Please excuse the disorganized nature of this post I'll edit back with formatting fixes later.
Problems:
[ultraEdit]
ID=2359
LangSecRef=3021
Detect=HKCU\Software\IDM Computer Solutions\UltraEdit
Default=True
FileKey1=%AppData%\IDMComp\UltraEdit|projects.lst
FileKey2=%AppData%\Roaming\IDMComp\Common\FTP Accounts|IdmFTPAccounts_bak.txt
FileKey3=%LocalAppData%\Downloaded Installations\UltraEdit\*|UltraEdit_.msi
- FileKey2 reads %AppData%\Roaming, should just be %AppData%\
[Adobe Air]
ID=2201
LangSecRef=3024
DetectFile=%LocalAppData%\Adobe\Air
Defualt=True
FileKey1=%LocalAppData%\Adobe\Air\Logs|*.*
- Default is spelled incorrectly
** I'm not sure about these
[Macromedia Shockwave 10]
ID=2189
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Shockwave 10
Detect=HKLM\Software\Macromedia\Shockwave 10
Default=True
RegKey1=HKCU\Software\Macromedia\Shockwave 10\movies
RegKey2=HKCU\Software\AppDataLow\Software\Macromedia\Shockwave 10\movies
RegKey3=HKCU\Software\AppDataLow\Software\Macromedia\Shockwave 10\statistics
FileKey1=%LocalLowAppData%\Macromedia\Shockwave Player|Shockwave Log
[Macromedia Shockwave 11]
ID=2190
LangSecRef=3023
Detect=HKLM\Software\Adobe\Shockwave 11
Detect=HKCU\Software\Adobe\Shockwave 11
Default=True
RegKey1=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\moviestats\movies
RegKey2=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\moviestats\sessions
RegKey3=HKCU\Software\Adobe\Shockwave 11\moviestats\movies
RegKey4=HKCU\Software\Adobe\Shockwave 11\moviestats\sessions
RegKey5=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\movies
RegKey6=HKCU\Software\Adobe\Shockwave 11\movies
RegKey7=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\statistics
FileKey1=%LocalLowAppData%\Adobe\Shockwave Player 11|Shockwave Log
- two Detects, should be Detect1 and Detect2 (AFAIK!!)
Not an actual problem but could be "fixed"
[Photodex ProShow Producer]
ID=2360
LangSecRef=3021
Detect=HKLM\SOFTWARE\Photodex Media Sources
Detect2=HKLM\SOFTWARE\Wow6432Node\Photodex Media Sources
Default=True
FileKey1=%CommonAppData%\Photodex\ProShow|photodex-presenter-install.log
FileKey2=%CommonAppData%\Photodex\ProShow Producer|photodex-presenter-install.log
FileKey3=%programfiles(x86)%\Photodex\ProShow Producer|install.log
FileKey3 can be %ProgramFiles% in lieu of %ProgramFiles(x86)% since CCleaner automatically adjusts for this anyway.
FileKey compressions
[Real Player SP]
ID=2150
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\12.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins1
RegKey10=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins2
RegKey11=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins3
RegKey12=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins4
RegKey13=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins5
RegKey14=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins6
RegKey15=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins7
RegKey16=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins8
RegKey17=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\LastOpenFileDir
RegKey18=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips1
RegKey19=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips2
RegKey20=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips3
RegKey21=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips4
RegKey22=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips5
RegKey23=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips6
RegKey24=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips7
RegKey25=HKCU\Software\RealNetworks\RealConverter\12.0\Preferences\BrowsePath
RegKey26=HKCU\Software\RealNetworks\RealConverter\12.0\Preferences\DestinationPath
RegKey27=HKCU\Software\RealNetworks\RealTrimmer\12.0\Preferences\BrowsePath
FileKey1=%AppData%\Real\RealPlayer|cookies.txt
FileKey2=%AppData%\Real\RealPlayer|ctd.dat
FileKey3=%AppData%\Real\RealPlayer|realplayer.ste
FileKey4=%AppData%\Real\RealPlayer|RealPlayer-log.txt
FileKey5=%AppData%\Real\RealPlayer\History|*.*
FileKey6=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey7=%AppData%\Real\RealPlayer\WatchFolders|*.log|RECURSE
could be shortened to
[Real Player SP]
ID=2150
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\12.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins1
RegKey10=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins2
RegKey11=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins3
RegKey12=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins4
RegKey13=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins5
RegKey14=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins6
RegKey15=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins7
RegKey16=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins8
RegKey17=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\LastOpenFileDir
RegKey18=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips1
RegKey19=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips2
RegKey20=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips3
RegKey21=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips4
RegKey22=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips5
RegKey23=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips6
RegKey24=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips7
RegKey25=HKCU\Software\RealNetworks\RealConverter\12.0\Preferences\BrowsePath
RegKey26=HKCU\Software\RealNetworks\RealConverter\12.0\Preferences\DestinationPath
RegKey27=HKCU\Software\RealNetworks\RealTrimmer\12.0\Preferences\BrowsePath
FileKey1=%AppData%\Real\RealPlayer|cookies.txt;ctd.dat;realplayer.ste;RealPlayer-log.txt
FileKey2=%AppData%\Real\RealPlayer\History|*.*
FileKey3=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey4=%AppData%\Real\RealPlayer\WatchFolders|*.log|RECURSE
---
[Real Player]
ID=2034
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\6.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins1
RegKey10=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins2
RegKey11=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins3
RegKey12=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins4
RegKey13=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins5
RegKey14=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins6
RegKey15=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins7
RegKey16=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins8
RegKey17=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\LastOpenFileDir
RegKey18=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips1
RegKey19=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips2
RegKey20=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips3
RegKey21=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips4
RegKey22=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips5
RegKey23=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips6
RegKey24=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips7
FileKey1=%AppData%\Real\RealOne Player|cookies.txt
FileKey2=%AppData%\Real\RealOne Player|ctd.dat
FileKey3=%AppData%\Real\RealOne Player|realplayer.ste
FileKey4=%AppData%\Real\RealOne Player\History|*.*
FileKey5=%AppData%\Real\RealPlayer|cookies.txt
FileKey6=%AppData%\Real\RealPlayer|ctd.dat
FileKey7=%AppData%\Real\RealPlayer|realplayer.ste
FileKey8=%AppData%\Real\RealPlayer\History|*.*
FileKey9=%ProgramFiles%\Common Files\Real\Update_OB|RealPlayer-log.txt
FileKey10=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey11=%AppData%\Real\RealPlayer\WatchFolders|*.log|RECURSE
could be shortened to
[Real Player]
ID=2034
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\6.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins1
RegKey10=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins2
RegKey11=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins3
RegKey12=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins4
RegKey13=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins5
RegKey14=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins6
RegKey15=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins7
RegKey16=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins8
RegKey17=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\LastOpenFileDir
RegKey18=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips1
RegKey19=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips2
RegKey20=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips3
RegKey21=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips4
RegKey22=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips5
RegKey23=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips6
RegKey24=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips7
FileKey1=%AppData%\Real\RealOne Player|cookies.txt;ctd.dat;realplayer.ste
FileKey2=%AppData%\Real\RealOne Player\History|*.*
FileKey3=%AppData%\Real\RealPlayer|cookies.txt;ctd.dat;realplayer.ste
FileKey4=%AppData%\Real\RealPlayer\History|*.*
FileKey5=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey6=%AppData%\Real\RealPlayer\WatchFolders|*.log|RECURSE
FileKey7=%ProgramFiles%\Common Files\Real\Update_OB|RealPlayer-log.txt
---
[Real Player 15]
ID=2276
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\15.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\LastOpenFileDir
RegKey10=HKCU\Software\RealNetworks\RealConverter\15.0\Preferences\BrowsePath
RegKey11=HKCU\Software\RealNetworks\RealConverter\15.0\Preferences\DestinationPath
RegKey12=HKCU\Software\RealNetworks\RealTrimmer\15.0\Preferences\BrowsePath
FileKey1=%AppData%\Real\RealPlayer|realplayer.ste
FileKey2=%AppData%\Real\RealPlayer|RealPlayer-log.txt
FileKey3=%AppData%\Real\RealPlayer\History|*.*
FileKey4=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey5=%AppData%\Real\RealPlayer\WatchFolders|*.log
could be shortened to
[Real Player 15]
ID=2276
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\15.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\LastOpenFileDir
RegKey10=HKCU\Software\RealNetworks\RealConverter\15.0\Preferences\BrowsePath
RegKey11=HKCU\Software\RealNetworks\RealConverter\15.0\Preferences\DestinationPath
RegKey12=HKCU\Software\RealNetworks\RealTrimmer\15.0\Preferences\BrowsePath
FileKey1=%AppData%\Real\RealPlayer|realplayer.ste;RealPlayer-log.txt
FileKey2=%AppData%\Real\RealPlayer\History|*.*
FileKey3=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey4=%AppData%\Real\RealPlayer\WatchFolders|*.log
---
[Real Player 16]
ID=2325
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\16.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\LastOpenFileDir
RegKey10=HKCU\Software\RealNetworks\RealConverter\16.0\Preferences\BrowsePath
RegKey11=HKCU\Software\RealNetworks\RealConverter\16.0\Preferences\DestinationPath
RegKey12=HKCU\Software\RealNetworks\RealTrimmer\16.0\Preferences\BrowsePath
FileKey1=%AppData%\Real\RealPlayer|realplayer.ste
FileKey2=%AppData%\Real\RealPlayer|RealPlayer-log.txt
FileKey3=%AppData%\Real\RealPlayer\History|*.*
FileKey4=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey5=%AppData%\Real\RealPlayer\WatchFolders|*.log
could be shortened to
[Real Player 16]
ID=2325
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\16.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\LastOpenFileDir
RegKey10=HKCU\Software\RealNetworks\RealConverter\16.0\Preferences\BrowsePath
RegKey11=HKCU\Software\RealNetworks\RealConverter\16.0\Preferences\DestinationPath
RegKey12=HKCU\Software\RealNetworks\RealTrimmer\16.0\Preferences\BrowsePath
FileKey1=%AppData%\Real\RealPlayer|realplayer.ste;RealPlayer-log.txt
FileKey2=%AppData%\Real\RealPlayer\History|*.*
FileKey3=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey4=%AppData%\Real\RealPlayer\WatchFolders|*.log
---
[steam]
ID=2203
LangSecRef=3023
DetectFile=%ProgramFiles%\Steam\Steam.exe
Default=True
FileKey1=%ProgramFiles%\Steam|*.mdmp
FileKey2=%ProgramFiles%\Steam\Dumps|*.*|RECURSE
FileKey3=%ProgramFiles%\Steam|*.log
FileKey4=%ProgramFiles%\Steam\Logs|*.*|RECURSE
could be shortened to
[steam]
ID=2203
LangSecRef=3023
DetectFile=%ProgramFiles%\Steam\Steam.exe
Default=True
FileKey1=%ProgramFiles%\Steam|*.mdmp;*.log
FileKey2=%ProgramFiles%\Steam\Dumps|*.*|RECURSE
FileKey3=%ProgramFiles%\Steam\Logs|*.*|RECURSE
---
[Xfire]
ID=2204
LangSecRef=3023
DetectFile=%ProgramFiles%\Xfire\Xfire.exe
Default=True
FileKey1=%CommonAppData%\Xfire|*-*-*-*-*-*-*.log
FileKey2=%CommonAppData%\Xfire|xfire_exe_log.txt
FileKey3=%CommonAppData%\Xfire|xfire_toucan_log.txt
FileKey4=%ProgramFiles%\Xfire|*-*-*-*-*-*-*.log
FileKey5=%ProgramFiles%\Xfire|xfire_exe_log.txt
FileKey6=%ProgramFiles%\Xfire|xfire_toucan_log.txt
could be shortened to
[Xfire]
ID=2204
LangSecRef=3023
DetectFile=%ProgramFiles%\Xfire\Xfire.exe
Default=True
FileKey1=%CommonAppData%\Xfire|*-*-*-*-*-*-*.log;xfire_exe_log.txt;xfire_toucan_log.txt
FileKey2=%ProgramFiles%\Xfire|*-*-*-*-*-*-*.log;xfire_exe_log.txt;xfire_toucan_log.txt
---
[Adobe Fireworks 6.0]
ID=2334
LangSecRef=3021
Default=True
Detect=HKCU\Software\Adobe\Fireworks\12.0
FileKey1=%AppData%\Adobe\Fireworks CS6|Project_Log.htm
FileKey2=%AppData%\Adobe\Fireworks CS6|Web_Log.htm
RegKey1=HKCU\Software\Adobe\Fireworks\12.0\ini\Recent File List
could be shortened to
[Adobe Fireworks 6.0]
ID=2334
LangSecRef=3021
Default=True
Detect=HKCU\Software\Adobe\Fireworks\12.0
FileKey1=%AppData%\Adobe\Fireworks CS6|Project_Log.htm;Web_Log.htm
RegKey1=HKCU\Software\Adobe\Fireworks\12.0\ini\Recent File List
---
[Nero 12 Platinum HD Suite]
ID=2331
LangSecRef=3021
Detect=HKLM\Software\Nero\Nero 12
Default=True
FileKey1=%CommonAppData%\Nero\PeakFiles|*.tmp
FileKey2=%AppData%\Nero\Nero 12\Nero Recode\AnalysisData|*.jpg
FileKey3=%AppData%\Nero\Nero 12\Nero Recode\AnalysisData|*.xml
FileKey4=%AppData%\Nero\Nero 12\Nero BackItUp\Cache|*.txt
FileKey5=%AppData%\Nero\Nero 12\Nero Burning ROM|*.log
FileKey6=%AppData%\Nero\Nero 12\Nero Burning ROM|*Burning*.dmp
FileKey7=%SystemDrive%\Windows\SysWOW64|*-NeroRescueAgent.txt
FileKey8=%AppData%\Nero\Nero 12\Nero3D|Direct3D.log
FileKey9=%AppData%\Nero\Nero 12\Nero Vision|NeroVideoLog.txt
RegKey1=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Recent File List
RegKey2=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|BrowserDir
RegKey3=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|ImageDir
RegKey4=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|NeroCompilation
RegKey5=HKCU\Software\Nero\Nero 12\Nero Express\Recent File List
RegKey6=HKCU\Software\Nero\Nero 12\Nero Express\Settings|WorkingDir
RegKey7=HKCU\Software\Nero\Nero 12\Nero Express\Settings|BrowserDir
RegKey8=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastISODir
RegKey9=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastAudioDir
RegKey10=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastVideoDVDKey
RegKey11=HKCU\Software\Nero\Nero 12\Nero WaveEditor\Recent File List
RegKey12=HKCU\Software\Nero\Nero 12\Nero CoverDesigner\Recent File List
could be shortened to
[Nero 12 Platinum HD Suite]
ID=2331
LangSecRef=3021
Detect=HKLM\Software\Nero\Nero 12
Default=True
FileKey1=%CommonAppData%\Nero\PeakFiles|*.tmp
FileKey2=%AppData%\Nero\Nero 12\Nero Recode\AnalysisData|*.jpg;*.xml
FileKey3=%AppData%\Nero\Nero 12\Nero BackItUp\Cache|*.txt
FileKey4=%AppData%\Nero\Nero 12\Nero Burning ROM|*.log;*Burning*.dmp
FileKey5=%AppData%\Nero\Nero 12\Nero3D|Direct3D.log
FileKey6=%AppData%\Nero\Nero 12\Nero Vision|NeroVideoLog.txt
FileKey7=%SystemDrive%\Windows\SysWOW64|*-NeroRescueAgent.txt
RegKey1=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Recent File List
RegKey2=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|BrowserDir
RegKey3=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|ImageDir
RegKey4=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|NeroCompilation
RegKey5=HKCU\Software\Nero\Nero 12\Nero Express\Recent File List
RegKey6=HKCU\Software\Nero\Nero 12\Nero Express\Settings|WorkingDir
RegKey7=HKCU\Software\Nero\Nero 12\Nero Express\Settings|BrowserDir
RegKey8=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastISODir
RegKey9=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastAudioDir
RegKey10=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastVideoDVDKey
RegKey11=HKCU\Software\Nero\Nero 12\Nero WaveEditor\Recent File List
RegKey12=HKCU\Software\Nero\Nero 12\Nero CoverDesigner\Recent File List
---
[Nero Video 11]
ID=2274
LangSecRef=3023
Detect=HKCU\Software\Nero\Nero 11\Nero Vision
Default=True
FileKey1=%AppData%\Nero\Nero 11\Nero Vision|*.log
FileKey2=%AppData%\Nero\Nero 11\Nero Vision\Log|*.*
FileKey3=%AppData%\Nero\Nero 11\Nero Vision\NVFACache|*.*
FileKey4=%AppData%\Nero\Nero 11\Nero Vision|*.txt
FileKey5=%AppData%\Nero\Nero 11\Nero3D|*.log
could be shortened to
[Nero Video 11]
ID=2274
LangSecRef=3023
Detect=HKCU\Software\Nero\Nero 11\Nero Vision
Default=True
FileKey1=%AppData%\Nero\Nero 11\Nero Vision|*.log;*.txt
FileKey2=%AppData%\Nero\Nero 11\Nero Vision\Log|*.*
FileKey3=%AppData%\Nero\Nero 11\Nero Vision\NVFACache|*.*
FileKey4=%AppData%\Nero\Nero 11\Nero3D|*.log
---
[Netscape Navigator 4.x]
ID=2077
LangSecRef=3022
Detect=HKCU\Software\Netscape\Netscape Navigator\Main
Default=True
FileKey1=%ProgramFiles%\Netscape\Users\default|netscape.hst
FileKey2=%ProgramFiles%\Netscape\Users\default|cookies.txt
FileKey3=%ProgramFiles%\Netscape\Users\default\cache|*.*
could be shortened to
[Netscape Navigator 4.x]
ID=2077
LangSecRef=3022
Detect=HKCU\Software\Netscape\Netscape Navigator\Main
Default=True
FileKey1=%ProgramFiles%\Netscape\Users\default|netscape.hst;cookies.txt
FileKey2=%ProgramFiles%\Netscape\Users\default\cache|*.*
---
[eMule (File Hashes)]
ID=2081
LangSecRef=3022
Detect=HKCU\Software\eMule
Default=False
FileKey1=%ProgramFiles%\eMule\config|known.met
FileKey2=%ProgramFiles%\eMule\config|known2.met
FileKey3=%ProgramFiles%\eMule\config|known2_64.met
FileKey4=%LocalAppData%\eMule\config|known.met
FileKey5=%LocalAppData%\eMule\config|known2.met
FileKey6=%LocalAppData%\eMule\config|known2_64.met
FileKey7=%CommonAppData%\eMule\config|known.met
FileKey8=%CommonAppData%\eMule\config|known2.met
FileKey9=%CommonAppData%\eMule\config|known2_64.met
could be shortened to
[eMule (File Hashes)]
ID=2081
LangSecRef=3022
Detect=HKCU\Software\eMule
Default=False
FileKey1=%ProgramFiles%\eMule\config|known.met;known2.met;known2_64.met
FileKey2=%LocalAppData%\eMule\config|known.met;known2.met;known2_64.met
FileKey3=%CommonAppData%\eMule\config|known.met;known2.met;known2_64.met
---
[Winamp]
ID=2166
LangSecRef=3023
Detect=HKCU\Software\Winamp
Default=True
FileKey1=%ProgramFiles%\Winamp|winamp.m3u
FileKey2=%ProgramFiles%\Winamp|winamp.m3u8
FileKey3=%ProgramFiles%\Winamp\Plugins\ml|recent.dat
FileKey4=%ProgramFiles%\Winamp\Plugins\ml\cache|*.*|RECURSE
FileKey5=%AppData%\Winamp|winamp.m3u
FileKey6=%AppData%\Winamp|winamp.m3u8
FileKey7=%AppData%\Winamp\Plugins\ml|recent.dat
FileKey8=%AppData%\Winamp\Plugins\ml\Cache|*.*|RECURSE
could be shortened to
[Winamp]
ID=2166
LangSecRef=3023
Detect=HKCU\Software\Winamp
Default=True
FileKey1=%ProgramFiles%\Winamp|winamp.m3u;winamp.m3u8
FileKey2=%ProgramFiles%\Winamp\Plugins\ml|recent.dat
FileKey3=%ProgramFiles%\Winamp\Plugins\ml\cache|*.*|RECURSE
FileKey4=%AppData%\Winamp|winamp.m3u;winamp.m3u8
FileKey5=%AppData%\Winamp\Plugins\ml|recent.dat
FileKey6=%AppData%\Winamp\Plugins\ml\Cache|*.*|RECURSE
---
[MusicMatch Jukebox]
ID=2231
LangSecRef=3023
Detect=HKCU\Software\Musicmatch\Musicmatch Jukebox
Default=True
FileKey1=%LocalAppData%\Musicmatch\Jukebox|*.log
FileKey2=%LocalAppData%\Musicmatch\Jukebox|*log.txt
FileKey3=%ProgramFiles%\MUSICMATCH\Musicmatch Jukebox\TEMP|*.*
could be shortened to
[MusicMatch Jukebox]
ID=2231
LangSecRef=3023
Detect=HKCU\Software\Musicmatch\Musicmatch Jukebox
Default=True
FileKey1=%LocalAppData%\Musicmatch\Jukebox|*.log;*log.txt
FileKey2=%ProgramFiles%\MUSICMATCH\Musicmatch Jukebox\TEMP|*.*
---
[Windows Live Messenger]
ID=2087
LangSecRef=3022
Detect=HKCU\Software\Microsoft\MSNMessenger\PerPassportSettings
Default=True
RegKey1=HKCU\Software\Microsoft\MessengerService\ListCache\.NET Messenger Service
FileKey1=%AppData%\Microsoft\MSN Messenger|*.sqm|RECURSE
FileKey2=%LocalAppData%\Microsoft\Messenger|*.uccapilog
FileKey3=%LocalAppData%\Microsoft\Messenger|*.bak
FileKey4=%UserProfile%\Tracing|WindowsLiveMessenger*.uccapilog
FileKey5=%UserProfile%\Tracing|WindowsLiveMessenger*.uccapilog.bak
could be shortened to
[Windows Live Messenger]
ID=2087
LangSecRef=3022
Detect=HKCU\Software\Microsoft\MSNMessenger\PerPassportSettings
Default=True
RegKey1=HKCU\Software\Microsoft\MessengerService\ListCache\.NET Messenger Service
FileKey1=%AppData%\Microsoft\MSN Messenger|*.sqm|RECURSE
FileKey2=%LocalAppData%\Microsoft\Messenger|*.uccapilog;*.bak
FileKey3=%UserProfile%\Tracing|WindowsLiveMessenger*.uccapilog;WindowsLiveMessenger*.uccapilog.bak
---
[Free Download Manager]
ID=2194
LangSecRef=3022
DetectFile=%ProgramFiles%\Free Download Manager\fdm.exe
DetectFile2=%AppData%\Free Download Manager
Default=True
RegKey1=HKCU\Software\FreeDownloadManager.ORG\Free Download Manager\Settings|Find
RegKey2=HKCU\Software\FreeDownloadManager.ORG\Free Download Manager\Settings|History
FileKey1=%AppData%\Free Download Manager|*.bak
FileKey2=%AppData%\Free Download Manager|dlmgrsi.sav
FileKey3=%AppData%\Free Download Manager|downloads.his.sav
FileKey4=%AppData%\Free Download Manager|history.sav
FileKey5=%AppData%\Free Download Manager|spider.sav
could be shortened to
[Free Download Manager]
ID=2194
LangSecRef=3022
DetectFile=%ProgramFiles%\Free Download Manager\fdm.exe
DetectFile2=%AppData%\Free Download Manager
Default=True
RegKey1=HKCU\Software\FreeDownloadManager.ORG\Free Download Manager\Settings|Find
RegKey2=HKCU\Software\FreeDownloadManager.ORG\Free Download Manager\Settings|History
FileKey1=%AppData%\Free Download Manager|*.bak;dlmgrsi.sav;downloads.his.sav;history.sav;spider.sav
---
[internet Download Accelerator]
ID=2195
LangSecRef=3022
Detect=HKCU\Software\2VG\Internet Download Accelerator
Default=True
FileKey1=%AppData%\Internet Download Accelerator|history.xml
FileKey2=%AppData%\Internet Download Accelerator\temp|*.hnt
FileKey3=%AppData%\Internet Download Accelerator\temp|lastnews.*
FileKey4=%AppData%\Internet Download Accelerator\temp|playflv.html
FileKey5=%AppData%\Internet Download Accelerator\temp\Preview|*.*
FileKey6=%AppData%\Internet Download Accelerator\lists|default.xml
could be shortened to
[internet Download Accelerator]
ID=2195
LangSecRef=3022
Detect=HKCU\Software\2VG\Internet Download Accelerator
Default=True
FileKey1=%AppData%\Internet Download Accelerator|history.xml
FileKey2=%AppData%\Internet Download Accelerator\temp|*.hnt;lastnews.*;playflv.html
FileKey3=%AppData%\Internet Download Accelerator\temp\Preview|*.*
FileKey4=%AppData%\Internet Download Accelerator\lists|default.xml
---
[internet Download Manager]
ID=2196
LangSecRef=3022
Detect=HKLM\Software\Internet Download Manager
Default=True
FileKey1=%AppData%\IDM|UrlHistory*.txt
FileKey2=%AppData%\IDM|foldresHistory.txt
could be shortened to
[internet Download Manager]
ID=2196
LangSecRef=3022
Detect=HKLM\Software\Internet Download Manager
Default=True
FileKey1=%AppData%\IDM|UrlHistory*.txt;foldresHistory.txt
---
[Orbit Downloader]
ID=2234
LangSecRef=3022
Detect=HKLM\SOFTWARE\Orbit
Default=True
FileKey1=%AppData%\Orbit|fileinfo.dat
FileKey2=%AppData%\Orbit|filesave.dat
could be shortened to
[Orbit Downloader]
ID=2234
LangSecRef=3022
Detect=HKLM\SOFTWARE\Orbit
Default=True
FileKey1=%AppData%\Orbit|fileinfo.dat;filesave.dat
---
[CA Anti-Virus]
ID=2110
LangSecRef=3024
Default=True
Detect=HKLM\SOFTWARE\ComputerAssociates\Anti-Virus
FileKey1=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus|*.log
FileKey2=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus|*log.txt
FileKey3=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ArcTemp|*.tmp
FileKey4=%CommonAppData%\CA\Consumer\AV|*.tmp|RECURSE
FileKey5=%CommonAppData%\CA\Consumer\AV|*.txt|RECURSE
FileKey6=%CommonAppData%\CA\Consumer\CCube|*.tmp|RECURSE
FileKey7=%CommonAppData%\CA\Consumer\CCube|*.txt|RECURSE
FileKey8=%CommonAppData%\CA\Consumer\ISS\FeedStore|*.txt|RECURSE
FileKey9=%ProgramFiles%\CA\CA Internet Security Suite\CA Anti-Virus\ArcTemp|*.*
FileKey10=%ProgramFiles%\CA\CA Internet Security Suite\CA Anti-Virus\tmp|*.*
could be shortened to
[CA Anti-Virus]
ID=2110
LangSecRef=3024
Default=True
Detect=HKLM\SOFTWARE\ComputerAssociates\Anti-Virus
FileKey1=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus|*.log;*log.txt
FileKey2=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ArcTemp|*.tmp
FileKey3=%CommonAppData%\CA\Consumer\AV|*.tmp;*.txt|RECURSE
FileKey4=%CommonAppData%\CA\Consumer\CCube|*.tmp;*.txt|RECURSE
FileKey5=%CommonAppData%\CA\Consumer\ISS\FeedStore|*.txt|RECURSE
FileKey6=%ProgramFiles%\CA\CA Internet Security Suite\CA Anti-Virus\ArcTemp|*.*
FileKey7=%ProgramFiles%\CA\CA Internet Security Suite\CA Anti-Virus\tmp|*.*
---
[Google Earth]
ID=2112
LangSecRef=3021
Detect=HKLM\SOFTWARE\Google\Google Earth Plus
Detect2=HKLM\SOFTWARE\Google\Google Earth Pro
Detect3=HKCU\SOFTWARE\Google\Google Earth Plus
Detect4=HKCU\SOFTWARE\Google\Google Earth Pro
Default=True
FileKey1=%AppData%\Google\GoogleEarth|dbcache.dat
FileKey2=%AppData%\Google\GoogleEarth|dbcache.dat.index
FileKey3=%LocalAppData%\Google\GoogleEarth|dbcache.dat
FileKey4=%LocalAppData%\Google\GoogleEarth|dbcache.dat.index
FileKey5=%locallowAppData%\Google\GoogleEarth|dbcache.dat
FileKey6=%locallowAppData%\Google\GoogleEarth|dbcache.dat.index
FileKey7=%locallowAppData%\Google\GoogleEarth\webdata|*.*
RegKey1=HKCU\Software\Google\Google Earth Plus\Search
RegKey2=HKCU\Software\Google\Google Earth Pro\Search
could be shortened to
[Google Earth]
ID=2112
LangSecRef=3021
Detect=HKLM\SOFTWARE\Google\Google Earth Plus
Detect2=HKLM\SOFTWARE\Google\Google Earth Pro
Detect3=HKCU\SOFTWARE\Google\Google Earth Plus
Detect4=HKCU\SOFTWARE\Google\Google Earth Pro
Default=True
FileKey1=%AppData%\Google\GoogleEarth|dbcache.dat;dbcache.dat.index
FileKey2=%LocalAppData%\Google\GoogleEarth|dbcache.dat;dbcache.dat.index
FileKey3=%LocalLowAppData%\Google\GoogleEarth|dbcache.dat;dbcache.dat.index
FileKey4=%LocalLowAppData%\Google\GoogleEarth\webdata|*.*
RegKey1=HKCU\Software\Google\Google Earth Plus\Search
RegKey2=HKCU\Software\Google\Google Earth Pro\Search
---
[Microsoft AntiSpyware]
ID=2113
LangSecRef=3024
DetectFile=%ProgramFiles%\Microsoft AntiSpyware\GIANTAntiSpywareMain.exe
Default=True
FileKey1=%ProgramFiles%\Microsoft AntiSpyware|errors.log
FileKey2=%ProgramFiles%\Microsoft AntiSpyware|tracksEraser.log
FileKey3=%ProgramFiles%\Microsoft AntiSpyware|cleaner.log
could be shortened to
[Microsoft AntiSpyware]
ID=2113
LangSecRef=3024
DetectFile=%ProgramFiles%\Microsoft AntiSpyware\GIANTAntiSpywareMain.exe
Default=True
FileKey1=%ProgramFiles%\Microsoft AntiSpyware|errors.log;tracksEraser.log;cleaner.log
---
[Vuze]
ID=2115
LangSecRef=3022
Detect=HKCU\Software\Azureus
DetectFile=%AppData%\Azureus\.lock
Default=True
FileKey1=%AppData%\Azureus\logs|*.*|RECURSE
FileKey2=%AppData%\Azureus\logs\save|*.log
FileKey3=%AppData%\Azureus\tmp|*.*|RECURSE
FileKey4=%AppData%\Azureus|*.bak
FileKey5=%AppData%\Azureus|*.log
FileKey6=%AppData%\Azureus\active|*.bak
could be shortened to
[Vuze]
ID=2115
LangSecRef=3022
Detect=HKCU\Software\Azureus
DetectFile=%AppData%\Azureus\.lock
Default=True
FileKey1=%AppData%\Azureus\logs|*.*|RECURSE
FileKey2=%AppData%\Azureus\logs\save|*.log
FileKey3=%AppData%\Azureus\tmp|*.*|RECURSE
FileKey4=%AppData%\Azureus|*.bak;*.log
FileKey6=%AppData%\Azureus\active|*.bak
---
[FrostWire]
ID=2215
LangSecRef=3022
DetectFile=%ProgramFiles%\FrostWire\FrostWire.exe
Default=True
FileKey1=%AppData%\FrostWire|*.cache
FileKey2=%AppData%\FrostWire\image_cache|*.*|REMOVESELF
FileKey3=%AppData%\FrostWire|gnutella.net
FileKey4=%AppData%\FrostWire|*.bak
FileKey5=%AppData%\FrostWire|checkandupdate.txt
could be shortened to
[FrostWire]
ID=2215
LangSecRef=3022
DetectFile=%ProgramFiles%\FrostWire\FrostWire.exe
Default=True
FileKey1=%AppData%\FrostWire|*.cache;*.bak;gnutella.net;checkandupdate.txt
FileKey2=%AppData%\FrostWire\image_cache|*.*|REMOVESELF
---
[CuteFTP 9]
ID=2355
LangSecRef=3022
Detect=HKU\.DEFAULT\Software\Globalscape\CuteFTP 9
Detect2=HKLM\SOFTWARE\Wow6432Node\Globalscape\CuteFTP 9
Default=True
FileKey1=%LocalAppData%\Globalscape\CuteFTP\9.0\Cache|*.*
FileKey2=%LocalAppData%\Globalscape\CuteFTP\9.0\CacheThumbs|*.*
FileKey3=%AppData%\Globalscape\CuteFTP\9.0\Logs|*-*_*.log
FileKey4=%ProgramData%\Globalscape\CuteFTP 9|TRB_BACKUP.dat
FileKey5=%ProgramData%\Globalscape\CuteFTP 9|TR_BACKUP.dat
RegKey1=HKCU\Software\Globalscape\CuteFTP 9\Recent|LastSiteID
could be shortened to
[CuteFTP 9]
ID=2355
LangSecRef=3022
Detect=HKU\.DEFAULT\Software\Globalscape\CuteFTP 9
Detect2=HKLM\SOFTWARE\Wow6432Node\Globalscape\CuteFTP 9
Default=True
FileKey1=%LocalAppData%\Globalscape\CuteFTP\9.0\Cache|*.*
FileKey2=%LocalAppData%\Globalscape\CuteFTP\9.0\CacheThumbs|*.*
FileKey3=%AppData%\Globalscape\CuteFTP\9.0\Logs|*-*_*.log
FileKey4=%ProgramData%\Globalscape\CuteFTP 9|TRB_BACKUP.dat;TR_BACKUP.dat
RegKey1=HKCU\Software\Globalscape\CuteFTP 9\Recent|LastSiteID
- Additionally, may want to switch to %CommonAppData% from %ProgramData% as it's supported by older versions of Windows natively.
---
[FileZilla]
ID=2227
LangSecRef=3022
Detect=HKLM\SOFTWARE\FileZilla Client
Detect2=HKCU\SOFTWARE\FileZilla Client
Default=True
FileKey1=%AppData%\FileZilla|recentservers.xml
FileKey2=%AppData%\FileZilla|search.xml
could be shortened to
[FileZilla]
ID=2227
LangSecRef=3022
Detect=HKLM\SOFTWARE\FileZilla Client
Detect2=HKCU\SOFTWARE\FileZilla Client
Default=True
FileKey1=%AppData%\FileZilla|recentservers.xml;search.xml
---
[sUPERAntiSpyware]
ID=2263
LangSecRef=3024
Detect=HKLM\Software\SUPERAntiSpyware.com\SUPERAntiSpyware
Default=True
FileKey1=%AppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\Logs|*.log
FileKey2=%AppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs|*.dmp
FileKey3=%AppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs|*.SDB
could be shortened to
[sUPERAntiSpyware]
ID=2263
LangSecRef=3024
Detect=HKLM\Software\SUPERAntiSpyware.com\SUPERAntiSpyware
Default=True
FileKey1=%AppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\Logs|*.log
FileKey2=%AppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs|*.dmp;*.SDB
---
[OpenOffice 4]
ID=2356
LangSecRef=3021
Detect=HKLM\SOFTWARE\Wow6432Node\OpenOffice\OpenOffice\4.0.0
Detect2=HKLM\SOFTWARE\OpenOffice\OpenOffice\4.0.0
Default=True
FileKey1=%AppData%\OpenOffice\4\user\backup|*.ubackup
FileKey2=%AppData%\OpenOffice\4\user\temp|document_io_logring.txt
FileKey3=%AppData%\OpenOffice\4\user\uno_packages\cache|log.txt
FileKey4=%programfiles%\OpenOffice 4\presets\backup|*.cbackup
FileKey5=%programfiles(x86)%\OpenOffice 4\presets\backup|*.cbackup
FileKey6=%programfiles(x86)%\OpenOffice 4\presets\temp|*.tmp
FileKey7=%programfiles(x86)%\OpenOffice 4\presets\uno_packages\cache|log.txt
FileKey8=%AppData%\OpenOffice\4\user\uno_packages\cache|*.cache
could be shortened to
[OpenOffice 4]
ID=2356
LangSecRef=3021
Detect=HKLM\SOFTWARE\Wow6432Node\OpenOffice\OpenOffice\4.0.0
Detect2=HKLM\SOFTWARE\OpenOffice\OpenOffice\4.0.0
Default=True
FileKey1=%AppData%\OpenOffice\4\user\backup|*.ubackup
FileKey2=%AppData%\OpenOffice\4\user\temp|document_io_logring.txt
FileKey3=%AppData%\OpenOffice\4\user\uno_packages\cache|log.txt
FileKey4=%ProgramFiles%\OpenOffice 4\presets\backup|*.cbackup
FileKey5=%ProgramFiles%\OpenOffice 4\presets\temp|*.tmp
FileKey6=%ProgramFiles%\OpenOffice 4\presets\uno_packages\cache|log.txt
FileKey7=%AppData%\OpenOffice\4\user\uno_packages\cache|*.cache
- FileKey5 is a syntactical duplicate of FileKey4
---
[AVG AntiVirus 8.0]
ID=2141
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\Avg8
Default=True
FileKey1=%CommonAppData%\avg8\Log|*.log
FileKey2=%CommonAppData%\avg8\scanlogs|*.log
FileKey3=%CommonAppData%\avg8\Log|*.xml
FileKey4=%CommonAppData%\avg8\update\backup|*.*
FileKey5=%CommonAppData%\avg8\Emc\Log|*.log
could be shortened to
[AVG AntiVirus 8.0]
ID=2141
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\Avg8
Default=True
FileKey1=%CommonAppData%\avg8\Log|*.log;*.xml
FileKey2=%CommonAppData%\avg8\scanlogs|*.log
FileKey3=%CommonAppData%\avg8\update\backup|*.*
FileKey4=%CommonAppData%\avg8\Emc\Log|*.log
---
[AVG AntiVirus 9.0]
ID=2145
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\Avg9
Default=True
FileKey1=%CommonAppData%\avg9\Log|*.log
FileKey2=%CommonAppData%\avg9\scanlogs|*.log
FileKey3=%CommonAppData%\avg9\Log|*.xml
FileKey4=%CommonAppData%\avg9\update\backup|*.*
FileKey5=%CommonAppData%\avg9\Emc\Log|*.log
could be shortened to
[AVG AntiVirus 9.0]
ID=2145
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\Avg9
Default=True
FileKey1=%CommonAppData%\avg9\Log|*.log;*.xml
FileKey2=%CommonAppData%\avg9\scanlogs|*.log
FileKey3=%CommonAppData%\avg9\update\backup|*.*
FileKey4=%CommonAppData%\avg9\Emc\Log|*.log
---
[AVG AntiVirus 10.0]
ID=2170
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\Avg10
Default=True
FileKey1=%CommonAppData%\avg10\Log|*.log
FileKey2=%CommonAppData%\avg10\scanlogs|*.log
FileKey3=%CommonAppData%\avg10\Log|*.xml
FileKey4=%CommonAppData%\avg10\update\backup|*.*
FileKey5=%CommonAppData%\avg10\Emc\Log|*.log
FileKey6=%CommonAppData%\avg10\IDS\config|*List.zip.bak
FileKey7=%CommonAppData%\avg10\IDS\profile|globalLoadable.bak
FileKey8=%CommonAppData%\avg10\Temp|*.tmp
could be shortened to
[AVG AntiVirus 10.0]
ID=2170
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\Avg10
Default=True
FileKey1=%CommonAppData%\avg10\Log|*.log;*.xml
FileKey2=%CommonAppData%\avg10\scanlogs|*.log
FileKey3=%CommonAppData%\avg10\update\backup|*.*
FileKey4=%CommonAppData%\avg10\Emc\Log|*.log
FileKey5=%CommonAppData%\avg10\IDS\config|*List.zip.bak
FileKey6=%CommonAppData%\avg10\IDS\profile|globalLoadable.bak
FileKey7=%CommonAppData%\avg10\Temp|*.tmp
---
[AVG AntiVirus 2012]
ID=2268
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\AVG2012
Default=True
FileKey1=%CommonAppData%\AVG2012\Log|*.log
FileKey2=%CommonAppData%\AVG2012\scanlogs|*.log
FileKey3=%CommonAppData%\AVG2012\Log|history.xml
FileKey4=%CommonAppData%\AVG2012\update\backup|*.*
FileKey5=%CommonAppData%\AVG2012\Emc\Log|*.log
FileKey6=%CommonAppData%\AVG2012\IDS\config|*List.zip.bak
FileKey7=%CommonAppData%\AVG2012\IDS\profile|globalLoadable.bak
FileKey8=%CommonAppData%\AVG2012\Temp|*.tmp
could be shortened to
[AVG AntiVirus 2012]
ID=2268
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\AVG2012
Default=True
FileKey1=%CommonAppData%\AVG2012\Log|*.log;history.xml
FileKey2=%CommonAppData%\AVG2012\scanlogs|*.log
FileKey3=%CommonAppData%\AVG2012\update\backup|*.*
FileKey4=%CommonAppData%\AVG2012\Emc\Log|*.log
FileKey5=%CommonAppData%\AVG2012\IDS\config|*List.zip.bak
FileKey6=%CommonAppData%\AVG2012\IDS\profile|globalLoadable.bak
FileKey7=%CommonAppData%\AVG2012\Temp|*.tmp
---
[AVG AntiVirus 2013]
ID=2313
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\AVG2013
Default=True
FileKey1=%CommonAppData%\AVG2013\Log|*.log
FileKey2=%CommonAppData%\AVG2013\scanlogs|*.log
FileKey3=%CommonAppData%\AVG2013\Log|history.xml
FileKey4=%CommonAppData%\AVG2013\update\backup|*.*
FileKey5=%CommonAppData%\AVG2013\Emc\Log|*.log
FileKey6=%CommonAppData%\AVG2013\IDS\config|*List.zip.bak
FileKey7=%CommonAppData%\AVG2013\IDS\profile|globalLoadable.bak
FileKey8=%CommonAppData%\AVG2013\Temp|*.tmp
could be shortened to
[AVG AntiVirus 2013]
ID=2313
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\AVG2013
Default=True
FileKey1=%CommonAppData%\AVG2013\Log|*.log;history.xml
FileKey2=%CommonAppData%\AVG2013\scanlogs|*.log
FileKey3=%CommonAppData%\AVG2013\update\backup|*.*
FileKey4=%CommonAppData%\AVG2013\Emc\Log|*.log
FileKey5=%CommonAppData%\AVG2013\IDS\config|*List.zip.bak
FileKey6=%CommonAppData%\AVG2013\IDS\profile|globalLoadable.bak
FileKey7=%CommonAppData%\AVG2013\Temp|*.tmp
---
[AntiVir Desktop]
ID=2138
LangSecRef=3024
Detect=HKLM\SOFTWARE\Avira\AntiVir Desktop
Default=True
FileKey1=%CommonAppData%\Avira\AntiVir Desktop\TEMP|*.*
FileKey2=%CommonAppData%\Avira\Antivir Desktop\BACKUP\FAILSAFE\*.tmp
FileKey3=%CommonAppData%\Avira\AntiVir Desktop|*.old
FileKey4=%CommonAppData%\Avira\AntiVir Desktop|*.tmp
FileKey5=%ProgramFiles%\Avira\AntiVir Desktop|*.old
FileKey6=%ProgramFiles%\Avira\AntiVir Desktop|*.tmp
FileKey7=%ProgramFiles%\Avira\AntiVir Desktop\FAILSAFE|*.tmp
FileKey8=%CommonAppData%\Avira\AntiVir Desktop\LOGFILES|*.*
could be shortened to
[AntiVir Desktop]
ID=2138
LangSecRef=3024
Detect=HKLM\SOFTWARE\Avira\AntiVir Desktop
Default=True
FileKey1=%CommonAppData%\Avira\AntiVir Desktop\TEMP|*.*
FileKey2=%CommonAppData%\Avira\Antivir Desktop\BACKUP\FAILSAFE\*.tmp
FileKey3=%CommonAppData%\Avira\AntiVir Desktop|*.old;*.tmp
FileKey4=%ProgramFiles%\Avira\AntiVir Desktop|*.old;*.tmp
FileKey5=%ProgramFiles%\Avira\AntiVir Desktop\FAILSAFE|*.tmp
FileKey6=%CommonAppData%\Avira\AntiVir Desktop\LOGFILES|*.*
---
[LogMeIn]
ID=2172
LangSecRef=3022
Detect=HKCU\Software\LogMeIn
Detect2=HKLM\SOFTWARE\LogMeIn, Inc.
Default=True
FileKey1=%LocalAppData%\LogMeIn Hamachi|*.log
FileKey2=%LocalAppData%\LogMeIn Hamachi|*.old
FileKey3=%LocalAppData%\LogMeIn Hamachi|*.bak
FileKey4=%ProgramFiles%\Logmein|LMI*.log
FileKey5=%ProgramData%\Logmein|LMI*.log
could be shortened to
[LogMeIn]
ID=2172
LangSecRef=3022
Detect=HKCU\Software\LogMeIn
Detect2=HKLM\SOFTWARE\LogMeIn, Inc.
Default=True
FileKey1=%LocalAppData%\LogMeIn Hamachi|*.log;*.old;*.bak
FileKey2=%ProgramFiles%\Logmein|LMI*.log
FileKey3=%ProgramData%\Logmein|LMI*.log
- Again, may wish to use CommonAppData in lieu of ProgramData
---
[Any Video Converter Ultimate]
ID=2282
LangSecRef=3023
Detect=HKCU\Software\AnvSoft\Any Video Converter Ultimate
Default=True
FileKey1=%AppData%\AnvSoft\Any Video Converter Ultimate|history*.db
FileKey2=%AppData%\AnvSoft\Any Video Converter Ultimate|*.log
could be shortened to
[Any Video Converter Ultimate]
ID=2282
LangSecRef=3023
Detect=HKCU\Software\AnvSoft\Any Video Converter Ultimate
Default=True
FileKey1=%AppData%\AnvSoft\Any Video Converter Ultimate|history*.db;*.log
---
[CoffeeCup HTML Editor]
ID=2280
LangSecRef=3024
DetectFile=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor
Default=True
FileKey1=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|mru.ini
FileKey2=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|links.ini
FileKey3=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|lastopen.dat
could be shortened to
[CoffeeCup HTML Editor]
ID=2280
LangSecRef=3024
DetectFile=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor
Default=True
FileKey1=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|mru.ini;links.ini;lastopen.dat
---
[AIMP 3]
ID=2287
LangSecRef=3023
DetectFile=%AppData%\AIMP3
Default=True
FileKey1=%AppData%\AIMP3|AIMP3.bak
FileKey2=%AppData%\AIMP3|AIMP3ate.bak
FileKey3=%AppData%\AIMP3|AIMP3lib.bak
FileKey4=%AppData%\AIMP3|AIMP3ac.bak
could be shortened to
[AIMP 3]
ID=2287
LangSecRef=3023
DetectFile=%AppData%\AIMP3
Default=True
FileKey1=%AppData%\AIMP3|AIMP3.bak;AIMP3ate.bak;AIMP3lib.bak;AIMP3ac.bak
---
[PDFCreator]
ID=2335
LangSecRef=3021
Default=True
Detect=HKCU\Software\PDFCreator
FileKey1=%ProgramFiles%\PDFCreator|SetupLog.txt
FileKey2=%AppData%\pdfforge\Images2PDF|Print-*.log
FileKey3=%AppData%\pdfforge\Images2PDF|PrintPDF-*.log
FileKey4=%AppData%\pdfforge\Images2PDF\Tmp|*.prnt|REMOVESELF
RegKey1=HKCU\Software\PDFCreator\Program|LastsaveDirectory
could be shortened to
[PDFCreator]
ID=2335
LangSecRef=3021
Default=True
Detect=HKCU\Software\PDFCreator
FileKey1=%ProgramFiles%\PDFCreator|SetupLog.txt
FileKey2=%AppData%\pdfforge\Images2PDF|Print-*.log;PrintPDF-*.log
FileKey3=%AppData%\pdfforge\Images2PDF\Tmp|*.prnt|REMOVESELF
RegKey1=HKCU\Software\PDFCreator\Program|LastsaveDirectory
---
[MailWasher Pro]
ID=2321
LangSecRef=3022
Detect1=HKCU\Software\FireTrust\MailWasher Pro
Detect2=HKCU\Software\FireTrust\MailWasher
Detect3=HKCU\Software\FireTrust\MailWasherPro
Default=True
FileKey1=%AppData%\Firetrust\MailWasher\logs|*.*|RECURSE
FileKey2=%AppData%\Firetrust\MailWasher|log_*|RECURSE
FileKey3=%AppData%\Firetrust\MailWasher|regex.txt
FileKey4=%AppData%\Firetrust\MailWasher|updatesAIU.txt
ExcludeKey1=FILE|%AppData%\Firetrust\MailWasher\cache|*mwp_exw.dat;*mwp_conv.dat;*mwp_inw.dat;*mwp_pmap.dat;*MWP.db3
could be shortened to
[MailWasher Pro]
ID=2321
LangSecRef=3022
Detect1=HKCU\Software\FireTrust\MailWasher Pro
Detect2=HKCU\Software\FireTrust\MailWasher
Detect3=HKCU\Software\FireTrust\MailWasherPro
Default=True
FileKey1=%AppData%\Firetrust\MailWasher\logs|*.*|RECURSE
FileKey2=%AppData%\Firetrust\MailWasher|log_*;updatesAIU.txt;regex.txt|RECURSE
ExcludeKey1=FILE|%AppData%\Firetrust\MailWasher\cache|*mwp_exw.dat;*mwp_conv.dat;*mwp_inw.dat;*mwp_pmap.dat;*MWP.db3
---
[sony Vegas Pro 12.0]
ID=2352
LangSecRef=3023
Detect=HKLM\SOFTWARE\Sony Creative Software\Vegas Pro\12.0
Default=True
FileKey1=%LocalAppData%\Sony\ErrorReport|*.erpt
FileKey2=%LocalAppData%\Sony\Vegas Pro\12.0|*.log
FileKey3=%AppData%\Sony|SCS_INSTALLER_1.log
FileKey4=%AppData%\Sony|*.dmp
FileKey5=%AppData%\Sony\Vegas Pro\12.0|localstorage_*.tmp
FileKey6=%AppData%\Sony\Vegas Pro\12.0|_lastsession.log
could be shortened to
[sony Vegas Pro 12.0]
ID=2352
LangSecRef=3023
Detect=HKLM\SOFTWARE\Sony Creative Software\Vegas Pro\12.0
Default=True
FileKey1=%LocalAppData%\Sony\ErrorReport|*.erpt
FileKey2=%LocalAppData%\Sony\Vegas Pro\12.0|*.log
FileKey3=%AppData%\Sony|SCS_INSTALLER_1.log
FileKey4=%AppData%\Sony|*.dmp
FileKey5=%AppData%\Sony\Vegas Pro\12.0|localstorage_*.tmp;_lastsession.log
---
[Directory Opus 10]
ID=2353
LangSecRef=3024
Detect=HKLM\SOFTWARE\GPSoftware\Directory Opus
Default=True
FileKey1=%AppData%\GPSoftware\Directory Opus\Logs|*.*
FileKey2=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|find_name.osd
FileKey3=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|find_path.osd
FileKey4=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|zippy.osd
FileKey5=%AppData%\GPSoftware\Directory Opus\Thumbnail Cache|*_do.cache
RegKey1=HKLM\SOFTWARE\Wow6432Node\GPSoftware\Directory Opus\10.5.2.0|ItemListFilter
could be shortened to
[Directory Opus 10]
ID=2353
LangSecRef=3024
Detect=HKLM\SOFTWARE\GPSoftware\Directory Opus
Default=True
FileKey1=%AppData%\GPSoftware\Directory Opus\Logs|*.*
FileKey2=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|find_name.osd;find_path.osd;zippy.osd
FileKey3=%AppData%\GPSoftware\Directory Opus\Thumbnail Cache|*_do.cache
RegKey1=HKLM\SOFTWARE\Wow6432Node\GPSoftware\Directory Opus\10.5.2.0|ItemListFilter