StardockB*.dmp
[Nitro Pro 9]
ID=2390
LangSecRef=3024
Detect=HKCU\Software\Nitro\Pro\9.0
Default=True
RegKey1=HKCU\Software\Nitro\Pro\9.0\Recent File List
RegKey2=HKCU\Software\Nitro\Pro\9.0\Settings\Preferences\kPreferences|kCurrentOpenPath
FileKey1=%CommonProgramFiles%\Nitro\Pro\9.0|.backup
FileKey2=%CommonAppData%\Package Cache|.rsm
FileKey3=%AppData%\Downloaded Installations|*_temp.msi|RECURSE
FileKey4=%AppData%\Nitro\Pro\9.0|DocLog.txt
[Nitro PDF Reader 3]
ID=2392
LangSecRef=3024
Detect=HKCU\Software\Nitro\Reader\3.0
Default=True
RegKey1=HKCU\Software\Nitro PDF\Reader\3.0\Recent File List
[VirtualDJ 7]
ID=2393
LangSecRef=3023
Detect=HKCU\Software\VirtualDJ
Default=True
FileKey1=%Documents%\VirtualDJ\TrackListing|tracklist.txt
[Format Factory 3.3.5]
ID=2394
LangSecRef=3023
Detect=HKCU\Software\FreeTime\FormatFactory
Default=True
RegKey1=HKCU\Software\FreeTime\FormatFactory|LastUse
FileKey1=%Documents%\FormatFactory|*.task
[TeamViewer]
ID=2395
LangSecRef=3024
Detect=HKCU\Software\TeamViewer
Default=True
RegKey1=HKCU\Software\TeamViewer\Version9|MRU
RegKey2=HKCU\Software\TeamViewer\Version10|MRU
RegKey3=HKCU\Software\TeamViewer\Version11|MRU
FileKey1=%ProgramFiles%\TeamViewer*|.tmp|RECURSE
FileKey2=%LocalAppData%\VirtualStore\Program Files\TeamViewer*|.tmp|RECURSE
FileKey3=%ProgramFiles%\TeamViewer|Connections_incoming.txt
FileKey4=%AppData%\TeamViewer|Connections.txt
FileKey5=%AppData%\TeamViewer\MRU\RemoteSupport|*.tvc
[MS OneDrive]
ID=2396
LangSecRef=3021
Detect=HKCU\Software\Microsoft\SkyDrive
Default=True
FileKey1=%LocalAppData%\Microsoft\SkyDrive\logs|.log;.etl
[VNCViewer 5]
ID=2397
LangSecRef=3024
Detect=HKCU\Software\RealVNC\vncviewer
Default=True
RegKey1=HKCU\Software\RealVNC\vncviewer\MRU
FileKey1=%LocalAppData%\RealVNC|vncviewer.log
[Tag&Rename 3.8]
ID=2398
LangSecRef=3024
Detect=HKCU\Software\Softpointer\Tag&Rename3.7\Config
Default=True
RegKey1=HKCU\Software\Softpointer\Tag&Rename3.7\Config|CurrentFolder
RegKey2=HKCU\Software\Softpointer\Tag&Rename3.7\Config|HistoryList
[Tango]
ID=2399
LangSecRef=3022
DetectFile=%ProgramFiles%\Tango\Tango.exe
Default=True
FileKey1=%LocalAppData%\tango|call_log.dat
[PhotoScape 3.6.5]
ID=2400
LangSecRef=3023
Detect=HKCU\Software\Mooii\PhotoScape
Default=True
FileKey1=%AppData%\PhotoScape|.lst;.cfg;*.jpg
[BlueStacks]
ID=2401
LangSecRef=3021
Detect=HKLM\Software\Bluestacks
Default=True
FileKey1=%CommonAppData%\BlueStacks\logs|.log;.log.|RECURSE
FileKey2=%LocalAppData%\BlueStacks\logs|.log
FileKey3=%CommonAppData%\BlueStacksSetup\Images|.|REMOVESELF
FileKey4=%CommonAppData%\BlueStacksSetup|runtimedata_.zip;runtimedata_.zip.manifest
FileKey5=%CommonAppData%\BlueStacksSetup|bstInstall.log
ExcludeKey1=FILE|%CommonAppData%\BlueStacks\logs\core.log
ExcludeKey2=FILE|%CommonAppData%\BlueStacks\logs\BlueStacksUpdater.log
ExcludeKey3=FILE|%CommonAppData%\BlueStacks\logs\BlueStacksUsers.log
[ManyCam 4.0.109]
ID=2402
LangSecRef=3023
Detect=HKCU\Software\Visicom Media\ManyCam
Default=True
RegKey1=HKCU\Software\Visicom Media\ManyCam\ui|open_media_folder
RegKey2=HKCU\Software\Visicom Media\ManyCam\ui|open_audio_folder
RegKey3=HKCU\Software\Visicom Media\ManyCam\ui|open_game_folder
RegKey4=HKCU\Software\Visicom Media\ManyCam\ui|open_playlist_folder
FileKey1=%LocalAppData%\ManyCam\game_capture|*.log
[XnView]
ID=2406
LangSecRef=3024
Detect=HKLM\Software\XnView
Default=True
FileKey1=%AppData%\XnView|XnView.db;category.bak
FileKey2=%ProgramFiles%\XnView|category.bak
FileKey3=%LocalAppData%\VirtualStore\Program Files*\XnView|category.bak
FileKey4=%ProgramFiles%\XnView\cache|.db
FileKey5=%LocalAppData%\VirtualStore\Program Files\XnView\cache|*.db
I also found a mention of Chrome here in the ccleaner.ini file:
[Options]
Language=1033
SkipUAC=1
UpdateKey=12/28/2016 08:42:57 PM
WipeFreeSpaceDrives=C:
activity.api.bbc.co.uk|amazon.co.uk|asda.com|bbc.co.uk|bing.com|consent.google.co.uk|forum.piriform.com|google.co.uk|groceries.asda.com|login.live.com|piriform.com|piriform.zendesk.com|preferences.notifications.api.bbc.co.uk|retail.santander.co.uk|santander.co.uk|startpage.com|wwe.com|www.amazon.co.uk|www.bbc.co.uk|www.bing.com|www.google.co.uk|www.littlewoods.com|www.santander.co.uk|www.startpage.com|www.wwe.com|www1.amazon.co.uk
RunICS=0
Monitoring=0
SystemMonitoring=0
BrowserMonitoring=0
BackupPrompt=0
HideWarnings=1
DelayTemp=0
DefaultDetailedView=1
SecureDeleteType=1
SecureDeleteMethod=3
WipeClusterTips=1
WipeAlternateDataStreams=1
FinderInclude1=PATH|C:|.|RECURSE|0|0|24
FinderInclude2=PATH|D:|.|RECURSE|0|0|24
FinderIncludeStates=1|0
AnalyzerTypes=1|1|1|1|0|0|0
SystemAnalyzerDrives=C:
(App)Windows Error Reporting=True
(App)DNS Cache=True
(App)Font Cache=True
(App)Start Menu Shortcuts=True
(App)Desktop Shortcuts=True
(App)Windows Event Logs=True
(App)Old Prefetch data=True
(App)Menu Order Cache=True
(App)Tray Notifications Cache=True
(App)Window Size/Location Cache=True
(App)Environment Path=True
(App)User Assist History=True
(App)Old Windows Installation=True
(App)Custom Folders=True
(App)Mozilla - Cookies=False
(App)Mozilla - Site Preferences=True
(App)Mozilla - Compact Databases=True
(App)Google Chrome - Saved Form Information=True
(App)Google Chrome - Saved Passwords=True
(App)Google Chrome - Compact Databases=True
(App)Game Explorer=True
WINDOW_MAX=1
WINDOW_LEFT=0
WINDOW_TOP=0
WINDOW_WIDTH=800
WINDOW_HEIGHT=600
(App)Microsoft Edge - Cookies=False
(App)Cookies=False