Jump to content

CCleaner browser shows Google Chrome even though it isn't installed...


Totemic

Recommended Posts

I've just reinstalled and updated windows 10 (to the latest version) on my PC (I do this on a yearly basis) and for some reason CCleaner insists that Google Chrome is installed on my PC when it's not.

 

Before anyone suggests that I'm installing Chrome by accident - I'm not, I always turn off the install Chrome baggage.

 

I don't know if it's a bug in the installer or the program (CCleaner) itself, but it's rather annoying - especially since I never use Chrome for the plain and simple reason that I don't like it.

 

Can anyone suggest how to remove the Chrome browser entry from CCleaner?

Link to comment
Share on other sites

  • Moderators

Hi totemic,

How was Windows reinstalled, from an image or clean install from a boot media?

If you run CC with the /export switch, and look in the created .ini files in the CCleaner program folder, you'll find the reason CC is detecting Chrome.

Backup now & backup often.
It's your digital life - protect it with a backup.
Three things are certain; Birth, Death and loss of data. You control the last.

Link to comment
Share on other sites

Windows was installed via a clean install from a DVD and then updated via Windows Update.

 

I found the entry for Chrome, but I don't understand what I'm looking at so I'm no further forward as to understanding why Chrome is detected when it's not installed.

Link to comment
Share on other sites

  • Moderators

I'm guessing in the re-setup of Windows, reinstalling all the programs you needed, one of them slipped in a Chrome offering, like CC itself.

 

run CC with the /export switch to see what is triggering CC in thinking Chrome IS installed.

documentation on how to here; http://www.piriform.com/docs/ccleaner/advanced-usage/command-line-parameters

Backup now & backup often.
It's your digital life - protect it with a backup.
Three things are certain; Birth, Death and loss of data. You control the last.

Link to comment
Share on other sites

I don't have any idea as to what you're asking me to look for... so here's the file where Chrome is mentioned... it's the winapp file..

 

; CCleaner - Application Cleaning file

[Global]
Revision=2175
NextIDValue=2414

;
; WARNING - DO NOT EDIT THIS FILE
; If you would like to create custom entries then create a new file
; called winapp2.ini which follows the same format as this one.
; CCleaner will automatically pick up the new file.
;
; Copyright ©2004-2016 Piriform Ltd, All Rights Reserved.
; This file and it's contents may not be copied or distributed
; without the express permission of the author.
;
; Notes
; ---------------------------------------
; LangSecRef
;  3021 = Applications
;  3022 = Internet
;  3023 = Multimedia
;  3024 = Utilities
;  3025 = Windows
;  3026 = Firefox/Mozilla
;  3027 = Opera
;  3028 = Safari
;  3029 = Google Chrome
;  3030 = Thunderbird
;  3031 = Windows Store

[Mozilla - Internet Cache]
ID=2001
LangSecRef=3026
LangRef=3161
Default=True
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_CACHE

[Mozilla - Internet History]
ID=2002
LangSecRef=3026
LangRef=3162
Default=True
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_HISTORY

[Mozilla - Download History]
ID=2003
LangSecRef=3026
LangRef=3163
Default=True
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_DOWNLOAD

[Mozilla - Cookies]
ID=2004
LangSecRef=3026
LangRef=3102
Default=True
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_COOKIES

[Mozilla - Saved Form Information]
ID=2005
LangSecRef=3026
LangRef=3164
Default=False
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_FORM

[Mozilla - Saved Passwords]
ID=2181
LangSecRef=3026
LangRef=3109
WarningRef=3202
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_PASSWORD

[Mozilla - Session]
ID=2153
LangSecRef=3026
LangRef=3167
Default=True
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_SESSION

[Mozilla - Site Preferences]
ID=2222
LangSecRef=3026
LangRef=3168
Default=False
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_SITE_PREFERENCES

[Mozilla - Compact Databases]
ID=2146
LangSecRef=3026
LangRef=3165
Default=False
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_COMPACT_DATABASES

[Thunderbird - Internet Cache]
ID=2297
LangSecRef=3030
LangRef=3161
Default=True
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_CACHE

[Thunderbird - Internet History]
ID=2298
LangSecRef=3030
LangRef=3162
Default=True
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_HISTORY

[Thunderbird - Download History]
ID=2299
LangSecRef=3030
LangRef=3163
Default=True
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_DOWNLOAD

[Thunderbird - Cookies]
ID=2300
LangSecRef=3030
LangRef=3102
Default=True
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_COOKIES

[Thunderbird - Saved Form Information]
ID=2301
LangSecRef=3030
LangRef=3164
Default=False
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_FORM

[Thunderbird - Saved Passwords]
ID=2302
LangSecRef=3030
LangRef=3109
WarningRef=3202
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_PASSWORD

[Thunderbird - Session]
ID=2303
LangSecRef=3030
LangRef=3167
Default=True
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_SESSION

[Thunderbird - Site Preferences]
ID=2304
LangSecRef=3030
LangRef=3168
Default=False
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_SITE_PREFERENCES

[Thunderbird - Compact Databases]
ID=2305
LangSecRef=3030
LangRef=3165
Default=False
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_COMPACT_DATABASES

[Opera - Internet Cache]
ID=2006
LangSecRef=3027
LangRef=3161
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_CACHE

[Opera - Internet History]
ID=2007
LangSecRef=3027
LangRef=3162
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_HISTORY

[Opera - Cookies]
ID=2008
LangSecRef=3027
LangRef=3102
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_COOKIES

[Opera - Download History]
ID=2342
LangSecRef=3027
LangRef=3163
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_DOWNLOAD

[Opera - Recently Typed URLs]
ID=2224
LangSecRef=3027
LangRef=3104
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_RECENTLY_TYPED_URLS

[Opera - Last Download Location]
ID=2223
LangSecRef=3027
LangRef=3108
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_LAST_DOWNLOAD_LOCATION

[Opera - Saved Passwords]
ID=2182
LangSecRef=3027
LangRef=3109
WarningRef=3202
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_PASSWORD

[Opera - Session]
ID=2225
LangSecRef=3027
LangRef=3167
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_SESSION

[Opera - Saved Form Information]
ID=2343
LangSecRef=3027
LangRef=3164
Default=False
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_FORM

[Opera - Website Icons]
ID=2149
LangSecRef=3027
LangRef=3166
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_WEBSITE_ICONS

[Opera - Compact Databases]
ID=2344
LangSecRef=3027
LangRef=3165
Default=False
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_COMPACT_DATABASES

[Safari - Internet Cache]
ID=2009
LangSecRef=3028
LangRef=3161
Default=True
DetectFile=%ProgramFiles%\Safari\Safari.exe
FileKey1=%localappdata%\Apple Computer\Safari|Cache.db

[Safari - Internet History]
ID=2010
LangSecRef=3028
LangRef=3162
Default=True
DetectFile=%ProgramFiles%\Safari\Safari.exe
FileKey1=%appdata%\Apple Computer\Safari|History.plist
FileKey2=%appdata%\Apple Computer\Safari|LastSession.plist
FileKey3=%appdata%\Apple Computer\Safari|TopSites.plist
FileKey4=%appdata%\Apple Computer\Safari|Downloads.plist
FileKey5=%localappdata%\Apple Computer\Safari\History|*.*
FileKey6=%localappdata%\Apple Computer\Safari\Webpage Previews|*.*|RECURSE
SpecialKey1=N_SAFARI_HISTORY

[Safari - Cookies]
ID=2011
LangSecRef=3028
LangRef=3102
Default=True
DetectFile=%ProgramFiles%\Safari\Safari.exe
SpecialKey1=N_SAFARI_COOKIES

[Safari - Saved Form Information]
ID=2012
LangSecRef=3028
LangRef=3164
Default=False
DetectFile=%ProgramFiles%\Safari\Safari.exe
FileKey1=%appdata%\Apple Computer\Safari|Form Values.plist

[Safari - Saved Passwords]
ID=2183
LangSecRef=3028
LangRef=3109
WarningRef=3202
SpecialDetect=DET_SAFARI_PASSWORD
SpecialKey1=N_SAFARI_PASSWORD

[Google Chrome - Internet Cache]
ID=2013
LangSecRef=3029
LangRef=3161
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_CACHE

[Google Chrome - Internet History]
ID=2014
LangSecRef=3029
LangRef=3162
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_HISTORY

[Google Chrome - Download History]
ID=2015
LangSecRef=3029
LangRef=3163
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_DOWNLOAD

[Google Chrome - Last Download Location]
ID=2345
LangSecRef=3029
LangRef=3108
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_LAST_DOWNLOAD_LOCATION

[Google Chrome - Cookies]
ID=2016
LangSecRef=3029
LangRef=3102
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_COOKIES

[Google Chrome - Saved Form Information]
ID=2017
LangSecRef=3029
LangRef=3164
Default=False
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_FORM

[Google Chrome - Saved Passwords]
ID=2184
LangSecRef=3029
LangRef=3109
WarningRef=3202
Default=False
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_PASSWORD

[Google Chrome - Session]
ID=2152
LangSecRef=3029
LangRef=3167
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_SESSION

[Google Chrome - Compact Databases]
ID=2147
LangSecRef=3029
LangRef=3165
Default=False
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_COMPACT_DATABASES

[Adobe Acrobat Reader 5.0]
ID=2018
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\5.0\AVGeneral\cRecentFiles
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\5.0\AVGeneral\cRecentFiles

[Adobe Acrobat Reader 6.0]
ID=2019
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\6.0\AVGeneral
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\6.0\AVGeneral\cRecentFiles

[Adobe Acrobat Reader 7.0]
ID=2020
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\7.0\AVGeneral
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\7.0\AVGeneral\cRecentFiles
FileKey1=%localappdata%\Adobe\Acrobat\7.0\Cache\Search70|*.*
FileKey2=%ProgramFiles%\Adobe\Acrobat 7.0\Reader|*.bak
FileKey3=%ProgramFiles%\Adobe\Acrobat 7.0\ActiveX|*.bak
FileKey4=%ProgramFiles%\Adobe\Acrobat 7.0\Reader\plug_ins|*.bak
FileKey5=%ProgramFiles%\Adobe\Acrobat 7.0\Reader\Updater|*.bak

[Adobe Reader 8.0]
ID=2021
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\8.0
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\8.0\AVGeneral\cRecentFiles
FileKey1=%localappdata%\Adobe\Acrobat\8.0\Cache\Search80|*.*

[Adobe Reader 9.0]
ID=2137
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\9.0
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\9.0\AVGeneral\cRecentFiles
FileKey1=%LocalAppData%\Adobe\Acrobat\9.0\Cache\Search|*.*
FileKey2=%LocalLowAppData%\Adobe\Acrobat\9.0\Search|*.*

[Adobe Reader 10.0]
ID=2176
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\10.0
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\10.0\AVGeneral\cRecentFiles
FileKey1=%LocalAppData%\Adobe\Acrobat\10.0\Cache\Search|*.*
FileKey2=%LocalLowAppData%\Adobe\Acrobat\10.0\Search|*.*

[Adobe Reader 11.0]
ID=2317
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\11.0
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\11.0\AVGeneral\cRecentFiles
FileKey1=%LocalAppData%\Adobe\Acrobat\11.0\Cache\Search|*.*
FileKey2=%LocalLowAppData%\Adobe\Acrobat\11.0\Search|*.*

[Adobe Reader DC]
ID=2407
LangSecRef=3021
Detect=HKLM\Software\Adobe\Acrobat Reader\DC
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFiles
RegKey2=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentFolders
FileKey1=%LocalAppData%\Adobe\Acrobat\DC\Cache|*.lst
FileKey2=%LocalAppData%\Adobe\Acrobat\DC|*.lst
FileKey3=%LocalLowAppData%\Adobe\Acrobat\DC\Search|*.*

[Adobe Acrobat 8.0]
ID=2022
LangSecRef=3021
Detect=HKCU\Software\Adobe\Adobe Acrobat\8.0
Default=True
RegKey1=HKCU\Software\Adobe\Adobe Acrobat\8.0\AVGeneral\cRecentFiles
FileKey1=%localappdata%\Adobe\Acrobat\8.0\Cache\Search80|*.*

[Adobe Acrobat 9.0]
ID=2185
LangSecRef=3021
Detect=HKCU\Software\Adobe\Adobe Acrobat\9.0
Default=True
RegKey1=HKCU\Software\Adobe\Adobe Acrobat\9.0\AVGeneral\cRecentFiles
FileKey1=%LocalAppData%\Adobe\Acrobat\9.0\Cache\Search|*.*
FileKey2=%LocalLowAppData%\Adobe\Acrobat\9.0\Search|*.*
FileKey3=%LocalAppData%\Adobe\Acrobat\9.0\Cache|*.lst

[Adobe Acrobat 10.0]
ID=2186
LangSecRef=3021
Detect=HKCU\Software\Adobe\Adobe Acrobat\10.0
Default=True
RegKey1=HKCU\Software\Adobe\Adobe Acrobat\10.0\AVGeneral\cRecentFiles
FileKey1=%LocalAppData%\Adobe\Acrobat\10.0\Cache\Search|*.*
FileKey2=%LocalLowAppData%\Adobe\Acrobat\10.0\Search|*.*
FileKey3=%LocalAppData%\Adobe\Acrobat\10.0\Cache|*.lst

[Adobe Acrobat XI]
ID=2326
LangSecRef=3021
Detect=HKCU\Software\Adobe\Adobe Acrobat\11.0
Default=True
RegKey1=HKCU\Software\Adobe\Adobe Acrobat\11.0\AVGeneral\cRecentFiles
RegKey2=HKCU\Software\Adobe\Adobe Acrobat\11.0\CompoundDocs\cStoredBinder
FileKey1=%LocalAppData%\Adobe\Acrobat\11.0\Cache\|*.*
FileKey2=%LocalLowAppData%\Adobe\Acrobat\11.0\Search|*.*

[Adobe ImageReady 7.0]
ID=2023
LangSecRef=3021
Default=True
Detect=HKCU\Software\Adobe\ImageReady 7.0
RegKey1=HKCU\Software\Adobe\ImageReady 7.0\Preferences\URLHistory
RegKey2=HKCU\Software\Adobe\ImageReady 7.0\Preferences|SaveDir
RegKey3=HKCU\Software\Adobe\ImageReady 7.0\Preferences\RecentFiles

[Adobe ImageReady CS]
ID=2154
LangSecRef=3021
Detect=HKCU\Software\Adobe\ImageReady 8.0
Default=True
RegKey1=HKCU\Software\Adobe\ImageReady 8.0\Preferences\URLHistory
RegKey2=HKCU\Software\Adobe\ImageReady 8.0\Preferences|SaveDir
RegKey3=HKCU\Software\Adobe\ImageReady 8.0\Preferences\RecentFiles

[Adobe Photoshop 6.0]
ID=2024
LangSecRef=3021
Default=True
Detect=HKCU\Software\Adobe\Photoshop\6.0
RegKey1=HKCU\Software\Adobe\Photoshop\6.0\VisitedDirs

[Adobe Photoshop 7.0]
ID=2025
LangSecRef=3021
Default=True
Detect=HKCU\Software\Adobe\Photoshop\7.0
RegKey1=HKCU\Software\Adobe\Photoshop\7.0\VisitedDirs

[Adobe Photoshop CS]
ID=2026
LangSecRef=3021
Default=True
Detect=HKCU\Software\Adobe\Photoshop\8.0
RegKey1=HKCU\Software\Adobe\Photoshop\8.0\VisitedDirs

[Adobe Photoshop CS2]
ID=2027
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop\9.0
Default=True
RegKey1=HKCU\Software\Adobe\Photoshop\9.0\VisitedDirs
RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList
FileKey1=%appdata%\Adobe\CameraRaw\Cache|*.*

[Adobe Photoshop CS3]
ID=2139
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop\10.0
Default=True
RegKey1=HKCU\Software\Adobe\Photoshop\10.0\VisitedDirs
RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList

[Adobe Photoshop CS4]
ID=2140
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop\11.0
Default=True
RegKey1=HKCU\Software\Adobe\Photoshop\11.0\VisitedDirs
RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList

[Adobe Photoshop CS5]
ID=2156
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop\12.0
Default=True
RegKey1=HKCU\Software\Adobe\Photoshop\12.0\VisitedDirs
RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList

[Adobe Photoshop CS6]
ID=2323
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop\60.0
Default=True
RegKey1=HKCU\Software\Adobe\Photoshop\60.0\VisitedDirs
RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList

[Adobe Photoshop Elements 12]
ID=2367
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop Elements\12.0
Default=True
RegKey1=HKCU\Software\Adobe\Elements Organizer\12.0\CurrentMediaFilePath
RegKey2=HKCU\Software\Adobe\Photoshop Elements\12.0\CurrentMediaFilePath
RegKey3=HKCU\Software\Adobe\Photoshop Elements\12.0\common\settings\Elements MRU
RegKey4=HKCU\Software\Adobe\Photoshop Elements\12.0\VisitedDirs|STARTUPIMAGEDIRECTORY
FileKey1=%CommonAppData%\Adobe\Photoshop Elements\12.0\Locale\*_*\Photo Creations\temp|*.dat
FileKey2=%AppData%\Adobe\Elements Organizer\12.0\Organizer|Log.txt
FileKey3=%CommonAppData%\Adobe\Elements Organizer\Catalogs\My Catalog|face.thumb.9.cache;thumb.5.cache

[Adobe Illustrator]
ID=2144
LangSecRef=3021
Detect=HKCU\Software\Adobe\MediaBrowser\MRU\illustrator
Default=True
RegKey1=HKCU\Software\Adobe\MediaBrowser\MRU\illustrator\FileList

[Adobe Air]
ID=2201
LangSecRef=3024
DetectFile=%LocalAppData%\Adobe\Air
Default=True
FileKey1=%LocalAppData%\Adobe\Air\Logs|*.*

[Adobe Dreamweaver]
ID=2314
LangSecRef=3021
Detect=HKCU\Software\Adobe\MediaBrowser\MRU\Dreamweaver
Default=True
RegKey1=HKCU\Software\Adobe\MediaBrowser\MRU\Dreamweaver\FileList
RegKey2=HKCU\Software\Adobe\Dreamweaver CS6\Recent File List

[Adobe Premiere Pro CC]
ID=2354
LangSecRef=3021
Default=True
Detect=HKLM\SOFTWARE\Adobe\Premiere Pro\7.0
Detect2=HKCU\Software\Adobe\Premiere Pro\7.0
FileKey1=%ProgramFiles%\Adobe\Adobe Premiere Pro CC\cache|*-*-*.cache
FileKey2=%ProgramFiles%\Adobe\Adobe Premiere Pro CC\Required\data\cache|*.pcache
FileKey3=%AppData%\Adobe\dynamiclinkmanager\7.0\logs|*.log
FileKey4=%AppData%\Adobe\Lumetri\7.0\log|*.log
FileKey5=%AppData%\Adobe\Premiere Pro\7.0\logs|*.log
FileKey6=%AppData%\Adobe\Premiere Pro\7.0|Plugin Loading.log
FileKey7=%AppData%\Adobe\Common\Media Cache Files|*.mediasrc
FileKey8=%AppData%\Adobe\Common\Media Cache|*.mediasrc

[Adobe Premiere Elements 12]
ID=2369
LangSecRef=3021
Default=False
Detect=HKCU\Software\Adobe\Premiere Elements\12.0
RegKey1=HKCU\Software\Adobe\Premiere Elements\12.0\MRUDocuments
FileKey1=%AppData%\Adobe\Common\Thumbnail Cache|thumbnailDB
FileKey2=%AppData%\Adobe\Premiere Elements\12.0\logs|*.log
FileKey3=%AppData%\Adobe\Premiere Elements\12.0|Plugin Loading.log;CAHeadless Plugin Loading.log
FileKey4=%AppData%\Adobe\Premiere Elements 12.0\12.0\logs|*.log

[Acrobat Distiller 10]
ID=2264
LangSecRef=3021
DetectFile=%AppData%\Adobe\Acrobat\Distiller 10
Default=True
FileKey1=%AppData%\Adobe\Acrobat\Distiller 10|messages.log
FileKey2=%AppData%\Adobe\Acrobat\Distiller 10\Cache|*.*|RECURSE

[Advanced Searchbar]
ID=2202
LangSecRef=3022
DetectFile=%ProgramFiles%\AdvancedSearchbar\advancedsearchbar.dll
Default=True
FileKey1=%ProgramFiles%\AdvancedSearchbar\Cache|*.*
RegKey1=HKCU\Software\Advanced Searchbar\Toolbar\Historysearchbox1

[Yahoo Toolbar]
ID=2028
LangSecRef=3022
Detect=HKCU\Software\Yahoo\Companion
Default=True
RegKey1=HKCU\Software\Yahoo\Companion\SearchHistory

[Windows Live Toolbar]
ID=2029
LangSecRef=3022
Detect=HKCU\Software\Microsoft\MSN Apps\SearchBox
Default=True
RegKey1=HKCU\Software\Microsoft\MSN Apps\SearchBox|History
RegKey2=HKCU\Software\Microsoft\MSN Apps\MSN Toolbar|SearchStrings

[Google Toolbar]
ID=2030
LangSecRef=3022
Detect=HKCU\Software\Google\NavClient\1.1
Default=True
RegKey1=HKCU\Software\Google\NavClient\1.1\History
RegKey2=HKCU\Software\Google\NavClient\1.1\Options|KillPopupCount

[Google Toolbar IE]
ID=2031
LangSecRef=3022
Detect=HKCU\Software\Google\Google Toolbar
Default=True
FileKey1=%appdata%\Google\Local Search History|*.*

[Google Deskbar]
ID=2032
LangSecRef=3022
Detect=HKCU\Software\Google\Deskbar
Default=True
RegKey1=HKCU\Software\Google\Deskbar\termhistory
RegKey2=HKCU\Software\Google\Deskbar\urlhistory

[Google Calendar Sync]
ID=2159
LangSecRef=3022
Detect=HKCU\Software\Google\Google Calendar Sync
Default=True
FileKey1=%localappdata%\Google\Google Calendar Sync\logs|*.log

[Google Talk]
ID=2158
LangSecRef=3022
Detect=HKCU\Software\Google\Google Talk
DetectFile1=%ProgramFiles%\Google\Google Talk
DetectFile2=%appdata%\Google\Google Talk
DetectFile3=%localappdata%\Google\Google Talk
Default=False
FileKey1=%localappdata%\Google\Google Talk\status|*.txt
FileKey2=%localappdata%\Google\Google Talk\chatlogs|*.log

[Kantaris Media Player]
ID=2232
LangSecRef=3023
DetectFile=%AppData%\Christofer Persson\Kantaris Media Player
Default=True
FileKey1=%AppData%\Christofer Persson\Kantaris Media Player|*.jpg

[KMPlayer]
ID=2233
LangSecRef=3023
Detect=HKCU\Software\KMPlayer
Default=True
RegKey1=HKCU\Software\KMPlayer\KMP2.0|LastFileName
RegKey2=HKCU\Software\KMPlayer\WideAlbum\(Default Album)
RegKey3=HKCU\Software\KMPlayer\albumart|LastAlbumName

[Windows Media Player]
ID=2033
LangSecRef=3023
Detect=HKCU\Software\Microsoft\MediaPlayer\Player
Default=True
RegKey1=HKCU\Software\Microsoft\MediaPlayer\Player\RecentFileList
RegKey2=HKCU\Software\Microsoft\MediaPlayer\Player\RecentURLList
RegKey3=HKCU\Software\Microsoft\MediaPlayer\Preferences|LastPlayList
RegKey4=HKCU\Software\Microsoft\MediaPlayer\Preferences|LastPlayListIndex
RegKey5=HKCU\Software\Microsoft\MediaPlayer\Player\Settings|SaveAsDir
RegKey6=HKCU\Software\Microsoft\MediaPlayer\AutoComplete\MediaEdit
RegKey7=HKCU\Software\Microsoft\MediaPlayer\Radio\MRUList
RegKey8=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedIconPath
RegKey9=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedLargeLogoPath
FileKey1=%LocalAppData%\Microsoft\Media Player|lastplayed.wpl
FileKey2=%LocalAppData%\Microsoft\Media Player|cacheentry*.*|RECURSE
FileKey3=%LocalAppData%\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE
FileKey4=%LocalAppData%\Microsoft\Media Player\Transcoded Files Cache|*.*|RECURSE

[Windows Media Center]
ID=2278
LangSecRef=3023
DetectFile=%windir%\ehome\ehshell.exe
Default=True
FileKey1=%CommonAppData%\Microsoft\eHome\logs|*.*
FileKey2=%LocalAppData%\Microsoft\eHome|playlistcache.db
FileKey3=%PUBLIC%\Recorded TV\TempRec\TempSBE|*.*|RECURSE

[Real Player]
ID=2034
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\6.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins1
RegKey10=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins2
RegKey11=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins3
RegKey12=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins4
RegKey13=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins5
RegKey14=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins6
RegKey15=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins7
RegKey16=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins8
RegKey17=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\LastOpenFileDir
RegKey18=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips1
RegKey19=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips2
RegKey20=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips3
RegKey21=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips4
RegKey22=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips5
RegKey23=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips6
RegKey24=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips7
FileKey1=%AppData%\Real\RealOne Player|cookies.txt;ctd.dat;realplayer.ste
FileKey2=%AppData%\Real\RealOne Player\History|*.*
FileKey3=%AppData%\Real\RealPlayer|cookies.txt;ctd.dat;realplayer.ste
FileKey4=%AppData%\Real\RealPlayer\History|*.*
FileKey5=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey6=%AppData%\Real\RealPlayer\WatchFolders|*.log|RECURSE
FileKey7=%ProgramFiles%\Common Files\Real\Update_OB|RealPlayer-log.txt

[Real Player SP]
ID=2150
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\12.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins1
RegKey10=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins2
RegKey11=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins3
RegKey12=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins4
RegKey13=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins5
RegKey14=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins6
RegKey15=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins7
RegKey16=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins8
RegKey17=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\LastOpenFileDir
RegKey18=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips1
RegKey19=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips2
RegKey20=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips3
RegKey21=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips4
RegKey22=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips5
RegKey23=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips6
RegKey24=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips7
RegKey25=HKCU\Software\RealNetworks\RealConverter\12.0\Preferences\BrowsePath
RegKey26=HKCU\Software\RealNetworks\RealConverter\12.0\Preferences\DestinationPath
RegKey27=HKCU\Software\RealNetworks\RealTrimmer\12.0\Preferences\BrowsePath
FileKey1=%AppData%\Real\RealPlayer|cookies.txt;ctd.dat;realplayer.ste;RealPlayer-log.txt
FileKey2=%AppData%\Real\RealPlayer\History|*.*
FileKey3=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey4=%AppData%\Real\RealPlayer\WatchFolders|*.log|RECURSE

[Real Player 15]
ID=2276
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\15.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\LastOpenFileDir
RegKey10=HKCU\Software\RealNetworks\RealConverter\15.0\Preferences\BrowsePath
RegKey11=HKCU\Software\RealNetworks\RealConverter\15.0\Preferences\DestinationPath
RegKey12=HKCU\Software\RealNetworks\RealTrimmer\15.0\Preferences\BrowsePath
FileKey1=%AppData%\Real\RealPlayer|realplayer.ste;RealPlayer-log.txt
FileKey2=%AppData%\Real\RealPlayer\History|*.*
FileKey3=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey4=%AppData%\Real\RealPlayer\WatchFolders|*.log

[Real Player 16]
ID=2325
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\16.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\LastOpenFileDir
RegKey10=HKCU\Software\RealNetworks\RealConverter\16.0\Preferences\BrowsePath
RegKey11=HKCU\Software\RealNetworks\RealConverter\16.0\Preferences\DestinationPath
RegKey12=HKCU\Software\RealNetworks\RealTrimmer\16.0\Preferences\BrowsePath
FileKey1=%AppData%\Real\RealPlayer|realplayer.ste;RealPlayer-log.txt
FileKey2=%AppData%\Real\RealPlayer\History|*.*
FileKey3=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey4=%AppData%\Real\RealPlayer\WatchFolders|*.log

[Real Player Cloud]
ID=2034
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\17.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\LastOpenFileDir
RegKey10=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips1
RegKey11=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips2
RegKey12=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips3
RegKey13=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips4
RegKey14=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips5
RegKey15=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips6
RegKey16=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips7
FileKey1=%AppData%\Real\RealPlayer\Temp|*.*
FileKey2=%ProgramFiles%\Real\RealPlayer\RPDS|install.log
FileKey3=%CommonAppData%\Real\RealPlayer|*-log.txt;S-*
FileKey4=%CommonAppData%\RPDS\Content\images|*.jpg
FileKey5=%CommonAppData%\Real\RPDS\Logs|*.log;error.log*
FileKey6=%AppData%\Real\RealPlayer|RealPlayer-log.txt
FileKey7=%AppData%\Real\RealPlayer\ErrorLogs|*.log
FileKey8=%AppData%\Real\RealPlayer\History|*.*
FileKey9=%AppData%\Real\RealPlayer\ThumbsCache|*.*|RECURSE
FileKey10=%AppData%\Real\RealPlayer\WatchFolders|*_scan*
FileKey11=%ProgramFiles%\Real\RealPlayer\common|cookies.txt
ExcludeKey1=FILE|%AppData%\Real\RealPlayer\WatchFolders\*scan.out

[RealTimes]
ID=2409
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\18.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\LastOpenFileDir
RegKey10=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips1
RegKey11=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips2
RegKey12=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips3
RegKey13=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips4
RegKey14=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips5
RegKey15=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips6
RegKey16=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips7
RegKey17=HKCU\Software\RealNetworks\RealPlayer\18.0\Preferences\OpenLocationClips8
FileKey1=%AppData%\Real\RealPlayer\Temp|*.*
FileKey2=%ProgramFiles%\Real\RealPlayer\RPDS|install.log
FileKey3=%CommonAppData%\Real\RealPlayer|*-log.txt;S-*
FileKey4=%CommonAppData%\Real\RPDS\Content\images|*.jpg
FileKey5=%CommonAppData%\Real\RPDS\Logs|*.log;error.log*
FileKey6=%AppData%\Real\RealPlayer|RealPlayer-log.txt
FileKey7=%AppData%\Real\RealPlayer\ErrorLogs|*.log
FileKey8=%AppData%\Real\RealPlayer\History|*.*
FileKey9=%AppData%\Real\RealPlayer\ThumbsCache|*.*|RECURSE
FileKey10=%AppData%\Real\RealPlayer\WatchFolders|*_scan*
FileKey11=%ProgramFiles%\Real\RealPlayer\common|cookies.txt
ExcludeKey1=FILE|%AppData%\Real\RealPlayer\WatchFolders\*scan.out

[Quicktime Player]
ID=2035
LangSecRef=3023
Detect=HKLM\Software\Apple Computer, Inc.\QuickTime
Default=True
RegKey1=HKLM\Software\Apple Computer, Inc.\QuickTime\Recent Movies
FileKey1=%LocalLowAppData%\Apple Computer\QuickTime\downloads|*.*|RECURSE
FileKey2=%localappdata%\Apple Computer\QuickTime\downloads|*.*|RECURSE
FileKey3=%localappdata%\Apple Computer\QuickTime|QTPlayerSession.xml
FileKey4=%appdata%\Apple Computer\QuickTime|QTPlayerSession.xml
FileKey5=%CommonAppData%\Apple Computer\Installer Cache\QuickTime*|QuickTime.msi.backup
FileKey6=%userprofile%|QTPlayerSession.xml

[AVI Preview]
ID=2037
LangSecRef=3023
Detect=HKCU\Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more
Default=True
RegKey1=HKCU\Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more\Recent File List

[Steam]
ID=2203
LangSecRef=3023
DetectFile=%ProgramFiles%\Steam\Steam.exe
Default=True
FileKey1=%ProgramFiles%\Steam|*.mdmp;*.log
FileKey2=%ProgramFiles%\Steam\Dumps|*.*|RECURSE
FileKey3=%ProgramFiles%\Steam\Logs|*.*|RECURSE

[Xfire]
ID=2204
LangSecRef=3023
DetectFile=%ProgramFiles%\Xfire\Xfire.exe
Default=True
FileKey1=%CommonAppData%\Xfire|*-*-*-*-*-*-*.log;xfire_exe_log.txt;xfire_toucan_log.txt
FileKey2=%ProgramFiles%\Xfire|*-*-*-*-*-*-*.log;xfire_exe_log.txt;xfire_toucan_log.txt

[XML Spy]
ID=2038
LangSecRef=3021
Detect=HKCU\Software\Altova\XML Spy
Default=True
RegKey1=HKCU\Software\Altova\XML Spy\Recent File List
RegKey2=HKCU\Software\Altova\XML Spy\Recent Project List

[Oxygen XML Editor]
ID=2327
LangSecRef=3021
DetectFile=%AppData%\com.oxygenxml\
Default=True
FileKey1=%AppData%\com.oxygenxml\usageData|usageData.xml
FileKey2=%AppData%\com.oxygenxml|file.history
FileKey3=%AppData%\com.oxygenxml|project.history

[SWiSH]
ID=2039
LangSecRef=3023
Detect=HKCU\Software\DJJ Holdings\SWiSH
Default=True
RegKey1=HKCU\Software\DJJ Holdings\SWiSH\Recent File List

[Paint Shop Pro 7.0]
ID=2040
LangSecRef=3023
Detect=HKCU\Software\Jasc\Paint Shop Pro 7
Default=True
RegKey1=HKCU\Software\Jasc\Paint Shop Pro 7\Recent File List
RegKey2=HKCU\Software\Jasc\Animation Shop 3\Recent File List
RegKey3=HKCU\Software\Jasc\Paint Shop Pro 7\General|FolderHistory
RegKey4=HKCU\Software\Jasc\Paint Shop Pro 7\General|SaveAsDirectory
RegKey5=HKCU\Software\Jasc\Paint Shop Pro 7\General|SaveCopyDirectory

[Paint Shop Pro 8.0]
ID=2041
LangSecRef=3023
Detect=HKCU\Software\Jasc\Paint Shop Pro 8
Default=True
RegKey1=HKCU\Software\Jasc\Paint Shop Pro 8\Recent File List
RegKey2=HKCU\Software\Jasc\Paint Shop Pro 8\WorkspaceMRU
RegKey3=HKCU\Software\Jasc\Paint Shop Pro 8\JascCmdPyScript\RunScript|FileName
RegKey4=HKCU\Software\Jasc\Paint Shop Pro 8\JascCmdFile\FileSaveAs|FileFolder
RegKey5=HKCU\Software\Jasc\Paint Shop Pro 8\JascCmdNonGraphic\SaveWorkspace|WorkspaceFilename
RegKey6=HKCU\Software\Jasc\Paint Shop Pro 8\ScriptMRU

[Paint Shop Pro 9.0]
ID=2042
LangSecRef=3023
Detect=HKCU\Software\Jasc\Paint Shop Pro 9
Default=True
RegKey1=HKCU\Software\Jasc\Paint Shop Pro 9\Recent File List
RegKey2=HKCU\Software\Jasc\Paint Shop Pro 9\WorkspaceMRU
RegKey3=HKCU\Software\Jasc\Paint Shop Pro 9\JascCmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Jasc\Paint Shop Pro 9\JascCmdFile\FileOpen|Folder

[Paint Shop Pro X]
ID=2043
LangSecRef=3023
Detect=HKCU\Software\Corel\Paint Shop Pro\10
Default=True
RegKey1=HKCU\Software\Corel\Paint Shop Pro\10\Recent File List
RegKey2=HKCU\Software\Corel\Paint Shop Pro\10\WorkspaceMRU
RegKey3=HKCU\Software\Corel\Paint Shop Pro\10\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\Paint Shop Pro\10\CmdFile\FileOpen|Folder

[Paint Shop Pro XI]
ID=2044
LangSecRef=3023
Detect=HKCU\Software\Corel\Paint Shop Pro\11
Default=True
RegKey1=HKCU\Software\Corel\Paint Shop Pro\11\Recent File List
RegKey2=HKCU\Software\Corel\Paint Shop Pro\11\WorkspaceMRU
RegKey3=HKCU\Software\Corel\Paint Shop Pro\11\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\Paint Shop Pro\11\CmdFile\FileOpen|Folder

[Paint Shop Pro X2]
ID=2148
LangSecRef=3023
Detect=HKCU\Software\Corel\Paint Shop Pro\12
Detect2=HKCU\Software\Corel\Paint Shop Pro\12.5
Default=True
RegKey1=HKCU\Software\Corel\Paint Shop Pro\12\Recent File List
RegKey2=HKCU\Software\Corel\Paint Shop Pro\12\WorkspaceMRU
RegKey3=HKCU\Software\Corel\Paint Shop Pro\12\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\Paint Shop Pro\12\CmdFile\FileOpen|Folder
RegKey5=HKCU\Software\Corel\Paint Shop Pro\12.5\Recent File List
RegKey6=HKCU\Software\Corel\Paint Shop Pro\12.5\WorkspaceMRU
RegKey7=HKCU\Software\Corel\Paint Shop Pro\12.5\CmdFile\FileSaveAs|FileFolder
RegKey8=HKCU\Software\Corel\Paint Shop Pro\12.5\CmdFile\FileOpen|Folder

[Paint Shop Pro X3]
ID=2167
LangSecRef=3023
Detect=HKCU\Software\Corel\Paint Shop Pro\13
Default=True
RegKey1=HKCU\Software\Corel\Paint Shop Pro\13\Recent File List
RegKey2=HKCU\Software\Corel\Paint Shop Pro\13\WorkspaceMRU
RegKey3=HKCU\Software\Corel\Paint Shop Pro\13\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\Paint Shop Pro\13\CmdFile\FileOpen|Folder

[Corel PaintShop Pro X4]
ID=2273
LangSecRef=3023
Detect=HKCU\Software\Corel\PaintShop Pro\X4
Default=True
RegKey1=HKCU\Software\Corel\PaintShop Pro\X4\Recent File List
RegKey2=HKCU\Software\Corel\PaintShop Pro\X4\UI Customization\EN\WorkspaceMRU
RegKey3=HKCU\Software\Corel\PaintShop Pro\X4\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\PaintShop Pro\X4\CmdFile\FileOpen|Folder
RegKey5=HKCU\Software\Corel\PaintShop Pro\X4\ScriptMRU

[Corel PaintShop Pro X5]
ID=2316
LangSecRef=3023
Detect=HKCU\Software\Corel\PaintShop Pro\X5
Default=True
RegKey1=HKCU\Software\Corel\PaintShop Pro\X5\Recent File List
RegKey2=HKCU\Software\Corel\PaintShop Pro\X5\UI Customization\EN\WorkspaceMRU
RegKey3=HKCU\Software\Corel\PaintShop Pro\X5\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\PaintShop Pro\X5\CmdFile\FileOpen|Folder
RegKey5=HKCU\Software\Corel\PaintShop Pro\X5\ScriptMRU

[Corel PaintShop Pro X6]
ID=2364
LangSecRef=3023
Detect=HKCU\Software\Corel\PaintShop Pro\X6
Default=True
RegKey1=HKCU\Software\Corel\PaintShop Pro\X6\Recent File List
RegKey2=HKCU\Software\Corel\PaintShop Pro\X6\CmdFile\FileSaveAs|FileFolder
RegKey3=HKCU\Software\Corel\PaintShop Pro\X6\CmdFile\FileOpen|Folder
RegKey4=HKCU\Software\Corel\PaintShop Pro\X6\ScriptMRU
FileKey1=%ProgramFiles%\Corel\Corel PaintShop Pro X6\PlugIns\*|*.log
FileKey2=%LocalAppData%\Corel PaintShop Pro\16.0\Thumbs|*.*|RECURSE

[MS Works 4.0]
ID=2045
LangSecRef=3021
Detect= HKCU\Software\Microsoft\Works\4.0
Default=True
RegKey1=HKCU\Software\Microsoft\Works\4.0\Recent File List

[Office 97]
ID=2046
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\8.0\Common
Default=True
FileKey1=%appdata%\Microsoft\Office\Recent|*.*
RegKey1=HKCU\Software\Microsoft\Office\8.0\Excel\Recent File List
RegKey2=HKCU\Software\Microsoft\Office\8.0\Project\Recent File List
RegKey3=HKCU\Software\Microsoft\Office\8.0\PowerPoint\Recent File List
RegKey4=HKCU\Software\Microsoft\Office\8.0\PowerPoint\Recent Folder List
RegKey5=HKCU\Software\Microsoft\Office\8.0\Common\Internet\LocationOfComponents
RegKey6=HKCU\Software\Microsoft\Office\8.0\Access\Settings

[Office XP]
ID=2047
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\10.0\Common
Default=True
FileKey1=%appdata%\Microsoft\Office\Recent|*.*
RegKey1=HKCU\Software\Microsoft\Office\10.0\PowerPoint\Recent File List
RegKey2=HKCU\Software\Microsoft\Office\10.0\Excel\Recent Files
RegKey3=HKCU\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent File List
RegKey4=HKCU\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent Page List
RegKey5=HKCU\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent Web List
RegKey6=HKCU\Software\Microsoft\Office\10.0\Word\Recent Templates
RegKey7=HKCU\Software\Microsoft\Office\10.0\Common\Internet|UseRWHlinkNavigation

[Office 2003]
ID=2048
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\11.0\Common
Default=True
FileKey1=%AppData%\Microsoft\Office\Recent|*.*
FileKey2=%AppData%\Microsoft\Office|*.tmp|RECURSE
RegKey1=HKCU\Software\Microsoft\Office\11.0\Excel\Recent Files
RegKey2=HKCU\Software\Microsoft\Office\11.0\Common\Open Find\Microsoft Office Word\Settings\Save As\File Name MRU
RegKey3=HKCU\Software\Microsoft\Office\11.0\PowerPoint\Recent File List
RegKey4=HKCU\Software\Microsoft\Office\11.0\Publisher\Recent File List
RegKey5=HKCU\Software\Microsoft\Office\11.0\InfoPath\Recent File List
RegKey6=HKCU\Software\Microsoft\Office\11.0\Common\Internet\Server Cache
RegKey7=HKCU\Software\Microsoft\Office\11.0\Common\Internet|UseRWHlinkNavigation
RegKey8=HKCU\Software\Microsoft\MSPaper 11.0\Persist File Name
RegKey9=HKCU\Software\Microsoft\MSPaper 11.0\Recent File List
RegKey10=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile1
RegKey11=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile2
RegKey12=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile3
RegKey13=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile4
RegKey14=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile5
RegKey15=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile6
RegKey16=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile7
RegKey17=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile8
RegKey18=HKCU\Software\Microsoft\Office\11.0\Outlook\Contact|QuickFindMRU
RegKey19=HKCU\Software\Microsoft\Office\11.0\Outlook\Contact|StripSearchMRU
RegKey20=HKCU\Software\Microsoft\Office\11.0\Outlook\Preferences|LocationMRU
RegKey21=HKCU\Software\Microsoft\Office\11.0\Excel Viewer\Recent Files
RegKey22=HKCU\Software\Microsoft\Office\Common|FontBmpCache

[Office 2007]
ID=2049
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\12.0\Common
Default=True
FileKey1=%AppData%\Microsoft\Office\Recent|*.*
FileKey2=%AppData%\Microsoft\Office|*.tmp|RECURSE
RegKey1=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Word\Settings\Save As\File Name MRU
RegKey2=HKCU\Software\Microsoft\Office\12.0\Word\File MRU
RegKey3=HKCU\Software\Microsoft\Office\12.0\Excel\File MRU
RegKey4=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU1
RegKey5=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU2
RegKey6=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU3
RegKey7=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU4
RegKey8=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU5
RegKey9=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU6
RegKey10=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU7
RegKey11=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU8
RegKey12=HKCU\Software\Microsoft\Office\12.0\PowerPoint\File MRU
RegKey13=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Save As\File Name MRU
RegKey14=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office InfoPath\Settings\Open\File Name MRU
RegKey15=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office InfoPath\Settings\Save As\File Name MRU
RegKey16=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Excel\Settings\Save As\File Name MRU
RegKey17=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Publisher\Settings\Save As\File Name MRU
RegKey18=HKCU\Software\Microsoft\Office\12.0\Publisher\Recent File List
RegKey19=HKCU\Software\Microsoft\Office\12.0\InfoPath\Recent File List
RegKey20=HKCU\Software\Microsoft\Office\12.0\Excel Viewer\Viewer File MRU
RegKey21=HKCU\Software\Microsoft\Office\12.0\Clip Organizer\Search\Last Query
RegKey22=HKCU\Software\Microsoft\Office\Common|FontBmpCache

[Office 2010]
ID=2151
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\14.0\Common
Default=True
FileKey1=%AppData%\Microsoft\Office\Recent|*.*
FileKey2=%AppData%\Microsoft\Office|*.tmp|RECURSE
FileKey3=%LocalAppData%\Microsoft\Office\14.0\OfficeFileCache|*.*|RECURSE
RegKey1=HKCU\Software\Microsoft\Office\14.0\Access\File MRU
RegKey2=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Default Database Path\File Name MRU
RegKey3=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Default Theme for New Databases\File Name MRU
RegKey4=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\File New Database\File Name MRU
RegKey5=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\File Open\File Name MRU
RegKey6=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\File Save\File Name MRU
RegKey7=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Open\File Name MRU
RegKey8=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Save As\File Name MRU
RegKey9=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Default Database Path\File Name MRU
RegKey10=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Default Theme for New Databases\File Name MRU
RegKey11=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\File New Database\File Name MRU
RegKey12=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\File Open\File Name MRU
RegKey13=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\File Save\File Name MRU
RegKey14=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Open\File Name MRU
RegKey15=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Save As\File Name MRU
RegKey16=HKCU\Software\Microsoft\Office\14.0\Word\File MRU
RegKey17=HKCU\Software\Microsoft\Office\14.0\Word\Place MRU
RegKey18=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\Browse\File Name MRU
RegKey19=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\File Open\File Name MRU
RegKey20=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\File Save\File Name MRU
RegKey21=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\Modify Location\File Name MRU
RegKey22=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\Save As\File Name MRU
RegKey23=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\Browse\File Name MRU
RegKey24=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\File Open\File Name MRU
RegKey25=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\File Save\File Name MRU
RegKey26=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\Modify Location\File Name MRU
RegKey27=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\Save As\File Name MRU
RegKey28=HKCU\Software\Microsoft\Office\14.0\Excel\File MRU
RegKey29=HKCU\Software\Microsoft\Office\14.0\Excel\Place MRU
RegKey30=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\Browse\File Name MRU
RegKey31=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\File Open\File Name MRU
RegKey32=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\File Save\File Name MRU
RegKey33=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\Modify Location\File Name MRU
RegKey34=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\Save As\File Name MRU
RegKey35=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\Browse\File Name MRU
RegKey36=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\File Open\File Name MRU
RegKey37=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\File Save\File Name MRU
RegKey38=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\Modify Location\File Name MRU
RegKey39=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\Save As\File Name MRU
RegKey40=HKCU\Software\Microsoft\Office\14.0\Publisher\File MRU
RegKey41=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\File Open\File Name MRU
RegKey42=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\File Save\File Name MRU
RegKey43=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\Open Publication\File Name MRU
RegKey44=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\Save As\File Name MRU
RegKey45=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\File Open\File Name MRU
RegKey46=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\File Save\File Name MRU
RegKey47=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\Open Publication\File Name MRU
RegKey48=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\Save As\File Name MRU
RegKey49=HKCU\Software\Microsoft\Office\14.0\PowerPoint\File MRU
RegKey50=HKCU\Software\Microsoft\Office\14.0\PowerPoint\Place MRU
RegKey51=HKCU\Software\Microsoft\Office\14.0\PowerPoint\RecentFolderList
RegKey52=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\Browse\File Name MRU
RegKey53=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\File Open\File Name MRU
RegKey54=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\File Save\File Name MRU
RegKey55=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\Open\File Name MRU
RegKey56=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\Save As\File Name MRU
RegKey57=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Browse\File Name MRU
RegKey58=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\File Open\File Name MRU
RegKey59=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\File Save\File Name MRU
RegKey60=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Open\File Name MRU
RegKey61=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Save As\File Name MRU
RegKey62=HKCU\Software\Microsoft\Office\14.0\InfoPath\Designer File MRU
RegKey63=HKCU\Software\Microsoft\Office\14.0\InfoPath\Filler File MRU
RegKey64=HKCU\Software\Microsoft\Office\14.0\InfoPath\Recent Templates
RegKey65=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Browse\File Name MRU
RegKey66=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\File Open\File Name MRU
RegKey67=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\File Save\File Name MRU
RegKey68=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Open\File Name MRU
RegKey69=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Open in Design Mode\File Name MRU
RegKey70=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Save As\File Name MRU
RegKey71=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Browse\File Name MRU
RegKey72=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\File Open\File Name MRU
RegKey73=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\File Save\File Name MRU
RegKey74=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Open\File Name MRU
RegKey75=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Open in Design Mode\File Name MRU
RegKey76=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Save As\File Name MRU
RegKey77=HKCU\Software\Microsoft\Office\14.0\OneNote\OpenNotebooks
RegKey78=HKCU\Software\Microsoft\Office\14.0\OneNote\RecentNotebooks
RegKey79=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\File Open\File Name MRU
RegKey80=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\File Save\File Name MRU
RegKey81=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Open Backup\File Name MRU
RegKey82=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Open Notebook\File Name MRU
RegKey83=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Save As\File Name MRU
RegKey84=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Select File\File Name MRU
RegKey85=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Select Folder\File Name MRU
RegKey86=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\File Open\File Name MRU
RegKey87=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\File Save\File Name MRU
RegKey88=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Open Backup\File Name MRU
RegKey89=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Open Notebook\File Name MRU
RegKey90=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Save As\File Name MRU
RegKey91=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Select File\File Name MRU
RegKey92=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Select Folder\File Name MRU
RegKey93=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\Create or Open Outlook Data File\File Name MRU
RegKey94=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\File Open\File Name MRU
RegKey95=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\File Save\File Name MRU
RegKey96=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\Open Calendar\File Name MRU
RegKey97=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\Open Outlook Data File\File Name MRU
RegKey98=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\Create or Open Outlook Data File\File Name MRU
RegKey99=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\File Open\File Name MRU
RegKey100=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\File Save\File Name MRU
RegKey101=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\Open Calendar\File Name MRU
RegKey102=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\Open Outlook Data File\File Name MRU
RegKey103=HKCU\Software\Microsoft\Office\14.0\Clip Organizer\Search\Last Query
RegKey104=HKCU\Software\Microsoft\Office\Common|FontBmpCache
RegKey105=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly1
RegKey106=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly2
RegKey107=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly3
RegKey108=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly4
RegKey109=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template1
RegKey110=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template2
RegKey111=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template3
RegKey112=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template4
RegKey113=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile1
RegKey114=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile2
RegKey115=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile3
RegKey116=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile4
RegKey117=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile5
RegKey118=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile6
RegKey119=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile7
RegKey120=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile8
RegKey121=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile9
RegKey122=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile10
RegKey123=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile11
RegKey124=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile12
RegKey125=HKCU\Software\Microsoft\Office\14.0\Outlook\Search

[Office 2013]
ID=2318
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\15.0\Common
Default=True
FileKey1=%AppData%\Microsoft\Office\Recent|*.*
FileKey2=%LocalAppData%\Microsoft\MSOIdentityCRL\production\temp|*.*_sync
FileKey3=%AppData%\Microsoft\PowerPoint\Sync\Temp|*.*
RegKey1=HKCU\Software\Microsoft\Office\15.0\Access\File MRU
RegKey2=HKCU\Software\Microsoft\Office\15.0\Word\File MRU
RegKey3=HKCU\Software\Microsoft\Office\15.0\Word\Place MRU
RegKey4=HKCU\Software\Microsoft\Office\15.0\Excel\File MRU
RegKey5=HKCU\Software\Microsoft\Office\15.0\Excel\Place MRU
RegKey6=HKCU\Software\Microsoft\Office\15.0\Publisher\File MRU
RegKey7=HKCU\Software\Microsoft\Office\15.0\PowerPoint\File MRU
RegKey8=HKCU\Software\Microsoft\Office\15.0\PowerPoint\Place MRU
RegKey9=HKCU\Software\Microsoft\Office\15.0\OneNote\RecentNotebooks
RegKey10=HKCU\Software\Microsoft\Office\15.0\Word\User MRU
RegKey11=HKCU\Software\Microsoft\Office\15.0\Excel\User MRU
RegKey12=HKCU\Software\Microsoft\Office\15.0\Access\User MRU
RegKey13=HKCU\Software\Microsoft\Office\15.0\Publisher\User MRU
RegKey14=HKCU\Software\Microsoft\Office\15.0\PowerPoint\User MRU
ExcludeKey1=FILE|%AppData%\Microsoft\Office\Recent\|Welcome to Word.LNK
ExcludeKey2=FILE|%AppData%\Microsoft\Office\Recent\|Welcome to Publisher.LNK
ExcludeKey3=FILE|%AppData%\Microsoft\Office\Recent\|Welcome to OneNote.LNK

[Office 2016]
ID=2412
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\16.0\Common
Default=False
FileKey1=%AppData%\Microsoft\Office\Recent|*.*
FileKey2=%LocalAppData%\Microsoft\MSOIdentityCRL\production\temp|._sync
FileKey3=%AppData%\Microsoft\PowerPoint\Sync\Temp|*.*
FileKey4=%LocalAppData%\Microsoft\Office\16.0\WebServiceCache|*.*|RECURSE
FileKey5=%LocalAppData%\Microsoft\Office\16.0\OfficeFileCache|*.*
RegKey1=HKCU\Software\Microsoft\Office\16.0\Access\File MRU
RegKey2=HKCU\Software\Microsoft\Office\16.0\Word\File MRU
RegKey3=HKCU\Software\Microsoft\Office\16.0\Word\Place MRU
RegKey4=HKCU\Software\Microsoft\Office\16.0\Excel\File MRU
RegKey5=HKCU\Software\Microsoft\Office\16.0\Excel\Place MRU
RegKey6=HKCU\Software\Microsoft\Office\16.0\Publisher\File MRU
RegKey7=HKCU\Software\Microsoft\Office\16.0\PowerPoint\File MRU
RegKey8=HKCU\Software\Microsoft\Office\16.0\PowerPoint\Place MRU
RegKey9=HKCU\Software\Microsoft\Office\16.0\OneNote\RecentNotebooks
RegKey10=HKCU\Software\Microsoft\Office\16.0\Word\User MRU
RegKey11=HKCU\Software\Microsoft\Office\16.0\Excel\User MRU
RegKey12=HKCU\Software\Microsoft\Office\16.0\Access\User MRU
RegKey13=HKCU\Software\Microsoft\Office\16.0\Publisher\User MRU
RegKey14=HKCU\Software\Microsoft\Office\16.0\PowerPoint\User MRU
ExcludeKey1=FILE|%AppData%\Microsoft\Office\Recent|Welcome to Word.LNK
ExcludeKey2=FILE|%AppData%\Microsoft\Office\Recent|Welcome to Publisher.LNK
ExcludeKey3=FILE|%AppData%\Microsoft\Office\Recent|Welcome to OneNote.LNK

[Installshield Developer 7.0]
ID=2050
LangSecRef=3021
Detect=HKCU\Software\InstallShield\Developer\7.0
Default=True
RegKey1=HKCU\Software\InstallShield\Developer\7.0\Recent File List

[Macromedia Flash 4.0]
ID=2051
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Flash 4
Default=True
RegKey1=HKCU\Software\Macromedia\Flash 4\Recent File List

[Macromedia Flash 5.0]
ID=2052
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Flash 5
Default=True
RegKey1=HKCU\Software\Macromedia\Flash 5\Recent File List

[Macromedia Flash MX]
ID=2053
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Flash 6
Default=True
RegKey1=HKCU\Software\Macromedia\Flash 6\Recent File List

[Macromedia Flash MX 2004]
ID=2054
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Flash 7
Default=True
RegKey1=HKCU\Software\Macromedia\Flash 7\Recent File List

[Adobe Flash Player]
ID=2055
LangSecRef=3023
Detect=HKCR\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}
Detect2=HKCU\Software\Macromedia\FlashPlayer
DetectFile=%SystemDirectory%\Macromed\flash\flashplayer.xpt
Default=True
SpecialKey1=N_FLASH_COOKIES
RegKey1=HKCU\Software\Macromedia\FlashPlayer|RecentMovie1
RegKey2=HKCU\Software\Macromedia\FlashPlayer|RecentMovie2
RegKey3=HKCU\Software\Macromedia\FlashPlayer|RecentMovie3
RegKey4=HKCU\Software\Macromedia\FlashPlayer|RecentMovie4
RegKey5=HKCU\Software\Macromedia\FlashPlayer|RecentMovie5
RegKey6=HKCU\Software\Macromedia\FlashPlayer|RecentMovie6
RegKey7=HKCU\Software\Macromedia\FlashPlayer|RecentMovie7
RegKey8=HKCU\Software\Macromedia\FlashPlayer|RecentMovie8
RegKey9=HKCU\Software\Macromedia\FlashPlayer|RecentMovie9

[Macromedia Homesite 5.0]
ID=2056
LangSecRef=3021
Detect=HKCU\Software\Macromedia\HomeSite5
Default=True
RegKey1=HKCU\Software\Macromedia\HomeSite5\RecentFiles

[Macromedia Fireworks 6.0]
ID=2057
LangSecRef=3021
Default=True
Detect=HKCU\Software\Macromedia\Firework 6
RegKey1=HKCU\Software\Macromedia\Firework 6\Recent File List

[Adobe Fireworks 6.0]
ID=2334
LangSecRef=3021
Detect=HKCU\Software\Adobe\Fireworks\12.0
Default=True
RegKey1=HKCU\Software\Adobe\Fireworks\12.0\ini\Recent File List
FileKey1=%AppData%\Adobe\Fireworks CS6|Project_Log.htm;Web_Log.htm

[Macromedia Dreamweaver MX]
ID=2058
LangSecRef=3021
Default=True
Detect=HKCU\Software\Macromedia\Dreamweaver MX 2004
RegKey1=HKCU\Software\Macromedia\Dreamweaver MX 2004\Recent File List

[Macromedia Shockwave 10]
ID=2189
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Shockwave 10
Detect2=HKLM\Software\Macromedia\Shockwave 10
Default=True
RegKey1=HKCU\Software\Macromedia\Shockwave 10\movies
RegKey2=HKCU\Software\AppDataLow\Software\Macromedia\Shockwave 10\movies
RegKey3=HKCU\Software\AppDataLow\Software\Macromedia\Shockwave 10\statistics
FileKey1=%LocalLowAppData%\Macromedia\Shockwave Player|Shockwave Log

[Macromedia Shockwave 11]
ID=2190
LangSecRef=3023
Detect=HKLM\Software\Adobe\Shockwave 11
Detect2=HKCU\Software\Adobe\Shockwave 11
Default=True
RegKey1=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\moviestats\movies
RegKey2=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\moviestats\sessions
RegKey3=HKCU\Software\Adobe\Shockwave 11\moviestats\movies
RegKey4=HKCU\Software\Adobe\Shockwave 11\moviestats\sessions
RegKey5=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\movies
RegKey6=HKCU\Software\Adobe\Shockwave 11\movies
RegKey7=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\statistics
FileKey1=%LocalLowAppData%\Adobe\Shockwave Player 11|Shockwave Log

[Microsoft Silverlight]
ID=2169
LangSecRef=3023
DetectFile=%LocalAppData%\Microsoft\Silverlight\is
DetectFile2=%LocalLowAppData%\Microsoft\Silverlight\is
Detect=HKLM\Software\Microsoft\Silverlight
Default=True
FileKey1=%LocalAppData%\Microsoft\Silverlight\is|*.*|RECURSE
FileKey2=%LocalLowAppData%\Microsoft\Silverlight\is|*.*|RECURSE
FileKey3=%LocalLowAppData%\Microsoft\Silverlight|*.tmp
ExcludeKey1=FILE|%LocalAppData%\Microsoft\Silverlight\is\*\|disabled.dat
ExcludeKey2=FILE|%LocalLowAppData%\Microsoft\Silverlight\is\*\|disabled.dat

[Ulead Smart Saver Pro 3.0]
ID=2059
LangSecRef=3023
Detect=HKCU\Software\Ulead Systems\Ulead SmartSaver Pro\3.0
Default=True
RegKey1=HKCU\Software\Ulead Systems\Ulead SmartSaver Pro\3.0\Recent File List

[Norton AntiVirus]
ID=2060
LangSecRef=3024
Detect=HKLM\SOFTWARE\Symantec\Norton AntiVirus NT\Install\7.50
Default=True
FileKey1=%commonappdata%\Symantec\Norton AntiVirus Corporate Edition\7.5\Logs|*.log
FileKey2=%localappdata%\Symantec\Norton AntiVirus Corporate Edition\7.5\Logs|*.log
FileKey3=%commonappdata%\Symantec\LiveUpdate\Downloads|*.*

[Symantec AntiVirus]
ID=2061
LangSecRef=3024
Detect=HKLM\SOFTWARE\Symantec\Symantec AntiVirus\Install\7.50
Default=True
FileKey1=%commonappdata%\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs|*.log
FileKey2=%localappdata%\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs|*.log
FileKey3=%commonappdata%\Symantec\LiveUpdate\Downloads|*.*

[MS Snapshot Viewer]
ID=2062
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Snapshot Viewer
Default=True
RegKey1=HKCU\Software\Microsoft\Snapshot Viewer\Recent File List

[Remote Desktop]
ID=2063
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Terminal Server Client
Default=True
FileKey1=%localappdata%\Microsoft\Terminal Server Client\Cache|*.*
RegKey1=HKCU\Software\Microsoft\Terminal Server Client\Default
ExcludeKey1=REG|HKCU\Software\Microsoft\Terminal Server Client\Default\AddIns

[MS Management Console]
ID=2064
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Microsoft Management Console
Default=True
RegKey1=HKCU\Software\Microsoft\Microsoft Management Console\Recent File List

[MS Wordpad]
ID=2065
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad
Default=True
RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Recent File List

[MS Paint]
ID=2066
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Paint
Default=True
RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Paint\Recent File List

[MS Photo Editor]
ID=2067
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor
Default=True
RegKey1=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile1
RegKey2=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile2
RegKey3=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile3
RegKey4=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile4
RegKey5=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType1
RegKey6=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType2
RegKey7=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType3
RegKey8=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType4

[MS Search]
ID=2266
LangSecRef=3025
DetectFile=%CommonAppData%\Microsoft\Search
Default=True
FileKey1=%CommonAppData%\Microsoft\Search|*.log|RECURSE

[Search Charm History]
ID=2411
LangSecRef=3025
Default=True
DetectOS=6.3|6.3
FileKey1=%LocalAppData%\Microsoft\Windows\ConnectedSearch\History|*.lnk

[Nero Burning ROM]
ID=2068
LangSecRef=3021
Detect=HKCU\Software\ahead\Nero - Burning Rom
Default=True
RegKey1=HKCU\Software\ahead\Nero - Burning Rom\Settings|BrowserDir
RegKey2=HKCU\Software\ahead\Nero - Burning Rom\Settings|ImageDir
RegKey3=HKCU\Software\ahead\Nero - Burning Rom\Settings|WorkingDir
RegKey4=HKLM\Software\Ahead\Nero - Burning Rom\Settings|ImageDir
RegKey5=HKLM\Software\Ahead\Nero - Burning Rom\Settings|BootImageDir
RegKey6=HKCU\Software\Ahead\Nero - Burning Rom\Recent File List
RegKey7=HKCU\Software\Ahead\Cover Designer\Recent File List
RegKey8=HKCU\Software\Ahead\Nero Wave Editor\Recent File List
FileKey1=%ProgramFiles%\Ahead\Nero|NeroHistory.log

[Nero Burning ROM 9]
ID=2142
LangSecRef=3021
Detect=HKCU\Software\Nero\Nero 9
Default=True
RegKey1=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|BrowserDir
RegKey2=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|ImageDir
RegKey3=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|WorkingDir
RegKey4=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|BootImageDir
RegKey5=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Recent File List
FileKey1=%appdata%\Nero\Nero 9\Nero Burning ROM|*.log

[Nero Burning ROM 10]
ID=2155
LangSecRef=3021
Detect=HKCU\Software\Nero\Nero 10
Default=True
RegKey1=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|BrowserDir
RegKey2=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|ImageDir
RegKey3=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|WorkingDir
RegKey4=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|BootImageDir
RegKey5=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|NeroCompilation
RegKey6=HKCU\Software\Nero\Nero 10\Nero\Recent File List
FileKey1=%appdata%\Nero\Nero 10\Nero Burning ROM|*.log

[Nero Burning ROM 2014]
ID=2365
LangSecRef=3021
Detect=HKCU\Software\Nero\Nero 15\Nero Burning ROM
Default=True
RegKey1=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BrowserDir
RegKey2=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|ImageDir
RegKey3=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|WorkingDir
RegKey4=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BootImageDir
RegKey5=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|NeroCompilation
RegKey6=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings\NeroIsoListView|IsoPath
RegKey7=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Recent File List
RegKey8=HKCU\Software\Nero\Nero 15\Nero Burning ROM\AutoSave|LastAutoSave
RegKey9=HKCU\Software\Nero\Nero 15\Nero Burning ROM\General|LastSaveTrackPath
FileKey1=%AppData%\Nero\Nero 15\Nero Burning ROM|NeroHistory.log

[Nero 12 Platinum HD Suite]
ID=2331
LangSecRef=3021
Detect=HKLM\Software\Nero\Nero 12
Default=True
RegKey1=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Recent File List
RegKey2=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|BrowserDir
RegKey3=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|ImageDir
RegKey4=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|NeroCompilation
RegKey5=HKCU\Software\Nero\Nero 12\Nero Express\Recent File List
RegKey6=HKCU\Software\Nero\Nero 12\Nero Express\Settings|WorkingDir
RegKey7=HKCU\Software\Nero\Nero 12\Nero Express\Settings|BrowserDir
RegKey8=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastISODir
RegKey9=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastAudioDir
RegKey10=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastVideoDVDKey
RegKey11=HKCU\Software\Nero\Nero 12\Nero WaveEditor\Recent File List
RegKey12=HKCU\Software\Nero\Nero 12\Nero CoverDesigner\Recent File List
FileKey1=%CommonAppData%\Nero\PeakFiles|*.tmp
FileKey2=%AppData%\Nero\Nero 12\Nero Recode\AnalysisData|*.jpg;*.xml
FileKey3=%AppData%\Nero\Nero 12\Nero BackItUp\Cache|*.txt
FileKey4=%AppData%\Nero\Nero 12\Nero Burning ROM|*.log;*Burning*.dmp
FileKey5=%AppData%\Nero\Nero 12\Nero3D|Direct3D.log
FileKey6=%AppData%\Nero\Nero 12\Nero Vision|NeroVideoLog.txt
FileKey7=%SystemDrive%\Windows\SysWOW64|*-NeroRescueAgent.txt

[Nero 14 Platinum HD Suite]
ID=2375
LangSecRef=3021
Detect=HKLM\Software\Nero\Nero 15
Default=True
RegKey1=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|WorkingDir
RegKey2=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BootImageDir
RegKey3=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings\NeroIsoListView|IsoPath
RegKey4=HKCU\Software\Nero\Nero 15\Nero Burning ROM\AutoSave|LastAutoSave
RegKey5=HKCU\Software\Nero\Nero 15\Nero Burning ROM\General|LastSaveTrackPath
RegKey6=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Recent File List
RegKey7=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BrowserDir
RegKey8=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|ImageDir
RegKey9=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|NeroCompilation
RegKey10=HKCU\Software\Nero\Nero 15\Nero Express\Recent File List
RegKey11=HKCU\Software\Nero\Nero 15\Nero Express\Settings|WorkingDir
RegKey12=HKCU\Software\Nero\Nero 15\Nero Express\Settings|BrowserDir
RegKey13=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastISODir
RegKey14=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastAudioDir
RegKey15=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastVideoDVDKey
RegKey16=HKCU\Software\Nero\Nero 15\Nero WaveEditor\Recent File List
RegKey17=HKCU\Software\Nero\Nero 15\Nero CoverDesigner\Recent File List
FileKey1=%CommonAppData%\Nero\PeakFiles|*.tmp
FileKey2=%AppData%\Nero\Nero 15\Nero Recode\AnalysisData|*.jpg;*.xml
FileKey3=%AppData%\Nero\Nero 15\Nero BackItUp\Cache|*.txt
FileKey4=%AppData%\Nero\Nero 15\Nero Burning ROM|*.log;*Burning*.dmp
FileKey5=%SystemDrive%\Windows\SysWOW64|*-NeroRescueAgent.txt
FileKey6=%AppData%\Nero\Nero 15\Nero3D|Direct3D.log
FileKey7=%AppData%\Nero\Nero 15\Nero Vision|NeroVideoLog.txt
FileKey8=%AppData%\Nero\Nero 15\Nero Welcome|LogFile.txt
FileKey9=%AppData%\Nero\Nero Blu-ray Player|LogFile.txt
FileKey10=%AppData%\Nero\OnlineServices|LoadData.tmp;LoadData_bak.tmp
FileKey11=%AppData%\Nero\ControlCenter|Sync.log
FileKey12=%CommonAppData%\Nero\Nero 11\ACME|ACME.log
FileKey13=%CommonAppData%\Nero\ACME|ACME.log

[Nero Video 11]
ID=2274
LangSecRef=3023
Detect=HKCU\Software\Nero\Nero 11\Nero Vision
Default=True
FileKey1=%AppData%\Nero\Nero 11\Nero Vision|*.log;*.txt
FileKey2=%AppData%\Nero\Nero 11\Nero Vision\Log|*.*
FileKey3=%AppData%\Nero\Nero 11\Nero Vision\NVFACache|*.*
FileKey4=%AppData%\Nero\Nero 11\Nero3D|*.log

[Nero Vision 10]
ID=2275
LangSecRef=3023
Detect=HKCU\Software\Nero\Nero 10\Nero Vision
Default=True
FileKey1=%AppData%\Nero\Nero 10\Nero Vision\Log|*.*
FileKey2=%AppData%\Nero\Nero 10\Nero Vision\NVFACache|*.*
FileKey3=%AppData%\Nero\Nero 10\Nero Vision|*.txt
FileKey4=%AppData%\Nero\Nero 10\Nero3D|*.log

[Nero BackItUp 2014]
ID=2370
LangSecRef=3021
Detect=HKLM\SOFTWARE\Wow6432Node\Nero\Nero 15\Nero BackItUp
Detect2=HKCU\Software\Nero\Nero 15\Nero BackItUp
Default=True
FileKey1=%AppData%\Nero\Nero 15\Nero BackItUp\Cache|*.txt

[Nero Express 2014]
ID=2371
LangSecRef=3021
Detect=HKLM\SOFTWARE\Wow6432Node\Nero\Nero 15\Nero Express
Detect2=HKCU\Software\Nero\Nero 15\Nero Express
Default=True
RegKey1=HKCU\Software\Nero\Nero 15\Nero Express\Recent File List
RegKey2=HKCU\Software\Nero\Nero 15\Nero Express\Settings|WorkingDir
RegKey3=HKCU\Software\Nero\Nero 15\Nero Express\Settings|BrowserDir
RegKey4=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastISODir
RegKey5=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastAudioDir
RegKey6=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastVideoDVDKey

[WinAce 2.0]
ID=2069
LangSecRef=3024
Detect=HKCU\Software\e-merge\WinAce\2.0
Default=True
RegKey1=HKCU\Software\e-merge\WinAce\2.0\Favorites
RegKey2=HKCU\Software\e-merge\WinAce\2.0\MRU Items

[SpyBot Search and Destroy]
ID=2070
LangSecRef=3024
Detect=HKCU\Software\Safer Networking Limited\SpybotSnD
Default=True
FileKey1=%commonappdata%\Spybot - Search & Destroy\Logs|*.*
FileKey2=%ProgramFiles%\Spybot - Search & Destroy|advdebug.txt
FileKey3=%commonappdata%\Spybot - Search & Destroy|Statistics.ini
FileKey4=%windir%\All Users\Application Data\Spybot - Search & Destroy\Logs|*.*
FileKey5=%windir%\All Users\Application Data\Spybot - Search & Destroy|Statistics.ini
FileKey6=%commonappdata%\Spybot - Search & Destroy\Backups|*.log

[Ad-Aware SE Personal]
ID=2071
LangSecRef=3024
DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
Default=True
FileKey1=%ProgramFiles%\Lavasoft\Ad-Aware SE Personal|defs.ref.old
FileKey2=%appdata%\Lavasoft\Ad-Aware\Logs|*.txt

[Ad-Aware SE Professional]
ID=2072
LangSecRef=3024
DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe
Default=True
FileKey1=%ProgramFiles%\Lavasoft\Ad-Aware SE Professional|defs.ref.old
FileKey2=%appdata%\Lavasoft\Ad-Aware\Logs|*.txt

[Ad-Aware SE Plus]
ID=2073
LangSecRef=3024
DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware SE Plus\Ad-Aware.exe
Default=True
FileKey1=%ProgramFiles%\Lavasoft\Ad-Aware SE Plus|defs.ref.old
FileKey2=%appdata%\Lavasoft\Ad-Aware\Logs|*.txt

[Ad-Aware]
ID=2163
LangSecRef=3024
DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware\Ad-Aware.exe
Default=True
Filekey1=%commonappdata%\Lavasoft\Ad-Aware\Logs|*.log

[Webroot SpySweeper]
ID=2074
LangSecRef=3024
Detect=HKCU\Software\Webroot\SpySweeper
FileKey1=%ProgramFiles%\Webroot\Spy Sweeper\Temp|*.*
FileKey2=%appdata%\Webroot\Spy Sweeper\Logs|*Log.txt

[Driver Cleaner Pro]
ID=2075
LangSecRef=3024
DetectFile=%ProgramFiles%\Driver Cleaner Pro\DCleaner.exe
Default=True
FileKey1=%ProgramFiles%\Driver Cleaner Pro\Log|*.log

[Kazaa (Search History)]
ID=2076
LangSecRef=3022
Detect=HKCU\Software\Kazaa
Default=True
RegKey1=HKCU\Software\Kazaa\Search

[Netscape Navigator 4.x]
ID=2077
LangSecRef=3022
Detect=HKCU\Software\Netscape\Netscape Navigator\Main
Default=True
FileKey1=%ProgramFiles%\Netscape\Users\default|netscape.hst;cookies.txt
FileKey2=%ProgramFiles%\Netscape\Users\default\cache|*.*

[Microsoft Visual Studio 6.0]
ID=2078
LangSecRef=3021
Detect=HKCU\Software\Microsoft\VisualStudio\6.0
Default=True
RegKey1=HKCU\Software\Microsoft\VisualStudio\6.0\FileMRUList
RegKey2=HKCU\Software\Microsoft\VisualStudio\6.0\MenuMRUList
RegKey3=HKCU\Software\Microsoft\VisualStudio\6.0\ProjectMRUList
RegKey4=HKCU\Software\Microsoft\Visual Basic\6.0\RecentFiles

[Axialis IconWorkshop]
ID=2079
LangSecRef=3023
Detect=HKCU\Software\Axialis\IconWorkshop
Default=True
RegKey1=HKCU\Software\Axialis\IconWorkshop\Recent File List
RegKey2=HKCU\Software\Axialis\IconWorkshop\Axialis Recent Files
RegKey3=HKCU\Software\Axialis\IconWorkshop\CoolBarList
FileKey1=%appdata%\Axialis\Temporary Preview Files|*.*|RECURSE
FileKey2=%LocalAppData%\Axialis\Temporary Preview Files|*.*|RECURSE

[eMule (Search History)]
ID=2080
LangSecRef=3022
Detect=HKCU\Software\eMule
Default=True
FileKey1=%ProgramFiles%\eMule\config|AC_SearchStrings.dat
FileKey2=%LocalAppData%\eMule\config|AC_SearchStrings.dat
FileKey3=%CommonAppData%\eMule\config|AC_SearchStrings.dat

[eMule (File Hashes)]
ID=2081
LangSecRef=3022
Detect=HKCU\Software\eMule
Default=False
FileKey1=%ProgramFiles%\eMule\config|known.met;known2.met;known2_64.met
FileKey2=%LocalAppData%\eMule\config|known.met;known2.met;known2_64.met
FileKey3=%CommonAppData%\eMule\config|known.met;known2.met;known2_64.met

[WinISO]
ID=2082
LangSecRef=3024
Detect=HKLM\Software\WinISO
Default=True
RegKey1=HKLM\Software\WinISO\Reopen

[IsoBuster]
ID=2083
LangSecRef=3021
Detect=HKCU\Software\Smart Projects\IsoBuster
Default=True
RegKey1=HKCU\Software\Smart Projects\IsoBuster|ImageFilePath

[Media Player Classic]
ID=2084
LangSecRef=3023
Detect=HKCU\Software\Gabest\Media Player Classic
Detect2=HKCU\Software\MPC-HC\MPC-HC
Detect3=HKCU\Software\MPC-BE\MPC-BE
Default=True
RegKey1=HKCU\Software\Gabest\Media Player Classic\Recent File List
RegKey2=HKCU\Software\Gabest\Media Player Classic\Recent Dub List
RegKey3=HKCU\Software\Gabest\Media Player Classic\Capture|FileName
RegKey4=HKCU\Software\MPC-HC\MPC-HC\Recent File List
RegKey5=HKCU\Software\MPC-HC\MPC-HC\Recent Dub List
RegKey6=HKCU\Software\MPC-HC\MPC-HC\Capture|FileName
RegKey7=HKCU\Software\MPC-BE\Recent File List
RegKey8=HKCU\Software\MPC-BE\Recent Dub List
RegKey9=HKCU\Software\MPC-BE\Capture|FileName
RegKey10=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 0
RegKey11=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 1
RegKey12=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 2
RegKey13=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 3
RegKey14=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 4
RegKey15=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 5
RegKey16=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 6
RegKey17=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 7
RegKey18=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 8
RegKey19=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 9
RegKey20=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 10
RegKey21=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 11
RegKey22=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 12
RegKey23=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 13
RegKey24=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 14
RegKey25=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 15
RegKey26=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 16
RegKey27=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 17
RegKey28=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 18
RegKey29=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 19
RegKey30=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Name 20
RegKey31=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 0
RegKey32=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 1
RegKey33=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 2
RegKey34=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 3
RegKey35=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 4
RegKey36=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 5
RegKey37=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 6
RegKey38=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 7
RegKey39=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 8
RegKey40=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 9
RegKey41=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 10
RegKey42=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 11
RegKey43=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 12
RegKey44=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 13
RegKey45=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 14
RegKey46=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 15
RegKey47=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 16
RegKey48=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 17
RegKey49=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 18
RegKey50=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 19
RegKey51=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|File Position 20
RegKey52=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|LastOpenDir
RegKey53=HKCU\SOFTWARE\MPC-HC\MPC-HC\settings|DVDPath
FileKey1=%appdata%\Media Player Classic|default.mpcpl
FileKey2=%appdata%\MPC-HC|default.mpcpl
FileKey3=%appdata%\MPC-BE|default.mpcpl

[BSPlayer]
ID=2085
LangSecRef=3023
Detect=HKCU\Software\BST\bsplayer
Default=True
RegKey1=HKCU\Software\BST\bsplayer|File0
RegKey2=HKCU\Software\BST\bsplayer|File1
RegKey3=HKCU\Software\BST\bsplayer|File2
RegKey4=HKCU\Software\BST\bsplayer|File3
RegKey5=HKCU\Software\BST\bsplayer|File4
RegKey6=HKCU\Software\BST\bsplayer|File5
RegKey7=HKCU\Software\BST\bsplayer|File6
RegKey8=HKCU\Software\BST\bsplayer|File7
RegKey9=HKCU\Software\BST\bsplayer|File8
RegKey10=HKCU\Software\BST\bsplayer|File9

[VLC Media Player]
ID=2164
LangSecRef=3023
Detect=HKLM\Software\VideoLAN\VLC
DetectFile=%ProgramFiles%\videolan\vlc\vlc.exe
Default=True
FileKey1=%appdata%\vlc\art\artistalbum\|*.*|REMOVESELF
FileKey2=%appdata%\vlc\art\arturl\|*.*|REMOVESELF

[MediaMonkey]
ID=2165
LangSecRef=3023
Detect=HKCU\Software\MediaMonkey
DetectFile=%ProgramFiles%\MediaMonkey\MediaMonkey.exe
Default=True
FileKey1=%localappdata%\MediaMonkey|MediaMonkey.m3u
FileKey2=%localappdata%\MediaMonkey\Previews|*.*|RECURSE

[Winamp]
ID=2166
LangSecRef=3023
Detect=HKCU\Software\Winamp
Default=True
FileKey1=%ProgramFiles%\Winamp\Plugins\ml|recent.dat
FileKey2=%ProgramFiles%\Winamp\Plugins\ml\cache|*.*|RECURSE
FileKey3=%AppData%\Winamp\Plugins\ml|recent.dat
FileKey4=%AppData%\Winamp\Plugins\ml\Cache|*.*|RECURSE

[MusicMatch Jukebox]
ID=2231
LangSecRef=3023
Detect=HKCU\Software\Musicmatch\Musicmatch Jukebox
Default=True
FileKey1=%LocalAppData%\Musicmatch\Jukebox|*.log;*log.txt
FileKey2=%ProgramFiles%\MUSICMATCH\Musicmatch Jukebox\TEMP|*.*

[Sound Forge 6.0]
ID=2086
LangSecRef=3022
Detect=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics
Default=True
RegKey1=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30110
RegKey2=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30111
RegKey3=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30112
RegKey4=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30113
RegKey5=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30114
RegKey6=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30115

[Audacity]
ID=2171
LangSecRef=3023
Detect=HKCU\Software\Audacity
Default=True
RegKey1=HKCU\Software\Audacity\Audacity\RecentFiles

[Windows Live Messenger]
ID=2087
LangSecRef=3022
Detect=HKCU\Software\Microsoft\MSNMessenger\PerPassportSettings
Default=True
RegKey1=HKCU\Software\Microsoft\MessengerService\ListCache\.NET Messenger Service
FileKey1=%AppData%\Microsoft\MSN Messenger|*.sqm|RECURSE
FileKey2=%LocalAppData%\Microsoft\Messenger|*.uccapilog;*.bak
FileKey3=%UserProfile%\Tracing|WindowsLiveMessenger*.uccapilog;WindowsLiveMessenger*.uccapilog.bak

[Skype]
ID=2205
LangSecRef=3022
DetectFile=%ProgramFiles%\Skype\Phone\Skype.exe
Default=True
FileKey1=%AppData%\Skype|temp*

[AOL Instant Messenger]
ID=2206
LangSecRef=3022
DetectFile=%ProgramFiles%\AIM\aim.exe
Default=True
FileKey1=%AppData%\acccore\caches\bart|*.*|RECURSE
FileKey2=%AppData%\acccore\caches\users|*.*|REMOVESELF
FileKey3=%LocalAppData%\AIM\Settings\aolbartcache|*.*|RECURSE

[Camfrog Video Chat]
ID=2207
LangSecRef=3022
DetectFile=%ProgramFiles%\Camfrog\Camfrog Video Chat
DetectFile2=%AppData%\Camfrog\history.db
Default=True
FileKey1=%LocalAppData%\CrashRpt|*.*|REMOVESELF
FileKey2=%AppData%\Camfrog\cache|*.*|RECURSE

[Miranda Instant Messenger]
ID=2208
LangSecRef=3022
DetectFile1=%ProgramFiles%\Miranda IM\miranda32.exe
DetectFile2=%ProgramFiles%\Miranda IM\miranda64.exe
Default=True
FileKey1=%AppData%\Miranda|*.jpg|REMOVESELF

[Pidgin]
ID=2209
LangSecRef=3022
DetectFile=%ProgramFiles%\Pidgin\pidgin.exe
Default=True
FileKey1=%AppData%\.purple\autoaccept|*.*|REMOVESELF
FileKey2=%AppData%\.purple\icons|*.*

[Yahoo Messenger]
ID=2210
LangSecRef=3022
DetectFile=%ProgramFiles%\Yahoo!\Messenger\YahooMessenger.exe
Default=True
FileKey1=%ProgramFiles%\Yahoo!\Messenger\Cache|*.*|RECURSE
FileKey2=%ProgramFiles%\Yahoo!\Messenger\IMVCache|*.*|RECURSE
FileKey3=%ProgramFiles%\Yahoo!\Messenger|ypager.log
FileKey4=%ProgramFiles%\Yahoo!\Messenger\Logs|*.*
FileKey5=%ProgramFiles%\Yahoo!\Messenger\Games|*.gif|RECURSE

[ooVoo]
ID=2211
LangSecRef=3022
DetectFile=%ProgramFiles%\ooVoo\ooVoo.exe
Default=True
FileKey1=%AppData%\ooVoo Details\cache|*.*
FileKey2=%AppData%\ooVoo Details\logs|*.*

[TeamSpeak]
ID=2212
LangSecRef=3022
DetectFile1=%ProgramFiles%\TeamSpeak 3 Client\ts3client_win32.exe
DetectFile2=%ProgramFiles%\TeamSpeak 3 Client\ts3client_win64.exe
Default=True
FileKey1=%AppData%\TS3Client\cache|*.*|REMOVESELF
FileKey2=%AppData%\TS3Client\Logs|*.*

[Ventrilo Client]
ID=2213
LangSecRef=3022
DetectFile=%ProgramFiles%\Ventrilo\Ventrilo.exe
Default=True
FileKey1=%AppData%\Ventrilo|ventrilo.log
FileKey2=%AppData%\Ventrilo\temp|*.*
FileKey3=%AppData%\Ventrilo\recordings|*.*

[Ventrilo Server]
ID=2214
LangSecRef=3022
DetectFile=%ProgramFiles%\VentSrv\ventrilo_srv.exe
Default=True
FileKey1=%ProgramFiles%\VentSrv|ventrilo_srv.log

[MySpaceIM]
ID=2230
LangSecRef=3022
Detect=HKCU\Software\MySpace\IM
Default=True
FileKey1=%AppData%\MySpace\IM\Install|*.*
FileKey2=%AppData%\MySpace\IM\Logs|*.*

[Acronis True Image]
ID=2175
LangSecRef=3024
Detect=HKCU\Software\Acronis\TrueImage
Detect2=HKCU\Software\Acronis\TrueImageHome
Detect3=HKCU\Software\Acronis\ True Image Home
Detect4=HKLM\Software\Acronis\TrueImage
Default=False
FileKey1=%AppData%\Acronis\TrueImage\Logs|*.log
FileKey2=%AppData%\Acronis\TrueImageHome\Logs|*.log
FileKey3=%CommonAppData%\Acronis\TrueImage\Logs|*.log
FileKey4=%CommonAppData%\Acronis\TrueImageHome\Logs|*.log

[WinZip]
ID=2088
LangSecRef=3024
Detect=HKCU\Software\Nico Mak Computing\WinZip
Default=True
RegKey1=HKCU\Software\Nico Mak Computing\WinZip\filemenu
RegKey2=HKCU\Software\Nico Mak Computing\WinZip\extract
RegKey3=HKCU\Software\Nico Mak Computing\WinZip\directories|DefDir
RegKey4=HKCU\Software\Nico Mak Computing\WinZip\directories|ExtractTo
RegKey5=HKCU\Software\Nico Mak Computing\WinZip\directories|gzAddDir
RegKey6=HKCU\Software\Nico Mak Computing\WinZip\directories|zDefDir
RegKey7=HKCU\Software\Nico Mak Computing\WinZip\directories|AddDir
RegKey8=HKCU\Software\Nico Mak Computing\WinZip\directories|gzExtractTo
RegKey9=HKCU\Software\Nico Mak Computing\WinZip\rrs\Opened
RegKey10=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|0
RegKey11=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|1
RegKey12=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|2
RegKey13=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|3
RegKey14=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|4
RegKey15=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|5
RegKey16=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|6
RegKey17=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|7
RegKey18=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|8
RegKey19=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|9
RegKey20=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|10
RegKey21=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|11
RegKey22=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|12
RegKey23=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|13
RegKey24=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|14
RegKey25=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|15
RegKey26=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|16
RegKey27=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|17
RegKey28=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|18
RegKey29=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|19
RegKey30=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|20
FileKey1=%AppData%\WinZip\WINZIPSCANNER\Registry Cleaner|log_*.log
FileKey2=%AppData%\WinZip\WINZIPSCANNER\System Cleaner|log_*.log

[WinRAR]
ID=2089
LangSecRef=3024
Detect=HKCU\Software\WinRAR
Default=True
RegKey1=HKCU\Software\WinRAR\ArcHistory
RegKey2=HKCU\Software\WinRAR\General|LastFolder
RegKey3=HKCU\Software\WinRAR\DialogEditHistory\Arcname
RegKey4=HKCU\Software\WinRAR\DialogEditHistory\ExtrPath
RegKey5=HKCU\Software\WinRAR\DialogEditHistory\FindArcNames
RegKey6=HKCU\Software\WinRAR\DialogEditHistory\FindNames
RegKey7=HKCU\Software\WinRAR\DialogEditHistory\FindText
RegKey8=HKCU\Software\WinRAR\DialogEditHistory\ArcCmtName

[7-Zip]
ID=2090
LangSecRef=3024
Default=True
Detect=HKCU\Software\7-Zip\
RegKey1=HKCU\Software\7-Zip\Compression\ArcHistory
RegKey2=HKCU\Software\7-Zip\Extraction\PathHistory
RegKey3=HKCU\Software\7-Zip\FM|CopyHistory
RegKey4=HKCU\Software\7-Zip\FM|FolderHistory
RegKey5=HKCU\Software\7-Zip\FM|PanelPath0
RegKey6=HKCU\Software\7-Zip\Compression|ArcHistory
RegKey7=HKCU\Software\7-Zip\Extraction|PathHistory

[BitZipper]
ID=2270
LangSecRef=3024
Detect=HKCU\Software\Bitberry\BitZipper
Default=True
RegKey1=HKCU\Software\Bitberry\BitZipper\Open
RegKey2=HKCU\Software\Bitberry\BitZipper\Preferences|ExtractLastFolder
RegKey3=HKCU\Software\Bitberry\BitZipper\Preferences|AddLastFolder
RegKey4=HKCU\Software\Bitberry\BitZipper\Preferences|NewLastFolder
RegKey5=HKCU\Software\Bitberry\BitZipper\Preferences|OpenLastFolder
RegKey6=HKCU\Software\Bitberry\BitZipper\Preferences\FolderMRU
RegKey7=HKCU\Software\Bitberry\BitZipper\Preferences\FilterMRU

[PowerArchiver]
ID=2091
LangSecRef=3024
Detect=HKCU\Software\PowerArchiver
Default=True
RegKey1=HKCU\Software\PowerArchiver\Files|Active_File1
RegKey2=HKCU\Software\PowerArchiver\Files|Active_File2
RegKey3=HKCU\Software\PowerArchiver\Files|Active_File3
RegKey4=HKCU\Software\PowerArchiver\Files|Active_File4
RegKey5=HKCU\Software\PowerArchiver\Files|Active_File5
RegKey6=HKCU\Software\PowerArchiver\Files|Extract1
RegKey7=HKCU\Software\PowerArchiver\Files|Extract2
RegKey8=HKCU\Software\PowerArchiver\Files|Extract3
RegKey9=HKCU\Software\PowerArchiver\Files|Extract4
RegKey10=HKCU\Software\PowerArchiver\Files|Extract5
RegKey11=HKCU\Software\PowerArchiver\Files|Last open dir
RegKey12=HKCU\Software\PowerArchiver\Files|Last backup dir
RegKey13=HKCU\Software\PowerArchiver\Files|Last add dir

[PowerArchiver 2013]
ID=2388
LangSecRef=3024
Detect=HKLM\SOFTWARE\PowerArchiverInt
Default=True
RegKey1=HKCU\Software\PowerArchiverInt\Files|Last open dirW
RegKey2=HKCU\Software\PowerArchiverInt\Files|Last backup dirW
RegKey3=HKCU\Software\PowerArchiverInt\Files|Last add dirW
RegKey4=HKCU\Software\PowerArchiverInt\Files|Active_File1W
RegKey5=HKCU\Software\PowerArchiverInt\Files|Active_File2W
RegKey6=HKCU\Software\PowerArchiverInt\Files|Active_File3W
RegKey7=HKCU\Software\PowerArchiverInt\Files|Active_File4W
RegKey8=HKCU\Software\PowerArchiverInt\Files|Active_File5W
RegKey9=HKCU\Software\PowerArchiverInt\Files|Active_File6W
RegKey10=HKCU\Software\PowerArchiverInt\Files|Active_File7W
RegKey11=HKCU\Software\PowerArchiverInt\Files|Active_File8W
RegKey12=HKCU\Software\PowerArchiverInt\Files|Active_File9W
RegKey13=HKCU\Software\PowerArchiverInt\Files|Active_File10W
RegKey14=HKCU\Software\PowerArchiverInt\Files|Active_File11W
RegKey15=HKCU\Software\PowerArchiverInt\Files|Active_File12W
RegKey16=HKCU\Software\PowerArchiverInt\Files|Active_File13W
RegKey17=HKCU\Software\PowerArchiverInt\Files|Active_File14W
RegKey18=HKCU\Software\PowerArchiverInt\Files|Active_File15W
RegKey19=HKCU\Software\PowerArchiverInt\Files|Extract1W
RegKey20=HKCU\Software\PowerArchiverInt\Files|Extract2W
RegKey21=HKCU\Software\PowerArchiverInt\Files|Extract3W
RegKey22=HKCU\Software\PowerArchiverInt\Files|Extract4W
RegKey23=HKCU\Software\PowerArchiverInt\Files|Extract5W
RegKey24=HKCU\Software\PowerArchiverInt\Files|Extract6W
RegKey25=HKCU\Software\PowerArchiverInt\Files|Extract7W
RegKey26=HKCU\Software\PowerArchiverInt\Files|Extract8W
RegKey27=HKCU\Software\PowerArchiverInt\Files|Extract9W
RegKey28=HKCU\Software\PowerArchiverInt\Files|Extract10W
RegKey29=HKCU\Software\PowerArchiverInt\Files|SelDir1W
RegKey30=HKCU\Software\PowerArchiverInt\Files|SelDir2W
RegKey31=HKCU\Software\PowerArchiverInt\Files|SelDir3W
RegKey32=HKCU\Software\PowerArchiverInt\Files|SelDir4W
RegKey33=HKCU\Software\PowerArchiverInt\Files|SelDir5W
RegKey34=HKCU\Software\PowerArchiverInt\Files|BFile1W
RegKey35=HKCU\Software\PowerArchiverInt\Files|BFile2W
RegKey36=HKCU\Software\PowerArchiverInt\Files|BFile3W
RegKey37=HKCU\Software\PowerArchiverInt\Files|BFile4W
RegKey38=HKCU\Software\PowerArchiverInt\Files|BFile5W

[ZipMagic]
ID=2092
LangSecRef=3024
Default=True
Detect=HKCU\Software\Mijenix\ZipMagic
RegKey1=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\Recent
RegKey2=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\Archive Manager\UnZip To
RegKey3=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\UnZip To
RegKey4=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\Zip To

[PicoZip]
ID=2093
LangSecRef=3024
Detect=HKCU\Software\PicoZip
Default=True
RegKey1=HKCU\Software\PicoZip\MRU Items
RegKey2=HKCU\Software\PicoZip\MRUExtract

[PKZip]
ID=2312
LangSecRef=3024
Detect=HKCU\Software\PKWARE\PKZIP70
Default=True
RegKey1=HKCU\Software\PKWARE\PKZIP70\History

[Java]
ID=2094
LangSecRef=3022
Detect=HKLM\SOFTWARE\JavaSoft\Java Plug-in
Detect2=HKLM\SOFTWARE\JavaSoft\Java Runtime Environment
Detect3=HKLM\SOFTWARE\JavaSoft\Java Web Start
Default=False
FileKey1=%AppData%\Sun\Java\Deployment\cache|*.*|RECURSE
FileKey2=%AppData%\Sun\Java\Deployment\javaws\cache|*.*|RECURSE
FileKey3=%AppData%\Sun\Java\Deployment\Log|*.*
FileKey4=%AppData%\Sun\Java\Deployment\tmp|*.*|RECURSE
FileKey5=%LocalLowAppData%\Sun\Java\Deployment\cache|*.*|RECURSE
FileKey6=%LocalLowAppData%\Sun\Java\Deployment\Log|*.*
FileKey7=%WinDir%\System32|jupdate*.log
FileKey8=%WinDir%\SysWOW64|jupdate*.log
FileKey9=%AppData%\java\webview|*.*
ExcludeKey1=FILE|%AppData%\java\webview\.lock

[FreshDownload]
ID=2095
LangSecRef=3022
Detect=HKCU\Software\FreshDevices\FreshDownload
Default=True
RegKey1=HKCU\Software\FreshDevices\FreshDownload\History

[Windows Movie Maker]
ID=2096
LangSecRef=3023
Detect=HKCU\Software\Microsoft\MovieMaker
Default=True
FileKey1=%localappdata%\Microsoft\Movie Maker|MEDIATAB0.DAT

[TextPad]
ID=2097
LangSecRef=3021
Detect=HKCU\Software\Helios\TextPad 4
Default=True
RegKey1=HKCU\Software\Helios\TextPad 4\Recent File List
RegKey2=HKCU\Software\Helios\TextPad 4\Recent Strings

[VirtualDub]
ID=2098
LangSecRef=3023
Default=True
Detect=HKCU\Software\Freeware\VirtualDub
RegKey1=HKCU\Software\Freeware\VirtualDub\MRU List

[RegEdit]
ID=2099
LangSecRef=3025
Default=True
RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit|LastKey

[Game Explorer]
ID=2174
LangSecRef=3025
DetectOS=6.0
DetectFile=%%LocalAppData%\Microsoft Games
DetectFile2=%LocalAppData%\Microsoft\Windows\GameExplorer
DetectFile3=%LocalAppData%\Microsoft\GFWLive
Default=False
FileKey1=%LocalAppData%\Microsoft Games|*.xml.bak|RECURSE
FileKey2=%LocalAppData%\Microsoft\Windows\GameExplorer\GameStatistics|*.*|REMOVESELF
FileKey3=%LocalAppData%\Microsoft\GFWLive|*.log|RECURSE

[AceHTML 5]
ID=2100
LangSecRef=3024
Default=True
Detect=HKCU\Software\Visicom Media\AceHTML 5 Freeware
RegKey1=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last URLs
RegKey2=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last Projects
RegKey3=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last Open
RegKey4=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last Files

[Alcohol 120%]
ID=2101
LangSecRef=3024
Detect=HKCU\Software\Alcohol Soft\Alcohol 120%
Default=True
RegKey1=HKCU\Software\Alcohol Soft\Alcohol 120%\MountedMRU
RegKey2=HKCU\Software\Alcohol Soft\Alcohol 120%\Basic\Image Finder|Current Dir
RegKey3=HKCU\Software\Alcohol Soft\Alcohol 120%\Options\Burning Wizard|ImageFile
FileKey1=%ProgramFiles%\Alcohol Soft\Alcohol 120|alcohol.log

[Alcohol 52%]
ID=2373
LangSecRef=3023
Detect=HKCU\Software\Alcohol Soft\Alcohol 52%
Default=True
RegKey1=HKCU\Software\Alcohol Soft\Alcohol 52%\MountedMRU
RegKey2=HKCU\Software\Alcohol Soft\Alcohol 52%\Options\Image Making Wizard|ImageFilePath
RegKey3=HKCU\Software\Alcohol Soft\Alcohol 52%\Options\Image Making Wizard|ImageFileName
RegKey4=HKCU\Software\Alcohol Soft\Alcohol 52%\Basic\Image Finder|Current Dir

[LeechGet]
ID=2102
LangSecRef=3022
Default=True
Detect=HKCU\Software\Cronosoft\LeechGet
RegKey1=HKCU\Software\Cronosoft\LeechGet\History

[GetRight]
ID=2103
LangSecRef=3022
Default=True
Detect=HKCU\Software\Headlight\GetRight\
RegKey1=HKCU\Software\Headlight\GetRight\MRU
RegKey2=HKCU\Software\Headlight\GetRight\TypedURLS
RegKey3=HKCU\Software\Headlight\GetRight\Recent File List
FileKey1=%ProgramFiles%\GetRight|GetRight.hst

[Download Accelerator Plus]
ID=2104
LangSecRef=3022
Detect=HKCU\Software\SpeedBit\Download Accelerator
DetectFile=%CommonAppData%\Speedbit\DAP
Default=True
RegKey1=HKLM\SOFTWARE\SpeedBit\Download Accelerator\FileList
RegKey2=HKCU\Software\SpeedBit\Download Accelerator\HistoryCombo
RegKey3=HKCU\Software\SpeedBit\Download Accelerator\ADS\SecondMedia
FileKey1=%ProgramFiles%\DAP\Temp|*.*
FileKey2=%ProgramFiles%\DAP\Ads|*.*
FileKey3=%ProgramFiles%\DAP\Log|*.*
FileKey4=%CommonAppData%\Speedbit\DAP\Log|*.*
FileKey5=%CommonAppData%\Speedbit\DAP\temp|*.tmp
FileKey6=%CommonAppData%\Speedbit\DAP\History|*.dat|RECURSE

[Free Download Manager]
ID=2194
LangSecRef=3022
DetectFile=%ProgramFiles%\Free Download Manager\fdm.exe
DetectFile2=%AppData%\Free Download Manager
Default=True
RegKey1=HKCU\Software\FreeDownloadManager.ORG\Free Download Manager\Settings|Find
RegKey2=HKCU\Software\FreeDownloadManager.ORG\Free Download Manager\Settings|History
FileKey1=%AppData%\Free Download Manager|*.bak;dlmgrsi.sav;downloads.his.sav;history.sav;spider.sav

[Internet Download Accelerator]
ID=2195
LangSecRef=3022
Detect=HKCU\Software\2VG\Internet Download Accelerator
Default=True
FileKey1=%AppData%\Internet Download Accelerator|history.xml
FileKey2=%AppData%\Internet Download Accelerator\temp|*.hnt;lastnews.*;playflv.html
FileKey3=%AppData%\Internet Download Accelerator\temp\Preview|*.*
FileKey4=%AppData%\Internet Download Accelerator\lists|default.xml

[Internet Download Manager]
ID=2196
LangSecRef=3022
Detect=HKLM\Software\Internet Download Manager
Default=True
FileKey1=%AppData%\IDM|UrlHistory*.txt;foldresHistory.txt
FileKey2=%AppData%\IDM\DwnlData\*|Log.log
FileKey3=%CommonAppData%\IDM\Cache|*.*
FileKey4=%AppData%\IDM\Grabber\Projects|project*.bak

[Orbit Downloader]
ID=2234
LangSecRef=3022
Detect=HKLM\SOFTWARE\Orbit
Default=True
FileKey1=%AppData%\Orbit|fileinfo.dat;filesave.dat

[Morpheus]
ID=2105
LangSecRef=3022
Default=True
Detect=HKCU\Software\Morpheus
RegKey1=HKCU\Software\Morpheus\Morpheus\Recent File List

[VNCViewer 3]
ID=2106
LangSecRef=3024
Default=True
Detect=HKCU\Software\ORL\VNCviewer
RegKey1=HKCU\Software\ORL\VNCviewer\MRU

[VNCViewer 4]
ID=2107
LangSecRef=3024
Default=True
Detect=HKCU\Software\RealVNC\VNCviewer4
RegKey1=HKCU\Software\RealVNC\VNCviewer4\MRU

[DVD Shrink]
ID=2108
LangSecRef=3023
Default=True
Detect=HKCU\Software\DVD Shrink\
RegKey1=HKCU\Software\DVD Shrink\DVD Shrink 3.2\Recent Targets
RegKey2=HKCU\Software\DVD Shrink\DVD Shrink 3.2\Recent File List
RegKey3=HKCU\Software\DVD Shrink\DVDSHRINK103\TargetFiles
RegKey4=HKCU\Software\DVD Shrink\DVDSHRINK103\SourceFolders

[Tivo Desktop]
ID=2109
LangSecRef=3023
Default=True
Detect=HKCU\SOFTWARE\TiVo\Desktop
FileKey1=%localappdata%\TiVo Desktop\Cache|*.*

[CA Anti-Virus]
ID=2110
LangSecRef=3024
Default=True
Detect=HKLM\SOFTWARE\ComputerAssociates\Anti-Virus
FileKey1=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus|*.log;*log.txt
FileKey2=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ArcTemp|*.tmp
FileKey3=%CommonAppData%\CA\Consumer\AV|*.tmp;*.txt|RECURSE
FileKey4=%CommonAppData%\CA\Consumer\CCube|*.tmp;*.txt|RECURSE
FileKey5=%CommonAppData%\CA\Consumer\ISS\FeedStore|*.txt|RECURSE
FileKey6=%ProgramFiles%\CA\CA Internet Security Suite\CA Anti-Virus\ArcTemp|*.*
FileKey7=%ProgramFiles%\CA\CA Internet Security Suite\CA Anti-Virus\tmp|*.*

[ZoneAlarm (Logs)]
ID=2111
LangSecRef=3022
Detect=HKLM\SOFTWARE\Zone Labs\ZoneAlarm
Default=True
FileKey1=%windir%\Internet Logs|ZALog*.*
FileKey2=%ProgramData%\CheckPoint\ZoneAlarm\logs|ZALog.txt
FileKey3=C:\Documents and Settings\All Users\Application Data\CheckPoint\ZoneAlarm\Logs|ZALog.txt

[Google Earth]
ID=2112
LangSecRef=3021
Detect=HKLM\SOFTWARE\Google\Google Earth Plus
Detect2=HKLM\SOFTWARE\Google\Google Earth Pro
Detect3=HKCU\SOFTWARE\Google\Google Earth Plus
Detect4=HKCU\SOFTWARE\Google\Google Earth Pro
Default=True
RegKey1=HKCU\Software\Google\Google Earth Plus\Search
RegKey2=HKCU\Software\Google\Google Earth Pro\Search
FileKey1=%AppData%\Google\GoogleEarth|dbcache.dat
FileKey2=%AppData%\Google\GoogleEarth|dbcache.dat.index
FileKey3=%LocalAppData%\Google\GoogleEarth|dbcache.dat
FileKey4=%localappdata%\Google\GoogleEarth|dbcache.dat.index
FileKey5=%LocalLowAppData%\Google\GoogleEarth|dbcache.dat
FileKey6=%LocalLowAppData%\Google\GoogleEarth|dbcache.dat.index
FileKey7=%LocalLowAppData%\Google\GoogleEarth\webdata|*.*
FileKey8=%LocalLowAppData%\Google\GoogleEarth\unified_cache_leveldb_*|*.*

[PerfectDisk 7.0]
ID=2114
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\7.0
Default=True
FileKey1=%commonappdata%\Raxco\PerfectDisk\7.0|PerfectDisk.log

[Daemon Tools]
ID=2187
LangSecRef=3024
Detect=HKCU\Software\DT Soft
DetectFile=%AppData%\DAEMON Tools Lite\
DetectFile2=%AppData%\DAEMON Tools Pro\
DetectFile3=%AppData%\DAEMON Tools\
Default=True
FileKey1=%AppData%\Daemon Tools lite\iconscache|*.*
FileKey2=%AppData%\DAEMON Tools Lite|imagecatalog.xml
FileKey3=%AppData%\DAEMON Tools|imagecatalog.xml
FileKey4=%AppData%\DAEMON Tools Pro|imagecatalog.xml

[Vuze]
ID=2115
LangSecRef=3022
Detect=HKCU\Software\Azureus
DetectFile=%AppData%\Azureus\.lock
Default=True
FileKey1=%AppData%\Azureus\logs|*.*|RECURSE
FileKey2=%AppData%\Azureus\logs\save|*.log
FileKey3=%AppData%\Azureus\tmp|*.*|RECURSE
FileKey4=%AppData%\Azureus|*.bak;*.log
FileKey5=%AppData%\Azureus\active|*.bak

[BitTorrent]
ID=2173
LangSecRef=3022
Detect=HKCU\Software\BitTorrent\BitTorrent
DetectFile=%ProgramFiles%\BitTorrent\BitTorrent.exe
Default=true
FileKey1=%appdata%\BitTorrent|*.old

[FrostWire]
ID=2215
LangSecRef=3022
DetectFile=%ProgramFiles%\FrostWire\FrostWire.exe
Default=True
FileKey1=%AppData%\FrostWire|*.cache;*.bak;gnutella.net;checkandupdate.txt
FileKey2=%AppData%\FrostWire\image_cache|*.*|REMOVESELF

[uTorrent]
ID=2216
LangSecRef=3022
DetectFile=%ProgramFiles%\uTorrent\uTorrent.exe
Detect=HKCU\Software\BitTorrent\uTorrent
Default=True
FileKey1=%ProgramFiles%\uTorrent|*.dmp
FileKey2=%AppData%\utorrent|*.old
FileKey3=%AppData%\utorrent\dlimagecache|*.*|RECURSE
FileKey4=%AppData%\uTorrent\ie|*.tmp
FileKey5=%LocalLowAppData%\uTorrentBar\CacheIcons|*.*

[Shareaza]
ID=2217
LangSecRef=3022
DetectFile=%ProgramFiles%\Shareaza Applications\Shareaza\Shareaza.exe
Default=True
FileKey1=%LocalAppData%\Shareaza\Temp|*.*
FileKey2=%LocalAppData%\Shareaza|shistory.im
FileKey3=%LocalAppData%\Shareaza\Artwork|*.*

[iMesh]
ID=2218
LangSecRef=3022
DetectFile=%ProgramFiles%\iMesh Applications\iMesh\iMesh.exe
Default=True
FileKey1=%LocalAppData%\iMesh\Temp|*.*
FileKey2=%LocalAppData%\iMesh|shistory.im
FileKey3=%LocalAppData%\iMesh\Artwork|*.*

[BearShare]
ID=2219
LangSecRef=3022
DetectFile=%ProgramFiles%\BearShare Applications\BearShare\BearShare.exe
Default=True
FileKey1=%LocalAppData%\BearShare\Temp|*.*
FileKey2=%LocalAppData%\BearShare|shistory.im
FileKey3=%LocalAppData%\BearShare\Artwork|*.*

[DC++]
ID=2220
LangSecRef=3022
DetectFile=%ProgramFiles%\DC++\DCPlusPlus.exe
Default=True
FileKey1=%ProgramFiles%\DC++|files.xml.bz2
FileKey2=%ProgramFiles%\DC++\FileLists|*.*
FileKey3=%ProgramFiles%\DC++\Logs|*.*
FileKey4=%LocalAppData%\DC++|files.xml.bz2
FileKey5=%LocalAppData%\DC++\FileLists|*.*
FileKey6=%LocalAppData%\DC++\Logs|*.*

[Ares]
ID=2221
LangSecRef=3022
DetectFile=%ProgramFiles%\Ares\Ares.exe
Default=True
Regkey1=HKCU\Software\Ares\Search.History

[CuteFTP Pro 7.0]
ID=2116
LangSecRef=3022
Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 7 Professional
Default=True
FileKey1=%localappdata%\GlobalSCAPE\CuteFTP Pro\7.0\Cache|*.*|RECURSE
FileKey2=%localappdata%\GlobalSCAPE\CuteFTP Pro\7.0\CacheThumbs|*.*|RECURSE

[CuteFTP Home 7.0]
ID=2117
LangSecRef=3022
Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 7 Home
Default=True
FileKey1=%localappdata%\GlobalSCAPE\CuteFTP\7.0\Cache|*.*|RECURSE
FileKey2=%localappdata%\GlobalSCAPE\CuteFTP\7.0\CacheThumbs|*.*|RECURSE

[CuteFTP Pro 8.0]
ID=2118
LangSecRef=3022
Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 8 Professional
Default=True
FileKey1=%localappdata%\GlobalSCAPE\CuteFTP Pro\8.0\Cache|*.*|RECURSE
FileKey2=%localappdata%\GlobalSCAPE\CuteFTP Pro\8.0\CacheThumbs|*.*|RECURSE

[CuteFTP Home 8.0]
ID=2119
LangSecRef=3022
Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 8 Home
Default=True
RegKey1=HKCU\Software\GlobalSCAPE\CuteFTP 8 Home\Recent|LastSiteID
FileKey1=%localappdata%\GlobalSCAPE\CuteFTP Home\8.0\Cache|*.*|RECURSE
FileKey2=%localappdata%\GlobalSCAPE\CuteFTP Home\8.0\CacheThumbs|*.*|RECURSE
FileKey3=%AppData%\GlobalSCAPE\CuteFTP Home\8.0|*.log|RECURSE

[CuteFTP 9]
ID=2355
LangSecRef=3022
Detect=HKU\.DEFAULT\Software\Globalscape\CuteFTP 9
Detect2=HKLM\SOFTWARE\Wow6432Node\Globalscape\CuteFTP 9
Default=True
RegKey1=HKCU\Software\Globalscape\CuteFTP 9\Recent|LastSiteID
FileKey1=%LocalAppData%\Globalscape\CuteFTP\9.0\Cache|*.*
FileKey2=%LocalAppData%\Globalscape\CuteFTP\9.0\CacheThumbs|*.*
FileKey3=%AppData%\Globalscape\CuteFTP\9.0\Logs|*-*_*.log
FileKey4=%CommonAppData%\Globalscape\CuteFTP 9|TRB_BACKUP.dat;TR_BACKUP.dat

[Core FTP]
ID=2226
LangSecRef=3022
Detect=HKCU\Software\FTPWare
Default=True
FileKey1=%AppData%\CoreFTP|*.dir
FileKey2=%ProgramFiles%\CoreFTP|COREFTP.LOG

[FileZilla]
ID=2227
LangSecRef=3022
Detect=HKLM\SOFTWARE\FileZilla Client
Detect2=HKCU\SOFTWARE\FileZilla Client
Default=True
FileKey1=%AppData%\FileZilla|recentservers.xml;search.xml

[SmartFTP]
ID=2228
LangSecRef=3022
Detect=HKCU\Software\SmartFTP
Default=True
RegKey1=HKCU\Software\SmartFTP\Client 2.0\Settings\History\Items
FileKey1=%AppData%\SmartFTP\Client 2.0\Log|*.*|RECURSE
FileKey2=%AppData%\SmartFTP\Client 2.0\Storage|*.*

[ClamWin]
ID=2120
LangSecRef=3024
Detect=HKCU\Software\ClamWin
Default=True
FileKey1=%allusersprofile%\.clamwin\log|*.*
FileKey2=%userprofile%\.clamwin\log|*.*
FileKey3=%windir%\All Users\.clamwin\log|*.*

[Ewido Anti-Malware (Log)]
ID=2121
LangSecRef=3024
Detect=HKLM\Software\ewido
Default=True
FileKey1=%ProgramFiles%\Ewido\Security Suite|logfile.txt
FileKey2=%ProgramFiles%\Ewido Anti-Malware|logfile.txt

[AVG Anti-Spyware]
ID=2122
LangSecRef=3024
Detect=HKLM\SOFTWARE\Grisoft\AVGAntiSpyware
Default=True
FileKey1=%ProgramFiles%\Grisoft\AVG Anti-Spyware 7.5|logfile.txt

[Malwarebytes Anti-Malware]
ID=2162
LangSecRef=3024
Detect=HKLM\Software\Malwarebytes' Anti-Malware
DetectFile1=%ProgramFiles%\Malwarebytes' Anti-Malware\mbam.exe
DetectFile2=%ProgramFiles%\Malwarebytes Anti-Malware\mbam.exe
Default=False
FileKey1=%appdata%\Malwarebytes\Malwarebytes' Anti-Malware\Logs|*.txt
FileKey2=%appdata%\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine|*.*
FileKey3=%CommonAppData%\Malwarebytes\Malwarebytes Anti-Malware\Logs|*.xml
FileKey4=%CommonAppData%\Malwarebytes\Malwarebytes Anti-Malware\Quarantine|*.*

[Spyware Terminator]
ID=2262
LangSecRef=3024
Detect=HKCU\Software\Spyware Terminator
Default=False
FileKey1=%ProgramFiles%\Spyware Terminator\update|*.*
FileKey2=%AppData%\Spyware Terminator\Reports|*.*

[SUPERAntiSpyware]
ID=2263
LangSecRef=3024
Detect=HKLM\Software\SUPERAntiSpyware.com\SUPERAntiSpyware
Default=True
FileKey1=%AppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\Logs|*.log
FileKey2=%AppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs|*.dmp;*.SDB

[A-Squared]
ID=2229
LangSecRef=3024
Detect=HKLM\Software\Emsi Software GmbH\a-squared Free
Default=True
FileKey1=%MyDocuments%\a-squared Free\Reports|*.txt

[Foxit Reader]
ID=2123
LangSecRef=3021
Detect=HKCU\Software\Foxit Software\Foxit Reader
Default=True
RegKey1=HKCU\Software\Foxit Software\Foxit Reader\Recent File List
RegKey2=HKCU\Software\Foxit Software\Foxit Reader\History

[Foxit Reader 6.0]
ID=2332
LangSecRef=3021
Detect=HKCU\Software\Foxit Software\Foxit Reader 6.0
Default=True
RegKey1=HKCU\Software\Foxit Software\Foxit Reader 6.0\Recent File List
RegKey2=HKCU\Software\Foxit Software\Foxit Reader 6.0\RecentFiles
RegKey3=HKCU\Software\Foxit Software\Foxit Reader 6.0\Preferences\History\LastOpen
RegKey4=HKCU\Software\Foxit Software\Foxit Reader 6.0\Preferences\History\LastSession
RegKey5=HKCU\Software\Foxit Software\Foxit Reader 6.0\Preferences\Others|csInitialOpenDir
RegKey6=HKCU\Software\Foxit Software\Foxit Reader 6.0\ImageTool|ImageDefPath
FileKey1=%LocalAppData%\Foxit Reader\|*_old.DMP
FileKey2=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud\DownloadCache|*.cache
FileKey3=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud\FileIDCache|*.ids
FileKey4=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud|foxitcloud.log

[Foxit Reader 7.0]
ID=2408
LangSecRef=3021
Detect=HKCU\Software\Foxit Software\Foxit Reader 7.0
Default=True
RegKey1=HKCU\Software\Foxit Software\Foxit Reader 7.0\Recent File List
RegKey2=HKCU\Software\Foxit Software\Foxit Reader 7.0\RecentFiles
RegKey3=HKCU\Software\Foxit Software\Foxit Reader 7.0\Preferences\History\LastOpen
RegKey4=HKCU\Software\Foxit Software\Foxit Reader 7.0\Preferences\History\LastSession
RegKey5=HKCU\Software\Foxit Software\Foxit Reader 7.0\Preferences\Others|csInitialOpenDir
RegKey6=HKCU\Software\Foxit Software\Foxit Reader 7.0\ImageTool|ImageDefPath
FileKey1=%LocalAppData%\Foxit Reader\|*_old.DMP
FileKey2=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud\DownloadCache|*.cache
FileKey3=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud\FileIDCache|*.fcd
FileKey4=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud|foxitcloud.log

[Paint.NET]
ID=2124
LangSecRef=3021
Detect=HKCU\Software\Paint.NET
Default=True
RegKey1=HKCU\Software\Paint.NET|MRU0
RegKey2=HKCU\Software\Paint.NET|MRU1
RegKey3=HKCU\Software\Paint.NET|MRU2
RegKey4=HKCU\Software\Paint.NET|MRU3
RegKey5=HKCU\Software\Paint.NET|MRU4
RegKey6=HKCU\Software\Paint.NET|MRU5
RegKey7=HKCU\Software\Paint.NET|MRU6
RegKey8=HKCU\Software\Paint.NET|MRU7
RegKey9=HKCU\Software\Paint.NET|MRU0Thumb
RegKey10=HKCU\Software\Paint.NET|MRU1Thumb
RegKey11=HKCU\Software\Paint.NET|MRU2Thumb
RegKey12=HKCU\Software\Paint.NET|MRU3Thumb
RegKey13=HKCU\Software\Paint.NET|MRU4Thumb
RegKey14=HKCU\Software\Paint.NET|MRU5Thumb
RegKey15=HKCU\Software\Paint.NET|MRU6Thumb
RegKey16=HKCU\Software\Paint.NET|MRU7Thumb
RegKey17=HKCU\Software\Paint.NET|File/MostRecent/Path0
RegKey18=HKCU\Software\Paint.NET|File/MostRecent/Path1
RegKey19=HKCU\Software\Paint.NET|File/MostRecent/Path2
RegKey20=HKCU\Software\Paint.NET|File/MostRecent/Path3
RegKey21=HKCU\Software\Paint.NET|File/MostRecent/Path4
RegKey22=HKCU\Software\Paint.NET|File/MostRecent/Path5
RegKey23=HKCU\Software\Paint.NET|File/MostRecent/Path6
RegKey24=HKCU\Software\Paint.NET|File/MostRecent/Path7
RegKey25=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail0
RegKey26=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail1
RegKey27=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail2
RegKey28=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail3
RegKey29=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail4
RegKey30=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail5
RegKey31=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail6
RegKey32=HKCU\Software\Paint.NET|File/MostRecent/Thumbnail7

[OpenOffice 1.14]
ID=2125
LangSecRef=3021
DetectFile=%ProgramFiles%\OpenOffice.org1.1.4\program\soffice.exe
Default=True
FileKey1=%ProgramFiles%\OpenOffice.org1.1.4\user\registry\data\org\openoffice\Office|Common.xcu

[OpenOffice 2.0]
ID=2126
LangSecRef=3021
Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\2.0
Default=True
FileKey1=%appdata%\OpenOffice.org2\user\registry\data\org\openoffice\Office|Common.xcu

[OpenOffice 2.1]
ID=2127
LangSecRef=3021
Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\2.1
Default=True
FileKey1=%appdata%\OpenOffice.org2\user\registry\data\org\openoffice\Office|Common.xcu

[OpenOffice 3]
ID=2143
LangSecRef=3021
Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.0
Detect2=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.1
Detect3=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.2
Detect4=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.0
Detect5=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.1
Detect6=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.2
Detect7=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.3
Detect8=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.3
Default=True
FileKey1=%appdata%\OpenOffice.org\3\user\registry\data\org\openoffice\Office|Histories.xcu

[OpenOffice 4]
ID=2356
LangSecRef=3021
Detect=HKLM\SOFTWARE\Wow6432Node\OpenOffice\OpenOffice\4.0.0
Detect2=HKLM\SOFTWARE\OpenOffice\OpenOffice\4.0.0
Default=True
FileKey1=%AppData%\OpenOffice\4\user\backup|*.ubackup
FileKey2=%AppData%\OpenOffice\4\user\temp|document_io_logring.txt
FileKey3=%AppData%\OpenOffice\4\user\uno_packages\cache|log.txt;*.cache
FileKey4=%ProgramFiles%\OpenOffice 4\presets\backup|*.cbackup
FileKey5=%ProgramFiles%\OpenOffice 4\presets\temp|*.tmp
FileKey6=%ProgramFiles%\OpenOffice 4\presets\uno_packages\cache|log.txt

[Grisoft AVG 7.0]
ID=2128
LangSecRef=3024
Detect=HKLM\SOFTWARE\Grisoft\Avg7
Default=True
FileKey1=%commonappdata%\Grisoft\Avg7Data|*.log
FileKey2=%commonappdata%\Grisoft\Avg7Data\upd7bin|*.*
FileKey3=%commonappdata%\Grisoft\Avg7Data\$history|*.*
FileKey4=%commonappdata%\Grisoft\Avg7Data\avg7upd|*.log
FileKey5=%windir%\All Users\Application Data\Grisoft\Avg7Data\upd7bin|*.*
FileKey6=%windir%\All Users\Application Data\Grisoft\Avg7Data\avg7upd|$history
FileKey7=%windir%\All Users\Application Data\Grisoft\Avg7Data\avg7upd|*.log
FileKey8=%windir%\All Users\Application Data\Grisoft\Avg7Data|*.log
FileKey9=%windir%\Application Data\AVG7\Log|*.log

[AVG AntiVirus 8.0]
ID=2141
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\Avg8
Default=True
FileKey1=%CommonAppData%\avg8\Log|*.log;*.xml
FileKey2=%CommonAppData%\avg8\scanlogs|*.log
FileKey3=%CommonAppData%\avg8\update\backup|*.*
FileKey4=%CommonAppData%\avg8\Emc\Log|*.log

[AVG AntiVirus 9.0]
ID=2145
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\Avg9
Default=True
FileKey1=%CommonAppData%\avg9\Log|*.log;*.xml
FileKey2=%CommonAppData%\avg9\scanlogs|*.log
FileKey3=%CommonAppData%\avg9\update\backup|*.*
FileKey4=%CommonAppData%\avg9\Emc\Log|*.log

[AVG AntiVirus 10.0]
ID=2170
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\Avg10
Default=True
FileKey1=%CommonAppData%\avg10\Log|*.log;*.xml
FileKey2=%CommonAppData%\avg10\scanlogs|*.log
FileKey3=%CommonAppData%\avg10\update\backup|*.*
FileKey4=%CommonAppData%\avg10\Emc\Log|*.log
FileKey5=%CommonAppData%\avg10\IDS\config|*List.zip.bak
FileKey6=%CommonAppData%\avg10\IDS\profile|globalLoadable.bak
FileKey7=%CommonAppData%\avg10\Temp|*.tmp

[AVG AntiVirus 2012]
ID=2268
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\AVG2012
Default=True
FileKey1=%CommonAppData%\AVG2012\Log|*.log;history.xml
FileKey2=%CommonAppData%\AVG2012\scanlogs|*.log
FileKey3=%CommonAppData%\AVG2012\update\backup|*.*
FileKey4=%CommonAppData%\AVG2012\Emc\Log|*.log
FileKey5=%CommonAppData%\AVG2012\IDS\config|*List.zip.bak
FileKey6=%CommonAppData%\AVG2012\IDS\profile|globalLoadable.bak
FileKey7=%CommonAppData%\AVG2012\Temp|*.tmp

[AVG AntiVirus 2013]
ID=2313
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\AVG2013
Default=True
FileKey1=%CommonAppData%\AVG2013\Log|*.log;history.xml
FileKey2=%CommonAppData%\AVG2013\scanlogs|*.log
FileKey3=%CommonAppData%\AVG2013\update\backup|*.*
FileKey4=%CommonAppData%\AVG2013\Emc\Log|*.log
FileKey5=%CommonAppData%\AVG2013\IDS\config|*List.zip.bak
FileKey6=%CommonAppData%\AVG2013\IDS\profile|globalLoadable.bak
FileKey7=%CommonAppData%\AVG2013\Temp|*.tmp

[AntiVir Desktop]
ID=2138
LangSecRef=3024
Detect=HKLM\SOFTWARE\Avira\AntiVir Desktop
Detect2=HKCU\SOFTWARE\Avira\AntiVirus
Default=True
FileKey1=%CommonAppData%\Avira\AntiVir Desktop|*.old
FileKey2=%CommonAppData%\Avira\AntiVir Desktop|*.tmp
FileKey3=%CommonAppData%\Avira\Antivir Desktop\BACKUP\FAILSAFE|*.tmp
FileKey4=%CommonAppData%\Avira\AntiVir Desktop\LOGFILES|*.*
FileKey5=%CommonAppData%\Avira\AntiVir Desktop\TEMP|*.*
FileKey6=%CommonAppData%\Avira\My Avira\Logfiles|*.*
FileKey7=%CommonAppData%\Avira\My Avira\Temp|*.*
FileKey8=%ProgramFiles%\Avira\AntiVir Desktop|*.old
FileKey9=%ProgramFiles%\Avira\AntiVir Desktop|*.tmp
FileKey10=%ProgramFiles%\Avira\AntiVir Desktop\FAILSAFE|*.tmp
FileKey11=%CommonAppData%\Avira\Antivirus|*.old
FileKey12=%CommonAppData%\Avira\Antivirus|*.tmp
FileKey13=%CommonAppData%\Avira\Antivirus\BACKUP\FAILSAFE|*.tmp
FileKey14=%CommonAppData%\Avira\Antivirus\LOGFILES|*.*
FileKey15=%CommonAppData%\Avira\Antivirus\TEMP|*.*
FileKey16=%CommonAppData%\Avira\Launcher\Logfiles|*.*
FileKey17=%CommonAppData%\Avira\Launcher\Temp|*.*
FileKey18=%ProgramFiles%\Avira\Antivirus|*.old
FileKey19=%ProgramFiles%\Avira\Antivirus|*.tmp
FileKey20=%ProgramFiles%\Avira\Antivirus\FAILSAFE|*.tmp

[Avast! Antivirus 4]
ID=2160
LangSecRef=3024
Detect=HKCU\Software\ALWIL Software\Avast\4.0
Default=True
FileKey1=%ProgramFiles%\Alwil Software\Avast4\DATA\report|avast.xsl;Resident protection.txt;Simple user interface.txt;Simple user interface*.xml
FileKey2=%ProgramFiles%\Alwil Software\Avast4\DATA\log|*.*

[Avast! Antivirus 5]
ID=2161
LangSecRef=3024
Detect=HKCU\Software\ALWIL Software\Avast\5.0
Default=True
FileKey1=%ProgramData%\Alwil Software\Avast5\report|avast.xsl;avast.xsl;Resident protection.txt;Simple user interface.txt;Simple user interface*.xml
FileKey2=%ProgramData%\Alwil Software\Avast5\log|*.*

[Avast! Antivirus]
ID=2410
LangSecRef=3024
Detect=HKLM\Software\Avast Software\Avast
Detect2=HKCU\Software\Avast Software\Avast
Default=True
FileKey1=%CommonAppData%\AVAST Software\Avast\log|*.txt;*.log
FileKey2=%CommonAppData%\AVAST Software\Avast\Spamconf|*.bin.tmp*
FileKey3=%CommonAppData%\AVAST Software\Avast\report|*.txt
FileKey4=%AppData%\AVAST Software\Avast\Cache|*.*
ExcludeKey1=FILE|%AppData%\AVAST Software\Avast\Cache\Cookies
ExcludeKey2=FILE|%AppData%\AVAST Software\Avast\Cache\Cookies-journal

[BitDefender]
ID=2306
LangSecRef=3024
Detect=HKLM\Software\Softwin\BitDefender Desktop
Default=False
FileKey1=%ProgramFiles%\BitDefender\BitDefender 2009\Logs|*.*|RECURSE
FileKey2=%CommonAppData%\BitDefender\Desktop\Profiles\Logs|*.xml|RECURSE
FileKey3=%AppData%\BitDefender\Desktop\Profiles\Logs|*.xml|RECURSE

[TUGZip]
ID=2131
LangSecRef=3024
Detect=HKCU\Software\TUGZip
Default=True
RegKey1=HKCU\Software\TUGZip|mainRecent
RegKey2=HKCU\Software\TUGZip|extrRecent
RegKey3=HKCU\Software\TUGZip|cmpWorkingDir

[Windows Defender]
ID=2132
LangSecRef=3024
Detect=HKLM\SOFTWARE\Microsoft\Windows Defender
DetectFile=%ProgramFiles%\Microsoft AntiSpyware\GIANTAntiSpywareMain.exe
Default=True
FileKey1=%CommonAppData%\Microsoft\Windows Defender\Scans\History\Results\Quick|*.*
FileKey2=%CommonAppData%\Microsoft\Windows Defender\Scans\History\Results\Resource|*.*
FileKey3=%CommonAppData%\Microsoft\Windows Defender\Support|*.log
FileKey4=%ProgramFiles%\Microsoft AntiSpyware|errors.log;tracksEraser.log;cleaner.log

[IZArc]
ID=2133
LangSecRef=3024
Detect=HKCU\Software\IZSoftware\IZArc
Default=True
RegKey1=HKCU\Software\IZSoftware\IZArc|AppCurrentDir
RegKey2=HKCU\Software\IZSoftware\IZArc\Recent
RegKey3=HKCU\Software\IZSoftware\IZArc\History

[Google Toolbar Firefox]
ID=2134
LangSecRef=3022
Default=True
SpecialDetect=DET_MOZILLA_GOOGLE_TOOLBAR
SpecialKey1=N_MOZ_GOOGLE_TOOLBAR

[MS Search Helper Extension]
ID=2191
LangSecRef=3021
DetectFile=%ProgramFiles%\Microsoft\Search Enhancement Pack\Search Helper
Default=True
FileKey1=%LocalAppData%\Microsoft\Search Enhancement Pack\Search Box Extension|searchhs.dat
FileKey2=%LocalLowAppData%\Microsoft\Search Enhancement Pack\Search Box Extension|searchhs.dat

[MS Office Picture Manager]
ID=2135
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office
Default=True
FileKey1=%LocalAppData%\Microsoft\OIS|OIScatalog.cag
FileKey2=%LocalAppData%\Microsoft\OIS\thumbnails|*.*

[imgBurn]
ID=2136
LangSecRef=3021
Detect=HKCU\Software\ImgBurn
DetectFile=%ProgramFiles%\Imgburn\imgburn.exe
Default=False
RegKey1=HKCU\Software\ImgBurn|ISOBUILD_MRUBootImage
RegKey2=HKCU\Software\ImgBurn|ISOBUILD_MRUDeviceName
RegKey3=HKCU\Software\ImgBurn|ISOBUILD_MRUSourceFile
RegKey4=HKCU\Software\ImgBurn|ISOBUILD_MRUSourceFolder
RegKey5=HKCU\Software\ImgBurn|ISOBUILD_RecentFiles_Destination
RegKey6=HKCU\Software\ImgBurn|ISOBUILD_RecentFiles_Source
RegKey7=HKCU\Software\ImgBurn|ISOBUILD_RecentFolders_Destination
RegKey8=HKCU\Software\ImgBurn|ISOWRITE_MRUDeviceName
RegKey9=HKCU\Software\ImgBurn|ISOWRITE_RecentFiles_Source
RegKey10=HKCU\Software\ImgBurn|FILELOCATIONS_ProjectFiles
RegKey11=HKCU\Software\ImgBurn|FILELOCATIONS_QueueFiles
FileKey1=%AppData%\ImgBurn|ImgBurn.log
FileKey2=%AppData%\ImgBurn\IBG Files|*.*
FileKey3=%AppData%\imgburn\graph data files|*.*
FileKey4=%AppData%\imgburn\Log Files|*.*

[CloneCD]
ID=2177
LangSecRef=3021
Detect=HKLM\Software\SlySoft\CloneCD
Default=False
RegKey1=HKCU\Software\SlySoft\CloneCD\Settings|ImageFileName

[Virtual Clone Drive]
ID=2333
LangSecRef=3021
Default=True
Detect=HKCU\Software\Elaborate Bytes\VirtualCloneDrive
RegKey1=HKCU\Software\Elaborate Bytes\VirtualCloneDrive\LRU

[WinPatrol]
ID=2168
LangSecRef=3024
Detect=HKCU\Software\BillP Studios\WinPatrol
Default=True
FileKey1=%ProgramFiles%\BillP Studios\WinPatrol|WinPatrolLog.*
FileKey2=%SystemDrive%|HijackPatrol.log

[LogMeIn]
ID=2172
LangSecRef=3022
Detect=HKCU\Software\LogMeIn
Detect2=HKLM\SOFTWARE\LogMeIn, Inc.
Default=True
FileKey1=%LocalAppData%\LogMeIn Hamachi|*.log
FileKey2=%LocalAppData%\LogMeIn Hamachi|*.old
FileKey3=%LocalAppData%\LogMeIn Hamachi|*.bak
FileKey4=%ProgramFiles%\Logmein|LMI*.log
FileKey5=%ProgramData%\Logmein|LMI*.log

[Ashampoo Burning Studio 10]
ID=2178
LangSecRef=3024
Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 10
Default=False
FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 10|backupmetainfo.xml
FileKey2=%AppData%\Ashampoo\Ashampoo Burning Studio 10\Log|*.xml
FileKey3=%AppData%\Ashampoo\Log|*.txt

[Ashampoo Burning Studio 11]
ID=2281
LangSecRef=3024
Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 11
Default=True
FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 11|backupmetainfo.xml
FileKey2=%AppData%\Ashampoo\Ashampoo Burning Studio 11\Log|*.xml
FileKey3=%AppData%\Ashampoo\Log|*.txt

[Ashampoo Burning Studio 14]
ID=2403
LangSecRef=3024
Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14
Default=True
FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 14\log|*log.txt
FileKey2=%AppData%\Ashampoo\Ashampoo Burning Studio 14\log|*.xml

[ExamDiff]
ID=2179
LangSecRef=3024
Detect=HKCU\Software\PrestoSoft\ExamDiff
Default=False
RegKey1=HKCU\Software\PrestoSoft\ExamDiff\AutoPick
RegKey2=HKCU\Software\PrestoSoft\ExamDiff\Recent Find Strings
RegKey3=HKCU\Software\PrestoSoft\ExamDiff\Recent Left Files
RegKey4=HKCU\Software\PrestoSoft\ExamDiff\Recent Right Files
RegKey5=HKCU\Software\PrestoSoft\ExamDiff\Settings|File 1
RegKey6=HKCU\Software\PrestoSoft\ExamDiff\Settings|File 2

[ExamDiff Pro]
ID=2180
LangSecRef=3024
Detect=HKCU\Software\PrestoSoft\ExamDiff Pro
Default=False
RegKey1=HKCU\Software\PrestoSoft\ExamDiff Pro\AutoPick
RegKey2=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Find Strings Bin
RegKey3=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Left Directories
RegKey4=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Left Files
RegKey5=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Right Directories
RegKey6=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Right Files
RegKey7=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Session Files
RegKey8=HKCU\Software\PrestoSoft\ExamDiff Pro\Settings|File 1
RegKey9=HKCU\Software\PrestoSoft\ExamDiff Pro\Settings|File 2

[Compare It!]
ID=2188
LangSecRef=3024
Detect=HKCU\Software\grigsoft.com\Compare It!
Default=False
RegKey1=HKCU\Software\grigsoft.com\Compare It!\Combos
RegKey2=HKCU\Software\grigsoft.com\Compare It!\dirs
RegKey3=HKCU\Software\grigsoft.com\Compare It!\options|Recent0
RegKey4=HKCU\Software\grigsoft.com\Compare It!\options|Recent1
RegKey5=HKCU\Software\grigsoft.com\Compare It!\options|Recent2
RegKey6=HKCU\Software\grigsoft.com\Compare It!\options|Recent3
RegKey7=HKCU\Software\grigsoft.com\Compare It!\options|Recent4
RegKey8=HKCU\Software\grigsoft.com\Compare It!\options|Recent5
RegKey9=HKCU\Software\grigsoft.com\Compare It!\options|Recent6
RegKey10=HKCU\Software\grigsoft.com\Compare It!\options|Recent7
RegKey11=HKCU\Software\grigsoft.com\Compare It!\options|Recent8
RegKey12=HKCU\Software\grigsoft.com\Compare It!\options|Recent9
RegKey13=HKCU\Software\grigsoft.com\Compare It!\options|Recent10

[WinDiff]
ID=2198
LangSecRef=3024
Detect=HKCU\Software\Microsoft\Windiff
Default=True
RegKey1=HKCU\Software\Microsoft\Windiff|NameLeft
RegKey2=HKCU\Software\Microsoft\Windiff|NameRight

[FeedDemon]
ID=2193
LangSecRef=3022
Detect=HKCU\Software\Bradbury\FeedDemon\1.0
DetectFile=%LocalAppData%\FeedDemon\v1
Default=True
RegKey1=HKCU\Software\Bradbury\FeedDemon\1.0\SavedLists\TypedURLs
RegKey2=HKCU\Software\Bradbury\FeedDemon\1.0\SavedLists\TabbedBrowserUrls
RegKey3=HKCU\Software\Bradbury\FeedDemon\1.0\SearchFeedKeywords

[Last.FM]
ID=2200
LangSecRef=3023
DetectFile=%ProgramFiles%\Last.fm\LastFM.exe
Default=True
FileKey1=%LocalAppData%\Last.fm\client\cache|*.*
FileKey2=%LocalAppData%\Last.fm\client|*.log

[Pando]
ID=2235
LangSecRef=3021
DetectFile=%LocalAppData%\Pando\Pando Files
Default=True
FileKey1=%LocalAppData%\Pando\Pando Files|*.log

[Sandboxie]
ID=2236
LangSecRef=3024
DetectFile=%ProgramFiles%\Sandboxie\Start.exe
Default=False
FileKey1=%SystemDrive%\Sandbox\%UserName%|*.*|RECURSE
ExcludeKey1=FILE|%SystemDrive%\Sandbox\%UserName%\DONT-USE.TXT
ExcludeKey2=FILE|%SystemDrive%\Sandbox\%UserName%\desktop.ini

[Snagit 9]
ID=2237
LangSecRef=3024
Detect=HKCU\Software\TechSmith\SnagIt\9
Default=True
RegKey1=HKCU\Software\TechSmith\SnagIt\9\Recent Captures
RegKey2=HKCU\Software\TechSmith\SnagIt\9\SnagItEditor\Recent File List
FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin

[Snagit 10]
ID=2238
LangSecRef=3024
Detect=HKCU\Software\TechSmith\SnagIt\10
Default=True
RegKey1=HKCU\Software\TechSmith\SnagIt\10\Recent Captures
RegKey2=HKCU\Software\TechSmith\SnagIt\10\SnagItEditor\Recent File List
FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin
FileKey2=%LocalAppData%\TechSmith\SnagIt\DataStore\AppIcons|*.*
FileKey3=%LocalAppData%\TechSmith\SnagIt\DataStore\WebSiteIcons|*.*
FileKey4=%LocalAppData%\TechSmith\SnagIt\Thumbnails|*.*

[Snagit 11]
ID=2293
LangSecRef=3024
Detect=HKCU\Software\TechSmith\SnagIt\11
Default=True
RegKey1=HKCU\Software\TechSmith\SnagIt\11\Recent Captures
RegKey2=HKCU\Software\TechSmith\SnagIt\11\SnagItEditor\Recent File List
FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin
FileKey2=%LocalAppData%\TechSmith\SnagIt\DataStore\AppIcons|*.*
FileKey3=%LocalAppData%\TechSmith\SnagIt\DataStore\WebSiteIcons|*.*
FileKey4=%LocalAppData%\TechSmith\SnagIt\Thumbnails|*.*

[Snagit 12]
ID=2391
LangSecRef=3024
Detect=HKCU\Software\TechSmith\SnagIt\12
Default=True
RegKey1=HKCU\Software\TechSmith\SnagIt\12\Recent Captures
RegKey2=HKCU\Software\TechSmith\SnagIt\12\SnagItEditor\Recent File List
FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin
FileKey2=%LocalAppData%\TechSmith\SnagIt\DataStore\AppIcons|*.ico
FileKey3=%LocalAppData%\TechSmith\SnagIt\DataStore\WebSiteIcons|*.ico
FileKey4=%LocalAppData%\TechSmith\SnagIt\Thumbnails|*.*

[Ditto]
ID=2239
LangSecRef=3021
DetectFile=%AppData%\Ditto
Default=False
FileKey1=%AppData%\Ditto|ditto.db

[Evernote]
ID=2240
LangSecRef=3021
Detect=HKCU\Software\Evernote
Default=True
FileKey1=%LocalAppData%\Evernote\Evernote\Logs|*.*

[I2P]
ID=2241
LangSecRef=3022
DetectFile=%AppData%\I2P
Default=True
FileKey1=%AppData%\I2P\logs|*.*

[McAfee AntiVirus]
ID=2242
LangSecRef=3021
DetectFile=%CommonAppData%\McAfee\MCLOGS
Default=True
FileKey1=%CommonAppData%\McAfee\MCLOGS|*.log|RECURSE

[PerfectDisk 8]
ID=2244
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\8.0
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\8.0|PDBootLog

[PerfectDisk 9]
ID=2245
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\9.0
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\9.0|PDBootLog

[PerfectDisk 10]
ID=2246
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\10.0
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\10.0|PDBootLog

[PerfectDisk 11]
ID=2247
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\11.0
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\11.0|PDBootLog

[PerfectDisk 12]
ID=2248
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\12.0
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\12.0|PDBootLog

[PerfectDisk 12.5]
ID=2277
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\12.5
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\12.5|PDBootLog

[PowerISO]
ID=2249
LangSecRef=3024
Detect=HKCU\Software\PowerISO
Default=True
RegKey1=HKCU\Software\PowerISO|Reopen0
RegKey2=HKCU\Software\PowerISO|Reopen1
RegKey3=HKCU\Software\PowerISO|Reopen2
RegKey4=HKCU\Software\PowerISO|Reopen3
RegKey5=HKCU\Software\PowerISO|ExtractPath0
RegKey6=HKCU\Software\PowerISO|ExtractPath1
RegKey7=HKCU\Software\PowerISO|ExtractPath2
RegKey8=HKCU\Software\PowerISO|ExtractPath3
RegKey9=HKCU\Software\PowerISO|ExtractPath4
RegKey10=HKCU\Software\PowerISO|ExtractPath5
RegKey11=HKCU\Software\PowerISO|ExtractPath6
RegKey12=HKCU\Software\PowerISO|ExtractPath7

[UltraISO]
ID=2250
LangSecRef=3024
Detect=HKCU\Software\EasyBoot Systems\UltraISO\5.0
Default=True
RegKey1=HKCU\Software\EasyBoot Systems\UltraISO\5.0|Reopen
RegKey2=HKCU\Software\EasyBoot Systems\UltraISO\5.0|a
RegKey3=HKCU\Software\EasyBoot Systems\UltraISO\5.0|b
RegKey4=HKCU\Software\EasyBoot Systems\UltraISO\5.0|c
RegKey5=HKCU\Software\EasyBoot Systems\UltraISO\5.0|d
RegKey6=HKCU\Software\EasyBoot Systems\UltraISO\5.0|e
RegKey7=HKCU\Software\EasyBoot Systems\UltraISO\5.0|f
RegKey8=HKCU\Software\EasyBoot Systems\UltraISO\5.0|g
RegKey9=HKCU\Software\EasyBoot Systems\UltraISO\5.0|h
RegKey10=HKCU\Software\EasyBoot Systems\UltraISO\5.0|i

[GIMP 2.4]
ID=2251
LangSecRef=3021
DetectFile=%UserProfile%\.gimp-2.4
Default=True
FileKey1=%UserProfile%\.thumbnails\normal|*.*
FileKey2=%UserProfile%\.gimp-2.4|documents

[GIMP 2.6]
ID=2252
LangSecRef=3021
Default=True
DetectFile=%UserProfile%\.gimp-2.6
FileKey1=%UserProfile%\.thumbnails\normal|*.*

[GIMP 2.8]
ID=2295
LangSecRef=3021
Default=True
DetectFile=%UserProfile%\.gimp-2.8
FileKey1=%UserProfile%\.thumbnails\normal|*.*

[Go!Zilla]
ID=2253
LangSecRef=3022
DetectFile=%AppData%\Go!Zilla
Default=True
FileKey1=%AppData%\Go!Zilla|GoZilla.hst

[MagicISO]
ID=2254
LangSecRef=3024
Detect=HKCU\Software\MagicISO
Default=True
RegKey1=HKCU\Software\MagicISO\Reopen

[Zune]
ID=2255
LangSecRef=3023
DetectFile=%LocalAppData%\Microsoft\zune
Default=True
FileKey1=%LocalAppData%\Microsoft\zune\art cache|*.*|REMOVESELF
FileKey2=%LocalAppData%\Microsoft\Zune|NowPlaying.dat

[BreezeBrowser Pro]
ID=2256
LangSecRef=3021
Detect=HKCU\Software\BreezeSystems\BreezeBrowserPro
Default=True
RegKey1=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU0
RegKey2=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU1
RegKey3=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU2
RegKey4=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU3
RegKey5=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU4
RegKey6=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU5
RegKey7=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU6
RegKey8=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU7
RegKey9=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU8
RegKey10=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU9

[FastStone Image Viewer]
ID=2257
LangSecRef=3023
DetectFile=%AppData%\FastStone\FSIV
Default=True
FileKey1=%AppData%\FastStone\FSIV|HisFolderList.db

[FastStone Capture]
ID=2404
LangSecRef=3024
Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\FSCapture.exe
Default=True
RegKey1=HKCU\Software\FastStone|_GrbId
FileKey1=%LocalAppData%\FastStone\FSC\EditWith|*.*
FileKey2=%LocalAppData%\FastStone\FSC\Email|*.*
FileKey3=%LocalAppData%\FastStone\FSC\FTP|*.*

[AkelPad]
ID=2267
LangSecRef=3021
Detect=HKCU\Software\Akelsoft\AkelPad
Default=True
RegKey1=HKCU\Software\Akelsoft\AkelPad\Recent
RegKey2=HKCU\Software\Akelsoft\AkelPad\Search

[Notepad++]
ID=2258
LangSecRef=3021
DetectFile=%AppData%\notepad++
Default=False
FileKey1=%AppData%\notepad++|session.xml

[NoteXpad]
ID=2259
LangSecRef=3021
Detect=HKLM\Software\NoteXpad
Default=False
RegKey1=HKLM\Software\NoteXpad\Recent

[RegEditX]
ID=2260
LangSecRef=3024
Detect=HKLM\SOFTWARE\DCSoft\RegEditX
Default=True
FileKey1=%ProgramFiles%\DCSoft\RegEditX\x86|RegEditX.sav
FileKey2=%ProgramFiles%\DCSoft\RegEditX\x64|RegEditX.sav
FileKey3=%ProgramFiles%\DCSoft\RegEditX\x86|RegEditX.bak
FileKey4=%ProgramFiles%\DCSoft\RegEditX\x64|RegEditX.bak

[Foxit Reader 5.0]
ID=2265
LangSecRef=3021
Detect=HKCU\Software\Foxit Software\Foxit Reader 5.0
Default=True
RegKey1=HKCU\Software\Foxit Software\Foxit Reader 5.0\Recent File List
RegKey2=HKCU\Software\Foxit Software\Foxit Reader 5.0\RecentFiles
RegKey3=HKCU\Software\Foxit Software\Foxit Reader 5.0\Preferences\History\LastOpen
RegKey4=HKCU\Software\Foxit Software\Foxit Reader 5.0\Preferences\History\LastSession
RegKey5=HKCU\Software\Foxit Software\Foxit Reader 5.0\Preferences\Others|csInitialOpenDir

[ACDSee 14]
ID=2269
LangSecRef=3021
Default=True
DetectFile=%ProgramFiles%\ACD Systems\ACDSee\14.0\ACDSeeInTouch2.exe
Detect=HKLM\SOFTWARE\ACD Systems\ACDSee\140
RegKey1=HKCU\Software\ACD Systems\ACDSee\140|LastOptionPage
RegKey2=HKCU\Software\ACD Systems\ACDSee\140|LastOptionPageName
RegKey3=HKCU\Software\ACD Systems\ACDSee\140|OpenFolder
RegKey4=HKCU\Software\ACD Systems\ACDSee\140|HistSearchFileName
RegKey5=HKCU\Software\ACD Systems\ACDSee\140|HistSearchQuickText
RegKey6=HKCU\Software\ACD Systems\ACDSee\140|SimpleSearchHistory

[Camtasia Studio 7.0]
ID=2279
LangSecRef=3024
Detect=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio
Default=True
RegKey1=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|FileSaveAsMru
RegKey2=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|ExportAsZipMru
RegKey3=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUImportFolder
RegKey4=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUOpenProjectFolder
RegKey5=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUBatchAddFilesProjectsFolder
RegKey6=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUImportExportCaptions

[Camtasia Studio 8]
ID=2413
LangSecRef=3024
Detect=HKCU\Software\TechSmith\Camtasia Studio\8.0
Default=True
RegKey1=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Recorder\8.0\General|lstLastSaveDir
RegKey2=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Studio\8.0|ExportAsZipMru
RegKey3=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Studio\8.0|FileSaveAsMru
RegKey4=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Studio\8.0|MRUImportFolder
RegKey5=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Studio\8.0|MRUOpenProjectFolder
RegKey6=HKCU\Software\TechSmith\Camtasia Studio\8.0\Camtasia Studio\8.0|RecentRecordingsMru

[CoffeeCup HTML Editor]
ID=2280
LangSecRef=3024
DetectFile=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor
Default=True
FileKey1=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|mru.ini
FileKey2=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|links.ini
FileKey3=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|lastopen.dat

[Any Video Converter Ultimate]
ID=2282
LangSecRef=3023
Detect=HKCU\Software\AnvSoft\Any Video Converter Ultimate
Default=True
FileKey1=%appdata%\AnvSoft\Any Video Converter Ultimate|history*.db
FileKey2=%appdata%\AnvSoft\Any Video Converter Ultimate|*.log

[Freemake Video Downloader]
ID=2283
LangSecRef=3022
Detect=HKCU\Software\Freemake\FreemakeVideoDownloader
Default=True
FileKey1=%ProgramFiles%\Freemake\Freemake Video Downloader|trace.log
FileKey2=%CommonAppData%\Freemake\FreemakeVideoDownloader|*.txt
FileKey3=%Documents%\Freemake\FreemakeVideoDownloader\History\Thumbnails|*.*
FileKey4=%Documents%\Freemake\FreemakeVideoDownloader\History|*.xml

[Freemake Audio Converter]
ID=2284
LangSecRef=3023
Detect=HKCU\Software\Freemake\FreemakeAudioConverter
Default=True
FileKey1=%CommonAppData%\Freemake\FreemakeAudioConverter|*.txt
RegKey1=HKCU\Software\Freemake\FreemakeAudioConverter|InitVideoFileDirectory
RegKey2=HKCU\Software\Freemake\FreemakeAudioConverter|InitAudioFileDirectory
RegKey3=HKCU\Software\Freemake\FreemakeAudioConverter|InitImageFileDirectory

[Freemake Video Converter]
ID=2285
LangSecRef=3023
Detect=HKCU\Software\Freemake\FreemakeVideoConverter
Default=True
FileKey1=%CommonAppData%\Freemake\FreemakeVideoConverter|*.txt
RegKey1=HKCU\Software\Freemake\FreemakeVideoConverter|InitVideoFileDirectory
RegKey2=HKCU\Software\Freemake\FreemakeVideoConverter|InitAudioFileDirectory
RegKey3=HKCU\Software\Freemake\FreemakeVideoConverter|InitImageFileDirectory
RegKey4=HKCU\Software\Freemake\FreemakeVideoConverter|CurrentDVDDirectory
RegKey5=HKCU\Software\Freemake\FreemakeVideoConverter|AudioForSlideshow_0
RegKey6=HKCU\Software\Freemake\FreemakeVideoConverter|AudioForSlideshow_1
RegKey7=HKCU\Software\Freemake\FreemakeVideoConverter|AudioForSlideshow_2
RegKey8=HKCU\Software\Freemake\FreemakeVideoConverter|InitAudioDirectoryForSlideshow
RegKey9=HKCU\Software\Freemake\FreemakeVideoConverter|OutputDVDDirectory
RegKey10=HKCU\Software\Freemake\FreemakeVideoConverter|DVDOutputPath_0
RegKey11=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath1
RegKey12=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath2
RegKey13=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath3
RegKey14=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath4
RegKey15=HKCU\Software\Freemake\FreemakeVideoConverter|OutputDirectory

[ConvertXToDVD]
ID=2286
LangSecRef=3023
Detect=HKCU\Software\VSO\ConvertXToDVD
Detect2=HKCU\Software\VSO\ConvertXtoDVD\5
Default=True
FileKey1=%AppData%\Vso|*.log
FileKey2=%Documents%\PcSetup|*.log|REMOVESELF
FileKey3=%CommonAppData%\VSO|*.cache
FileKey4=%CommonAppData%\VSO\ConvertXToDVD\5\log|*.log;*.crashlist|REMOVESELF
RegKey1=HKCU\Software\VSO\ConvertXtoDVD\4.0|Dvd_Folder
RegKey2=HKCU\Software\VSO\ConvertXtoDVD\4.0\settings\Gen_MRU_Pathes
RegKey3=HKCU\Software\VSO\ConvertXtoDVD\5\Gen_MRU_Pathes

[VSO Blu-ray Converter Ultimate]
ID=2328
LangSecRef=3023
Detect=HKCU\Software\VSO\Blu-ray Converter Ultimate\2
Default=True
FileKey1=%CommonAppData%\VSO\Blu-ray Converter Ultimate\2\Log|*.log

[VSO DVD Converter Ultimate]
ID=2329
LangSecRef=3023
Detect=HKCU\Software\VSO\DVD Converter Ultimate\2
Default=True
FileKey1=%CommonAppData%\VSO\DVD Converter Ultimate\2\Log|*.log

[AIMP 3]
ID=2287
LangSecRef=3023
DetectFile=%AppData%\AIMP3
Default=True
FileKey1=%AppData%\AIMP3|AIMP3.bak
FileKey2=%AppData%\AIMP3|AIMP3ate.bak
FileKey3=%AppData%\AIMP3|AIMP3lib.bak
FileKey4=%AppData%\AIMP3|AIMP3ac.bak

[Corel VideoStudio Pro X4]
ID=2288
LangSecRef=3023
Detect=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0
Default=True
FileKey1=%AppData%\Corel\Messages|*.*|RECURSE
FileKey2=%AppData%\Ulead Systems\Corel VideoStudio Pro\14.0\en-US|VS_Pro.log
FileKey3=%Documents%\Corel VideoStudio Pro\14.0\SmartProxy|*.upx
RegKey1=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\HerRFL
RegKey2=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\Library Manager|Latest Export Folder
RegKey3=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\VIO\Recent Dir
ExcludeKey1=FILE|%AppData%\Corel\Messages|*.policy

[Corel VideoStudio Pro X5]
ID=2296
LangSecRef=3023
Detect=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0
Default=True
FileKey1=%AppData%\Corel\Messages|*.*|RECURSE
FileKey2=%AppData%\Ulead Systems\Corel VideoStudio Pro\15.0\en-US|VS_Pro.log
FileKey3=%Documents%\Corel VideoStudio Pro\15.0\SmartProxy|*.upx
RegKey1=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\HerRFL
RegKey2=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\Library Manager|Latest Export Folder
RegKey3=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\VIO\Recent Dir
ExcludeKey1=FILE|%AppData%\Corel\Messages|*.policy

[AlZip]
ID=2289
LangSecRef=3024
Detect=HKCU\Software\ESTsoft\ALZip
Default=True
RegKey1=HKCU\Software\ESTsoft\ALZip\MRUOpen
RegKey2=HKCU\Software\ESTsoft\ALZip\MRUExtract

[CyberLink PhotoDirector 3]
ID=2290
LangSecRef=3023
Detect=HKCU\Software\CyberLink\PhotoDirector3
Default=True
FileKey1=%LocalAppData%\Cyberlink\PhotoDirector\3.0|*.cache

[CyberLink PowerDirector 10]
ID=2291
LangSecRef=3023
Detect=HKCU\Software\CyberLink\PowerDirector\10.0
Default=True
FileKey1=%AppData%\CyberLink\MediaCache|*.*
FileKey2=%AppData%\CyberLink\PowerDirector\10.0|Recentfiles.ini
FileKey3=%AppData%\CyberLink\PowerDirector\10.0\DSPCache|*.*|RECURSE
FileKey4=%AppData%\CyberLink\PowerDirector\10.0\photoTmp|*.*|RECURSE
FileKey5=%AppData%\CyberLink\PowerDirector\10.0\SpltrCache|*.*|RECURSE
RegKey1=HKCU\Software\CyberLink\Hanuman\Waveform
RegKey2=HKCU\Software\CyberLink\MediaCache5\Data5
RegKey3=HKCU\Software\CyberLink\MediaCache5\Thumbnail5

[CyberLink PowerDirector 12]
ID=2368
LangSecRef=3023
Detect=HKCU\Software\CyberLink\PowerDirector12
Default=True
RegKey1=HKCU\Software\CyberLink\PowerDirector12\MediaObj\MediaCache5\Data5
RegKey2=HKCU\Software\CyberLink\PowerDirector12\MediaObj\MediaCache5\Thumbnail5
RegKey3=HKCU\Software\CyberLink\PowerDirector12|ImportFilePath
FileKey1=%CommonAppData%\CyberLink\PowerDirector\12.0\AnalyzeCacheFiles|CLZoetrope.fdb
FileKey2=%AppData%\CyberLink\PowerDirector\12.0\DSPCache|*.*|RECURSE
FileKey3=%AppData%\CyberLink\PowerDirector\12.0\photoTmp|*.*
FileKey4=%AppData%\CyberLink\PowerDirector\12.0\SpltrCache|*.*
FileKey5=%AppData%\CyberLink\PowerDirector\12.0\WaveForms|PD_0000.txt
FileKey6=%AppData%\CyberLink\PowerDirector\12.0|Recentfiles.ini
FileKey7=%AppData%\CyberLink\MediaCache|*.*

[CyberLink AudioDirector 4]
ID=2366
LangSecRef=3023
Detect=HKCU\Software\CyberLink\AudioDirector4
Default=True
RegKey1=HKCU\Software\CyberLink\AudioDirector4\MediaObj\MediaCache5\Data5
FileKey1=%CommonAppData%\CyberLink\Downloader|Item0.bak;Item1.bak;Item2.bak;Item3.bak;Item4.bak
FileKey2=%CommonAppData%\install_clap|*.*|RECURSE
FileKey3=%LocalAppData%\Cyberlink\AudioDirector\4.0\Temp|*.txt;*.pk

[DivX player]
ID=2292
LangSecRef=3023
DetectFile=%AppData%\DivX\Player
Default=True
FileKey1=%AppData%\DivX\Player|Media Library

[Universal Extractor]
ID=2307
LangSecRef=3024
Detect=HKCU\Software\UniExtract
Default=False
RegKey1=HKCU\Software\UniExtract\Directory
RegKey2=HKCU\Software\UniExtract\File

[4Sync]
ID=2308
LangSecRef=3024
Detect=HKCU\Software\4Sync
Default=True
FileKey1=%AppData%\4Sync|*.log

[Copernic]
ID=2309
LangSecRef=3021
DetectFile1=%AppData%\Copernic\Agent
DetectFile2=%AppData%\Copernic\Agent Pro
Detect=HKCU\Software\Copernic\DesktopSearch2
Default=False
FileKey1=%AppData%\Copernic\*\Searches|*.*|RECURSE
RegKey1=HKCU\Software\Copernic\DesktopSearch2\Config\SearchHistory

[DVDFab]
ID=2310
LangSecRef=3023
Detect1=HKLM\Software\DVDFab
Detect2=HKCU\Software\DVDFab
Default=True
FileKey1=%Documents%\DVDFab|*.log|RECURSE
FileKey2=%Documents%\DVDFab Passkey|*.log|RECURSE

[InkScape]
ID=2311
LangSecRef=3023
Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\inkscape.exe
Default=True
FileKey1=%AppData%\InkScape|*.log|RECURSE
FileKey2=%UserProfile%|.recently-used.xbel

[Anonymizer]
ID=2315
LangSecRef=3022
DetectFile=%AppData%\Anonymizer\Anonymizer Universal
Default=True
FileKey1=%AppData%\Anonymizer\Anonymizer Universal|*.log

[Gadu-Gadu]
ID=2319
LangSecRef=3022
Detect1=HKCU\Software\GG
Detect2=HKCU\Software\Gadu-Gadu 10
Detect3=HKCU\Software\Nowe Gadu-Gadu
Detect4=HKCU\Software\Gadu-Gadu
Default=True
FileKey1=%AppData%\GG\Profiles\*\*Cache|*|RECURSE
FileKey2=%AppData%\GG\logs|*.log
FileKey3=%AppData%\GG\Crash Reports|*|RECURSE
FileKey4=%AppData%\Gadu-Gadu 10\Profiles\*\*Cache|*|RECURSE
FileKey5=%AppData%\Gadu-Gadu 10\logs|*.log
FileKey6=%AppData%\Gadu-Gadu 10\Crash Reports|*|RECURSE
FileKey7=%AppData%\Gadu-Gadu\Profiles\*\*Cache|*|RECURSE
FileKey8=%AppData%\Gadu-Gadu\logs|*.log
FileKey9=%AppData%\Gadu-Gadu\Crash Reports|*|RECURSE
FileKey10=%AppData%\Nowe Gadu-Gadu\Profiles\*\*Cache|*|RECURSE
FileKey11=%AppData%\Nowe Gadu-Gadu\logs|*.log
FileKey12=%AppData%\Nowe Gadu-Gadu\Crash Reports|*|RECURSE
FileKey13=%LocalAppData%\GG\Profiles\*\*Cache|*|RECURSE
FileKey14=%LocalAppData%\GG\logs|*.log
FileKey15=%LocalAppData%\GG\Crash Reports|*|RECURSE
FileKey16=%LocalAppData%\Gadu-Gadu 10\Profiles\*\*Cache|*|RECURSE
FileKey17=%LocalAppData%\Gadu-Gadu 10\logs|*.log
FileKey18=%LocalAppData%\Gadu-Gadu 10\Crash Reports|*|RECURSE
FileKey19=%LocalAppData%\Gadu-Gadu\Profiles\*\*Cache|*|RECURSE
FileKey20=%LocalAppData%\Gadu-Gadu\logs|*.log
FileKey21=%LocalAppData%\Gadu-Gadu\Crash Reports|*|RECURSE
FileKey22=%LocalAppData%\Nowe Gadu-Gadu\Profiles\*\*Cache|*|RECURSE
FileKey23=%LocalAppData%\Nowe Gadu-Gadu\logs|*.log
FileKey24=%LocalAppData%\Nowe Gadu-Gadu\Crash Reports|*|RECURSE

[Foxit Phantom PDF]
ID=2320
LangSecRef=3021
Detect1=HKCU\Software\Foxit Software\Foxit PhantomPDF 5.0
Detect2=HKLM\Software\Foxit Software\Foxit PhantomPDF
Detect3=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0
Default=True
RegKey1=HKCU\Software\Foxit Software\Foxit PhantomPDF 5.0\Recent File List
RegKey2=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0\Recent File List
RegKey3=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0\Foxit PhantomPDF Advanced Editor\Recent File List

[PDFCreator]
ID=2335
LangSecRef=3021
Default=True
Detect1=HKCU\Software\PDFCreator
Detect2=HKCU\Software\PDFCreator.net
Detect3=HKCU\Software\pdfforge\PDFCreator
FileKey1=%ProgramFiles%\PDFCreator|SetupLog.txt
FileKey2=%AppData%\pdfforge\Images2PDF|Print-*.log
FileKey3=%AppData%\pdfforge\Images2PDF|PrintPDF-*.log
FileKey4=%AppData%\pdfforge\Images2PDF\Tmp|*.prnt|REMOVESELF
FileKey5=%LocalAppData%\Temp\PDFCreator\Spool|*.*
FileKey6=%LocalAppData%\PDFCreator|PDFCreator.log
RegKey1=HKCU\Software\PDFCreator\Program|LastsaveDirectory

[PDF Architect]
ID=2336
LangSecRef=3021
Default=True
Detect1=HKCU\Software\PDF Architect
Detect2=HKCU\Software\PDF Architect 2
FileKey1=%AppData%\PDF Architect\Thumbnails|*.*
RegKey1=HKCU\Software\PDF Architect\Recent File List
RegKey2=HKCU\Software\PDF Architect 2\Options\RecentDocuments\List

[MailWasher Pro]
ID=2321
LangSecRef=3022
Detect1=HKCU\Software\FireTrust\MailWasher Pro
Detect2=HKCU\Software\FireTrust\MailWasher
Detect3=HKCU\Software\FireTrust\MailWasherPro
Default=True
FileKey1=%AppData%\Firetrust\MailWasher\logs|*.*|RECURSE
FileKey2=%AppData%\Firetrust\MailWasher|log_*|RECURSE
FileKey3=%AppData%\Firetrust\MailWasher|regex.txt
FileKey4=%AppData%\Firetrust\MailWasher|updatesAIU.txt
ExcludeKey1=FILE|%AppData%\Firetrust\MailWasher\cache|*mwp_exw.dat;*mwp_conv.dat;*mwp_inw.dat;*mwp_pmap.dat;*MWP.db3

[Samsung Kies]
ID=2322
LangSecRef=3023
Detect=HKCU\Software\Samsung\Kies2.0
Default=True
FileKey1=%AppData%\Samsung\Kies|UpdateLog.txt;UpdateList.txt;*.log|RECURSE
FileKey2=%AppData%\Samsung\Kies\UpdateTemp|*.*|RECURSE
FileKey3=%CommonAppData%\Samsung\Kies|ConnectionManager.log;Kiesairmessage.log
FileKey4=%AppData%\Samsung\Kies\TempFiles|*.*|RECURSE
FileKey5=%CommonAppData%\Samsung\Device Error Recovery|*.log
FileKey6=%LocalAppData%\Temp\KiesTemporary|*.dll

[Connectify Hotspot]
ID=2330
LangSecRef=3022
Detect=HKLM\SOFTWARE\Connectify
Default=True
FileKey1=%ProgramFiles%\Connectify|install.log
FileKey2=%CommonAppData%\Connectify\logs|*.log
ExcludeKey1=%CommonAppData%\Connectify\logs|deamon.log

[Express Scribe]
ID=2340
LangSecRef=3021
Detect=HKCU\Software\NCH Software\Scribe
Default=False
FileKey1=%AppData%\NCH Software\Scribe\Logs|*.*

[Gom Player]
ID=2341
LangSecRef=3023
Detect=HKCU\Software\GRETECH\GomPlayer
Default=False
FileKey1=%AppData%\GRETECH\GomPlayer\Log|*.*
FileKey2=%AppData%\GRETECH\GomPlayer\DCache|*.*
RegKey1=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME000
RegKey2=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME001
RegKey3=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME002
RegKey4=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME003
RegKey5=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME004
RegKey6=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME005
RegKey7=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME006
RegKey8=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME007
RegKey9=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME008
RegKey10=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME009
RegKey11=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME010
RegKey12=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME011
RegKey13=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME012
RegKey14=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME013
RegKey15=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME014
RegKey16=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME015
RegKey17=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME016
RegKey18=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME017
RegKey19=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME018
RegKey20=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME019
RegKey21=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME020
RegKey22=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME021
RegKey23=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME022
RegKey24=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME023
RegKey25=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME024
RegKey26=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME025
RegKey27=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME026
RegKey28=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME027
RegKey29=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME028
RegKey30=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME029
RegKey31=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME030
RegKey32=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME031
RegKey33=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME032
RegKey34=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME033
RegKey35=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME034
RegKey36=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME035
RegKey37=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME036
RegKey38=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME037
RegKey39=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME038
RegKey40=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME039
RegKey41=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME040
RegKey42=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME041
RegKey43=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME042
RegKey44=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME043
RegKey45=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME044
RegKey46=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME045
RegKey47=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME046
RegKey48=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME047
RegKey49=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME048
RegKey50=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME049
RegKey51=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS000
RegKey52=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS001
RegKey53=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS002
RegKey54=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS003
RegKey55=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS004
RegKey56=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS005
RegKey57=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS006
RegKey58=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS007
RegKey59=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS008
RegKey60=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS009
RegKey61=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS010
RegKey62=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS011
RegKey63=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS012
RegKey64=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS013
RegKey65=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS014
RegKey66=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS015
RegKey67=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS016
RegKey68=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS017
RegKey69=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS018
RegKey70=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS019
RegKey71=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS020
RegKey72=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS021
RegKey73=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS022
RegKey74=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS023
RegKey75=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS024
RegKey76=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS025
RegKey77=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS026
RegKey78=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS027
RegKey79=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS028
RegKey80=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS029
RegKey81=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS030
RegKey82=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS031
RegKey83=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS032
RegKey84=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS033
RegKey85=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS034
RegKey86=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS035
RegKey87=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS036
RegKey88=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS037
RegKey89=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS038
RegKey90=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS039
RegKey91=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS040
RegKey92=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS041
RegKey93=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS042
RegKey94=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS043
RegKey95=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS044
RegKey96=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS045
RegKey97=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS046
RegKey98=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS047
RegKey99=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS048
RegKey100=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS049
RegKey101=HKCU\Software\GRETECH\GomPlayer\OPTION|sRecentFolder
RegKey102=HKCU\Software\GRETECH\GomPlayer\OPTION|sRecentFile
RegKey103=HKCU\Software\GRETECH\GomPlayer\OPTION|sRecentURL

[Skype Metro App]
ID=2337
LangSecRef=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.SkypeApp_kzf8qxf38zg5c
DetectFile=%LocalAppData%\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.SkypeApp_*\AC\Temp|*.*
FileKey2=%LocalAppData%\Packages\Microsoft.SkypeApp_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey3=%LocalAppData%\Packages\Microsoft.SkypeApp_*\LocalState\*\logs|*.skypelog
FileKey4=%LocalAppData%\Packages\Microsoft.SkypeApp_*\TempState\Sync_*TempCache|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.SkypeApp_*\Settings|LastModified.txt
RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.SkypeApp_kzf8qxf38zg5c\SearchHistory
RegKey2=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.SkypeApp_kzf8qxf38zg5c\PSR\AddedContactSince

[Twitter Metro]
ID=2338
LangSecRef=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\9E2F88E3.Twitter_wgeqdkkx372wm
DetectFile=%LocalAppData%\Packages\9E2F88E3.Twitter_wgeqdkkx372wm
Default=True
FileKey1=%LocalAppData%\Packages\*Twitter_*\AC\Microsoft\CLR_v4.0\|Twitter-*.LOG|RECURSE
FileKey2=%LocalAppData%\Packages\*Twitter_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey3=%LocalAppData%\Packages\*Twitter_*\AC\Microsoft\CryptnetUrlCache\MetaData|Twitter-*.*
FileKey4=%LocalAppData%\Packages\*Twitter_*\AC\Temp|*.*
FileKey5=%LocalAppData%\Packages\*Twitter_*\LocalState\CameraPicker\|*.png|RECURSE
FileKey6=%LocalAppData%\Packages\*Twitter_*\TempState|*.*|RECURSE
RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\9E2F88E3.Twitter_wgeqdkkx372wm\SearchHistory
ExcludeKey1=FILE|%LocalAppData%\Packages\*Twitter_*\AC\Microsoft\CryptnetUrlCache\Content\|Twitter-SyncNow.db

[Adobe Reader Touch]
ID=2339
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_ynb6jyjzte8ga
Default=True
FileKey1=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\INetCache|*.*
FileKey2=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\INetCookies|*.*
FileKey3=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\INetHistory|*.*
FileKey4=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\Microsoft\CLR_v4.0\UsageLogs|AdobeReader*.log
FileKey5=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\Temp|*.*
FileKey6=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\LocalState\*\logs|Adobe-*.log
FileKey7=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\TempState|*.*|RECURSE

[Bing Search]
ID=2346
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.Bing_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.Bing_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey2=%LocalAppData%\Packages\Microsoft.Bing_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey3=%LocalAppData%\Packages\Microsoft.Bing_*\AC\INetCache|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.Bing_*\AC\INetCookies|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.Bing_*\AC\INetHistory|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.Bing_*\AC\AppCache|*.*
FileKey7=%LocalAppData%\Packages\Microsoft.Bing_*\AC\Temp|*.*
FileKey8=%LocalAppData%\Packages\Microsoft.Bing_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE
FileKey9=%LocalAppData%\Packages\Microsoft.Bing_*\AC\PRICache|*_sync.dac
FileKey10=%LocalAppData%\Packages\Microsoft.Bing_*\TempState|*.*|RECURSE

[Bing Finance]
ID=2347
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.BingFinance_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey2=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey3=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\INetCache|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\INetCookies|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\INetHistory|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\Temp|*.*
FileKey7=%LocalAppData%\Packages\Microsoft.BingFinance_*\LocalState\Cache|*.*
FileKey8=%LocalAppData%\Packages\Microsoft.BingFinance_*\LocalState\navigationHistory|*.*|RECURSE
FileKey9=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\Microsoft\Internet Explorer\DOMStore|*.*
FileKey10=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\PriAppCache|*.*
RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.bingfinance_8wekyb3d8bbwe\Internet Explorer\DOMStorage\microsoft.bingfinance\SearchHistory
RegKey2=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.bingfinance_8wekyb3d8bbwe\Internet Explorer\DOMStorage\microsoft.bingfinance\RecentVisit

[Bing Maps]
ID=2348
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.BingMaps_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.BingMaps_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey2=%LocalAppData%\Packages\Microsoft.BingMaps_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey3=%LocalAppData%\Packages\Microsoft.BingMaps_*\AC\INetCache|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.BingMaps_*\AC\INetCookies|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.BingMaps_*\AC\INetHistory|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.BingMaps_*\LocalState\Cache|*.*|RECURSE
FileKey7=%LocalAppData%\Packages\Microsoft.BingMaps_*\TempState|*.state

[Bing News]
ID=2349
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.BingNews_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey2=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey3=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\INetCache|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\INetCookies|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\INetHistory|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\AppCache|*.*|RECURSE
FileKey7=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\Temp|*.*
FileKey8=%LocalAppData%\Packages\Microsoft.BingNews_*\LocalState\Cache|*.*|RECURSE
FileKey9=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE
FileKey10=%LocalAppData%\Packages\Microsoft.BingNews_*\TempState|*.sync
FileKey11=%LocalAppData%\Packages\Microsoft.BingNews*\LocalState\appCache|*.rfc
FileKey12=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\Microsoft\CLR_v4.0\UsageLogs|*.log

[Bing Sports]
ID=2350
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.BingSports_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey2=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey3=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\INetCache|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\INetCookies|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\INetHistory|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\Temp|*.*
FileKey7=%LocalAppData%\Packages\Microsoft.BingSports_*\LocalState\Cache|*.*|RECURSE
FileKey8=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE
ExcludeKey1=FILE|%LocalAppData%\Packages\Microsoft.BingSports_*\LocalState\Cache|_sessionState2.xml

[Bing Travel]
ID=2351
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.BingTravel_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey2=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey3=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\INetCache|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\INetCookies|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\INetHistory|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\Temp|*.*
FileKey7=%LocalAppData%\Packages\Microsoft.BingTravel_*\LocalState\Cache|*.*|RECURSE
FileKey8=%LocalAppData%\Packages\Microsoft.BingTravel_*\LocalState\navigationHistory|*.*|RECURSE
FileKey9=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE

[Sony Vegas Pro 12.0]
ID=2352
LangSecRef=3023
Detect=HKLM\SOFTWARE\Sony Creative Software\Vegas Pro\12.0
Default=True
FileKey1=%LocalAppData%\Sony\ErrorReport|*.erpt
FileKey2=%LocalAppData%\Sony\Vegas Pro\12.0|*.log
FileKey3=%AppData%\Sony|SCS_INSTALLER_1.log
FileKey4=%AppData%\Sony|*.dmp
FileKey5=%AppData%\Sony\Vegas Pro\12.0|localstorage_*.tmp
FileKey6=%AppData%\Sony\Vegas Pro\12.0|_lastsession.log

[Directory Opus 10]
ID=2353
LangSecRef=3024
Detect=HKLM\SOFTWARE\GPSoftware\Directory Opus
Default=True
FileKey1=%AppData%\GPSoftware\Directory Opus\Logs|*.*
FileKey2=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|find_name.osd
FileKey3=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|find_path.osd
FileKey4=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|zippy.osd
FileKey5=%AppData%\GPSoftware\Directory Opus\Thumbnail Cache|*_do.cache
RegKey1=HKLM\SOFTWARE\Wow6432Node\GPSoftware\Directory Opus\10.5.2.0|ItemListFilter

[NVIDIA Install Files]
ID=2357
LangSecRef=3024
Detect=HKCU\Software\NVIDIA Corporation
Default=True
FileKey1=%SystemDrive%\NVIDIA|*.*|REMOVESELF
FileKey2=%SystemDrive%\NV|*.*|REMOVESELF

[CDBurnerXP]
ID=2358
LangSecRef=3024
Detect=HKLM\SOFTWARE\Wow6432Node\Canneverbe Limited\CDBurnerXP
Detect2=HKCU\Software\Canneverbe Limited\CDBurnerXP
Default=True
FileKey1=%ProgramData%\Canneverbe Limited\CDBurnerXP\*.*.*.*|OperationLog.log
FileKey2=%AppData%\Canneverbe Limited\CDBurnerXP|StarBurn.log
FileKey3=%AppData%\Canneverbe Limited\CDBurnerXP\*.*.*.*|*.tmp
RegKey1=HKCU\Software\Canneverbe Limited\CDBurnerXP\PathsPrev

[UltraEdit]
ID=2359
LangSecRef=3021
Detect=HKCU\Software\IDM Computer Solutions\UltraEdit
Default=True
FileKey1=%AppData%\IDMComp\UltraEdit|projects.lst
FileKey2=%AppData%\IDMComp\Common\FTP Accounts|IdmFTPAccounts_bak.txt
FileKey3=%LocalAppData%\Downloaded Installations\UltraEdit\*|UltraEdit_.msi

[Photodex ProShow Producer]
ID=2360
LangSecRef=3021
Detect=HKLM\SOFTWARE\Photodex Media Sources
Detect2=HKLM\SOFTWARE\Wow6432Node\Photodex Media Sources
Default=True
FileKey1=%CommonAppData%\Photodex\ProShow|photodex-presenter-install.log
FileKey2=%CommonAppData%\Photodex\ProShow Producer|photodex-presenter-install.log
FileKey3=%ProgramFiles%\Photodex\ProShow Producer|install.log

[SketchUp Make 2013]
ID=2361
LangSecRef=3021
Detect=HKCU\Software\SketchUp
Default=True
FileKey1=%AppData%\SketchUp\SketchUp 2013\SketchUp|~*.tmp
RegKey1=HKCU\Software\SketchUp\SketchUp 2013\Recent File List

[HandBrake]
ID=2362
LangSecRef=3021
Detect=HKLM\SOFTWARE\Microsoft\Tracing\Handbrake_RASAPI32
Detect2=HKLM\SOFTWARE\Microsoft\Tracing\Handbrake_RASMANCS
Detect3=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Handbrake.exe
Default=True
FileKey1=%AppData%\HandBrake\logs|*.txt
FileKey2=%AppData%\HandBrake\HandBrake\*|*.tmp

[ABBYY FineReader 11.0]
ID=2363
LangSecRef=3021
Detect=HKCU\Software\ABBYY\FineReader\11.00
Default=True
RegKey1=HKCU\Software\ABBYY\FineReader\11.00\Shell\MainFrame\RecentFileList
RegKey2=HKCU\Software\ABBYY\FineReader\11.00\Shell\Dialogs|LoadImagePath
RegKey3=HKCU\Software\ABBYY\FineReader\11.00\Shell\Dialogs|SaveImagePath
FileKey1=%ProgramFiles%\ABBYY FineReader 11|ABBYY FineReader 11.log
FileKey2=%ProgramData%\ABBYY\Bonus.ScreenshotReader\11.00|*.thumbnail
FileKey3=%ProgramData%\ABBYY\FineReader\11.00\Licenses|ProductLicensing.log

[The Bat]
ID=2374
LangSecRef=3022
Detect=HKCU\Software\RIT\The Bat!
Default=True
FileKey1=%AppData%\The Bat!|TheBat_Exceptions.log
FileKey2=%AppData%\The Bat!\*|ACCOUNT_LOG.TXT

[Wondershare Video Converter Ultimate]
ID=2376
LangSecRef=3023
Detect=HKLM\SOFTWARE\Wondershare\Wondershare Video Converter Ultimate
Default=True
FileKey1=%commonprogramfiles%\Wondershare\Wondershare Helper Compact\log\Data|*.*|RECURSE
FileKey2=%ProgramFiles%\Wondershare\Video Converter Ultimate\Log|*.*
FileKey3=%CommonAppData%\Wondershare Video Converter Ultimate|*.dat.bak
FileKey4=%CommonAppData%\Wondershare Video Converter Ultimate\TempSiteIconDir|*.*
FileKey5=%CommonAppData%\Wondershare Video Converter Ultimate\TempThumbDir|*.*

[Sublime Text]
ID=2377
LangSecRef=3024
DetectFile=%AppData%\Sublime Text 3
Default=True
FileKey1=%LocalAppData%\Sublime Text 3\Index|LOG.old
FileKey2=%LocalAppData%\Sublime Text 3\Index|00*.log

[Picasa 3]
ID=2378
LangSecRef=3021
Detect=HKLM\SOFTWARE\Wow6432Node\Google\Picasa
Default=True
FileKey1=%LocalAppData%\Google\Picasa2|network.log;network_expwebsites.log
FileKey2=%LocalAppData%\Google\GBScreensaver|network.log
FileKey3=%LocalAppData%\Google\Google+ Auto Backup|network.log
FileKey4=%LocalAppData%\Google\Picasa2\cache|*.*|RECURSE
FileKey5=%LocalAppData%\Google\Picasa2\temp|*.*|RECURSE
FileKey6=%LocalAppData%\Google\Picasa2\tmp|PluginRec.dat;PluginRec.dat_bak

[Kingsoft Office 2013]
ID=2379
LangSecRef=3021
Detect=HKCU\SOFTWARE\Kingsoft\Kingsoft\Office\6.0
Detect2=HKLM\SOFTWARE\Wow6432Node\Kingsoft\Office\6.0
Default=True
RegKey1=HKCU\Software\Kingsoft\Office\6.0\et\RecentFiles
RegKey2=HKCU\Software\Kingsoft\Office\6.0\et\RecentFunction
RegKey3=HKCU\Software\Kingsoft\Office\6.0\wpp\RecentFiles
RegKey4=HKCU\Software\Kingsoft\Office\6.0\wps\RecentFiles
FileKey1=%AppData%\Kingsoft\*|*.bak2
FileKey2=%CommonAppData%\Kingsoft\Office6\LocalTemp|*.*
FileKey3=%LocalAppData%\Kingsoft\et\cache\http|*.*|RECURSE
FileKey4=%LocalAppData%\Kingsoft\et\cache\https|*.*|RECURSE
FileKey5=%LocalAppData%\Kingsoft\wpp\cache\http|*.*|RECURSE
FileKey6=%LocalAppData%\Kingsoft\wps\cache\http|*.*|RECURSE
FileKey7=%LocalAppData%\Kingsoft\wps\cache\https|*.*|RECURSE
FileKey8=%AppData%\Kingsoft\office6\backup|*.*
FileKey9=%AppData%\Kingsoft\office6\log\*|*.log
FileKey10=%AppData%\Kingsoft\office6\update\log|*.log
FileKey11=%AppData%\Kingsoft\office6\update\down|*.src
FileKey12=%AppData%\Kingsoft\office6\update\dump|*.dmp
FileKey13=%AppData%\Kingsoft\office6\update\log\package|*.pkg

[Facebook Metro]
ID=2380
LangSecRef=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Facebook.Facebook_8xx8rvfyw5nnt
Default=True
FileKey1=%LocalAppData%\Packages\*Facebook_*\AC\AppCache|*.*|RECURSE
FileKey2=%LocalAppData%\Packages\*Facebook_*\AC\INetCache|*.*|RECURSE
FileKey3=%LocalAppData%\Packages\*Facebook_*\AC\INetCookies|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\*Facebook_*\AC\INetHistory|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\*Facebook_*\AC\Microsoft\CLR_v4.0|*.log|RECURSE
FileKey6=%LocalAppData%\Packages\*Facebook_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey7=%LocalAppData%\Packages\*Facebook_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey8=%LocalAppData%\Packages\*Facebook_*\AC\PRICache|*.*
FileKey9=%LocalAppData%\Packages\*Facebook_*\AC\Temp|*.*

[Xilisoft Video Converter]
ID=2381
LangSecRef=3023
Detect=HKLM\Software\Xilisoft\Video Converter Platinum
Detect2=HKLM\Software\Xilisoft\Video Converter Ultimate
Detect3=HKCU\Software\Xilisoft\Video Converter Ultimate
Detect4=HKLM\Software\Xilisoft\Video Converter Standard
Default=True
RegKey1=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_output_dir
RegKey2=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_profile_group
RegKey3=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_profile_url
RegKey4=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|recent_profiles
RegKey5=HKCU\Software\Xilisoft\Video Converter Platinum\Settings\output
RegKey6=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_openfile_dir
RegKey7=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_snapshot_dir
RegKey8=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_openpicture_dir
RegKey9=HKCU\Software\Xilisoft\Video Converter Platinum\Settings|last_imported_dir
RegKey10=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings\output
RegKey11=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_openfile_dir
RegKey12=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_output_dir
RegKey13=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_profile_group
RegKey14=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_profile_url
RegKey15=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|recent_profiles
RegKey16=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_snapshot_dir
RegKey17=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_openpicture_dir
RegKey18=HKCU\Software\Xilisoft\Video Converter Ultimate\Settings|last_imported_dir
RegKey19=HKCU\Software\Xilisoft\video Converter Ultimate\Settings|LastOpenSoundFileFolder
Filekey1=%CommonAppData%\Xilisoft\Video Converter Platinum\customdata|settings.old

[Xilisoft DVD Ripper]
ID=2382
LangSecRef=3023
Detect=HKLM\Software\Xilisoft\DVD Ripper Ultimate SE
Default=True
RegKey1=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|last_output_dir
RegKey2=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|last_profile_group
RegKey3=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|last_profile_url
RegKey4=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|recent_profiles
RegKey5=Software\Xilisoft\DVD Ripper Ultimate SE\Settings\output
FileKey1=%CommonAppData%\Xilisoft\DVD Ripper Ultimate SE\customdata|settings.old

[dBpoweramp]
ID=2383
LangSecRef=3023
Detect=HKCU\Software\Illustrate\dBpoweramp
Default=True
RegKey1=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder0
RegKey2=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder1
RegKey3=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder2
RegKey4=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder3
RegKey5=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder4
RegKey6=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder5
RegKey7=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder6
RegKey8=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder7
RegKey9=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder8
RegKey10=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder9
RegKey11=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder10
RegKey12=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\AAC (Advanced Audio Compression)|DMCUserFolderStr
RegKey13=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Aiff|DMCUserFolderStr
RegKey14=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Apple Lossless|DMCUserFolderStr
RegKey15=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\FLAC|DMCUserFolderStr
RegKey16=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\mp3 (Lame)|DMCUserFolderStr
RegKey17=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\ogg vorbis|DMCUserFolderStr
RegKey18=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Wave|DMCUserFolderStr
RegKey19=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Windows Media Audio 10|DMCUserFolderStr
RegKey20=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\[Multi Encoder]|DMCUserFolderStr
RegKey21=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Test Conversion|DMCUserFolderStr
RegKey22=HKCU\Software\Illustrate\dBpoweramp|LastAccessedFolder

[SyncBackFree]
ID=2384
LangSecRef=3024
Detect=HKCU\Software\2BrightSparks\SyncBackFree
Default=True
FileKey1=%LocalAppData%\2BrightSparks\SyncBackFree\Logs|*.*
FileKey2=%LocalAppData%\2BrightSparks\SyncBackFree|Debug*.txt

[Wondershare Video Converter Pro]
ID=2385
LangSecRef=3023
Detect=HKLM\SOFTWARE\Wondershare\Wondershare Video Converter Pro
Default=True
FileKey1=%ProgramFiles%\Wondershare Video Converter Pro\TempThumbDir|*.*|RECURSE
FileKey2=%ProgramFiles%\Wondershare Video Converter Pro\Log|*.*|RECURSE
FileKey3=%CommonAppData%\Wondershare Video Converter Pro|*.dat.bak
FileKey4=%CommonAppData%\Wondershare Video Converter Pro\TempSiteIconDir|*.*
FileKey5=%CommonAppData%\Wondershare Video Converter Pro\TempThumbDir|*.*
FileKey6=%CommonProgramFiles%\Wondershare\Wondershare Helper Compact\Temp|video*.exe
FileKey7=%ProgramFiles%\Wondershare\Video Converter Pro\Output|Thumbnail.dat

[Aimersoft Video Converter Ultimate]
ID=2386
LangSecRef=3023
Detect=HKLM\SOFTWARE\Aimersoft\Aimersoft Video Converter Ultimate
Default=True
FileKey1=%ProgramFiles%\Aimersoft\Video Converter Ultimate\Log|*.*
FileKey2=%ProgramFiles%\Aimersoft\Video Converter Ultimate\Snapshot|snap*.dat
FileKey3=%ProgramFiles%\Common Files\Aimersoft\Aimersoft Helper Compact\log|*.*|RECURSE
FileKey4=%CommonAppData%\Aimersoft Video Converter Ultimate\TempSiteIconDir|*.*
FileKey5=%CommonAppData%\Aimersoft Video Converter Ultimate\TempThumbDir|*.*
FileKey6=%CommonAppData%\Aimersoft Video Converter Ultimate|*.dat.bak
FileKey7=%LocalAppData%\Aimersoft\ASHelper|*.exe.tmp
FileKey8=%AppData%\Aimersoft Video Converter Ultimate\Temp|*.*

[Stardock WindowBlinds]
ID=2389
LangSecRef=3021
Detect=HKCU\Software\Stardock\WindowBlinds
Default=True
RegKey1=HKCU\Software\Stardock\WindowBlinds\WB5.ini\Recent
FileKey1=%Public%\Documents\Stardock\WindowBlinds|StardockB*.dmp

[Nitro Pro 9]
ID=2390
LangSecRef=3024
Detect=HKCU\Software\Nitro\Pro\9.0
Default=True
RegKey1=HKCU\Software\Nitro\Pro\9.0\Recent File List
RegKey2=HKCU\Software\Nitro\Pro\9.0\Settings\Preferences\kPreferences|kCurrentOpenPath
FileKey1=%CommonProgramFiles%\Nitro\Pro\9.0|*.backup
FileKey2=%CommonAppData%\Package Cache|*.rsm
FileKey3=%AppData%\Downloaded Installations|*_temp.msi|RECURSE
FileKey4=%AppData%\Nitro\Pro\9.0|DocLog.txt

[Nitro PDF Reader 3]
ID=2392
LangSecRef=3024
Detect=HKCU\Software\Nitro\Reader\3.0
Default=True
RegKey1=HKCU\Software\Nitro PDF\Reader\3.0\Recent File List

[VirtualDJ 7]
ID=2393
LangSecRef=3023
Detect=HKCU\Software\VirtualDJ
Default=True
FileKey1=%Documents%\VirtualDJ\TrackListing|tracklist.txt

[Format Factory 3.3.5]
ID=2394
LangSecRef=3023
Detect=HKCU\Software\FreeTime\FormatFactory
Default=True
RegKey1=HKCU\Software\FreeTime\FormatFactory|LastUse
FileKey1=%Documents%\FormatFactory|*.task

[TeamViewer]
ID=2395
LangSecRef=3024
Detect=HKCU\Software\TeamViewer
Default=True
RegKey1=HKCU\Software\TeamViewer\Version9|MRU
RegKey2=HKCU\Software\TeamViewer\Version10|MRU
RegKey3=HKCU\Software\TeamViewer\Version11|MRU
FileKey1=%ProgramFiles%\TeamViewer\*|*.tmp|RECURSE
FileKey2=%LocalAppData%\VirtualStore\Program Files*\TeamViewer\*|*.tmp|RECURSE
FileKey3=%ProgramFiles%\TeamViewer*|Connections_incoming.txt
FileKey4=%AppData%\TeamViewer|Connections.txt
FileKey5=%AppData%\TeamViewer\MRU\RemoteSupport|*.tvc

[MS OneDrive]
ID=2396
LangSecRef=3021
Detect=HKCU\Software\Microsoft\SkyDrive
Default=True
FileKey1=%LocalAppData%\Microsoft\SkyDrive\logs|*.log;*.etl

[VNCViewer 5]
ID=2397
LangSecRef=3024
Detect=HKCU\Software\RealVNC\vncviewer
Default=True
RegKey1=HKCU\Software\RealVNC\vncviewer\MRU
FileKey1=%LocalAppData%\RealVNC|vncviewer.log

[Tag&Rename 3.8]
ID=2398
LangSecRef=3024
Detect=HKCU\Software\Softpointer\Tag&Rename3.7\Config
Default=True
RegKey1=HKCU\Software\Softpointer\Tag&Rename3.7\Config|CurrentFolder
RegKey2=HKCU\Software\Softpointer\Tag&Rename3.7\Config|HistoryList

[Tango]
ID=2399
LangSecRef=3022
DetectFile=%ProgramFiles%\Tango\Tango.exe
Default=True
FileKey1=%LocalAppData%\tango|call_log.dat

[PhotoScape 3.6.5]
ID=2400
LangSecRef=3023
Detect=HKCU\Software\Mooii\PhotoScape
Default=True
FileKey1=%AppData%\PhotoScape|*.lst;*.cfg;*.jpg

[BlueStacks]
ID=2401
LangSecRef=3021
Detect=HKLM\Software\Bluestacks
Default=True
FileKey1=%CommonAppData%\BlueStacks\logs|*.log;*.log.*|RECURSE
FileKey2=%LocalAppData%\BlueStacks\logs|*.log
FileKey3=%CommonAppData%\BlueStacksSetup\Images\|*.*|REMOVESELF
FileKey4=%CommonAppData%\BlueStacksSetup|runtimedata_*.zip;runtimedata_*.zip.manifest
FileKey5=%CommonAppData%\BlueStacksSetup|bstInstall.log
ExcludeKey1=FILE|%CommonAppData%\BlueStacks\logs\core.log
ExcludeKey2=FILE|%CommonAppData%\BlueStacks\logs\BlueStacksUpdater.log
ExcludeKey3=FILE|%CommonAppData%\BlueStacks\logs\BlueStacksUsers.log

[ManyCam 4.0.109]
ID=2402
LangSecRef=3023
Detect=HKCU\Software\Visicom Media\ManyCam
Default=True
RegKey1=HKCU\Software\Visicom Media\ManyCam\ui|open_media_folder
RegKey2=HKCU\Software\Visicom Media\ManyCam\ui|open_audio_folder
RegKey3=HKCU\Software\Visicom Media\ManyCam\ui|open_game_folder
RegKey4=HKCU\Software\Visicom Media\ManyCam\ui|open_playlist_folder
FileKey1=%LocalAppData%\ManyCam\game_capture|*.log

[XnView]
ID=2406
LangSecRef=3024
Detect=HKLM\Software\XnView
Default=True
FileKey1=%AppData%\XnView|XnView.db;category.bak
FileKey2=%ProgramFiles%\XnView|category.bak
FileKey3=%LocalAppData%\VirtualStore\Program Files*\XnView|category.bak
FileKey4=%ProgramFiles%\XnView\cache|*.db
FileKey5=%LocalAppData%\VirtualStore\Program Files*\XnView\cache|*.db
 
----
 
I also found a mention of Chrome here in the ccleaner.ini file:
 
[Options]
Language=1033
SkipUAC=1
UpdateKey=12/28/2016 08:42:57 PM
WipeFreeSpaceDrives=C:\
CookiesToSave=account.microsoft.com|activity.api.bbc.co.uk|amazon.co.uk|asda.com|bbc.co.uk|bing.com|consent.google.co.uk|forum.piriform.com|google.co.uk|groceries.asda.com|login.live.com|piriform.com|piriform.zendesk.com|preferences.notifications.api.bbc.co.uk|retail.santander.co.uk|santander.co.uk|startpage.com|wwe.com|www.amazon.co.uk|www.bbc.co.uk|www.bing.com|www.google.co.uk|www.littlewoods.com|www.santander.co.uk|www.startpage.com|www.wwe.com|www1.amazon.co.uk
RunICS=0
Monitoring=0
SystemMonitoring=0
BrowserMonitoring=0
BackupPrompt=0
HideWarnings=1
DelayTemp=0
DefaultDetailedView=1
SecureDeleteType=1
SecureDeleteMethod=3
WipeClusterTips=1
WipeAlternateDataStreams=1
FinderInclude1=PATH|C:\|*.*|RECURSE|0|0|24
FinderInclude2=PATH|D:\|*.*|RECURSE|0|0|24
FinderIncludeStates=1|0
AnalyzerTypes=1|1|1|1|0|0|0
SystemAnalyzerDrives=C:\
(App)Windows Error Reporting=True
(App)DNS Cache=True
(App)Font Cache=True
(App)Start Menu Shortcuts=True
(App)Desktop Shortcuts=True
(App)Windows Event Logs=True
(App)Old Prefetch data=True
(App)Menu Order Cache=True
(App)Tray Notifications Cache=True
(App)Window Size/Location Cache=True
(App)Environment Path=True
(App)User Assist History=True
(App)Old Windows Installation=True
(App)Custom Folders=True
(App)Mozilla - Cookies=False
(App)Mozilla - Site Preferences=True
(App)Mozilla - Compact Databases=True
(App)Google Chrome - Saved Form Information=True
(App)Google Chrome - Saved Passwords=True
(App)Google Chrome - Compact Databases=True
(App)Game Explorer=True
WINDOW_MAX=1
WINDOW_LEFT=0
WINDOW_TOP=0
WINDOW_WIDTH=800
WINDOW_HEIGHT=600
(App)Microsoft Edge - Cookies=False
(App)Cookies=False
Link to comment
Share on other sites

  • Moderators

did that ccleaner.ini get restored from backups after your new Windows was installed?

 

the 3 (App) entries for Chrome indicate that Chrome is, or was, installed.

so you  can start by deleting those 3 lines if you don't have Chrome installed.

Backup now & backup often.
It's your digital life - protect it with a backup.
Three things are certain; Birth, Death and loss of data. You control the last.

Link to comment
Share on other sites

  • Moderators

looks like it got on there somehow.

Backup now & backup often.
It's your digital life - protect it with a backup.
Three things are certain; Birth, Death and loss of data. You control the last.

Link to comment
Share on other sites

  • 3 years later...
  • Moderators

Which problem?

This thread is over 3 years old, both Chrome and CCleaner have changed quite a bit in that time, so yours is unlikely to be the same issue as back then.

Please start a new thread of your own and explain in more detail what issue you are seeing.

*** Out of Beer Error ->->-> Recovering Memory ***

Worried about 'Tracking Files'? Worried about why some files come back after cleaning? See this link:
https://community.ccleaner.com/topic/52668-tracking-files/?tab=comments#comment-300043

 

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.