Skip to content
Permalink
master
Switch branches/tags
Go to file
20 contributors

Users who have contributed to this file

@APMichael @ROCKNROLLKID @MoscaDotTo @TZocker @GoldMath @injust @timse201 @zero77 @iSupersniper @Koinonein @jmlntw @az0
20702 lines (18142 sloc) 894 KB
; Version: 210406
; # of entries: 2,552
;
; Winapp2.ini is fully licensed under the CC-BY-SA-4.0 license agreement. Please refer to our license agreement before using Winapp2.ini: https://github.com/MoscaDotTo/Winapp2/blob/master/License.md
; If you plan on modifying, distributing, and/or hosting Winapp2.ini for your own program or website, please ask first.
;
; You can get the latest Winapp2.ini here: https://github.com/MoscaDotTo/Winapp2
; Any contributions are appreciated. Please refer to our readme to learn to make your own entries here: https://github.com/MoscaDotTo/Winapp2/blob/master/README.md
;
; Is CCleaner taking too long to load with Winapp2.ini? Then download our Winapp2ool and use the trim function to remove unneeded entries in Winapp2.ini: https://github.com/MoscaDotTo/Winapp2/raw/master/winapp2ool/bin/Release/winapp2ool.exe
; The Winapp2ool has its own readme here: https://github.com/MoscaDotTo/Winapp2/blob/master/winapp2ool/Readme.md
;
; Chrome/Chromium based browsers
[ART *]
LangSecRef=3029
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%CommonProgramFiles%\Microsoft\ART\Backup\Google Chrome\*|*.tmp|RECURSE
FileKey2=%CommonProgramFiles%\Microsoft\ART\Backup\Google Chrome\*|Preferences.bak
[Blob Storage *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*\blob_storage|*.*|RECURSE
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*\blob_storage|*.*|RECURSE
FileKey3=%LocalAppData%\Amigo\User Data\*\blob_storage|*.*|RECURSE
FileKey4=%LocalAppData%\CentBrowser\User Data\*\blob_storage|*.*|RECURSE
FileKey5=%LocalAppData%\Chromium\User Data\*\blob_storage|*.*|RECURSE
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\blob_storage|*.*|RECURSE
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\blob_storage|*.*|RECURSE
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*\blob_storage|*.*|RECURSE
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*\blob_storage|*.*|RECURSE
FileKey10=%LocalAppData%\Flock\User Data\*\blob_storage|*.*|RECURSE
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*\blob_storage|*.*|RECURSE
FileKey12=%LocalAppData%\Iridium\User Data\*\blob_storage|*.*|RECURSE
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*\blob_storage|*.*|RECURSE
FileKey14=%LocalAppData%\RockMelt\User Data\*\blob_storage|*.*|RECURSE
FileKey15=%LocalAppData%\Slimjet\User Data\*\blob_storage|*.*|RECURSE
FileKey16=%LocalAppData%\Superbird\User Data\*\blob_storage|*.*|RECURSE
FileKey17=%LocalAppData%\Torch\User Data\*\blob_storage|*.*|RECURSE
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*\blob_storage|*.*|RECURSE
[Bookmarks Backup *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*|*Bookmarks.bak
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*|*Bookmarks.bak
FileKey3=%LocalAppData%\Amigo\User Data\*|*Bookmarks.bak
FileKey4=%LocalAppData%\CentBrowser\User Data\*|*Bookmarks.bak
FileKey5=%LocalAppData%\Chromium\User Data\*|*Bookmarks.bak
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*|*Bookmarks.bak
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*|*Bookmarks.bak
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*|*Bookmarks.bak
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*|*Bookmarks.bak
FileKey10=%LocalAppData%\Flock\User Data\*|*Bookmarks.bak
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*|*Bookmarks.bak
FileKey12=%LocalAppData%\Iridium\User Data\*|*Bookmarks.bak
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*|*Bookmarks.bak
FileKey14=%LocalAppData%\RockMelt\User Data\*|*Bookmarks.bak
FileKey15=%LocalAppData%\Slimjet\User Data\*|*Bookmarks.bak
FileKey16=%LocalAppData%\Superbird\User Data\*|*Bookmarks.bak
FileKey17=%LocalAppData%\Torch\User Data\*|*Bookmarks.bak
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*|*Bookmarks.bak
[Browser Exit Codes *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\Amigo
Detect3=HKCU\Software\CentBrowser
Detect4=HKCU\Software\Chromium\PreferenceMACs
Detect5=HKCU\Software\CocCoc\Browser
Detect6=HKCU\Software\Comodo\Dragon
Detect7=HKCU\Software\Epic Privacy Browser
Detect8=HKCU\Software\Iridium
Detect9=HKCU\Software\Slimjet
Detect10=HKCU\Software\Superbird
Detect11=HKCU\Software\Torch
Detect12=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
RegKey1=HKCU\Software\7Star\7Star\BrowserExitCodes
RegKey2=HKCU\Software\Amigo\BrowserExitCodes
RegKey3=HKCU\Software\CentBrowser\BrowserExitCodes
RegKey4=HKCU\Software\Chromium\BrowserExitCodes
RegKey5=HKCU\Software\CocCoc\Browser\BrowserExitCodes
RegKey6=HKCU\Software\Comodo\Dragon\BrowserExitCodes
RegKey7=HKCU\Software\Epic Privacy Browser\BrowserExitCodes
RegKey8=HKCU\Software\Google\Chrome Beta\BrowserExitCodes
RegKey9=HKCU\Software\Google\Chrome Dev\BrowserExitCodes
RegKey10=HKCU\Software\Google\Chrome SxS\BrowserExitCodes
RegKey11=HKCU\Software\Google\Chrome\BrowserExitCodes
RegKey12=HKCU\Software\Iridium\BrowserExitCodes
RegKey13=HKCU\Software\Slimjet\BrowserExitCodes
RegKey14=HKCU\Software\Superbird\BrowserExitCodes
RegKey15=HKCU\Software\Torch\BrowserExitCodes
RegKey16=HKCU\Software\Yandex\YandexBrowser\BrowserExitCodes
[Browser Metrics *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data|BrowserMetrics-spare.pma
FileKey2=%LocalAppData%\7Star\7Star\User Data\BrowserMetrics|*.*|RECURSE
FileKey3=%LocalAppData%\360Browser\Browser\User Data|BrowserMetrics-spare.pma
FileKey4=%LocalAppData%\360Browser\Browser\User Data\BrowserMetrics|*.*|RECURSE
FileKey5=%LocalAppData%\Amigo\User Data|BrowserMetrics-spare.pma
FileKey6=%LocalAppData%\Amigo\User Data\BrowserMetrics|*.*|RECURSE
FileKey7=%LocalAppData%\CentBrowser\User Data|BrowserMetrics-spare.pma
FileKey8=%LocalAppData%\CentBrowser\User Data\BrowserMetrics|*.*|RECURSE
FileKey9=%LocalAppData%\Chromium\User Data|BrowserMetrics-spare.pma
FileKey10=%LocalAppData%\Chromium\User Data\BrowserMetrics|*.*|RECURSE
FileKey11=%LocalAppData%\CocCoc\Browser\User Data|BrowserMetrics-spare.pma
FileKey12=%LocalAppData%\CocCoc\Browser\User Data\BrowserMetrics|*.*|RECURSE
FileKey13=%LocalAppData%\Comodo\Dragon\User Data|BrowserMetrics-spare.pma
FileKey14=%LocalAppData%\Comodo\Dragon\User Data\BrowserMetrics|*.*|RECURSE
FileKey15=%LocalAppData%\Coowon\Coowon\User Data|BrowserMetrics-spare.pma
FileKey16=%LocalAppData%\Coowon\Coowon\User Data\BrowserMetrics|*.*|RECURSE
FileKey17=%LocalAppData%\Epic Privacy Browser\User Data|BrowserMetrics-spare.pma
FileKey18=%LocalAppData%\Epic Privacy Browser\User Data\BrowserMetrics|*.*|RECURSE
FileKey19=%LocalAppData%\Flock\User Data|BrowserMetrics-spare.pma
FileKey20=%LocalAppData%\Flock\User Data\BrowserMetrics|*.*|RECURSE
FileKey21=%LocalAppData%\Google\Chrome*\User Data|BrowserMetrics-spare.pma
FileKey22=%LocalAppData%\Google\Chrome*\User Data\BrowserMetrics|*.*|RECURSE
FileKey23=%LocalAppData%\Iridium\User Data|BrowserMetrics-spare.pma
FileKey24=%LocalAppData%\Iridium\User Data\BrowserMetrics|*.*|RECURSE
FileKey25=%LocalAppData%\MapleStudio\ChromePlus\User Data|BrowserMetrics-spare.pma
FileKey26=%LocalAppData%\MapleStudio\ChromePlus\User Data\BrowserMetrics|*.*|RECURSE
FileKey27=%LocalAppData%\RockMelt\User Data|BrowserMetrics-spare.pma
FileKey28=%LocalAppData%\RockMelt\User Data\BrowserMetrics|*.*|RECURSE
FileKey29=%LocalAppData%\Slimjet\User Data|BrowserMetrics-spare.pma
FileKey30=%LocalAppData%\Slimjet\User Data\BrowserMetrics|*.*|RECURSE
FileKey31=%LocalAppData%\Superbird\User Data|BrowserMetrics-spare.pma
FileKey32=%LocalAppData%\Superbird\User Data\BrowserMetrics|*.*|RECURSE
FileKey33=%LocalAppData%\Torch\User Data|BrowserMetrics-spare.pma
FileKey34=%LocalAppData%\Torch\User Data\BrowserMetrics|*.*|RECURSE
FileKey35=%LocalAppData%\Yandex\YandexBrowser\User Data|BrowserMetrics-spare.pma
FileKey36=%LocalAppData%\Yandex\YandexBrowser\User Data\BrowserMetrics|*.*|RECURSE
[Budget Database *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey3=%LocalAppData%\Amigo\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey4=%LocalAppData%\CentBrowser\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey5=%LocalAppData%\Chromium\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey10=%LocalAppData%\Flock\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey12=%LocalAppData%\Iridium\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey14=%LocalAppData%\RockMelt\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey15=%LocalAppData%\Slimjet\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey16=%LocalAppData%\Superbird\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey17=%LocalAppData%\Torch\User Data\*\BudgetDatabase|*.*|RECURSE
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*\BudgetDatabase|*.*|RECURSE
[Code Cache *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*\Code Cache|*.*|RECURSE
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*\Code Cache|*.*|RECURSE
FileKey3=%LocalAppData%\Amigo\User Data\*\Code Cache|*.*|RECURSE
FileKey4=%LocalAppData%\CentBrowser\User Data\*\Code Cache|*.*|RECURSE
FileKey5=%LocalAppData%\Chromium\User Data\*\Code Cache|*.*|RECURSE
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\Code Cache|*.*|RECURSE
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\Code Cache|*.*|RECURSE
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*\Code Cache|*.*|RECURSE
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*\Code Cache|*.*|RECURSE
FileKey10=%LocalAppData%\Flock\User Data\*\Code Cache|*.*|RECURSE
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*\Code Cache|*.*|RECURSE
FileKey12=%LocalAppData%\Iridium\User Data\*\Code Cache|*.*|RECURSE
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*\Code Cache|*.*|RECURSE
FileKey14=%LocalAppData%\RockMelt\User Data\*\Code Cache|*.*|RECURSE
FileKey15=%LocalAppData%\Slimjet\User Data\*\Code Cache|*.*|RECURSE
FileKey16=%LocalAppData%\Superbird\User Data\*\Code Cache|*.*|RECURSE
FileKey17=%LocalAppData%\Torch\User Data\*\Code Cache|*.*|RECURSE
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Code Cache|*.*|RECURSE
[Crash Reports *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data|CrashpadMetrics*.pma
FileKey2=%LocalAppData%\7Star\7Star\User Data\Crashpad|metadata
FileKey3=%LocalAppData%\7Star\7Star\User Data\Crashpad\reports|*.*
FileKey4=%LocalAppData%\360Browser\Browser\User Data|CrashpadMetrics*.pma
FileKey5=%LocalAppData%\360Browser\Browser\User Data\Crashpad|metadata
FileKey6=%LocalAppData%\360Browser\Browser\User Data\Crashpad\reports|*.*
FileKey7=%LocalAppData%\Amigo\User Data|CrashpadMetrics*.pma
FileKey8=%LocalAppData%\Amigo\User Data\Crashpad|metadata
FileKey9=%LocalAppData%\Amigo\User Data\Crashpad\reports|*.*
FileKey10=%LocalAppData%\CentBrowser\User Data|CrashpadMetrics*.pma
FileKey11=%LocalAppData%\CentBrowser\User Data\Crashpad|metadata
FileKey12=%LocalAppData%\CentBrowser\User Data\Crashpad\reports|*.*
FileKey13=%LocalAppData%\Chromium\User Data|CrashpadMetrics*.pma
FileKey14=%LocalAppData%\Chromium\User Data\Crashpad|metadata
FileKey15=%LocalAppData%\Chromium\User Data\Crashpad\reports|*.*
FileKey16=%LocalAppData%\CocCoc\Browser\User Data|CrashpadMetrics*.pma
FileKey17=%LocalAppData%\CocCoc\Browser\User Data\Crashpad|metadata
FileKey18=%LocalAppData%\CocCoc\Browser\User Data\Crashpad\reports|*.*
FileKey19=%LocalAppData%\Comodo\Dragon\User Data|CrashpadMetrics*.pma
FileKey20=%LocalAppData%\Comodo\Dragon\User Data\Crashpad|metadata
FileKey21=%LocalAppData%\Comodo\Dragon\User Data\Crashpad\reports|*.*
FileKey22=%LocalAppData%\Coowon\Coowon\User Data|CrashpadMetrics*.pma
FileKey23=%LocalAppData%\Coowon\Coowon\User Data\Crashpad|metadata
FileKey24=%LocalAppData%\Coowon\Coowon\User Data\Crashpad\reports|*.*
FileKey25=%LocalAppData%\Epic Privacy Browser\User Data|CrashpadMetrics*.pma
FileKey26=%LocalAppData%\Epic Privacy Browser\User Data\Crashpad|metadata
FileKey27=%LocalAppData%\Epic Privacy Browser\User Data\Crashpad\reports|*.*
FileKey28=%LocalAppData%\Flock\User Data|CrashpadMetrics*.pma
FileKey29=%LocalAppData%\Flock\User Data\Crashpad|metadata
FileKey30=%LocalAppData%\Flock\User Data\Crashpad\reports|*.*
FileKey31=%LocalAppData%\Google\Chrome*\User Data|CrashpadMetrics*.pma
FileKey32=%LocalAppData%\Google\Chrome*\User Data\Crashpad|metadata
FileKey33=%LocalAppData%\Google\Chrome*\User Data\Crashpad\reports|*.*
FileKey34=%LocalAppData%\Google\CrashReports|*.*
FileKey35=%LocalAppData%\Iridium\User Data|CrashpadMetrics*.pma
FileKey36=%LocalAppData%\Iridium\User Data\Crashpad|metadata
FileKey37=%LocalAppData%\Iridium\User Data\Crashpad\reports|*.*
FileKey38=%LocalAppData%\MapleStudio\ChromePlus\User Data|CrashpadMetrics*.pma
FileKey39=%LocalAppData%\MapleStudio\ChromePlus\User Data\Crashpad|metadata
FileKey40=%LocalAppData%\MapleStudio\ChromePlus\User Data\Crashpad\reports|*.*
FileKey41=%LocalAppData%\RockMelt\User Data|CrashpadMetrics*.pma
FileKey42=%LocalAppData%\RockMelt\User Data\Crashpad|metadata
FileKey43=%LocalAppData%\RockMelt\User Data\Crashpad\reports|*.*
FileKey44=%LocalAppData%\Slimjet\User Data|CrashpadMetrics*.pma
FileKey45=%LocalAppData%\Slimjet\User Data\Crashpad|metadata
FileKey46=%LocalAppData%\Slimjet\User Data\Crashpad\reports|*.*
FileKey47=%LocalAppData%\Superbird\User Data|CrashpadMetrics*.pma
FileKey48=%LocalAppData%\Superbird\User Data\Crashpad|metadata
FileKey49=%LocalAppData%\Superbird\User Data\Crashpad\reports|*.*
FileKey50=%LocalAppData%\Torch\User Data|CrashpadMetrics*.pma
FileKey51=%LocalAppData%\Torch\User Data\Crashpad|metadata
FileKey52=%LocalAppData%\Torch\User Data\Crashpad\reports|*.*
FileKey53=%LocalAppData%\Yandex\YandexBrowser\User Data|CrashpadMetrics*.pma
FileKey54=%LocalAppData%\Yandex\YandexBrowser\User Data\Crashpad|metadata;uploads.log
FileKey55=%LocalAppData%\Yandex\YandexBrowser\User Data\Crashpad\reports|*.*
FileKey56=%ProgramFiles%\Google\CrashReports|*.*
[Data Reduction Proxy *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey3=%LocalAppData%\Amigo\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey4=%LocalAppData%\CentBrowser\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey5=%LocalAppData%\Chromium\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey10=%LocalAppData%\Flock\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey12=%LocalAppData%\Iridium\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey14=%LocalAppData%\RockMelt\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey15=%LocalAppData%\Slimjet\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey16=%LocalAppData%\Superbird\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey17=%LocalAppData%\Torch\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
[Download History *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey3=%LocalAppData%\Amigo\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey4=%LocalAppData%\CentBrowser\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey5=%LocalAppData%\Chromium\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey10=%LocalAppData%\Flock\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey12=%LocalAppData%\Iridium\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey14=%LocalAppData%\RockMelt\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey15=%LocalAppData%\Slimjet\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey16=%LocalAppData%\Superbird\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey17=%LocalAppData%\Torch\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
[Extension Cookies *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*|Extension Cookies
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*|Extension Cookies
FileKey3=%LocalAppData%\Amigo\User Data\*|Extension Cookies
FileKey4=%LocalAppData%\CentBrowser\User Data\*|Extension Cookies
FileKey5=%LocalAppData%\Chromium\User Data\*|Extension Cookies
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*|Extension Cookies
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*|Extension Cookies
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*|Extension Cookies
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*|Extension Cookies
FileKey10=%LocalAppData%\Flock\User Data\*|Extension Cookies
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*|Extension Cookies
FileKey12=%LocalAppData%\Iridium\User Data\*|Extension Cookies
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*|Extension Cookies
FileKey14=%LocalAppData%\RockMelt\User Data\*|Extension Cookies
FileKey15=%LocalAppData%\Slimjet\User Data\*|Extension Cookies
FileKey16=%LocalAppData%\Superbird\User Data\*|Extension Cookies
FileKey17=%LocalAppData%\Torch\User Data\*|Extension Cookies
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*|Extension Cookies
[Feature Engagement Tracker *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey3=%LocalAppData%\Amigo\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey4=%LocalAppData%\CentBrowser\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey5=%LocalAppData%\Chromium\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey10=%LocalAppData%\Flock\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey12=%LocalAppData%\Iridium\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey14=%LocalAppData%\RockMelt\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey15=%LocalAppData%\Slimjet\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey16=%LocalAppData%\Superbird\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey17=%LocalAppData%\Torch\User Data\*\Feature Engagement Tracker|*.*|RECURSE
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Feature Engagement Tracker|*.*|RECURSE
[Flash Player Cache *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey3=%LocalAppData%\Amigo\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey4=%LocalAppData%\CentBrowser\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey5=%LocalAppData%\Chromium\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey10=%LocalAppData%\Flock\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey12=%LocalAppData%\Iridium\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey14=%LocalAppData%\RockMelt\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey15=%LocalAppData%\Slimjet\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey16=%LocalAppData%\Superbird\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey17=%LocalAppData%\Torch\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
[Google Cloud Messaging *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*\GCM Store|*.*|RECURSE
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*\GCM Store|*.*|RECURSE
FileKey3=%LocalAppData%\Amigo\User Data\*\GCM Store|*.*|RECURSE
FileKey4=%LocalAppData%\CentBrowser\User Data\*\GCM Store|*.*|RECURSE
FileKey5=%LocalAppData%\Chromium\User Data\*\GCM Store|*.*|RECURSE
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\GCM Store|*.*|RECURSE
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\GCM Store|*.*|RECURSE
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*\GCM Store|*.*|RECURSE
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*\GCM Store|*.*|RECURSE
FileKey10=%LocalAppData%\Flock\User Data\*\GCM Store|*.*|RECURSE
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*\GCM Store|*.*|RECURSE
FileKey12=%LocalAppData%\Iridium\User Data\*\GCM Store|*.*|RECURSE
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*\GCM Store|*.*|RECURSE
FileKey14=%LocalAppData%\RockMelt\User Data\*\GCM Store|*.*|RECURSE
FileKey15=%LocalAppData%\Slimjet\User Data\*\GCM Store|*.*|RECURSE
FileKey16=%LocalAppData%\Superbird\User Data\*\GCM Store|*.*|RECURSE
FileKey17=%LocalAppData%\Torch\User Data\*\GCM Store|*.*|RECURSE
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*\GCM Store|*.*|RECURSE
[Jump List Icons *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey3=%LocalAppData%\Amigo\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey4=%LocalAppData%\CentBrowser\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey5=%LocalAppData%\Chromium\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey10=%LocalAppData%\Flock\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey12=%LocalAppData%\Iridium\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey14=%LocalAppData%\RockMelt\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey15=%LocalAppData%\Slimjet\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey16=%LocalAppData%\Superbird\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey17=%LocalAppData%\Torch\User Data\*\JumpListIcons*|*.*|RECURSE
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*\JumpListIcons*|*.*|RECURSE
[Logs *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%CommonAppData%\Yandex\YandexBrowser|service_update.log
FileKey2=%LocalAppData%\7Star\7Star\Application|debug.log
FileKey3=%LocalAppData%\7Star\7Star\User Data\*|LOG;LOG.old|RECURSE
FileKey4=%LocalAppData%\360Browser\Browser\Application|debug.log
FileKey5=%LocalAppData%\360Browser\Browser\User Data\*|LOG;LOG.old|RECURSE
FileKey6=%LocalAppData%\Amigo\Application|debug.log
FileKey7=%LocalAppData%\Amigo\User Data\*|LOG;LOG.old|RECURSE
FileKey8=%LocalAppData%\CentBrowser\Application|debug.log
FileKey9=%LocalAppData%\CentBrowser\User Data\*|LOG;LOG.old|RECURSE
FileKey10=%LocalAppData%\Chromium\Application|debug.log
FileKey11=%LocalAppData%\Chromium\User Data\*|LOG;LOG.old|RECURSE
FileKey12=%LocalAppData%\CocCoc\Browser\Application|debug.log
FileKey13=%LocalAppData%\CocCoc\Browser\User Data\*|LOG;LOG.old|RECURSE
FileKey14=%LocalAppData%\Comodo\Dragon\User Data\*|LOG;LOG.old|RECURSE
FileKey15=%LocalAppData%\Coowon\Coowon\Application|debug.log
FileKey16=%LocalAppData%\Coowon\Coowon\User Data\*|LOG;LOG.old|RECURSE
FileKey17=%LocalAppData%\Epic Privacy Browser\Application|debug.log
FileKey18=%LocalAppData%\Epic Privacy Browser\User Data\*|LOG;LOG.old|RECURSE
FileKey19=%LocalAppData%\Flock\Application|debug.log
FileKey20=%LocalAppData%\Flock\User Data\*|LOG;LOG.old|RECURSE
FileKey21=%LocalAppData%\Google\Chrome Cleanup Tool|*.log
FileKey22=%LocalAppData%\Google\Chrome*\Application|debug.log
FileKey23=%LocalAppData%\Google\Chrome*\User Data\*|LOG;LOG.old|RECURSE
FileKey24=%LocalAppData%\Google\Software Reporter Tool|*.log
FileKey25=%LocalAppData%\Iridium\User Data\*|LOG;LOG.old|RECURSE
FileKey26=%LocalAppData%\MapleStudio\ChromePlus\Application|debug.log
FileKey27=%LocalAppData%\MapleStudio\ChromePlus\User Data\*|LOG;LOG.old|RECURSE
FileKey28=%LocalAppData%\RockMelt\Application|debug.log
FileKey29=%LocalAppData%\RockMelt\User Data\*|LOG;LOG.old|RECURSE
FileKey30=%LocalAppData%\Slimjet\User Data\*|LOG;LOG.old|RECURSE
FileKey31=%LocalAppData%\Superbird\User Data\*|LOG;LOG.old|RECURSE
FileKey32=%LocalAppData%\Torch\Application|debug.log
FileKey33=%LocalAppData%\Torch\User Data\*|LOG;LOG.old|RECURSE
FileKey34=%LocalAppData%\Yandex\YandexBrowser\Application|debug.log
FileKey35=%LocalAppData%\Yandex\YandexBrowser\User Data\*|LOG;LOG.old|RECURSE
FileKey36=%ProgramFiles%\Comodo\Dragon|debug.log
FileKey37=%ProgramFiles%\Google\Chrome*\Application|debug.log
FileKey38=%ProgramFiles%\Iridium|debug.log
FileKey39=%ProgramFiles%\Slimjet|debug.log
FileKey40=%ProgramFiles%\SRWare Iron|debug.log
FileKey41=%ProgramFiles%\SuperBird|debug.log
[Media Playback History *]
LangSecRef=3029
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\Google\Chrome*\User Data\*|Media History
[Network Persistent State *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*|Network Persistent State
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*|Network Persistent State
FileKey3=%LocalAppData%\Amigo\User Data\*|Network Persistent State
FileKey4=%LocalAppData%\CentBrowser\User Data\*|Network Persistent State
FileKey5=%LocalAppData%\Chromium\User Data\*|Network Persistent State
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*|Network Persistent State
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*|Network Persistent State
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*|Network Persistent State
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*|Network Persistent State
FileKey10=%LocalAppData%\Flock\User Data\*|Network Persistent State
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*|Network Persistent State
FileKey12=%LocalAppData%\Iridium\User Data\*|Network Persistent State
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*|Network Persistent State
FileKey14=%LocalAppData%\RockMelt\User Data\*|Network Persistent State
FileKey15=%LocalAppData%\Slimjet\User Data\*|Network Persistent State
FileKey16=%LocalAppData%\Superbird\User Data\*|Network Persistent State
FileKey17=%LocalAppData%\Torch\User Data\*|Network Persistent State
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*|Network Persistent State
[Platform Notifications *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*\Platform Notifications|*.*|RECURSE
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*\Platform Notifications|*.*|RECURSE
FileKey3=%LocalAppData%\Amigo\User Data\*\Platform Notifications|*.*|RECURSE
FileKey4=%LocalAppData%\CentBrowser\User Data\*\Platform Notifications|*.*|RECURSE
FileKey5=%LocalAppData%\Chromium\User Data\*\Platform Notifications|*.*|RECURSE
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\Platform Notifications|*.*|RECURSE
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\Platform Notifications|*.*|RECURSE
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*\Platform Notifications|*.*|RECURSE
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*\Platform Notifications|*.*|RECURSE
FileKey10=%LocalAppData%\Flock\User Data\*\Platform Notifications|*.*|RECURSE
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*\Platform Notifications|*.*|RECURSE
FileKey12=%LocalAppData%\Iridium\User Data\*\Platform Notifications|*.*|RECURSE
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*\Platform Notifications|*.*|RECURSE
FileKey14=%LocalAppData%\RockMelt\User Data\*\Platform Notifications|*.*|RECURSE
FileKey15=%LocalAppData%\Slimjet\User Data\*\Platform Notifications|*.*|RECURSE
FileKey16=%LocalAppData%\Superbird\User Data\*\Platform Notifications|*.*|RECURSE
FileKey17=%LocalAppData%\Torch\User Data\*\Platform Notifications|*.*|RECURSE
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Platform Notifications|*.*|RECURSE
[PNaCl Translation Cache *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey2=%LocalAppData%\360Browser\Browser\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey3=%LocalAppData%\Amigo\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey4=%LocalAppData%\CentBrowser\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey5=%LocalAppData%\Chromium\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey10=%LocalAppData%\Flock\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey11=%LocalAppData%\Google\Chrome*\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey12=%LocalAppData%\Iridium\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey14=%LocalAppData%\RockMelt\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey15=%LocalAppData%\Slimjet\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey16=%LocalAppData%\Superbird\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey17=%LocalAppData%\Torch\User Data\PnaclTranslationCache|*.*|RECURSE
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\PnaclTranslationCache|*.*|RECURSE
[Rollback Journals *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\CocCoc\Browser
Detect6=HKCU\Software\Coowon\Coowon
Detect7=HKCU\Software\Epic Privacy Browser
Detect8=HKCU\Software\Iridium
Detect9=HKCU\Software\Slimjet
Detect10=HKCU\Software\Superbird
FileKey1=%LocalAppData%\7Star\7Star\User Data|*-journal
FileKey2=%LocalAppData%\360Browser\Browser\User Data|*-journal
FileKey3=%LocalAppData%\Amigo\User Data|*-journal
FileKey4=%LocalAppData%\CentBrowser\User Data|*-journal
FileKey5=%LocalAppData%\CocCoc\Browser\User Data|*-journal
FileKey6=%LocalAppData%\Coowon\Coowon\User Data|*-journal
FileKey7=%LocalAppData%\Epic Privacy Browser\User Data|*-journal
FileKey8=%LocalAppData%\Iridium\User Data|*-journal
FileKey9=%LocalAppData%\Slimjet\User Data|*-journal
FileKey10=%LocalAppData%\Superbird\User Data|*-journal
[Search Engines Data *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
Warning=This also removes all AutoFill data ("Saved Form Information").
FileKey1=%LocalAppData%\7Star\7Star\User Data\*|Web Data
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*|Web Data
FileKey3=%LocalAppData%\Amigo\User Data\*|Web Data
FileKey4=%LocalAppData%\CentBrowser\User Data\*|Web Data
FileKey5=%LocalAppData%\Chromium\User Data\*|Web Data
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*|Web Data
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*|Web Data
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*|Web Data
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*|Web Data
FileKey10=%LocalAppData%\Flock\User Data\*|Web Data
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*|Web Data
FileKey12=%LocalAppData%\Iridium\User Data\*|Web Data
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*|Web Data
FileKey14=%LocalAppData%\RockMelt\User Data\*|Web Data
FileKey15=%LocalAppData%\Slimjet\User Data\*|Web Data
FileKey16=%LocalAppData%\Superbird\User Data\*|Web Data
FileKey17=%LocalAppData%\Torch\User Data\*|Web Data
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*|Web Data
[Setup Metrics *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Coowon\Coowon
Detect9=HKCU\Software\Epic Privacy Browser
Detect10=HKCU\Software\Flock
Detect11=HKCU\Software\RockMelt
Detect12=HKCU\Software\Torch
Detect13=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\Application\SetupMetrics|*.*|REMOVESELF
FileKey2=%LocalAppData%\360Browser\Browser\Application\SetupMetrics|*.*|REMOVESELF
FileKey3=%LocalAppData%\Amigo\Application\SetupMetrics|*.*|REMOVESELF
FileKey4=%LocalAppData%\CentBrowser\Application\SetupMetrics|*.*|REMOVESELF
FileKey5=%LocalAppData%\Chromium\Application\SetupMetrics|*.*|REMOVESELF
FileKey6=%LocalAppData%\CocCoc\Browser\Application\SetupMetrics|*.*|REMOVESELF
FileKey7=%LocalAppData%\Coowon\Coowon\Application\SetupMetrics|*.*|REMOVESELF
FileKey8=%LocalAppData%\Epic Privacy Browser\Application\SetupMetrics|*.*|REMOVESELF
FileKey9=%LocalAppData%\Flock\Application\SetupMetrics|*.*|REMOVESELF
FileKey10=%LocalAppData%\Google\Chrome*\Application\SetupMetrics|*.*|REMOVESELF
FileKey11=%LocalAppData%\MapleStudio\ChromePlus\Application\SetupMetrics|*.*|REMOVESELF
FileKey12=%LocalAppData%\RockMelt\Application\SetupMetrics|*.*|REMOVESELF
FileKey13=%LocalAppData%\Torch\Application\SetupMetrics|*.*|REMOVESELF
FileKey14=%LocalAppData%\Yandex\YandexBrowser\Application\SetupMetrics|*.*|REMOVESELF
FileKey15=%ProgramFiles%\Google\Chrome*\Application\SetupMetrics|*.*|REMOVESELF
[Shader Cache *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\CocCoc\Browser
Detect6=HKCU\Software\Coowon\Coowon
Detect7=HKCU\Software\Epic Privacy Browser
Detect8=HKCU\Software\Iridium
Detect9=HKCU\Software\Slimjet
Detect10=HKCU\Software\Superbird
FileKey1=%LocalAppData%\7Star\7Star\User Data\*ShaderCache\GPUCache|*.*
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*ShaderCache\GPUCache|*.*
FileKey3=%LocalAppData%\Amigo\User Data\*ShaderCache\GPUCache|*.*
FileKey4=%LocalAppData%\CentBrowser\User Data\*ShaderCache\GPUCache|*.*
FileKey5=%LocalAppData%\CocCoc\Browser\User Data\*ShaderCache\GPUCache|*.*
FileKey6=%LocalAppData%\Coowon\Coowon\User Data\*ShaderCache\GPUCache|*.*
FileKey7=%LocalAppData%\Epic Privacy Browser\User Data\*ShaderCache\GPUCache|*.*
FileKey8=%LocalAppData%\Iridium\User Data\*ShaderCache\GPUCache|*.*
FileKey9=%LocalAppData%\Slimjet\User Data\*ShaderCache\GPUCache|*.*
FileKey10=%LocalAppData%\Superbird\User Data\*ShaderCache\GPUCache|*.*
[Site Characteristics Database *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey3=%LocalAppData%\Amigo\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey4=%LocalAppData%\CentBrowser\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey5=%LocalAppData%\Chromium\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey10=%LocalAppData%\Flock\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey12=%LocalAppData%\Iridium\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey14=%LocalAppData%\RockMelt\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey15=%LocalAppData%\Slimjet\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey16=%LocalAppData%\Superbird\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey17=%LocalAppData%\Torch\User Data\*\Site Characteristics Database|*.*|RECURSE
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Site Characteristics Database|*.*|RECURSE
[Stability *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\Stability|*.*|RECURSE
FileKey2=%LocalAppData%\360Browser\Browser\User Data\Stability|*.*|RECURSE
FileKey3=%LocalAppData%\Amigo\User Data\Stability|*.*|RECURSE
FileKey4=%LocalAppData%\CentBrowser\User Data\Stability|*.*|RECURSE
FileKey5=%LocalAppData%\Chromium\User Data\Stability|*.*|RECURSE
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\Stability|*.*|RECURSE
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\Stability|*.*|RECURSE
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\Stability|*.*|RECURSE
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\Stability|*.*|RECURSE
FileKey10=%LocalAppData%\Flock\User Data\Stability|*.*|RECURSE
FileKey11=%LocalAppData%\Google\Chrome*\User Data\Stability|*.*|RECURSE
FileKey12=%LocalAppData%\Iridium\User Data\Stability|*.*|RECURSE
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\Stability|*.*|RECURSE
FileKey14=%LocalAppData%\RockMelt\User Data\Stability|*.*|RECURSE
FileKey15=%LocalAppData%\Slimjet\User Data\Stability|*.*|RECURSE
FileKey16=%LocalAppData%\Superbird\User Data\Stability|*.*|RECURSE
FileKey17=%LocalAppData%\Torch\User Data\Stability|*.*|RECURSE
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\Stability|*.*|RECURSE
[Sync Data *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*\Sync Data|*.*|RECURSE
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*\Sync Data|*.*|RECURSE
FileKey3=%LocalAppData%\Amigo\User Data\*\Sync Data|*.*|RECURSE
FileKey4=%LocalAppData%\CentBrowser\User Data\*\Sync Data|*.*|RECURSE
FileKey5=%LocalAppData%\Chromium\User Data\*\Sync Data|*.*|RECURSE
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\Sync Data|*.*|RECURSE
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\Sync Data|*.*|RECURSE
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*\Sync Data|*.*|RECURSE
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*\Sync Data|*.*|RECURSE
FileKey10=%LocalAppData%\Flock\User Data\*\Sync Data|*.*|RECURSE
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*\Sync Data|*.*|RECURSE
FileKey12=%LocalAppData%\Iridium\User Data\*\Sync Data|*.*|RECURSE
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*\Sync Data|*.*|RECURSE
FileKey14=%LocalAppData%\RockMelt\User Data\*\Sync Data|*.*|RECURSE
FileKey15=%LocalAppData%\Slimjet\User Data\*\Sync Data|*.*|RECURSE
FileKey16=%LocalAppData%\Superbird\User Data\*\Sync Data|*.*|RECURSE
FileKey17=%LocalAppData%\Torch\User Data\*\Sync Data|*.*|RECURSE
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Sync Data|*.*|RECURSE
[Temps *]
LangSecRef=3029
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%ProgramFiles%\Google\Chrome*\Temp|*.*|RECURSE
[TLS Certificates *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*|Origin Bound Certs
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*|Origin Bound Certs
FileKey3=%LocalAppData%\Amigo\User Data\*|Origin Bound Certs
FileKey4=%LocalAppData%\CentBrowser\User Data\*|Origin Bound Certs
FileKey5=%LocalAppData%\Chromium\User Data\*|Origin Bound Certs
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*|Origin Bound Certs
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*|Origin Bound Certs
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*|Origin Bound Certs
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*|Origin Bound Certs
FileKey10=%LocalAppData%\Flock\User Data\*|Origin Bound Certs
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*|Origin Bound Certs
FileKey12=%LocalAppData%\Iridium\User Data\*|Origin Bound Certs
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*|Origin Bound Certs
FileKey14=%LocalAppData%\RockMelt\User Data\*|Origin Bound Certs
FileKey15=%LocalAppData%\Slimjet\User Data\*|Origin Bound Certs
FileKey16=%LocalAppData%\Superbird\User Data\*|Origin Bound Certs
FileKey17=%LocalAppData%\Torch\User Data\*|Origin Bound Certs
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*|Origin Bound Certs
[Update *]
LangSecRef=3029
Detect1=HKCU\Software\CocCoc\Browser
Detect2=HKCU\Software\Epic Privacy Browser
Detect3=HKCU\Software\Torch
FileKey1=%LocalAppData%\CocCoc\Update\Download|*.*|RECURSE
FileKey2=%LocalAppData%\CocCoc\Update\Install|*.*|RECURSE
FileKey3=%LocalAppData%\CocCoc\Update\Offline|*.*|RECURSE
FileKey4=%LocalAppData%\Epic Privacy Browser\Installer\Download|*.*|RECURSE
FileKey5=%LocalAppData%\Epic Privacy Browser\Installer\Install|*.*|RECURSE
FileKey6=%LocalAppData%\Epic Privacy Browser\Installer\Offline|*.*|RECURSE
FileKey7=%LocalAppData%\Torch\Update\Download|*.*|RECURSE
FileKey8=%LocalAppData%\Torch\Update\Install|*.*|RECURSE
FileKey9=%LocalAppData%\Torch\Update\Offline|*.*|RECURSE
[Video Decode Statistics *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey3=%LocalAppData%\Amigo\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey4=%LocalAppData%\CentBrowser\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey5=%LocalAppData%\Chromium\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey10=%LocalAppData%\Flock\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey12=%LocalAppData%\Iridium\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey14=%LocalAppData%\RockMelt\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey15=%LocalAppData%\Slimjet\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey16=%LocalAppData%\Superbird\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey17=%LocalAppData%\Torch\User Data\*\VideoDecodeStats|*.*|RECURSE
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*\VideoDecodeStats|*.*|RECURSE
[Web Applications *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*\Web Applications|*.*|RECURSE
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*\Web Applications|*.*|RECURSE
FileKey3=%LocalAppData%\Amigo\User Data\*\Web Applications|*.*|RECURSE
FileKey4=%LocalAppData%\CentBrowser\User Data\*\Web Applications|*.*|RECURSE
FileKey5=%LocalAppData%\Chromium\User Data\*\Web Applications|*.*|RECURSE
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*\Web Applications|*.*|RECURSE
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*\Web Applications|*.*|RECURSE
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*\Web Applications|*.*|RECURSE
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*\Web Applications|*.*|RECURSE
FileKey10=%LocalAppData%\Flock\User Data\*\Web Applications|*.*|RECURSE
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*\Web Applications|*.*|RECURSE
FileKey12=%LocalAppData%\Iridium\User Data\*\Web Applications|*.*|RECURSE
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*\Web Applications|*.*|RECURSE
FileKey14=%LocalAppData%\RockMelt\User Data\*\Web Applications|*.*|RECURSE
FileKey15=%LocalAppData%\Slimjet\User Data\*\Web Applications|*.*|RECURSE
FileKey16=%LocalAppData%\Superbird\User Data\*\Web Applications|*.*|RECURSE
FileKey17=%LocalAppData%\Torch\User Data\*\Web Applications|*.*|RECURSE
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*\Web Applications|*.*|RECURSE
[WebRTC Identity Storage *]
LangSecRef=3029
Detect1=HKCU\Software\7Star\7Star
Detect2=HKCU\Software\360Browser\Browser
Detect3=HKCU\Software\Amigo
Detect4=HKCU\Software\CentBrowser
Detect5=HKCU\Software\ChromePlus
Detect6=HKCU\Software\Chromium\PreferenceMACs
Detect7=HKCU\Software\CocCoc\Browser
Detect8=HKCU\Software\Comodo\Dragon
Detect9=HKCU\Software\Coowon\Coowon
Detect10=HKCU\Software\Epic Privacy Browser
Detect11=HKCU\Software\Flock
Detect12=HKCU\Software\Iridium
Detect13=HKCU\Software\RockMelt
Detect14=HKCU\Software\Slimjet
Detect15=HKCU\Software\Superbird
Detect16=HKCU\Software\Torch
Detect17=HKCU\Software\Yandex\YandexBrowser
DetectFile=%LocalAppData%\Google\Chrome*
FileKey1=%LocalAppData%\7Star\7Star\User Data\*|WebRTCIdentityStore
FileKey2=%LocalAppData%\360Browser\Browser\User Data\*|WebRTCIdentityStore
FileKey3=%LocalAppData%\Amigo\User Data\*|WebRTCIdentityStore
FileKey4=%LocalAppData%\CentBrowser\User Data\*|WebRTCIdentityStore
FileKey5=%LocalAppData%\Chromium\User Data\*|WebRTCIdentityStore
FileKey6=%LocalAppData%\CocCoc\Browser\User Data\*|WebRTCIdentityStore
FileKey7=%LocalAppData%\Comodo\Dragon\User Data\*|WebRTCIdentityStore
FileKey8=%LocalAppData%\Coowon\Coowon\User Data\*|WebRTCIdentityStore
FileKey9=%LocalAppData%\Epic Privacy Browser\User Data\*|WebRTCIdentityStore
FileKey10=%LocalAppData%\Flock\User Data\*|WebRTCIdentityStore
FileKey11=%LocalAppData%\Google\Chrome*\User Data\*|WebRTCIdentityStore
FileKey12=%LocalAppData%\Iridium\User Data\*|WebRTCIdentityStore
FileKey13=%LocalAppData%\MapleStudio\ChromePlus\User Data\*|WebRTCIdentityStore
FileKey14=%LocalAppData%\RockMelt\User Data\*|WebRTCIdentityStore
FileKey15=%LocalAppData%\Slimjet\User Data\*|WebRTCIdentityStore
FileKey16=%LocalAppData%\Superbird\User Data\*|WebRTCIdentityStore
FileKey17=%LocalAppData%\Torch\User Data\*|WebRTCIdentityStore
FileKey18=%LocalAppData%\Yandex\YandexBrowser\User Data\*|WebRTCIdentityStore
; End of Chrome/Chromium based browsers
;
; Edge Chromium
[Edge Blob Storage *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\blob_storage|*.*|RECURSE
[Edge Bookmarks Backup *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|*Bookmarks.bak
[Edge Browser Exit Codes *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
RegKey1=HKCU\Software\Microsoft\Edge Beta\BrowserExitCodes
RegKey2=HKCU\Software\Microsoft\Edge Dev\BrowserExitCodes
RegKey3=HKCU\Software\Microsoft\Edge SxS\BrowserExitCodes
RegKey4=HKCU\Software\Microsoft\Edge\BrowserExitCodes
[Edge Browser Helper Object *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalLowAppData%\Microsoft\EdgeBho|*.log
[Edge Browser Metrics *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data|BrowserMetrics-spare.pma
FileKey2=%LocalAppData%\Microsoft\Edge*\User Data\BrowserMetrics|*.*|RECURSE
[Edge Budget Database *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\BudgetDatabase|*.*|RECURSE
[Edge Code Cache *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\Code Cache|*.*|RECURSE
FileKey2=%LocalAppData%\Microsoft\Edge*\User Data\*\Storage\ext\*\def\Code Cache|*.*|RECURSE
[Edge Crash Reports *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\CrashReports|*.*
FileKey2=%LocalAppData%\Microsoft\Edge*\User Data|CrashpadMetrics*.pma
FileKey3=%LocalAppData%\Microsoft\Edge*\User Data\Crashpad|metadata
FileKey4=%LocalAppData%\Microsoft\Edge*\User Data\Crashpad\reports|*.*
FileKey5=%ProgramFiles%\Microsoft\CrashReports|*.*
[Edge Data Reduction Proxy *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
[Edge Download History *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
[Edge Extension Cookies *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|Extension Cookies
[Edge Feature Engagement Tracker *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\Feature Engagement Tracker|*.*|RECURSE
[Edge Flash Player Cache *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
[Edge Flash Player Cookies *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects|*.*|RECURSE
ExcludeKey1=FILE|%LocalAppData%\Microsoft\Edge*\User Data\*\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\*\macromedia.com\support\flashplayer\sys\|settings.sol
[Edge Jump List Icons *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\JumpListIcons*|*.*|RECURSE
[Edge Logs *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\Application|debug.log
FileKey2=%LocalAppData%\Microsoft\Edge*\User Data\*|LOG;LOG.old|RECURSE
FileKey3=%ProgramFiles%\Microsoft\Edge*\Application|debug.log
[Edge Media Playback History *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|Media History
[Edge Network Persistent State *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|Network Persistent State
FileKey2=%LocalAppData%\Microsoft\Edge*\User Data\*\Storage\ext\*\def|Network Persistent State
[Edge Platform Notifications *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\Platform Notifications|*.*|RECURSE
FileKey2=%LocalAppData%\Microsoft\Edge*\User Data\*\Storage\ext\*\def\Platform Notifications|*.*|RECURSE
[Edge PNaCl Translation Cache *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\PnaclTranslationCache|*.*|RECURSE
[Edge Search Engines Data *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
Warning=This also removes all AutoFill data ("Saved Form Information").
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|Web Data
[Edge Setup Metrics *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\Application\SetupMetrics|*.*|REMOVESELF
FileKey2=%ProgramFiles%\Microsoft\Edge*\Application\SetupMetrics|*.*|REMOVESELF
[Edge Site Characteristics Database *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\Site Characteristics Database|*.*|RECURSE
[Edge Sync Data *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\Sync Data|*.*|RECURSE
[Edge TLS Certificates *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*|Origin Bound Certs
[Edge Update *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%CommonAppData%\Microsoft\EdgeUpdate\Log|*.log
FileKey2=%LocalAppData%\Microsoft\EdgeUpdate\Download|*.*|RECURSE
FileKey3=%LocalAppData%\Microsoft\EdgeUpdate\Install|*.*|RECURSE
FileKey4=%ProgramFiles%\Microsoft\EdgeUpdate\Download|*.*|RECURSE
FileKey5=%ProgramFiles%\Microsoft\EdgeUpdate\Install|*.*|RECURSE
[Edge Video Decode Statistics *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\VideoDecodeStats|*.*|RECURSE
[Edge Web Applications *]
LangSecRef=3006
DetectFile=%LocalAppData%\Microsoft\Edge*
FileKey1=%LocalAppData%\Microsoft\Edge*\User Data\*\Web Applications|*.*|RECURSE
; End of Edge Chromium
;
; Vivaldi
[Vivaldi Blob Storage *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*\blob_storage|*.*|RECURSE
[Vivaldi Bookmarks Backup *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*|*Bookmarks.bak
[Vivaldi Browser Exit Codes *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
RegKey1=HKCU\Software\Vivaldi\BrowserExitCodes
[Vivaldi Browser Metrics *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data|BrowserMetrics-spare.pma
FileKey2=%LocalAppData%\Vivaldi\User Data\BrowserMetrics|*.*|RECURSE
[Vivaldi Budget Database *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*\BudgetDatabase|*.*|RECURSE
[Vivaldi Code Cache *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*\Code Cache|*.*|RECURSE
[Vivaldi Crash Reports *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data|CrashpadMetrics*.pma
FileKey2=%LocalAppData%\Vivaldi\User Data\Crashpad|metadata
FileKey3=%LocalAppData%\Vivaldi\User Data\Crashpad\reports|*.*
[Vivaldi Data Reduction Proxy *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
[Vivaldi Download History *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
[Vivaldi Extension Cookies *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*|Extension Cookies
[Vivaldi Feature Engagement Tracker *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*\Feature Engagement Tracker|*.*|RECURSE
[Vivaldi Flash Player Cache *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
[Vivaldi Flash Player Cookies *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects|*.*|RECURSE
ExcludeKey1=FILE|%LocalAppData%\Vivaldi\User Data\*\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\*\macromedia.com\support\flashplayer\sys\|settings.sol
[Vivaldi Google Cloud Messaging *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*\GCM Store|*.*|RECURSE
[Vivaldi Jump List Icons *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*\JumpListIcons*|*.*|RECURSE
[Vivaldi Logs *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\Application|debug.log
FileKey2=%LocalAppData%\Vivaldi\User Data\*|LOG;LOG.old|RECURSE
FileKey3=%ProgramFiles%\Vivaldi\Application|debug.log
[Vivaldi Network Persistent State *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*|Network Persistent State
[Vivaldi Platform Notifications *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*\Platform Notifications|*.*|RECURSE
[Vivaldi PNaCl Translation Cache *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\PnaclTranslationCache|*.*|RECURSE
[Vivaldi Search Engines Data *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
Warning=This also removes all AutoFill data ("Saved Form Information").
FileKey1=%LocalAppData%\Vivaldi\User Data\*|Web Data
[Vivaldi Setup Metrics *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\Application\SetupMetrics|*.*|REMOVESELF
FileKey2=%ProgramFiles%\Vivaldi\Application\SetupMetrics|*.*|REMOVESELF
[Vivaldi Site Characteristics Database *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*\Site Characteristics Database|*.*|RECURSE
[Vivaldi Sync Data *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*\Sync Data|*.*|RECURSE
[Vivaldi Temps *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\Temp|*.*|RECURSE
[Vivaldi TLS Certificates *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*|Origin Bound Certs
[Vivaldi Video Decode Statistics *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*\VideoDecodeStats|*.*|RECURSE
[Vivaldi Web Applications *]
LangSecRef=3033
Detect=HKCU\Software\Vivaldi
FileKey1=%LocalAppData%\Vivaldi\User Data\*\Web Applications|*.*|RECURSE
; End of Vivaldi
;
; Brave
[Brave Blob Storage *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\blob_storage|*.*|RECURSE
[Brave Bookmarks Backup *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|*Bookmarks.bak
[Brave Browser Exit Codes *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
RegKey1=HKCU\Software\BraveSoftware\Brave-Browser\BrowserExitCodes
RegKey2=HKCU\Software\BraveSoftware\Brave-Browser-Beta\BrowserExitCodes
RegKey3=HKCU\Software\BraveSoftware\Brave-Browser-Dev\BrowserExitCodes
RegKey4=HKCU\Software\BraveSoftware\Brave-Browser-Nightly\BrowserExitCodes
[Brave Browser Metrics *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data|BrowserMetrics-spare.pma
FileKey2=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\BrowserMetrics|*.*|RECURSE
[Brave Budget Database *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\BudgetDatabase|*.*|RECURSE
[Brave Code Cache *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Code Cache|*.*|RECURSE
[Brave Crash Reports *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data|CrashpadMetrics*.pma
FileKey2=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\Crashpad|metadata
FileKey3=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\Crashpad\reports|*.*
FileKey4=%LocalAppData%\BraveSoftware\CrashReports|*.*
FileKey5=%ProgramFiles%\BraveSoftware\CrashReports|*.*
[Brave Data Reduction Proxy *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\data_reduction_proxy_leveldb|*.*|RECURSE
[Brave Download History *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
[Brave Extension Cookies *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|Extension Cookies
[Brave Feature Engagement Tracker *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Feature Engagement Tracker|*.*|RECURSE
[Brave Flash Player Cache *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
[Brave Flash Player Cookies *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects|*.*|RECURSE
ExcludeKey1=FILE|%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\*\macromedia.com\support\flashplayer\sys\|settings.sol
[Brave Jump List Icons *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\JumpListIcons*|*.*|RECURSE
[Brave Logs *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|LOG;LOG.old|RECURSE
FileKey2=%ProgramFiles%\BraveSoftware\Brave-Browser*\Application|debug.log
[Brave Network Persistent State *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|Network Persistent State
[Brave Platform Notifications *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Platform Notifications|*.*|RECURSE
[Brave PNaCl Translation Cache *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\PnaclTranslationCache|*.*|RECURSE
[Brave Search Engines Data *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
Warning=This also removes all AutoFill data ("Saved Form Information").
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|Web Data
[Brave Setup Metrics *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%ProgramFiles%\BraveSoftware\Brave-Browser*\Application\SetupMetrics|*.*|REMOVESELF
[Brave Site Characteristics Database *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Site Characteristics Database|*.*|RECURSE
[Brave Sync Data *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Sync Data|*.*|RECURSE
[Brave TLS Certificates *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*|Origin Bound Certs
[Brave Update *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%ProgramFiles%\BraveSoftware\Update\Download|*.*|RECURSE
FileKey2=%ProgramFiles%\BraveSoftware\Update\Install|*.*|RECURSE
FileKey3=%ProgramFiles%\BraveSoftware\Update\Offline|*.*|RECURSE
[Brave Web Applications *]
LangSecRef=3034
Detect=HKCU\Software\BraveSoftware
FileKey1=%LocalAppData%\BraveSoftware\Brave-Browser*\User Data\*\Web Applications|*.*|RECURSE
; End of Brave
;
; Opera
[Opera *]
LangSecRef=3027
DetectFile=%LocalAppData%\Opera\Opera*
FileKey1=%LocalAppData%\Opera\Opera*\application_cache|*.*|REMOVESELF
FileKey2=%LocalAppData%\Opera\Opera*\icons|*.*|REMOVESELF
FileKey3=%LocalAppData%\Opera\Opera*\logs|*.*|REMOVESELF
FileKey4=%LocalAppData%\Opera\Opera*\temporary_downloads|*.*|REMOVESELF
FileKey5=%LocalAppData%\Opera\Opera*\thumbnails|*.*|REMOVESELF
FileKey6=%LocalAppData%\Opera\Opera*\vps|*.*|REMOVESELF
RegKey1=HKCU\Software\Opera Software|Last CommandLine v2
[Opera 9 Classic *]
LangSecRef=3027
DetectFile=%ProgramFiles%\Opera 9\Opera.exe
FileKey1=%ProgramFiles%\Opera 9\profile|cookies4.dat;vlink4.dat;global.dat
FileKey2=%ProgramFiles%\Opera 9\profile\cache*|*.*
[Opera Blob Storage *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*\blob_storage|*.*|RECURSE
[Opera Bookmarks Backup *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*|*Bookmarks.bak
[Opera Budget Database *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*\BudgetDatabase|*.*|RECURSE
[Opera Code Cache *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*\Code Cache|*.*|RECURSE
[Opera Crash Reports *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*\Crash Reports|metadata
FileKey2=%AppData%\Opera Software\Opera*\Crash Reports\reports|*.*
[Opera Disabled AutoUpdate *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*|ssdfp*.*
[Opera Download History *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*|*.ldb;*.log;CURRENT;LOCK;MANIFEST-*
[Opera Extension Cookies *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*|Extension Cookies
[Opera Flash Player Cache *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache|*.*|RECURSE
[Opera Google Cloud Messaging *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*\GCM Store|*.*|RECURSE
[Opera Logs *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*|LOG;LOG.old|RECURSE
FileKey2=%LocalAppData%\Programs\Opera*|debug.log
FileKey3=%ProgramFiles%\Opera*|debug.log
[Opera Network Persistent State *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*|Network Persistent State*
[Opera Platform Notifications *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*\Platform Notifications|*.*|RECURSE
[Opera Search Engines Data *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
Warning=This also removes all AutoFill data ("Saved Form Information").
FileKey1=%AppData%\Opera Software\Opera*|Web Data
[Opera Site Characteristics Database *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*\Site Characteristics Database|*.*|RECURSE
[Opera Sync Data *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*\Sync Data|*.*|RECURSE
[Opera TLS Certificates *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*|Origin Bound Certs
[Opera Video Decode Statistics *]
LangSecRef=3027
Detect=HKCU\Software\Opera Software
FileKey1=%AppData%\Opera Software\Opera*\VideoDecodeStats|*.*|RECURSE
; End of Opera
;
; Firefox/Mozilla based browsers
[Alternate Services *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%AppData%\Comodo\IceDragon\Profiles\*|AlternateServices.txt
FileKey2=%AppData%\FlashPeak\SlimBrowser\Profiles\*|AlternateServices.txt
FileKey3=%AppData%\Moonchild Productions\Basilisk\Profiles\*|AlternateServices.txt
FileKey4=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|AlternateServices.txt
FileKey5=%AppData%\Mozilla\Firefox\Profiles\*|AlternateServices.txt
FileKey6=%AppData%\Mozilla\SeaMonkey\Profiles\*|AlternateServices.txt
FileKey7=%AppData%\Waterfox\Profiles\*|AlternateServices.txt
[Bookmark Backups *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%AppData%\Comodo\IceDragon\Profiles\*\bookmarkbackups|*.json*
FileKey2=%AppData%\FlashPeak\SlimBrowser\Profiles\*\bookmarkbackups|*.json*
FileKey3=%AppData%\Moonchild Productions\Basilisk\Profiles\*\bookmarkbackups|*.json*
FileKey4=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\bookmarkbackups|*.json*
FileKey5=%AppData%\Mozilla\Firefox\Profiles\*\bookmarkbackups|*.json*
FileKey6=%AppData%\Mozilla\SeaMonkey\Profiles\*\bookmarkbackups|*.json*
FileKey7=%AppData%\Waterfox\Profiles\*\bookmarkbackups|*.json*
[Content Preferences *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%AppData%\Comodo\IceDragon\Profiles\*|content-prefs.sqlite
FileKey2=%AppData%\FlashPeak\SlimBrowser\Profiles\*|content-prefs.sqlite
FileKey3=%AppData%\Moonchild Productions\Basilisk\Profiles\*|content-prefs.sqlite
FileKey4=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|content-prefs.sqlite
FileKey5=%AppData%\Mozilla\Firefox\Profiles\*|content-prefs.sqlite
FileKey6=%AppData%\Mozilla\SeaMonkey\Profiles\*|content-prefs.sqlite
FileKey7=%AppData%\Waterfox\Profiles\*|content-prefs.sqlite
[Corrupt SQLites *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%AppData%\Comodo\IceDragon\Profiles\*|*.corrupt|RECURSE
FileKey2=%AppData%\FlashPeak\SlimBrowser\Profiles\*|*.corrupt|RECURSE
FileKey3=%AppData%\Moonchild Productions\Basilisk\Profiles\*|*.corrupt|RECURSE
FileKey4=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|*.corrupt|RECURSE
FileKey5=%AppData%\Mozilla\Firefox\Profiles\*|*.corrupt|RECURSE
FileKey6=%AppData%\Mozilla\SeaMonkey\Profiles\*|*.corrupt|RECURSE
FileKey7=%AppData%\Waterfox\Profiles\*|*.corrupt|RECURSE
[Crash Files *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%AppData%\Comodo\IceDragon\Crash Reports|*.*|RECURSE
FileKey2=%AppData%\Comodo\IceDragon\Profiles\*\minidumps|*.*
FileKey3=%AppData%\FlashPeak\SlimBrowser\Crash Reports|*.*|RECURSE
FileKey4=%AppData%\FlashPeak\SlimBrowser\Profiles\*\minidumps|*.*
FileKey5=%AppData%\Moonchild Productions\Basilisk\Crash Reports|*.*|RECURSE
FileKey6=%AppData%\Moonchild Productions\Basilisk\Profiles\*\minidumps|*.*
FileKey7=%AppData%\Moonchild Productions\Pale Moon\Crash Reports|*.*|RECURSE
FileKey8=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\minidumps|*.*
FileKey9=%AppData%\Mozilla\Firefox\Crash Reports|*.*|RECURSE
FileKey10=%AppData%\Mozilla\Firefox\Profiles\*\minidumps|*.*
FileKey11=%AppData%\Mozilla\SeaMonkey\Crash Reports|*.*|RECURSE
FileKey12=%AppData%\Mozilla\SeaMonkey\Profiles\*\minidumps|*.*
FileKey13=%AppData%\Waterfox\Crash Reports|*.*|RECURSE
FileKey14=%AppData%\Waterfox\Profiles\*\minidumps|*.*
[DOM Storage *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%AppData%\Comodo\IceDragon\Profiles\*|webappsstore.sqlite
FileKey2=%AppData%\FlashPeak\SlimBrowser\Profiles\*|webappsstore.sqlite
FileKey3=%AppData%\Moonchild Productions\Basilisk\Profiles\*|webappsstore.sqlite
FileKey4=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|webappsstore.sqlite
FileKey5=%AppData%\Mozilla\Firefox\Profiles\*|webappsstore.sqlite
FileKey6=%AppData%\Mozilla\SeaMonkey\Profiles\*|webappsstore.sqlite
FileKey7=%AppData%\Waterfox\Profiles\*|webappsstore.sqlite
[Indexed Databases *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%AppData%\Comodo\IceDragon\Profiles\*\storage\temporary|*.*|RECURSE
FileKey2=%AppData%\FlashPeak\SlimBrowser\Profiles\*\storage\temporary|*.*|RECURSE
FileKey3=%AppData%\Moonchild Productions\Basilisk\Profiles\*\storage\temporary|*.*|RECURSE
FileKey4=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\storage\temporary|*.*|RECURSE
FileKey5=%AppData%\Mozilla\Firefox\Profiles\*\storage\temporary|*.*|RECURSE
FileKey6=%AppData%\Mozilla\SeaMonkey\Profiles\*\storage\temporary|*.*|RECURSE
FileKey7=%AppData%\Waterfox\Profiles\*\storage\temporary|*.*|RECURSE
[Log Files *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%AppData%\Comodo\IceDragon|*.log|RECURSE
FileKey2=%AppData%\Comodo\IceDragon\Profiles\*|TestPilotErrorLog.*
FileKey3=%AppData%\Comodo\IceDragon\Profiles\*\weave\logs|*.*
FileKey4=%AppData%\FlashPeak\SlimBrowser|*.log|RECURSE
FileKey5=%AppData%\FlashPeak\SlimBrowser\Profiles\*|TestPilotErrorLog.*
FileKey6=%AppData%\FlashPeak\SlimBrowser\Profiles\*\weave\logs|*.*
FileKey7=%AppData%\Moonchild Productions\Basilisk|*.log|RECURSE
FileKey8=%AppData%\Moonchild Productions\Basilisk\Profiles\*|TestPilotErrorLog.*
FileKey9=%AppData%\Moonchild Productions\Basilisk\Profiles\*\weave\logs|*.*
FileKey10=%AppData%\Moonchild Productions\Pale Moon|*.log|RECURSE
FileKey11=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|TestPilotErrorLog.*
FileKey12=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\weave\logs|*.*
FileKey13=%AppData%\Mozilla\Firefox|*.log|RECURSE
FileKey14=%AppData%\Mozilla\Firefox\Profiles\*|TestPilotErrorLog.*
FileKey15=%AppData%\Mozilla\Firefox\Profiles\*\weave\logs|*.*
FileKey16=%AppData%\Mozilla\SeaMonkey|*.log|RECURSE
FileKey17=%AppData%\Mozilla\SeaMonkey\Profiles\*|TestPilotErrorLog.*
FileKey18=%AppData%\Mozilla\SeaMonkey\Profiles\*\weave\logs|*.*
FileKey19=%AppData%\Waterfox|*.log|RECURSE
FileKey20=%AppData%\Waterfox\Profiles\*|TestPilotErrorLog.*
FileKey21=%AppData%\Waterfox\Profiles\*\weave\logs|*.*
FileKey22=%CommonAppData%\Mozilla*\logs|*.*
FileKey23=%ProgramFiles%\Basilisk|*.log
FileKey24=%ProgramFiles%\Comodo\IceDragon|*.log
FileKey25=%ProgramFiles%\Firefox*|*.log
FileKey26=%ProgramFiles%\Mozilla Firefox|*.log
FileKey27=%ProgramFiles%\Mozilla Maintenance Service\*logs|*.*
FileKey28=%ProgramFiles%\Pale Moon|*.log
FileKey29=%ProgramFiles%\SeaMonkey|*.log
FileKey30=%ProgramFiles%\SlimBrowser|*.log
FileKey31=%ProgramFiles%\Waterfox|*.log
[Nightly Backups *]
LangSecRef=3026
DetectFile1=%ProgramFiles%\Mozilla\Nightly
DetectFile2=%ProgramFiles%\Nightly
FileKey1=%ProgramFiles%\Mozilla\Nightly.bak|*.*|REMOVESELF
FileKey2=%ProgramFiles%\Nightly.bak|*.*|REMOVESELF
[Profile Lock File *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%AppData%\Comodo\IceDragon\Profiles\*|parent.lock
FileKey2=%AppData%\FlashPeak\SlimBrowser\Profiles\*|parent.lock
FileKey3=%AppData%\Moonchild Productions\Basilisk\Profiles\*|parent.lock
FileKey4=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|parent.lock
FileKey5=%AppData%\Mozilla\Firefox\Profiles\*|parent.lock
FileKey6=%AppData%\Mozilla\SeaMonkey\Profiles\*|parent.lock
FileKey7=%AppData%\Waterfox\Profiles\*|parent.lock
[Registered Service Workers *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%AppData%\Comodo\IceDragon\Profiles\*|serviceworker.txt
FileKey2=%AppData%\FlashPeak\SlimBrowser\Profiles\*|serviceworker.txt
FileKey3=%AppData%\Moonchild Productions\Basilisk\Profiles\*|serviceworker.txt
FileKey4=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|serviceworker.txt
FileKey5=%AppData%\Mozilla\Firefox\Profiles\*|serviceworker.txt
FileKey6=%AppData%\Mozilla\SeaMonkey\Profiles\*|serviceworker.txt
FileKey7=%AppData%\Waterfox\Profiles\*|serviceworker.txt
[Storage Usage Statistics *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%AppData%\Comodo\IceDragon\Profiles\*|storage.sqlite
FileKey2=%AppData%\FlashPeak\SlimBrowser\Profiles\*|storage.sqlite
FileKey3=%AppData%\Moonchild Productions\Basilisk\Profiles\*|storage.sqlite
FileKey4=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|storage.sqlite
FileKey5=%AppData%\Mozilla\Firefox\Profiles\*|storage.sqlite
FileKey6=%AppData%\Mozilla\SeaMonkey\Profiles\*|storage.sqlite
FileKey7=%AppData%\Waterfox\Profiles\*|storage.sqlite
[Stored Push Notifications *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%AppData%\Comodo\IceDragon\Profiles\*|notificationstore.json
FileKey2=%AppData%\FlashPeak\SlimBrowser\Profiles\*|notificationstore.json
FileKey3=%AppData%\Moonchild Productions\Basilisk\Profiles\*|notificationstore.json
FileKey4=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|notificationstore.json
FileKey5=%AppData%\Mozilla\Firefox\Profiles\*|notificationstore.json
FileKey6=%AppData%\Mozilla\SeaMonkey\Profiles\*|notificationstore.json
FileKey7=%AppData%\Waterfox\Profiles\*|notificationstore.json
[Talkback *]
LangSecRef=3026
DetectFile=%AppData%\Talkback\MozillaOrg
FileKey1=%AppData%\Talkback\MozillaOrg\Firefox*|*.*|RECURSE
FileKey2=%AppData%\Talkback\MozillaOrg\Thunderbird*|*.*|RECURSE
RegKey1=HKLM\Software\FullCircle\TalkBack
[Telemetry *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%AppData%\Comodo\IceDragon\Profiles\*|Telemetry*.*
FileKey2=%AppData%\Comodo\IceDragon\Profiles\*\datareporting\archived|*.jsonlz4|RECURSE
FileKey3=%AppData%\Comodo\IceDragon\Profiles\*\saved-telemetry-pings|*.*
FileKey4=%AppData%\FlashPeak\SlimBrowser\Profiles\*|Telemetry*.*
FileKey5=%AppData%\FlashPeak\SlimBrowser\Profiles\*\datareporting\archived|*.jsonlz4|RECURSE
FileKey6=%AppData%\FlashPeak\SlimBrowser\Profiles\*\saved-telemetry-pings|*.*
FileKey7=%AppData%\Moonchild Productions\Basilisk\Profiles\*|Telemetry*.*
FileKey8=%AppData%\Moonchild Productions\Basilisk\Profiles\*\datareporting\archived|*.jsonlz4|RECURSE
FileKey9=%AppData%\Moonchild Productions\Basilisk\Profiles\*\saved-telemetry-pings|*.*
FileKey10=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|Telemetry*.*
FileKey11=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\datareporting\archived|*.jsonlz4|RECURSE
FileKey12=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\saved-telemetry-pings|*.*
FileKey13=%AppData%\Mozilla\Firefox\Profiles\*|Telemetry*.*
FileKey14=%AppData%\Mozilla\Firefox\Profiles\*\datareporting\archived|*.jsonlz4|RECURSE
FileKey15=%AppData%\Mozilla\Firefox\Profiles\*\saved-telemetry-pings|*.*
FileKey16=%AppData%\Mozilla\SeaMonkey\Profiles\*|Telemetry*.*
FileKey17=%AppData%\Mozilla\SeaMonkey\Profiles\*\datareporting\archived|*.jsonlz4|RECURSE
FileKey18=%AppData%\Mozilla\SeaMonkey\Profiles\*\saved-telemetry-pings|*.*
FileKey19=%AppData%\Waterfox\Profiles\*|Telemetry*.*
FileKey20=%AppData%\Waterfox\Profiles\*\datareporting\archived|*.jsonlz4|RECURSE
FileKey21=%AppData%\Waterfox\Profiles\*\saved-telemetry-pings|*.*
FileKey22=%LocalAppData%\Comodo\IceDragon\Profiles\*|ShutdownDuration.*
FileKey23=%LocalAppData%\FlashPeak\SlimBrowser\Profiles\*|ShutdownDuration.*
FileKey24=%LocalAppData%\Moonchild Productions\Basilisk\Profiles\*|ShutdownDuration.*
FileKey25=%LocalAppData%\Moonchild Productions\Pale Moon\Profiles\*|ShutdownDuration.*
FileKey26=%LocalAppData%\Mozilla\Firefox\Profiles\*|ShutdownDuration.*
FileKey27=%LocalAppData%\Mozilla\SeaMonkey\Profiles\*|ShutdownDuration.*
FileKey28=%LocalAppData%\Waterfox\Profiles\*|ShutdownDuration.*
[Temp Files *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%ProgramFiles%\Basilisk|*.tmp|RECURSE
FileKey2=%ProgramFiles%\Comodo\IceDragon|*.tmp|RECURSE
FileKey3=%ProgramFiles%\Firefox*|*.tmp|RECURSE
FileKey4=%ProgramFiles%\Mozilla*|*.tmp|RECURSE
FileKey5=%ProgramFiles%\Pale Moon|*.tmp|RECURSE
FileKey6=%ProgramFiles%\SeaMonkey|*.tmp|RECURSE
FileKey7=%ProgramFiles%\SlimBrowser|*.tmp|RECURSE
FileKey8=%ProgramFiles%\Waterfox|*.tmp|RECURSE
[Tracking Protection Statistics *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%AppData%\Comodo\IceDragon\Profiles\*|protections.sqlite
FileKey2=%AppData%\FlashPeak\SlimBrowser\Profiles\*|protections.sqlite
FileKey3=%AppData%\Moonchild Productions\Basilisk\Profiles\*|protections.sqlite
FileKey4=%AppData%\Moonchild Productions\Pale Moon\Profiles\*|protections.sqlite
FileKey5=%AppData%\Mozilla\Firefox\Profiles\*|protections.sqlite
FileKey6=%AppData%\Mozilla\SeaMonkey\Profiles\*|protections.sqlite
FileKey7=%AppData%\Waterfox\Profiles\*|protections.sqlite
[Updates *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%CommonAppData%\Mozilla\updates|*.*|RECURSE
FileKey2=%LocalAppData%\Moonchild Productions\Basilisk\Basilisk|*.*|RECURSE
FileKey3=%LocalAppData%\Moonchild Productions\Pale Moon\Pale Moon|*.*|RECURSE
FileKey4=%LocalAppData%\Mozilla\updates|*.*|RECURSE
FileKey5=%ProgramFiles%\Mozilla Firefox\tobedeleted|*.*
FileKey6=%ProgramFiles%\Mozilla Maintenance Service|*.moz-delete
ExcludeKey1=FILE|%CommonAppData%\Mozilla\updates\*\|update-config.json
[Waterfox Installer *]
LangSecRef=3026
Detect=HKLM\Software\Mozilla\Waterfox
FileKey1=%AppData%\Waterfox*\Waterfox*\install|*.*|RECURSE
[WebRender Shader Cache *]
LangSecRef=3026
Detect1=HKLM\Software\ComodoGroup\IceDragon
Detect2=HKLM\Software\FlashPeak\SlimBrowser
Detect3=HKLM\Software\Mozilla\Basilisk
Detect4=HKLM\Software\Mozilla\Pale Moon
Detect5=HKLM\Software\Mozilla\SeaMonkey
Detect6=HKLM\Software\Mozilla\Waterfox
DetectFile=%AppData%\Mozilla\Firefox
FileKey1=%AppData%\Comodo\IceDragon\Profiles\*\shader-cache|*.*|RECURSE
FileKey2=%AppData%\FlashPeak\SlimBrowser\Profiles\*\shader-cache|*.*|RECURSE
FileKey3=%AppData%\Moonchild Productions\Basilisk\Profiles\*\shader-cache|*.*|RECURSE
FileKey4=%AppData%\Moonchild Productions\Pale Moon\Profiles\*\shader-cache|*.*|RECURSE
FileKey5=%AppData%\Mozilla\Firefox\Profiles\*\shader-cache|*.*|RECURSE
FileKey6=%AppData%\Mozilla\SeaMonkey\Profiles\*\shader-cache|*.*|RECURSE
FileKey7=%AppData%\Waterfox\Profiles\*\shader-cache|*.*|RECURSE
; End of Firefox/Mozilla based browsers
;
; Thunderbird
[Email Index *]
LangSecRef=3030
Detect1=HKLM\Software\Binary Outcast\Interlink
Detect2=HKLM\Software\Mozilla\FossaMail
Detect3=HKLM\Software\Mozilla\Mozilla Thunderbird
Warning=This will cause your message index to be deleted, searching emails may be slow until it is rebuilt.
FileKey1=%AppData%\Binary Outcast\Interlink\Profiles\*|global-messages-db.sqlite
FileKey2=%AppData%\FossaMail\Profiles\*|global-messages-db.sqlite
FileKey3=%AppData%\Thunderbird\Profiles\*|global-messages-db.sqlite
[Thunderbird Alternate Services *]
LangSecRef=3030
Detect1=HKLM\Software\Binary Outcast\Interlink
Detect2=HKLM\Software\Mozilla\FossaMail
Detect3=HKLM\Software\Mozilla\Mozilla Thunderbird
FileKey1=%AppData%\Binary Outcast\Interlink\Profiles\*|AlternateServices.txt
FileKey2=%AppData%\FossaMail\Profiles\*|AlternateServices.txt
FileKey3=%AppData%\Thunderbird\Profiles\*|AlternateServices.txt
[Thunderbird Corrupt SQLites *]
LangSecRef=3030
Detect1=HKLM\Software\Binary Outcast\Interlink
Detect2=HKLM\Software\Mozilla\FossaMail
Detect3=HKLM\Software\Mozilla\Mozilla Thunderbird
FileKey1=%AppData%\Binary Outcast\Interlink\Profiles\*|*.corrupt|RECURSE
FileKey2=%AppData%\FossaMail\Profiles\*|*.corrupt|RECURSE
FileKey3=%AppData%\Thunderbird\Profiles\*|*.corrupt|RECURSE
[Thunderbird Crash Files *]
LangSecRef=3030
Detect1=HKLM\Software\Binary Outcast\Interlink
Detect2=HKLM\Software\Mozilla\FossaMail
Detect3=HKLM\Software\Mozilla\Mozilla Thunderbird
FileKey1=%AppData%\Binary Outcast\Interlink\Crash Reports|*.*|RECURSE
FileKey2=%AppData%\Binary Outcast\Interlink\Profiles\*\minidumps|*.*
FileKey3=%AppData%\FossaMail\Crash Reports|*.*|RECURSE
FileKey4=%AppData%\FossaMail\Profiles\*\minidumps|*.*
FileKey5=%AppData%\Thunderbird\Crash Reports|*.*|RECURSE
FileKey6=%AppData%\Thunderbird\Profiles\*\minidumps|*.*
[Thunderbird DOM Storage *]
LangSecRef=3030
Detect1=HKLM\Software\Binary Outcast\Interlink
Detect2=HKLM\Software\Mozilla\FossaMail
Detect3=HKLM\Software\Mozilla\Mozilla Thunderbird
FileKey1=%AppData%\Binary Outcast\Interlink\Profiles\*|webappsstore.sqlite
FileKey2=%AppData%\FossaMail\Profiles\*|webappsstore.sqlite
FileKey3=%AppData%\Thunderbird\Profiles\*|webappsstore.sqlite
[Thunderbird Log Files *]
LangSecRef=3030
Detect1=HKLM\Software\Binary Outcast\Interlink
Detect2=HKLM\Software\Mozilla\FossaMail
Detect3=HKLM\Software\Mozilla\Mozilla Thunderbird
FileKey1=%AppData%\Binary Outcast\Interlink\Profiles\*|extensions.log;filterlog.html;TestPilotErrorLog.*
FileKey2=%AppData%\FossaMail\Profiles\*|extensions.log;filterlog.html;TestPilotErrorLog.*
FileKey3=%AppData%\Thunderbird\Profiles\*|extensions.log;filterlog.html;TestPilotErrorLog.*
FileKey4=%CommonAppData%\Mozilla*\logs|*.*|RECURSE
FileKey5=%ProgramFiles%\FossaMail|*.log
FileKey6=%ProgramFiles%\Interlink|*.log
FileKey7=%ProgramFiles%\Mozilla Maintenance Service\*logs|*.*
FileKey8=%ProgramFiles%\Mozilla Thunderbird|*.log
[Thunderbird Profile Lock File *]
LangSecRef=3030
Detect1=HKLM\Software\Binary Outcast\Interlink
Detect2=HKLM\Software\Mozilla\FossaMail
Detect3=HKLM\Software\Mozilla\Mozilla Thunderbird
FileKey1=%AppData%\Binary Outcast\Interlink\Profiles\*|parent.lock
FileKey2=%AppData%\FossaMail\Profiles\*|parent.lock
FileKey3=%AppData%\Thunderbird\Profiles\*|parent.lock
[Thunderbird Telemetry *]
LangSecRef=3030
Detect1=HKLM\Software\Binary Outcast\Interlink
Detect2=HKLM\Software\Mozilla\FossaMail
Detect3=HKLM\Software\Mozilla\Mozilla Thunderbird
FileKey1=%AppData%\Binary Outcast\Interlink\Profiles\*\saved-telemetry-pings|*.*|RECURSE
FileKey2=%AppData%\FossaMail\Profiles\*\saved-telemetry-pings|*.*|RECURSE
FileKey3=%AppData%\Thunderbird\Profiles\*\saved-telemetry-pings|*.*|RECURSE
[Thunderbird Updates *]
LangSecRef=3030
Detect1=HKLM\Software\Binary Outcast\Interlink
Detect2=HKLM\Software\Mozilla\FossaMail
Detect3=HKLM\Software\Mozilla\Mozilla Thunderbird
FileKey1=%CommonAppData%\Mozilla\updates|*.*|RECURSE
FileKey2=%LocalAppData%\Binary Outcast\updates|*.*|RECURSE
FileKey3=%LocalAppData%\FossaMail\updates|*.*|RECURSE
FileKey4=%LocalAppData%\Thunderbird\updates|*.*|RECURSE
ExcludeKey1=FILE|%CommonAppData%\Mozilla\updates\*\|update-config.json
; End of Thunderbird
;
; Internet Explorer
[Internet Explorer *]
LangSecRef=3001
Detect=HKCU\Software\Microsoft\Internet Explorer
FileKey1=%AppData%\Microsoft\Internet Explorer\UserData|*.*|RECURSE
FileKey2=%LocalAppData%\Microsoft\Internet Explorer|*.log;*.txt
FileKey3=%LocalAppData%\Microsoft\Internet Explorer\CacheStorage|*.*|RECURSE
FileKey4=%LocalAppData%\Microsoft\Windows\AppCache|*.*|RECURSE
FileKey5=%LocalAppData%\Microsoft\Windows\IECompat*Cache|*.*|RECURSE
FileKey6=%LocalAppData%\Microsoft\Windows\INetCache|*.*|RECURSE
FileKey7=%LocalAppData%\Microsoft\Windows\INetCookies|*.*|RECURSE
FileKey8=%LocalAppData%\Microsoft\Windows\WebCache|*.*|RECURSE
FileKey9=%LocalAppData%\Microsoft\Windows\WebCache.old|*.*|REMOVESELF
FileKey10=%LocalAppData%\Packages\windows_ie_ac_*\AC\AppCache|*.*|RECURSE
FileKey11=%LocalAppData%\Packages\windows_ie_ac_*\AC\IECompat*Cache|*.*|RECURSE
FileKey12=%LocalAppData%\Packages\windows_ie_ac_*\AC\IEDownloadHistory|*.*|RECURSE
FileKey13=%LocalAppData%\Packages\windows_ie_ac_*\AC\INet*|*.*|RECURSE
FileKey14=%LocalAppData%\Packages\windows_ie_ac_*\AC\Microsoft\CLR_v4.0\UsageLogs|*.*|RECURSE
FileKey15=%LocalAppData%\Packages\windows_ie_ac_*\AC\Microsoft\CryptnetUrlCache\*|*.*
FileKey16=%LocalAppData%\Packages\windows_ie_ac_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE
FileKey17=%LocalAppData%\Packages\windows_ie_ac_*\AC\Microsoft\Internet Explorer\Emie*List|*.*|RECURSE
FileKey18=%LocalAppData%\Packages\windows_ie_ac_*\AC\PRICache|*.*|RECURSE
FileKey19=%LocalAppData%\Packages\windows_ie_ac_*\AC\Temp|*.*|RECURSE
FileKey20=%LocalAppData%\Packages\windows_ie_ac_*\LocalState\Cache|*.*|RECURSE
FileKey21=%LocalAppData%\Packages\windows_ie_ac_*\LocalState\navigationHistory|*.*|RECURSE
FileKey22=%LocalAppData%\Packages\windows_ie_ac_*\TempState|*.*|RECURSE
FileKey23=%SystemDrive%\Documents and Settings\LocalService*\Cookies|*.*|RECURSE
FileKey24=%SystemDrive%\Documents and Settings\LocalService*\Local Settings\History|*.*|RECURSE
FileKey25=%SystemDrive%\Documents and Settings\LocalService*\Local Settings\Temporary Internet Files|*.*|RECURSE
FileKey26=%SystemDrive%\Documents and Settings\NetworkService*\Cookies|*.*|RECURSE
FileKey27=%SystemDrive%\Documents and Settings\NetworkService*\Local Settings\History|*.*|RECURSE
FileKey28=%SystemDrive%\Documents and Settings\NetworkService*\Local Settings\Temporary Internet Files|*.*|RECURSE
FileKey29=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History|*.*|RECURSE
FileKey30=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\INetCache|*.*|RECURSE
FileKey31=%WinDir%\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\INetCookies|*.*|RECURSE
FileKey32=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History|*.*|RECURSE
FileKey33=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCache|*.*|RECURSE
FileKey34=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\INetCookies|*.*|RECURSE
FileKey35=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History|*.*|RECURSE
FileKey36=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache|*.*|RECURSE
FileKey37=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCookies|*.*|RECURSE
FileKey38=%WinDir%\System32\config\systemprofile\AppData\Local\Microsoft\Windows\WebCache|*.*|RECURSE
FileKey39=%WinDir%\System32\config\systemprofile\Cookies|*.*|RECURSE
FileKey40=%WinDir%\System32\config\systemprofile\History|*.*|RECURSE
FileKey41=%WinDir%\System32\config\systemprofile\Local Settings\Temporary Internet Files|*.*|RECURSE
FileKey42=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History|*.*|RECURSE
FileKey43=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache|*.*|RECURSE
FileKey44=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCookies|*.*|RECURSE
FileKey45=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\WebCache|*.*|RECURSE
RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage
RegKey2=HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore
RegKey3=HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage
RegKey4=HKCU\Software\Microsoft\Internet Explorer\Recovery\PendingDelete
RegKey5=HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats
[Internet Explorer Vault *]
LangSecRef=3001
Detect=HKCU\Software\Microsoft\Internet Explorer
Warning=This will clear the saved passwords in the Windows Mail app.
FileKey1=%LocalAppData%\Microsoft\Vault\*|*.vcrd
; End of Internet Explorer
[.NET Application History *]
LangSecRef=3025
DetectFile=%LocalAppData%\ApplicationHistory
FileKey1=%LocalAppData%\ApplicationHistory|*.*|RECURSE
[.NET Framework *]
LangSecRef=3025
Detect=HKLM\Software\Microsoft\.NETFramework
FileKey1=%WinDir%\assembly\NativeImages_*\Temp|*.*|RECURSE
FileKey2=%WinDir%\assembly\t*mp|*.*|REMOVESELF
FileKey3=%WinDir%\Microsoft.NET\Framework*\*\*\Logs|*.*|RECURSE
FileKey4=%WinDir%\Microsoft.NET\Framework*\*\Temporary ASP.NET Files|*.*|RECURSE
FileKey5=%WinDir%\Microsoft.NET\Framework*\v4.0.30319\SetupCache|*.*|RECURSE
FileKey6=%WinDir%\System32\URTTemp|*.*|RECURSE
RegKey1=HKCU\Software\Microsoft\.NETFramework\SQM\Apps
[.NET Framework Isolated Storage *]
LangSecRef=3025
Detect=HKLM\Software\Microsoft\.NETFramework
FileKey1=%LocalAppData%\IsolatedStorage|*.*|RECURSE
[.NET Reflector *]
LangSecRef=3021
DetectFile=%LocalAppData%\Red Gate\.NET Reflector 6
FileKey1=%LocalAppData%\Red Gate\.NET Reflector 6|Reflector.cfg
FileKey2=%LocalAppData%\Red Gate\.NET Reflector 6\Cache|*.*|RECURSE
[.Thumbnails *]
LangSecRef=3021
DetectFile=%UserProfile%\.Thumbnails
FileKey1=%UserProfile%\.Thumbnails|*.*|RECURSE
[//N.P.P.D. RUSH// - The Milk of Ultra Violet *]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\270090
FileKey1=%LocalAppData%\NPPDRUSH|Web Data*|RECURSE
FileKey2=%LocalAppData%\NPPDRUSH\*Cache|*.*|RECURSE
[1Click DVD Copy Pro *]
LangSecRef=3023
DetectFile=%CommonAppData%\1click dvd copy pro
FileKey1=%CommonAppData%\1click dvd copy pro|*.log
[3 Stars of Destiny *]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\278530
FileKey1=%AppData%\3Stars|*.tmp
[3D Builder *]
DetectOS=10.0|
LangSecRef=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.3DBuilder_8wekyb3d8bbwe
FileKey1=%LocalAppData%\Packages\Microsoft.3DBuilder_*\AC\INet*|*.*|RECURSE
FileKey2=%LocalAppData%\Packages\Microsoft.3DBuilder_*\AC\Temp|*.*|RECURSE
FileKey3=%LocalAppData%\Packages\Microsoft.3DBuilder_*\LocalCache|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.3DBuilder_*\LocalState\Cache|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.3DBuilder_*\TempState|*.*|RECURSE
[3D Viewer *]
DetectOS=10.0|
LangSecRef=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe
FileKey1=%LocalAppData%\Packages\Microsoft.Microsoft3DViewer_*\AC\INet*|*.*|RECURSE
FileKey2=%LocalAppData%\Packages\Microsoft.Microsoft3DViewer_*\AC\Microsoft\CryptnetUrlCache\*|*.*|RECURSE
FileKey3=%LocalAppData%\Packages\Microsoft.Microsoft3DViewer_*\AC\Temp|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.Microsoft3DViewer_*\LocalCache|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.Microsoft3DViewer_*\LocalState\Cache|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.Microsoft3DViewer_*\TempState|*.*|RECURSE
RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe\PersistedStorageItemTable\MostRecentlyUsed
[3DMark *]
Section=Games
DetectFile=%Documents%\3DMark
FileKey1=%Documents%\3DMark|*.log
FileKey2=%Documents%\3DMark\Log|*.*|REMOVESELF
FileKey3=%ProgramFiles%\Steam\SteamApps\common\3DMark|*.log|RECURSE
[3SwitcheD *]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\206610
FileKey1=%LocalAppData%\3SwitcheD\cache|*.*|RECURSE
[4K Video Downloader *]
LangSecRef=3023
Detect=HKCU\Software\4kdownload.com\4K Video Downloader
FileKey1=%LocalAppData%\4kdownload.com\4K Video Downloader\4K Video Downloader|*.bak;*.log;*.sqlite;*.xml
FileKey2=%LocalAppData%\4kdownload.com\4K Video Downloader\crashdb|*.*|RECURSE
FileKey3=%ProgramFiles%\4KDownload\4KVideoDownloader|*.rtf;*.txt
RegKey1=HKCU\Software\4kdownload.com\4K Video Downloader\Download|downloadedItems
RegKey2=HKCU\Software\4kdownload.com\4K Video Downloader\Download|downloadedItemsDb
RegKey3=HKCU\Software\4kdownload.com\4K Video Downloader\FileWatcher
RegKey4=HKCU\Software\4kdownload.com\4K Video Downloader\Gamification
RegKey5=HKCU\Software\4kdownload.com\4K Video Downloader\Settings|outputPath
[4K YouTube to MP3 *]
LangSecRef=3023
Detect=HKCU\Software\4kdownload.com\4K YouTube to MP3
FileKey1=%LocalAppData%\4kdownload.com\4K YouTube to MP3\4K YouTube to MP3|*.xml
RegKey1=HKCU\Software\4kdownload.com\4K YouTube to MP3\Download|downloadedItems
RegKey2=HKCU\Software\4kdownload.com\4K YouTube to MP3\Settings|outputPath
[4shared Desktop *]
LangSecRef=3022
DetectFile=%AppData%\4shared desktop
FileKey1=%AppData%\4shared desktop|*.log
FileKey2=%AppData%\4shared desktop\*|dhistory.xml
[4Team Sync2 *]
LangSecRef=3022
DetectFile=%AppData%\4Team\Sync2
FileKey1=%AppData%\4Team\Sync2|*.log|RECURSE
[4Team Updater *]
LangSecRef=3022
DetectFile=%AppData%\4Team\4Team-Updater
FileKey1=%AppData%\4Team\4Team-Updater\Logs|*.*
[7z SFX Builder *]
LangSecRef=3024
Detect=HKCU\Software\7z SFX Builder
RegKey1=HKCU\Software\7z SFX Builder\MRU
[10 Years After *]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\339240
FileKey1=%ProgramFiles%\Steam\SteamApps\common\10 Years After\10 Years After_Data|output_log.txt
[18 Wheels of Steel *]
Section=Games
Detect=HKCU\Software\ValuSoft
FileKey1=%Documents%\18 WoS*|*.log;*.crash
[32bit Web Browser *]
LangSecRef=3022
DetectFile=%ProgramFiles%\32BITWEB\32BW.exe
FileKey1=%ProgramFiles%\32BITWEB\Data|LastURL.dat;LastURL.da0
[140 *]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\242820
FileKey1=%ProgramFiles%\Steam\SteamApps\common\140\140_Data|output_log.txt
[337 Wallpaper *]
LangSecRef=3021
DetectFile=%AppData%\337\337 Wallpaper\plusapp.exe
FileKey1=%AppData%\337 Wallpaper\apps\thumb|*.jpg
FileKey2=%AppData%\337 Wallpaper\apps\webcache|*.*|RECURSE
FileKey3=%AppData%\337 Wallpaper\wallpaper|*.jpg
[360 Internet Security *]
LangSecRef=3024
Detect=HKCU\Software\360Safe
FileKey1=%AppData%\360safe\360ScanLog|*.*
FileKey2=%ProgramFiles%\360\360 Internet Security|*.log*|RECURSE
FileKey3=%SystemDrive%\360SANDBOX|*.log*|RECURSE
[1000 Amps *]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\205690
FileKey1=%ProgramFiles%\Steam\SteamApps\common\1000 Amps|stdout.txt
[1954 Alcatraz *]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\255280
FileKey1=%LocalLowAppData%\Daedalic Entertainment\1954 Alcatraz|*.log
FileKey2=%ProgramFiles%\Steam\SteamApps\common\1954 Alcatraz\Alcatraz_Data|output_log.txt
[A-PDF PDF Content Splitter *]
LangSecRef=3021
Detect=HKCU\Software\A-PDF\PDFContentSplitter
RegKey1=HKCU\Software\A-PDF\PDFContentSplitter\Setting|hloadpdfpath
RegKey2=HKCU\Software\A-PDF\PDFContentSplitter\Setting|hSaveallpdfpath
RegKey3=HKCU\Software\A-PDF\PDFContentSplitter\Setting|LastRulename
[A-PDF Watermark *]
LangSecRef=3021
Detect=HKCU\Software\A-PDF\Watermark
RegKey1=HKCU\Software\A-PDF\Watermark\Setting|hdIndir
RegKey2=HKCU\Software\A-PDF\Watermark\Setting|hdoutDir
RegKey3=HKCU\Software\A-PDF\Watermark\Setting|hloadpdfpath
RegKey4=HKCU\Software\A-PDF\Watermark\Setting|hSaveallpdfpath
RegKey5=HKCU\Software\A-PDF\Watermark\Setting|ptlastprinter
[A Hat in Time *]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\253230
FileKey1=%ProgramFiles%\Steam\steamapps\common\HatinTime\HatinTimeGame\Logs|*.*
[A58-Easytune6 *]
LangSecRef=3024
DetectFile=%ProgramFiles%\A58-Easytune6
FileKey1=%ProgramFiles%\A58-Easytune6|*.log
[ABBYY FineReader *]
LangSecRef=3021
Detect1=HKCU\Software\ABBYY\FineReader\7.00
Detect2=HKCU\Software\ABBYY\FineReader\8.00
Detect3=HKCU\Software\ABBYY\FineReader\9.00
Detect4=HKCU\Software\ABBYY\FineReader\11.00
Detect5=HKCU\Software\ABBYY\FineReader\12.00
Detect6=HKCU\Software\ABBYY\FineReader\14.00
Detect7=HKCU\Software\ABBYY\FineReader\15
Detect8=HKCU\Software\ABBYY\FineReaderSprint\9.00
Detect9=HKCU\Software\ABBYY\Sprint\5.00
FileKey1=%CommonAppData%\ABBYY\FineReader*\*\Licenses|*.log
FileKey2=%CommonAppData%\ABBYY\FineReader\*\Dumps|*.log
FileKey3=%CommonAppData%\ABBYY\FineReader\*\HotFolder\Dumps|*.log
FileKey4=%CommonAppData%\ABBYY\FineReader\*\PdfToolsCache|FontsCache*.dat
FileKey5=%LocalAppData%\ABBYY\FineReader\*|datafile.bin;SendToWorkFiles.txt
FileKey6=%LocalAppData%\ABBYY\FineReader\*\Bonus.ScreenshotReader\Dumps|*.dmp;*.txt
FileKey7=%LocalAppData%\ABBYY\FineReader\*\Dumps|*.dmp;*.txt
FileKey8=%LocalAppData%\ABBYY\FineReader\*\FineReaderShell|SendToWorkFiles.txt
FileKey9=%LocalAppData%\ABBYY\FineReader\*\FineReaderShell\Dumps|*.dmp;*.txt
FileKey10=%LocalAppData%\ABBYY\ScanManager\*|scantwain.txt;scanwia.txt;*.bmp
FileKey11=%ProgramFiles%\ABBYY FineReader*|*.cnt;*.log
FileKey12=%ProgramFiles%\ABBYY FineReader*\Resource\Cmap|*.lst
FileKey13=%ProgramFiles%\ABBYY FineReader*\Resource\Font|*.lst
FileKey14=%SystemDrive%\temp\FR15|*.*|REMOVESELF
RegKey1=HKCU\Software\ABBYY\FineReader\7.00\Shell\Dialogs|LoadImagePath
RegKey2=HKCU\Software\ABBYY\FineReader\7.00\Shell\Dialogs|OpenBatchPath
RegKey3=HKCU\Software\ABBYY\FineReader\7.00\Shell\Dialogs|SaveImagePath
RegKey4=HKCU\Software\ABBYY\FineReader\7.00\Shell\Dialogs|SaveToPath
RegKey5=HKCU\Software\ABBYY\FineReader\7.00\Shell\Dialogs|StandardBatchOptionsPath
RegKey6=HKCU\Software\ABBYY\FineReader\7.00\Shell\Options|LastBatchPath
RegKey7=HKCU\Software\ABBYY\FineReader\7.00\Shell\Options|LastFormatsPage
RegKey8=HKCU\Software\ABBYY\FineReader\7.00\Shell\Options|LastOptionsPage
RegKey9=HKCU\Software\ABBYY\FineReader\8.00\Shell\Dialogs|ExportTAPath
RegKey10=HKCU\Software\ABBYY\FineReader\8.00\Shell\Dialogs|ImportTAPath
RegKey11=HKCU\Software\ABBYY\FineReader\8.00\Shell\Dialogs|LoadImagePath
RegKey12=HKCU\Software\ABBYY\FineReader\8.00\Shell\Dialogs|SaveImagePath
RegKey13=HKCU\Software\ABBYY\FineReader\8.00\Shell\Dialogs|SaveToPath
RegKey14=HKCU\Software\ABBYY\FineReader\8.00\Shell\Dialogs|StandardBatchOptionsPath
RegKey15=HKCU\Software\ABBYY\FineReader\8.00\Shell\Options|LastBatchPath
RegKey16=HKCU\Software\ABBYY\FineReader\8.00\Shell\Options|LastTAScenario
RegKey17=HKCU\Software\ABBYY\FineReader\9.00\Shell\Dialogs|ExportTAPath
RegKey18=HKCU\Software\ABBYY\FineReader\9.00\Shell\Dialogs|ImportTAPath
RegKey19=HKCU\Software\ABBYY\FineReader\9.00\Shell\Dialogs|LoadImagePath
RegKey20=HKCU\Software\ABBYY\FineReader\9.00\Shell\Dialogs|SaveImagePath
RegKey21=HKCU\Software\ABBYY\FineReader\9.00\Shell\Dialogs|SaveToPath
RegKey22=HKCU\Software\ABBYY\FineReader\9.00\Shell\Options|LastBatchPath
RegKey23=HKCU\Software\ABBYY\FineReader\9.00\Shell\Options|LastTAScenario
RegKey24=HKCU\Software\ABBYY\FineReader\11.00\Shell\Dialogs|SaveToPath
RegKey25=HKCU\Software\ABBYY\FineReader\11.00\Shell\Options|LastTAScenario
RegKey26=HKCU\Software\ABBYY\FineReader\11.00\Shell\Options|LastWebFoldersNames
RegKey27=HKCU\Software\ABBYY\FineReader\12.00\Shell\Dialogs|BatchDialogsMRU
RegKey28=HKCU\Software\ABBYY\FineReader\12.00\Shell\Dialogs|LoadImagePath
RegKey29=HKCU\Software\ABBYY\FineReader\12.00\Shell\Dialogs|SaveImagePath
RegKey30=HKCU\Software\ABBYY\FineReader\12.00\Shell\MainFrame\RecentFileList
RegKey31=HKCU\Software\ABBYY\FineReader\14.00\Bonus.ScreenshotReader|LaunchCount
RegKey32=HKCU\Software\ABBYY\FineReader\14.00\Bonus.ScreenshotReader\Options|LanguagesMRU
RegKey33=HKCU\Software\ABBYY\FineReader\14.00\Bonus.ScreenshotReader\Options|LastSaveImagePath
RegKey34=HKCU\Software\ABBYY\FineReader\14.00\Bonus.ScreenshotReader\Options|SaveTablePath
RegKey35=HKCU\Software\ABBYY\FineReader\14.00\Bonus.ScreenshotReader\Options|SaveTextPath
RegKey36=HKCU\Software\ABBYY\FineReader\14.00\FineReaderShell|LaunchCount
RegKey37=HKCU\Software\ABBYY\FineReader\14.00\FineReaderShell\Shell\Dialogs|ExportTAPath
RegKey38=HKCU\Software\ABBYY\FineReader\14.00\FineReaderShell\Shell\Dialogs|ImportTAPath
RegKey39=HKCU\Software\ABBYY\FineReader\14.00\FineReaderShell\Shell\Dialogs|SaveToWebFolderPath
RegKey40=HKCU\Software\ABBYY\FineReader\14.00\FineUI\Dialogs\FROpenFileDialog|LastFolder
RegKey41=HKCU\Software\ABBYY\FineReader\14.00\FineUpdate|LaunchCount
RegKey42=HKCU\Software\ABBYY\FineReader\14.00\PDFTransformer|LaunchCount
RegKey43=HKCU\Software\ABBYY\FineReader\14.00\PDFTransformer\Shell\Frame|ImportDataFolder
RegKey44=HKCU\Software\ABBYY\FineReader\14.00\PDFTransformer\Shell\Statistics|LastUsedBuyMessages
RegKey45=HKCU\Software\ABBYY\FineReader\14.00\Shell\RecentBatchList
RegKey46=HKCU\Software\ABBYY\FineReader\14.00\Shell\RecentCompareList
RegKey47=HKCU\Software\ABBYY\FineReader\14.00\Shell\RecentPdfList
RegKey48=HKCU\Software\ABBYY\FineReader\14.00\StatisticSender|LaunchCount
RegKey49=HKCU\Software\ABBYY\FineReader\15\Bonus.ScreenshotReader|LaunchCount
RegKey50=HKCU\Software\ABBYY\FineReader\15\Bonus.ScreenshotReader\Options|LanguagesMRU
RegKey51=HKCU\Software\ABBYY\FineReader\15\Bonus.ScreenshotReader\Options|LastRecognitionLanguage
RegKey52=HKCU\Software\ABBYY\FineReader\15\Bonus.ScreenshotReader\Options|LastSaveImagePath
RegKey53=HKCU\Software\ABBYY\FineReader\15\Bonus.ScreenshotReader\Options|SaveTablePath
RegKey54=HKCU\Software\ABBYY\FineReader\15\Bonus.ScreenshotReader\Options|SaveTextPath
RegKey55=HKCU\Software\ABBYY\FineReader\15\Comparator\RateUs|RunCount
RegKey56=HKCU\Software\ABBYY\FineReader\15\Comparator\Shell\Options|MRURecognitionLanguages
RegKey57=HKCU\Software\ABBYY\FineReader\15\FineReaderShell\Shell\Dialogs|ExportTAPath
RegKey58=HKCU\Software\ABBYY\FineReader\15\FineReaderShell\Shell\Dialogs|ImportTAPath
RegKey59=HKCU\Software\ABBYY\FineReader\15\FineReaderShell\Shell\Dialogs|SaveToWebFolderPath
RegKey60=HKCU\Software\ABBYY\FineReader\15\FineReaderShell\Shell\Dialogs|WebFolderPath
RegKey61=HKCU\Software\ABBYY\FineReader\15\FineReaderShell\Shell\Options|LastTAScenario
RegKey62=HKCU\Software\ABBYY\FineReader\15\FineReaderShell\Shell\Options|LastWebFoldersNames
RegKey63=HKCU\Software\ABBYY\FineReader\15\FineReaderShell\Tips|LastGetSocialTips
RegKey64=HKCU\Software\ABBYY\FineReader\15\FineUI\Dialogs\FROpenFileDialog|LastFolder
RegKey65=HKCU\Software\ABBYY\FineReader\15\PDFTransformer|LaunchCount
RegKey66=HKCU\Software\ABBYY\FineReader\15\PDFTransformer\PDFEngine\EraseExtraData|LastDeleteNeedlessExtraData
RegKey67=HKCU\Software\ABBYY\FineReader\15\PDFTransformer\Shell\Frame|ImportDataFolder
RegKey68=HKCU\Software\ABBYY\FineReader\15\PDFTransformer\Shell\Frame|Last signature
RegKey69=HKCU\Software\ABBYY\FineReader\15\PDFTransformer\Shell\Signature|SignatureCertificateLocation
RegKey70=HKCU\Software\ABBYY\FineReader\15\PDFTransformer\Shell\Signature|SignatureImagePath
RegKey71=HKCU\Software\ABBYY\FineReader\15\PDFTransformer\Shell\Statistics|LastUsedBuyMessages
RegKey72=HKCU\Software\ABBYY\FineReader\15\PDFTransformer\Tips|LastGetSocialTips
RegKey73=HKCU\Software\ABBYY\FineReader\15\Shell\RecentBatchList
RegKey74=HKCU\Software\ABBYY\FineReader\15\Shell\RecentCompareList
RegKey75=HKCU\Software\ABBYY\FineReader\15\Shell\RecentPdfList
RegKey76=HKCU\Software\ABBYY\Sprint\5.00\Options|ExportToFilePath
RegKey77=HKCU\Software\ABBYY\Sprint\5.00\Options|OpenImagePath
RegKey78=HKCU\Software\ABBYY\Sprint\5.00\Options|SaveImagePath
[ABBYY Lingvo *]
Detect=HKCU\Software\ABBYY\Lingvo\15.0
DetectFile=%ProgramFiles%\ABBYY Lingvo x5\Lingvo.exe
FileKey1=%CommonAppData%\ABBYY\Lingvo\*\Licenses|*.log
FileKey2=%ProgramFiles%\ABBYY Lingvo x5|*.log;*.rtf
RegKey1=HKCU\Software\ABBYY\Lingvo\15.0\Dictionaries\FavoriteDirections
RegKey2=HKCU\Software\ABBYY\Lingvo\15.0\View|LastText
RegKey3=HKCU\Software\ABBYY\Lingvo\15.0\X3M|LastActivity
[ABBYY PDFTransformer *]
LangSecRef=3021
Detect1=HKCU\Software\ABBYY\PDFTransformer\3.00
Detect2=HKCU\Software\ABBYY\PDFTransformer\12.00
FileKey1=%CommonAppData%\ABBYY\PDFTransformer\*\Licenses|*.log
FileKey2=%LocalAppData%\ABBYY\PDFTransformer\*|*.log
FileKey3=%LocalAppData%\ABBYY\PDFTransformer\*\FontCache|*.*
FileKey4=%ProgramFiles%\ABBYY PDF Transformer *.0|*.log
FileKey5=%SystemDrive%\Temp\PDFT30|*.*|REMOVESELF
RegKey1=HKCU\Software\ABBYY\PDFTransformer\3.00\Transform|MRURecognitionLanguages
RegKey2=HKCU\Software\ABBYY\PDFTransformer\3.00\Transform|TransformOpenPath
RegKey3=HKCU\Software\ABBYY\PDFTransformer\12.00\Shell\Statistics
[ABBYY ScreenshotReader *]
LangSecRef=3021
Detect1=HKCU\Software\ABBYY\Bonus.ScreenshotReader\9.00
Detect2=HKCU\Software\ABBYY\Retail.ScreenshotReader\9.00
Detect3=HKCU\Software\ABBYY\ScreenshotReader\9.00
DetectFile=%ProgramFiles%\ABBYY Screenshot Reader\ScreenshotReader.exe
FileKey1=%CommonAppData%\ABBYY\*.ScreenshotReader\*|*.xml
FileKey2=%CommonAppData%\ABBYY\*.ScreenshotReader\*\Licenses|*.log
FileKey3=%ProgramFiles%\ABBYY Screenshot Reader|*.log;*.rtf
RegKey1=HKCU\Software\ABBYY\Bonus.ScreenshotReader\9.00\Options|LastSaveImagePath
RegKey2=HKCU\Software\ABBYY\Bonus.ScreenshotReader\9.00\Options|SaveTablePath
RegKey3=HKCU\Software\ABBYY\Bonus.ScreenshotReader\9.00\Options|SaveTextPath
RegKey4=HKCU\Software\ABBYY\Retail.ScreenshotReader\9.00\Advertising
RegKey5=HKCU\Software\ABBYY\Retail.ScreenshotReader\9.00\Options|LastSaveImagePath
RegKey6=HKCU\Software\ABBYY\Retail.ScreenshotReader\9.00\Options|SaveTablePath
RegKey7=HKCU\Software\ABBYY\Retail.ScreenshotReader\9.00\Options|SaveTextPath
RegKey8=HKCU\Software\ABBYY\ScreenshotReader\9.00\Options|LastSaveImagePath
RegKey9=HKCU\Software\ABBYY\ScreenshotReader\9.00\Options|SaveTablePath
RegKey10=HKCU\Software\ABBYY\ScreenshotReader\9.00\Options|SaveTextPath
[Abelssoft GoogleClean *]
LangSecRef=3024
Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4281435C-AD1D-4C8A-B9C0-3961C08EF142}_is1
FileKey1=%LocalAppData%\Abelssoft\GoogleClean\log|*.*|REMOVESELF
[abgx360 *]
LangSecRef=3024
Detect=HKCU\Software\abgx360gui
RegKey1=HKCU\Software\abgx360gui\RecentFiles
[Ability Office *]
LangSecRef=3021
Detect=HKCU\Software\Ability 6.0
FileKey1=%Documents%\My Ability Files|*.*|RECURSE
RegKey1=HKCU\Software\Ability 6.0\Ability Database\Recent File List
RegKey2=HKCU\Software\Ability 6.0\Ability PhotoPaint Studio\Recent File List
RegKey3=HKCU\Software\Ability 6.0\Ability PhotoPaint\Recent File List
RegKey4=HKCU\Software\Ability 6.0\Ability Spreadsheet\Recent File List
RegKey5=HKCU\Software\Ability 6.0\Ability Write\Files
[Ableton Live *]
LangSecRef=3023
Detect=HKLM\Software\Propellerhead Software\ReWire\Ableton Live Engine
FileKey1=%AppData%\Ableton\*\Preferences|AsioLog.txt;Indexer.txt;Log.txt|RECURSE
FileKey2=%AppData%\Ableton\Live Reports|Ableton Crash Report*.zip
FileKey3=%AppData%\Ableton\Live Reports\Temp|*.*|REMOVESELF
FileKey4=%AppData%\Ableton\Live Reports\Usage|*.*|REMOVESELF
FileKey5=%CommonAppData%\Ableton\*\Redist|vc*redist*.exe
FileKey6=%ProgramFiles%\Ableton\*\Redist|vc*redist*.exe
[Ableton Live Cache *]
LangSecRef=3023
Detect=HKLM\Software\Propellerhead Software\ReWire\Ableton Live Engine
FileKey1=%AppData%\Ableton\Cache|*.*|RECURSE
[AbsoluteFTP *]
LangSecRef=3022
Detect=HKCU\Software\Van Dyke Technologies\AbsoluteFTP
RegKey1=HKCU\Software\Van Dyke Technologies\AbsoluteFTP\Recent File List
[Abyssmedia Quick Batch File Compiler *]
LangSecRef=3024
Detect1=HKCU\Software\Abyssmedia\Quick Batch File Compiler
Detect2=HKCU\Software\qbfc
RegKey1=HKCU\Software\Abyssmedia\Quick Batch File Compiler\Settings|savedir
RegKey2=HKCU\Software\qbfc\RecentFiles
[Abyssmedia ScriptCryptor Compiler *]
LangSecRef=3024
Detect=HKCU\Software\Abyssmedia\ScriptCryptor
RegKey1=HKCU\Software\Abyssmedia\ScriptCryptor\Settings|mrucount
RegKey2=HKCU\Software\Abyssmedia\ScriptCryptor\Settings|mruitem0
RegKey3=HKCU\Software\Abyssmedia\ScriptCryptor\Settings|mruitem1
RegKey4=HKCU\Software\Abyssmedia\ScriptCryptor\Settings|mruitem2
RegKey5=HKCU\Software\Abyssmedia\ScriptCryptor\Settings|mruitem3
RegKey6=HKCU\Software\Abyssmedia\ScriptCryptor\Settings|mruitem4
RegKey7=HKCU\Software\Abyssmedia\ScriptCryptor\Settings|savedir
[AccessData Registry Viewer *]
LangSecRef=3024
Detect=HKCU\Software\AccessData\Registry Viewer
RegKey1=HKCU\Software\AccessData\Registry Viewer\Recent File List
[Accounts Control *]
DetectOS=10.0|
LangSecRef=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.AccountsControl_cw5n1h2txyewy
FileKey1=%LocalAppData%\Packages\Microsoft.AccountsControl_*\AC\AppCache|*.*|RECURSE
FileKey2=%LocalAppData%\Packages\Microsoft.AccountsControl_*\AC\INet*|*.*|RECURSE
FileKey3=%LocalAppData%\Packages\Microsoft.AccountsControl_*\AC\Microsoft\CryptnetUrlCache\*|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.AccountsControl_*\AC\Temp|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.AccountsControl_*\AC\TokenBroker\Cache|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.AccountsControl_*\LocalCache|*.*|RECURSE
FileKey7=%LocalAppData%\Packages\Microsoft.AccountsControl_*\LocalState\Cache|*.*|RECURSE
FileKey8=%LocalAppData%\Packages\Microsoft.AccountsControl_*\TempState|*.*|RECURSE
[AccurateRip *]
LangSecRef=3023
Detect1=HKCU\Software\AWSoftware\EAC
Detect2=HKCU\Software\AWSoftware\EACU
Detect3=HKCU\Software\Illustrate\dBpowerAMP
FileKey1=%AppData%\AccurateRip\AccurateRipCache|dBAR*.bin
[AccuWeather - Weather for Life *]
LangSecRef=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\AccuWeather.AccuWeatherforWindows8_8zz2pj9h1h1d8
FileKey1=%LocalAppData%\Packages\AccuWeather.AccuWeatherforWindows8_*\AC\INet*\*|*.*|REMOVESELF
FileKey2=%LocalAppData%\Packages\AccuWeather.AccuWeatherforWindows8_*\AC\Microsoft\CryptnetUrlCache\*|*.*|RECURSE
FileKey3=%LocalAppData%\Packages\AccuWeather.AccuWeatherforWindows8_*\AC\Temp|*.*
FileKey4=%LocalAppData%\Packages\AccuWeather.AccuWeatherforWindows8_*\TempState|*.*|RECURSE
[ACDSee Photo Studio *]
LangSecRef=3023
Detect1=HKCU\Software\ACD Systems\ACDSee Pro\90
Detect2=HKCU\Software\ACD Systems\ACDSee Professional
Detect3=HKCU\Software\ACD Systems\ACDSee Standard
Detect4=HKCU\Software\ACD Systems\ACDSee Ultimate
Detect5=HKCU\Software\ACD Systems\ACDSee\60
FileKey1=%LocalAppData%\ACD Systems\GeoTag\Cache|*.*|RECURSE
FileKey2=%LocalAppData%\ACD Systems\ICMCache|*.*|RECURSE
FileKey3=%LocalAppData%\ACD Systems\Logs|*.*|RECURSE
FileKey4=%LocalAppData%\ACD Systems\SavedSearches|*.*|RECURSE
RegKey1=HKCU\Software\ACD Systems\ACDSee Pro\90|HistMCFDestFolder
RegKey2=HKCU\Software\ACD Systems\ACDSee Pro\90|HistPaths
RegKey3=HKCU\Software\ACD Systems\ACDSee Pro\90|LastOptionPageName
RegKey4=HKCU\Software\ACD Systems\ACDSee Pro\90|OpenFolder
RegKey5=HKCU\Software\ACD Systems\ACDSee Pro\90\PrintOptions\OutputContactSheet|ContactSheetFN
RegKey6=HKCU\Software\ACD Systems\ACDSee Pro\90\PrintOptions\OutputContactSheet|ImageMapFN
RegKey7=HKCU\Software\ACD Systems\ACDSee Professional\110|HistMCFDestFolder
RegKey8=HKCU\Software\ACD Systems\ACDSee Professional\110|HistPaths
RegKey9=HKCU\Software\ACD Systems\ACDSee Professional\110|LastOptionPageName
RegKey10=HKCU\Software\ACD Systems\ACDSee Professional\110|OnlineHistPaths
RegKey11=HKCU\Software\ACD Systems\ACDSee Professional\110|OpenFolder
RegKey12=HKCU\Software\ACD Systems\ACDSee Professional\120|HistMCFDestFolder
RegKey13=HKCU\Software\ACD Systems\ACDSee Professional\120|HistPaths
RegKey14=HKCU\Software\ACD Systems\ACDSee Professional\120|LastOptionPageName
RegKey15=HKCU\Software\ACD Systems\ACDSee Professional\120|OnlineHistPaths
RegKey16=HKCU\Software\ACD Systems\ACDSee Professional\120|OpenFolder
RegKey17=HKCU\Software\ACD Systems\ACDSee Standard\210|HistMCFDestFolder
RegKey18=HKCU\Software\ACD Systems\ACDSee Standard\210|HistPaths
RegKey19=HKCU\Software\ACD Systems\ACDSee Standard\210|LastOptionPageName
RegKey20=HKCU\Software\ACD Systems\ACDSee Standard\210|OnlineHistPaths
RegKey21=HKCU\Software\ACD Systems\ACDSee Standard\210|OpenFolder
RegKey22=HKCU\Software\ACD Systems\ACDSee Standard\220|HistMCFDestFolder
RegKey23=HKCU\Software\ACD Systems\ACDSee Standard\220|HistPaths
RegKey24=HKCU\Software\ACD Systems\ACDSee Standard\220|LastOptionPageName
RegKey25=HKCU\Software\ACD Systems\ACDSee Standard\220|OnlineHistPaths
RegKey26=HKCU\Software\ACD Systems\ACDSee Standard\220|OpenFolder
RegKey27=HKCU\Software\ACD Systems\ACDSee Ultimate\110|HistMCFDestFolder
RegKey28=HKCU\Software\ACD Systems\ACDSee Ultimate\110|HistPaths
RegKey29=HKCU\Software\ACD Systems\ACDSee Ultimate\110|LastOptionPageName
RegKey30=HKCU\Software\ACD Systems\ACDSee Ultimate\110|OnlineHistPaths
RegKey31=HKCU\Software\ACD Systems\ACDSee Ultimate\110|OpenFolder
RegKey32=HKCU\Software\ACD Systems\ACDSee Ultimate\120|HistMCFDestFolder
RegKey33=HKCU\Software\ACD Systems\ACDSee Ultimate\120|HistPaths
RegKey34=HKCU\Software\ACD Systems\ACDSee Ultimate\120|LastOptionPageName
RegKey35=HKCU\Software\ACD Systems\ACDSee Ultimate\120|OnlineHistPaths
RegKey36=HKCU\Software\ACD Systems\ACDSee Ultimate\120|OpenFolder
RegKey37=HKCU\Software\ACD Systems\ACDSee\60|HistMCFDestFolder
RegKey38=HKCU\Software\ACD Systems\ACDSee\60|HistPaths
RegKey39=HKCU\Software\ACD Systems\ACDSee\60|LastOptionPageName
RegKey40=HKCU\Software\ACD Systems\ACDSee\60|OpenFolder
RegKey41=HKCU\Software\ACD Systems\ACDSee\60\PrintOptions\OutputContactSheet|ContactSheetFN
RegKey42=HKCU\Software\ACD Systems\ACDSee\60\PrintOptions\OutputContactSheet|ImageMapFN
RegKey43=HKCU\Software\ACD Systems\EditLib\Presets\Photo Repair 2|Last Used
[Ace Explorer Browser *]
LangSecRef=3022
Detect=HKCU\Software\Ace Explorer\Ace Explorer
FileKey1=%AppData%\Ace Explorer|recentclose.ini
RegKey1=HKCU\Software\Ace Explorer\Ace Explorer\Recent File List
[Ace of Spades *]
Section=Games
DetectFile=%ProgramFiles%\Steam\steamapps\common\aceofspades
FileKey1=%ProgramFiles%\Steam\steamapps\common\aceofspades\logs|*.*
[Ace Stream *]
LangSecRef=3023
DetectFile=%AppData%\ACEStream
FileKey1=%AppData%\.ACEStream|*.ini
FileKey2=%AppData%\.ACEStream\collected_torrent_files|*.*
FileKey3=%AppData%\ACEStream\engine|*.log
FileKey4=%SystemDrive%\_acestream_cache_|*.*|REMOVESELF
[Ace Utilities *]
LangSecRef=3024
Detect=HKCU\Software\Acelogix\Ace Utilities
FileKey1=%LocalAppData%\Acelogix\Ace Utilities\Backups|*.reg
RegKey1=HKCU\Software\Acelogix\Ace Utilities\Settings|UsageHistory
[Acebyte Utilities *]
LangSecRef=3024
Detect=HKCU\Software\AceBIT
FileKey1=%CommonAppData%\Acebyte\Acebyte Utilities*\Log|*.*|RECURSE
[Acer Arcade Deluxe *]
Section=Games
DetectFile=%LocalAppData%\Acer Arcade Deluxe
FileKey1=%CommonAppData%|ArcadeDexluxe2.log
FileKey2=%LocalAppData%\Acer Arcade Deluxe|*.log
[Acer Care Center *]
LangSecRef=3024
Detect1=HKLM\Software\OEM\AcerCareCenter
Detect2=HKLM\Software\OEM\CareCenter
FileKey1=%CommonAppData%\Acer\CareCenter\DebugLog\SurfaceCheck|log*.txt
FileKey2=%ProgramFiles%\Acer\Care Center\DebugLog|*.log
[Acer eSupport *]
LangSecRef=3024
DetectFile=%SystemDrive%\eSupport\eDriver
FileKey1=%SystemDrive%\eSupport\eDriver\Software|*.log;URLLog.dat|RECURSE
[Acer GameZone *]
Section=Games
DetectFile=%ProgramFiles%\Acer GameZone
FileKey1=%ProgramFiles%\Acer GameZone|*.log|RECURSE
[AcooBrowser *]
LangSecRef=3022
Detect=HKCU\Software\AcooBrowser\Acoo Browser
RegKey1=HKCU\Software\AcooBrowser\Acoo Browser\Recent Document List
RegKey2=HKCU\Software\AcooBrowser\Acoo Browser\Search\History
[Acoustica CD Label Maker *]
LangSecRef=3024
Detect=HKCU\Software\Acoustica\CD Label Maker
FileKey1=%AppData%\Acoustica\CD Label Maker\*\cache|*.*|RECURSE
FileKey2=%AppData%\Acoustica\CD Label Maker\cache|*.*|RECURSE
FileKey3=%AppData%\Acoustica\CD Label Maker\shapes|*.*
FileKey4=%ProgramFiles%\Acoustica CD Label Maker\thumbs|*.*|RECURSE
[Acoustica Premium Edition 6 *]
LangSecRef=3023
Detect=HKCU\Software\Acon Digital\Acoustica Premium Edition 6
RegKey1=HKCU\Software\Acon Digital\Acoustica Premium Edition 6\General|BrowserFolder
RegKey2=HKCU\Software\Acon Digital\Acoustica Premium Edition 6\General|LastAudioDir
RegKey3=HKCU\Software\Acon Digital\Acoustica Premium Edition 6\Recent File List
[Acrok Video Converter Ultimate *]
LangSecRef=3023
Detect=HKCU\Software\Acrok Software\Acrok Video Converter Ultimate
FileKey1=%AppData%\Acrok Software\Blu-ray Plugin\Log|*.log
FileKey2=%AppData%\Acrok\Acrok Video Converter Ultimate|*.dmp
FileKey3=%AppData%\Acrok\Acrok Video Converter Ultimate\log|*.*
FileKey4=%AppData%\Auxre\Blu-ray Plugin|*.log
FileKey5=%UserProfile%\.BDAccess|*.*|RECURSE
[Active Setup Temp Folder *]
LangSecRef=3025
Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Active Setup Temp Folders
FileKey1=%WinDir%\msdownld.tmp|*.*|REMOVESELF
RegKey1=HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Active Setup Temp Folders|Folder
RegKey2=HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Active Setup Temp Folders|Folder
[Active@ Disk Image *]
LangSecRef=3024
Detect=HKLM\Software\LSoft Technologies\Active Disk Image
FileKey1=%ProgramFiles%\LSoft Technologies\Active@ Disk Image|*.txt
FileKey2=%ProgramFiles%\LSoft Technologies\Active@ Disk Image\Logs|*.*|RECURSE
[Active@ File Recovery *]
LangSecRef=3024
Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C34F36E0-4D8B-42E8-90AD-50C76E1AE282}_is1
FileKey1=%ProgramFiles%\LSoft Technologies\Active@ File Recovery*|Active File Recovery Log.txt;he_log.txt;*.scn;*.xml
[Active@ KillDisk *]
LangSecRef=3024
Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0F62EFB8-3C1C-4EE6-B6EF-9593007F9B03}_is1
FileKey1=%ProgramFiles%\LSoft Technologies\Active@ KillDisk*|*.log;*.xml
[ActiveSync *]
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\ActiveSync
FileKey1=%LocalAppData%\Packages\ActiveSync\LocalState\DiagOutputDir|*.*
[Activity History *]
DetectOS=10.0|
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Windows
Warning=You need to run this in Windows Safe Mode. Or stop services "Connected Devices Platform Service" and "Connected Devices Platform User Service_xxxxx" prior to cleaning and restart after cleaning.
FileKey1=%LocalAppData%\ConnectedDevicesPlatform\*|*.db*
[Actual Window Guard *]
LangSecRef=3024
Detect=HKCU\Software\Actual Tools\Actual Window Guard
FileKey1=%AppData%\Actual Tools\Actual Window Guard|*.log
[Ad-Aware Antivirus *]
LangSecRef=3021
DetectFile=%ProgramFiles%\Ad-Aware Antivirus\AdAware.exe
FileKey1=%AppData%\Ad-Aware Antivirus\Logs|*.*|RECURSE
FileKey2=%CommonAppData%\Ad-Aware Antivirus\Logs|*.*|RECURSE
FileKey3=%CommonAppData%\Lavasoft\AntiMalware\Events|*.*|RECURSE
FileKey4=%CommonAppData%\Lavasoft\AntiMalware\History|*.*|RECURSE
FileKey5=%CommonAppData%\Lavasoft\AntiMalware\Logs|*.*|RECURSE
[Adaptec's Audio CD *]
LangSecRef=3024
Detect=HKCU\Software\Adaptec
RegKey1=HKCU\Software\Adaptec\AUDIO_CD_INFO
[Adblock Plus for IE *]
LangSecRef=3022
Detect=HKLM\Software\Adblock Plus for IE
DetectFile=%LocalAppData%\Adblock Plus for IE
FileKey1=%LocalAppData%\Adblock Plus for IE|patterns-backup*.ini
FileKey2=%LocalLowAppData%\Adblock Plus for IE|patterns-backup*.ini
FileKey3=%SystemDrive%\Documents and Settings\NetworkService\Local Settings\Application Data\Adblock Plus for IE|patterns-backup*.ini
FileKey4=%WinDir%\System32\config\systemprofile\AppData\LocalLow\Adblock Plus for IE|patterns-backup*.ini
[AdFender *]
LangSecRef=3022
DetectFile=%LocalAppData%\AdFender
FileKey1=%LocalAppData%\AdFender\Log|*.log
[Adobe Acrobat 20XX *]
LangSecRef=3021
Detect1=HKCU\Software\Adobe\Adobe Acrobat\2015
Detect2=HKCU\Software\Adobe\Adobe Acrobat\2017
Detect3=HKCU\Software\Adobe\Adobe Acrobat\2020
RegKey1=HKCU\Software\Adobe\Adobe Acrobat\2015\AVGeneral\cRecentFiles
RegKey2=HKCU\Software\Adobe\Adobe Acrobat\2015\AVGeneral\cRecentFolders
RegKey3=HKCU\Software\Adobe\Adobe Acrobat\2017\AVGeneral\cRecentFiles
RegKey4=HKCU\Software\Adobe\Adobe Acrobat\2017\AVGeneral\cRecentFolders
RegKey5=HKCU\Software\Adobe\Adobe Acrobat\2020\AVGeneral\cRecentFiles
RegKey6=HKCU\Software\Adobe\Adobe Acrobat\2020\AVGeneral\cRecentFolders
[Adobe Acrobat DC *]
LangSecRef=3021
Detect=HKLM\Software\Adobe\Adobe Acrobat\DC
FileKey1=%AppData%\Adobe\Acrobat\DC\Security\CRLCache|*.*|RECURSE
FileKey2=%LocalAppData%\Adobe\Acrobat\DC|*.lst;UserCache.bin
FileKey3=%LocalAppData%\Adobe\Acrobat\DC\Cache|*.lst
FileKey4=%LocalAppData%\Adobe\Acrobat\DC\ToolsSearchCacheAcro|*.*|RECURSE
FileKey5=%LocalLowAppData%\Adobe\Acrobat\DC\ConnectorIcons|*.*|RECURSE
FileKey6=%LocalLowAppData%\Adobe\Acrobat\DC\Search|*.*|RECURSE
FileKey7=%LocalLowAppData%\Adobe\AcroCef\DC\Acrobat\Cache|*.*|RECURSE
RegKey1=HKCU\Software\Adobe\Adobe Acrobat\DC\AVConnector\cIconCache
RegKey2=HKCU\Software\Adobe\Adobe Acrobat\DC\AVConversionFromPDF\cSettings
RegKey3=HKCU\Software\Adobe\Adobe Acrobat\DC\AVConversionToPDF\cSettings
RegKey4=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral\cDockables
RegKey5=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles
RegKey6=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFolders
RegKey7=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentToolsList
RegKey8=HKCU\Software\Adobe\Adobe Acrobat\DC\AVGeneral\cToolbars
RegKey9=HKCU\Software\Adobe\Adobe Acrobat\DC\RememberedViews\cNoCategoryFiles
RegKey10=HKCU\Software\Adobe\Adobe Acrobat\DC\ShareIdentity
RegKey11=HKCU\Software\Adobe\Adobe Synchronizer\DC
[Adobe Acrobat Distiller DC *]
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Distiller\DC
FileKey1=%LocalAppData%\Adobe\Acrobat\Distiller DC|*.log
FileKey2=%LocalAppData%\Adobe\Acrobat\Distiller DC\Cache|*.*
RegKey1=HKCU\Software\Adobe\Acrobat Distiller\PrinterJobControl
[Adobe Acrobat Distiller XI *]
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Distiller\11.0
FileKey1=%AppData%\Adobe\Acrobat\Distiller 11|*.log
FileKey2=%AppData%\Adobe\Acrobat\Distiller 11\Cache|*.*
RegKey1=HKCU\Software\Adobe\Acrobat Distiller\PrinterJobControl
[Adobe Acrobat XI *]
LangSecRef=3021
Detect=HKCU\Software\Adobe\Adobe Acrobat\11.0
FileKey1=%LocalAppData%\Adobe\Acrobat|*.idx|RECURSE
FileKey2=%LocalAppData%\Adobe\Acrobat\11.0|UserCache.bin
[Adobe Air *]
LangSecRef=3024
DetectFile=%LocalAppData%\Adobe\Air
FileKey1=%WinDir%\System32\config\systemprofile\AppData\Local\Adobe\AIR\logs|*.*
FileKey2=%WinDir%\SysWOW64\config\systemprofile\AppData\Local\Adobe\AIR\logs|*.*
[Adobe Application Manager *]
LangSecRef=3021
Detect1=HKCU\Software\Adobe
Detect2=HKLM\Software\Adobe
FileKey1=%AppData%\Adobe\Acrobat\*\Updater|*.log
FileKey2=%CommonAppData%\Adobe\ARM|*.*|RECURSE
FileKey3=%CommonProgramFiles%\Adobe\Installers|*.log.gz|RECURSE
FileKey4=%LocalAppData%\Adobe\AAMUpdater|*.Log|RECURSE
FileKey5=%LocalAppData%\Adobe\Acrobat\*\Updater|*.log
FileKey6=%LocalAppData%\Adobe\ARM|*.*|RECURSE
FileKey7=%LocalAppData%\Adobe\Updater*|*.log|RECURSE
[Adobe CC *]
LangSecRef=3023
Detect1=HKCU\Software\Adobe\CreativeCloud
Detect2=HKCU\Software\Adobe\Photoshop
FileKey1=%AppData%\Adobe\Adobe Media Encoder\*\logs|*.*|RECURSE
FileKey2=%AppData%\Adobe\Adobe Photoshop CC *\Adobe Photoshop CC * Settings|PSErrorLog.txt;sniffer-*.txt
FileKey3=%AppData%\Adobe\Adobe Photoshop CC *\Adobe Photoshop CC * Settings\CrashLogs|*.*|RECURSE
FileKey4=%AppData%\Adobe\Adobe Photoshop CC *\Adobe Photoshop CC * Settings\web-cache-temp|*.*|RECURSE
FileKey5=%AppData%\Adobe\Adobe Photoshop CC *\Logs|*.*|RECURSE
FileKey6=%AppData%\Adobe\CRLogs|*.*|RECURSE
FileKey7=%AppData%\Adobe\dynamiclinkmanager\*\logs|*.*|RECURSE
FileKey8=%AppData%\Adobe\Extension Manager CC\Log|*.*|RECURSE
FileKey9=%AppData%\Adobe\Extension Manager CC\Temp|*.*|RECURSE
FileKey10=%AppData%\Adobe\LogTransport2CC\Logs|*.*|RECURSE
FileKey11=%AppData%\Adobe\Lumetri\*\logs|*.*|RECURSE
FileKey12=%AppData%\Adobe\Premiere Pro\*|Plugin Loading.log
FileKey13=%AppData%\Adobe\Premiere Pro\*\logs|*.*|RECURSE
FileKey14=%CommonProgramFiles%\Adobe\Installers|CoreSyncInstall.log;Install.log
FileKey15=%Documents%\Adobe|*.log
FileKey16=%Documents%\Adobe\Adobe Media Encoder\*|AMEEncodingErrorLog.txt;AMEEncodingLog.txt
FileKey17=%Documents%\Adobe\Adobe Media Encoder\*\logs|*.*|RECURSE
FileKey18=%Documents%\Adobe\Premiere Pro\*|Plugin Loading.log
RegKey1=HKCU\Software\Adobe\MediaBrowser\MRU
[Adobe Creative Cloud Experience *]
LangSecRef=3023
DetectFile=%ProgramFiles%\Adobe\Adobe Creative Cloud Experience
FileKey1=%CommonProgramFiles%\Adobe\Creative Cloud Libraries|*.log|RECURSE
FileKey2=%ProgramFiles%\Adobe\Adobe Creative Cloud Experience\js\node_modules\table-parser\test\output|*.log
[Adobe Customization Wizard *]
LangSecRef=3021
Detect1=HKCU\Software\Adobe\Adobe Customization Wizard 8
Detect2=HKCU\Software\Adobe\Adobe Customization Wizard 9
Detect3=HKCU\Software\Adobe\Adobe Customization Wizard X
Detect4=HKCU\Software\Adobe\Adobe Customization Wizard XI
RegKey1=HKCU\Software\Adobe\Adobe Customization Wizard 8\Recent File List
RegKey2=HKCU\Software\Adobe\Adobe Customization Wizard 9\Recent File List
RegKey3=HKCU\Software\Adobe\Adobe Customization Wizard X\Recent File List
RegKey4=HKCU\Software\Adobe\Adobe Customization Wizard XI\Recent File List
[Adobe Elements Organizer *]
LangSecRef=3023
Detect=HKCU\Software\Adobe\Elements Organizer
FileKey1=%AppData%\Adobe\amecommand\6.0|Plugin Loading.log
FileKey2=%AppData%\Adobe\CRLogs|*.*|RECURSE
FileKey3=%AppData%\Adobe\Elements Organizer\*|CAHeadlessPlugin Loading.log
FileKey4=%AppData%\Adobe\Elements Organizer\*\Organizer|*.txt;status.dat
FileKey5=%AppData%\Adobe\Elements Smart Tag Agent\*\Logs|*.log
FileKey6=%AppData%\Adobe\LogTransport2\Logs|*.*|RECURSE
FileKey7=%CommonAppData%|StreamingMediaTechnologyLog.txt
FileKey8=%CommonAppData%\Adobe\Elements Organizer\Catalogs\My Catalog|face.thumb.9.cache;thumb.5.cache
FileKey9=%CommonAppData%\Adobe\Elements Organizer\Catalogs\My Catalog\FaceAnalysis|FaceAnalysis.cache
FileKey10=%CommonAppData%\Adobe\Elements Organizer\Catalogs\My Catalog\WaldoData|waldo.cache
FileKey11=%CommonAppData%\Adobe\Elements Organizer\Catalogs\My Catalog\Watch Folder|*.txt;*.xml
RegKey1=HKCU\Software\Adobe\Elements Organizer\11.0\CurrentMediaFilePath
RegKey2=HKCU\Software\Adobe\Elements Organizer\13.0\CurrentMediaFilePath
RegKey3=HKCU\Software\Adobe\Elements Organizer\14.0\CurrentMediaFilePath
RegKey4=HKCU\Software\Adobe\Elements Organizer\15.0\CurrentMediaFilePath
RegKey5=HKCU\Software\Adobe\Elements Organizer\16.0\CurrentMediaFilePath
RegKey6=HKCU\Software\Adobe\Elements Organizer\17.0\CurrentMediaFilePath
[Adobe Flash Player *]
LangSecRef=3023
Detect=HKCU\Software\Macromedia\FlashPlayer
DetectFile=%AppData%\Adobe\Flash Player
FileKey1=%AppData%\Adobe\Flash Player\*Cache|*.*|RECURSE
FileKey2=%WinDir%\System32\Macromed\Flash|FlashInstall*.log;install.log
FileKey3=%WinDir%\SysWOW64\Macromed\Flash|FlashInstall*.log;install.log
[Adobe Media Cache *]
LangSecRef=3023
DetectFile=%AppData%\Adobe\Common\Media Cache
Warning=Do not use this until all your Premiere projects have been completed.
FileKey1=%AppData%\Adobe\Common\* Cache*|*.*|RECURSE
FileKey2=%AppData%\Adobe\Common\Peak Files|*.*|RECURSE
[Adobe Photoshop Elements *]
LangSecRef=3023
Detect=HKCU\Software\Adobe\Photoshop Elements
FileKey1=%AppData%\Adobe\LogTransport2\Logs|*.*|RECURSE
FileKey2=%AppData%\Adobe\Photoshop Elements\*\Editor|*.txt
FileKey3=%CommonAppData%\Adobe\Photoshop Elements\File Agent|WatchFolder.3.cache
RegKey1=HKCU\Software\Adobe\Photoshop Elements\11.0\common\settings\Elements MRU
RegKey2=HKCU\Software\Adobe\Photoshop Elements\11.0\CurrentMediaFilePath
RegKey3=HKCU\Software\Adobe\Photoshop Elements\11.0\VisitedDirs|STARTUPIMAGEDIRECTORY
RegKey4=HKCU\Software\Adobe\Photoshop Elements\13.0\common\settings\Elements MRU
RegKey5=HKCU\Software\Adobe\Photoshop Elements\13.0\CurrentMediaFilePath
RegKey6=HKCU\Software\Adobe\Photoshop Elements\13.0\VisitedDirs|STARTUPIMAGEDIRECTORY
RegKey7=HKCU\Software\Adobe\Photoshop Elements\14.0\common\settings\Elements MRU
RegKey8=HKCU\Software\Adobe\Photoshop Elements\14.0\CurrentMediaFilePath
RegKey9=HKCU\Software\Adobe\Photoshop Elements\14.0\VisitedDirs|STARTUPIMAGEDIRECTORY
RegKey10=HKCU\Software\Adobe\Photoshop Elements\15.0\common\settings\Elements MRU
RegKey11=HKCU\Software\Adobe\Photoshop Elements\15.0\CurrentMediaFilePath
RegKey12=HKCU\Software\Adobe\Photoshop Elements\15.0\VisitedDirs|STARTUPIMAGEDIRECTORY
RegKey13=HKCU\Software\Adobe\Photoshop Elements\16.0\common\settings\Elements MRU
RegKey14=HKCU\Software\Adobe\Photoshop Elements\16.0\CurrentMediaFilePath
RegKey15=HKCU\Software\Adobe\Photoshop Elements\16.0\VisitedDirs|STARTUPIMAGEDIRECTORY
RegKey16=HKCU\Software\Adobe\Photoshop Elements\17.0\common\settings\Elements MRU
RegKey17=HKCU\Software\Adobe\Photoshop Elements\17.0\CurrentMediaFilePath
RegKey18=HKCU\Software\Adobe\Photoshop Elements\17.0\VisitedDirs|STARTUPIMAGEDIRECTORY
[Adobe Premiere Elements *]
LangSecRef=3023
Detect=HKCU\Software\Adobe\Premiere Elements
FileKey1=%AppData%\Adobe\Common\Thumbnail Cache|thumbnailDB
FileKey2=%AppData%\Adobe\LogTransport2\Logs|*.*|RECURSE
FileKey3=%AppData%\Adobe\Premiere Elements\*|Plugin Loading.log
FileKey4=%AppData%\Adobe\Premiere Elements\*\logs|*.*|RECURSE
FileKey5=%Documents%\Adobe\Premiere Elements\*|*.log
FileKey6=%Documents%\NewBlueFX\Logs|*.txt
RegKey1=HKCU\Software\Adobe\Premiere Elements\11.0\MRUDocuments
RegKey2=HKCU\Software\Adobe\Premiere Elements\13.0\MRUDocuments
RegKey3=HKCU\Software\Adobe\Premiere Elements\14.0\MRUDocuments
RegKey4=HKCU\Software\Adobe\Premiere Elements\15.0\MRUDocuments
RegKey5=HKCU\Software\Adobe\Premiere Elements\16.0\MRUDocuments
RegKey6=HKCU\Software\Adobe\Premiere Elements\17.0\MRUDocuments
[Adobe Reader 20XX *]
LangSecRef=3021
Detect1=HKCU\Software\Adobe\Acrobat Reader\2015
Detect2=HKCU\Software\Adobe\Acrobat Reader\2017
Detect3=HKCU\Software\Adobe\Acrobat Reader\2020
RegKey1=HKCU\Software\Adobe\Acrobat Reader\2015\AVGeneral\cRecentFiles
RegKey2=HKCU\Software\Adobe\Acrobat Reader\2015\AVGeneral\cRecentFolders
RegKey3=HKCU\Software\Adobe\Acrobat Reader\2017\AVGeneral\cRecentFiles
RegKey4=HKCU\Software\Adobe\Acrobat Reader\2017\AVGeneral\cRecentFolders
RegKey5=HKCU\Software\Adobe\Acrobat Reader\2020\AVGeneral\cRecentFiles
RegKey6=HKCU\Software\Adobe\Acrobat Reader\2020\AVGeneral\cRecentFolders
[Adobe Reader DC *]
LangSecRef=3021
Detect=HKLM\Software\Adobe\Acrobat Reader\DC
FileKey1=%AppData%\Adobe\Acrobat\DC\Security\CRLCache|*.*|RECURSE
FileKey2=%LocalAppData%\Adobe\Acrobat\DC|IconCacheRdr*.dat;UserCache.bin
FileKey3=%LocalAppData%\Adobe\Acrobat\DC\ToolsSearchCacheRdr|*.*|RECURSE
FileKey4=%LocalLowAppData%\Adobe\Acrobat\DC|ReaderMessages
FileKey5=%LocalLowAppData%\Adobe\Acrobat\DC\ConnectorIcons|*.*|RECURSE
FileKey6=%LocalLowAppData%\Adobe\AcroCef\DC\Acrobat\Cache|*.*|RECURSE
RegKey1=HKCU\Software\Adobe\Acrobat Reader\DC\AVConnector\cIconCache
RegKey2=HKCU\Software\Adobe\Acrobat Reader\DC\AVConversionFromPDF
RegKey3=HKCU\Software\Adobe\Acrobat Reader\DC\AVConversionToPDF
RegKey4=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral|iNumOfAVDocsOpened
RegKey5=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral|iNumReaderLaunches
RegKey6=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral\cDockables
RegKey7=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral\cRecentToolsList
RegKey8=HKCU\Software\Adobe\Acrobat Reader\DC\AVGeneral\cToolbars
RegKey9=HKCU\Software\Adobe\Acrobat Reader\DC\RememberedViews\cNoCategoryFiles
RegKey10=HKCU\Software\Adobe\Acrobat Reader\DC\SessionManagement\cWindowsCurrent
RegKey11=HKCU\Software\Adobe\Acrobat Reader\DC\SessionManagement\cWindowsPrev
RegKey12=HKCU\Software\Adobe\Acrobat Reader\DC\ShareIdentity
RegKey13=HKCU\Software\Adobe\Adobe Synchronizer\DC
[Adobe Reader Touch *]
LangSecRef=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\AdobeSystemsIncorporated.AdobeReader_ynb6jyjzte8ga
FileKey1=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\INet*|*.*|RECURSE
RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\AdobeSystemsIncorporated.AdobeReader_ynb6jyjzte8ga\PersistedStorageItemTable\MostRecentlyUsed
[Adobe Reader XI *]
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\11.0
RegKey1=HKCU\Software\Adobe\Acrobat Reader\11.0\AVConversionFromPDF
RegKey2=HKCU\Software\Adobe\Acrobat Reader\11.0\AVConversionToPDF
RegKey3=HKCU\Software\Adobe\Acrobat Reader\11.0\AVGeneral\cDockables
RegKey4=HKCU\Software\Adobe\Acrobat Reader\11.0\AVGeneral\cRecentFolders
RegKey5=HKCU\Software\Adobe\Acrobat Reader\11.0\AVGeneral\cToolbars
RegKey6=HKCU\Software\Adobe\Acrobat Reader\11.0\RememberedViews\cNoCategoryFiles
RegKey7=HKCU\Software\Adobe\Adobe Synchronizer\11.0
[Advanced Browser *]
LangSecRef=3022
DetectFile=%AppData%\Advanced Browser
FileKey1=%AppData%\Advanced Browser|keywords.dat;pages.dat;recents.dat
[Advanced CSV Converter *]
LangSecRef=3024
Detect=HKCU\Software\csvconverter
RegKey1=HKCU\Software\csvconverter|EXPORTPATH
RegKey2=HKCU\Software\csvconverter|LASTEXPORT
RegKey3=HKCU\Software\csvconverter|LASTSRC
RegKey4=HKCU\Software\csvconverter|SRCPATH
[Advanced Registry Doctor *]
LangSecRef=3021
Detect=HKLM\Software\Elcor Software\Advanced Registry Doctor
DetectFile=%ProgramFiles%\Advanced Registry Doctor\AdvRegDocPro.exe
FileKey1=%ProgramFiles%\Advanced Registry Doctor|*.log;*.tmp
FileKey2=%ProgramFiles%\Advanced Registry Doctor\Undo|history_*.dat
[Advanced Renamer 3 *]
LangSecRef=3024
DetectFile=%AppData%\Hulubulu\Advanced Renamer 3
FileKey1=%AppData%\Hulubulu\Advanced Renamer 3\Data\UndoLists|*.*
[Advanced System Optimizer 3 *]
LangSecRef=3024
Detect=HKLM\Software\Systweak\ASO3
DetectFile=%ProgramFiles%\Advanced System Optimizer 3\ASO3.exe
FileKey1=%AppData%\Systweak\ASO3\Driver Updater|*.log
FileKey2=%AppData%\Systweak\ASO3\Registry Cleaner|*.log
[Advanced System Protector *]
LangSecRef=3024
Detect=HKCU\Software\Systweak\Advanced System Protector
DetectFile=%ProgramFiles%\Advanced System Protector\AdvancedSystemProtector.exe
FileKey1=%AppData%\Systweak\Advanced System Protector|*log.txt;*.log|RECURSE
FileKey2=%AppData%\Systweak\Advanced System Protector\Logs|*.xml
[Advanced Uninstaller *]
LangSecRef=3024
Detect1=HKCU\Software\Innovative Solutions\Advanced Uninstaller PRO\9
Detect2=HKCU\Software\Innovative Solutions\Advanced Uninstaller PRO\10
RegKey1=HKCU\Software\Innovative Solutions\Advanced Uninstaller PRO\9\compress|listHistoryText
RegKey2=HKCU\Software\Innovative Solutions\Advanced Uninstaller PRO\10\compress|listHistoryText
[Advanced XLS Converter *]
LangSecRef=3024
Detect=HKCU\Software\xlsconverter
RegKey1=HKCU\Software\xlsconverter|EXPORTPATH
RegKey2=HKCU\Software\xlsconverter|LASTEXPORT
RegKey3=HKCU\Software\xlsconverter|LASTSRC
RegKey4=HKCU\Software\xlsconverter|RECENTS
RegKey5=HKCU\Software\xlsconverter|SRCPATH
[Adware-Removal-Tool *]
LangSecRef=3024
DetectFile=%ProgramFiles%\Adware-Removal-Tool\ARTP*.exe
FileKey1=%ProgramFiles%\Adware-Removal-Tool\Quarantine|*.*|RECURSE
FileKey2=%ProgramFiles%\Adware-Removal-Tool\Reports|*.txt
FileKey3=%ProgramFiles%\Adware-Removal-Tool\scanlogs|*.txt
[AdwCleaner *]
LangSecRef=3024
Detect=HKLM\Software\AdwCleaner
DetectFile=%SystemDrive%\AdwCleaner
FileKey1=%SystemDrive%|AdwCleaner*.txt
FileKey2=%SystemDrive%\AdwCleaner|*.txt|RECURSE
FileKey3=%SystemDrive%\AdwCleaner\Logs|*.log
RegKey1=HKLM\Software\AdwCleaner|DeleteCount
RegKey2=HKLM\Software\AdwCleaner|SearchCount
RegKey3=HKLM\Software\Wow6432Node\AdwCleaner|DeleteCount
RegKey4=HKLM\Software\Wow6432Node\AdwCleaner|SearchCount
[Aegisub *]
LangSecRef=3023
Detect=HKLM\Software\Aegisub
FileKey1=%AppData%\Aegisub|mru.json
FileKey2=%AppData%\Aegisub\crashdumps|*.*|REMOVESELF
FileKey3=%AppData%\Aegisub\log|*.*|REMOVESELF
FileKey4=%AppData%\Aegisub\recovered|*.*|REMOVESELF
FileKey5=%LocalAppData%\Aegisub\ffms2cache|*.*|REMOVESELF
FileKey6=%ProgramFiles%\Aegisub|*.txt
[Aegisub Backups *]
LangSecRef=3023
Detect=HKLM\Software\Aegisub
Warning=Aegisub automatically saves a backup copy of each script you open. This will delete them.
FileKey1=%AppData%\Aegisub\autoback|*.*|REMOVESELF
FileKey2=%AppData%\Aegisub\autosave|*.*|REMOVESELF
[Age of Conan *]
Section=Games
Detect=HKLM\Software\Funcom\Age of Conan
FileKey1=%ProgramFiles%\Funcom\Age of Conan|patcher.log;chrome_debug.log;MiniDump.dmp;CrashLog.txt;ConanPatcher.exe.0.tmp;AgeOfConan.log
FileKey2=%ProgramFiles%\Funcom\Age of Conan\OldLogs|*.*
[Age of Empires *]
Section=Games
Detect1=HKLM\Software\Microsoft\Games\Age of Empires
Detect2=HKLM\Software\Microsoft\Microsoft Games\Age of Empires
Detect3=HKLM\Software\Microsoft\microsoft games\age of empires 3
FileKey1=%Documents%\My Games\Age of Empires 3|*.txt
FileKey2=%Documents%\My Games\Age of Empires 3\RM|*.dmp.txt
FileKey3=%Documents%\My Games\Age of Mythology|*.txt
RegKey1=HKLM\Software\Microsoft\Games\Age of Empires\1.00|Zone
RegKey2=HKLM\Software\Microsoft\Microsoft Games\Age of Empires|Zone
RegKey3=HKLM\Software\Microsoft\Microsoft Games\Age of Empires Expansion\1.0|Zone
RegKey4=HKLM\Software\Microsoft\Microsoft Games\Age of Empires II: The Conquerors Expansion\1.0|Zone
RegKey5=HKLM\Software\Microsoft\Microsoft Games\Age of Empires\2.0|Zone
[Age of Empires Online *]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\105430
FileKey1=%ProgramFiles%\Steam\steamapps\common\Age Of Empires Online|PatchLog.txt;PatchLogDetail.txt
[Age of Oracles: Tara's Journey *]
Section=Games
DetectFile=%CommonAppData%\JollyBear\Age of Oracles Taras Journey
FileKey1=%CommonAppData%\JollyBear\Age of Oracles Taras Journey|error.*
[Age of Wonders II *]
Section=Games
DetectFile=%ProgramFiles%\Age of Wonders II
FileKey1=%ProgramFiles%\Age of Wonders II|*aow2Log.txt
FileKey2=%ProgramFiles%\Age of Wonders II\Resource\FX\Spell|*.lnk
[Age of Wonders: Shadow Magic *]
Section=Games
DetectFile=%ProgramFiles%\Age of Wonders II
FileKey1=%ProgramFiles%\Age of Wonders Shadow Magic|*aowsmLog.txt
FileKey2=%ProgramFiles%\Age of Wonders Shadow Magic\Resource\Maps|*.bak
[Agnitum Outpost Firewall Pro *]
LangSecRef=3022
Detect1=HKCU\Software\Agnitum\Outpost Firewall Pro
Detect2=HKLM\Software\Agnitum\Outpost Firewall
FileKey1=%CommonAppData%\Agnitum\Security Suite\Feedback\Logs|*.*
FileKey2=%ProgramFiles%\Agnitum\Outpost Firewall|op_data.mdb
FileKey3=%ProgramFiles%\Agnitum\Outpost Firewall Pro\log|*.*
RegKey1=HKCU\Software\Agnitum\Outpost Firewall Pro\Recent File List
[Agnitum Outpost Security Suite *]
LangSecRef=3021
Detect=HKLM\Software\Agnitum\Security Suite
FileKey1=%ProgramFiles%\Agnitum\Outpost Security Suite Pro\log|*.log
[Agomo *]
LangSecRef=3024
DetectFile=%CommonAppData%\Piriform\Agomo
FileKey1=%CommonAppData%\Piriform\Agomo\Logs|*.*
FileKey2=%ProgramFiles%\Agomo\Logs|*.*
FileKey3=%ProgramFiles%\Agomo\tmp_update|*.*
[AHA Dialer *]
LangSecRef=3022
Detect=HKLM\System\CurrentControlSet\Services\HWDeviceService.exe
DetectFile=%CommonAppData%\DatacardService\DataCardMonitor.exe
FileKey1=%CommonAppData%\DatacardService\log|*.*
[AI Roboform *]
LangSecRef=3022
Detect=HKCU\Software\Siber Systems
FileKey1=%AppData%\RoboForm\_*mirrors_|*.*|RECURSE
FileKey2=%Documents%\My RoboForm Data|mru.rfo;cache.rfo|RECURSE
FileKey3=%Documents%\My RoboForm Data\_gsdata_|*.log;*.gss;*.gsl|RECURSE
RegKey1=HKCU\Software\Siber Systems|_InstallerDir
RegKey2=HKCU\Software\Siber Systems\RoboForm\Query-MRU
[AIDA64 *]
LangSecRef=3021
Detect=HKCU\Software\FinalWire\AIDA64
FileKey1=%Documents%\AIDA64 Reports|*.*|REMOVESELF
[Aignes Website-Watcher *]
LangSecRef=3023
Detect=HKCU\Software\aignes\wswatch
FileKey1=%AppData%\aignes\WebSite-Watcher\config\favicons|*.*
FileKey2=%AppData%\aignes\website-watcher\config\log|*.*
FileKey3=%AppData%\aignes\WebSite-Watcher\config\settings|*.cfg_bak*
FileKey4=%AppData%\aignes\website-watcher\config\temp|*.*
[Aignes Website-Watcher AutoBackups *]
LangSecRef=3023
Detect=HKCU\Software\aignes\wswatch
Warning=This will delete your AutoBackup of your site.
FileKey1=%AppData%\aignes\website-watcher\config\autobackup|*.*
[Aignes Website-Watcher Bookmarks *]
LangSecRef=3023
Detect=HKCU\Software\aignes\wswatch
FileKey1=%AppData%\aignes\website-watcher\bookmarks|*.*
[Aimersoft DRM Media Converter *]
LangSecRef=3023
Detect=HKLM\Software\Aimersoft\351
FileKey1=%ProgramFiles%\Aimersoft\DRM Media Converter\Log|*.*|REMOVESELF
[Aimersoft Helper Compact *]
LangSecRef=3023
Detect=HKLM\Software\Aimersoft\Aimersoft Helper Compact
FileKey1=%CommonProgramFiles%\Aimersoft\Aimersoft Helper Compact|ProductUpdateLists.xml;ASHelper.exe_temp;ASHelperSetup.exe_temp
FileKey2=%CommonProgramFiles%\Aimersoft\Aimersoft Helper Compact\DATADICT|*.*|RECURSE
FileKey3=%CommonProgramFiles%\Aimersoft\Aimersoft Helper Compact\Log|*.*|RECURSE
FileKey4=%CommonProgramFiles%\Aimersoft\Aimersoft Helper Compact\Temp|*.*|RECURSE
[Aimersoft Video Converter *]
LangSecRef=3023
Detect1=HKLM\Software\Aimersoft\Aimersoft Video Converter
Detect2=HKLM\Software\Aimersoft\Aimersoft Video Converter Ultimate
FileKey1=%CommonAppData%\Aimersoft\ProductFeatures\*Logs|*.*|RECURSE
FileKey2=%CommonAppData%\Aimersoft\RemoteLogs\*Logs|*.*|RECURSE
FileKey3=%Documents%\Aimersoft MediaServer\log|*.*|RECURSE
FileKey4=%ProgramFiles%\Aimersoft\Video Converter*\TempThumbDir|*.*|RECURSE
FileKey5=%Public%\Documents\Aimersoft|*.*|REMOVESELF
[Aimersoft Video Editor *]
LangSecRef=3023
Detect=HKLM\Software\Aimersoft\Aimersoft Video Editor
FileKey1=%CommonAppData%\Aimersoft\ProductFeatures\*Logs|*.*|RECURSE
FileKey2=%CommonAppData%\Aimersoft\RemoteLogs\*Logs|*.*|RECURSE
FileKey3=%ProgramFiles%\Aimersoft\Video Editor\log|*.*|RECURSE
FileKey4=%Public%\Documents\Aimersoft|*.*|REMOVESELF
[AIMP *]
LangSecRef=3023
DetectFile1=%ProgramFiles%\AIMP Classic\cAIMP.exe
DetectFile2=%ProgramFiles%\AIMP\AIMP.exe
DetectFile3=%ProgramFiles%\AIMP2\AIMP2.exe
FileKey1=%AppData%\AIMP|*.bak
FileKey2=%ProgramFiles%\AIMP*\!Backup|*.*|REMOVESELF
FileKey3=%ProgramFiles%\AIMP*\Data|*.bak|RECURSE
[AirBuccaneers *]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\223630
FileKey1=%ProgramFiles%\Steam\Steamapps\common\AirBuccaneers\abu_data|output_log.txt
FileKey2=%ProgramFiles%\Steam\Steamapps\common\AirBuccaneers\logs|*.*
[AirDC++ *]
LangSecRef=3022
DetectFile=%ProgramFiles%\AirDC++\AirDC.exe
FileKey1=%AppData%\AirDC++|Recents.xml
FileKey2=%AppData%\AirDC++\FileLists|*.*
FileKey3=%AppData%\AirDC++\Logs|*.*
FileKey4=%LocalAppData%\AirDC++|Recents.xml
FileKey5=%LocalAppData%\AirDC++\FileLists|*.*
FileKey6=%LocalAppData%\AirDC++\Logs|*.*
FileKey7=%ProgramFiles%\AirDC++\Logs|*.*
FileKey8=%ProgramFiles%\AirDC++\Settings|Recents.xml
FileKey9=%ProgramFiles%\AirDC++\Settings\FileLists|*.*
FileKey10=%ProgramFiles%\AirDC++\Settings\Logs|*.*
[AirPcap *]
LangSecRef=3021
DetectFile=%ProgramFiles%\Riverbed\AirPcap\driver
FileKey1=%ProgramFiles%\Riverbed\AirPcap\driver|*.log
[AirStrike 3D *]
Section=Games
DetectFile=%ProgramFiles%\Blimb Entertainment\AIRSTRIKE3D
FileKey1=%ProgramFiles%\Blimb Entertainment\AIRSTRIKE3D|*.log
[Aiseesoft Media Converter Ultimate *]
LangSecRef=3023
Detect=HKCU\Software\Aiseesoft Studio\Aiseesoft Media Converter Ultimate
FileKey1=%LocalAppData%\Aiseesoft Studio\Aiseesoft Media Converter Ultimate|*.txt
RegKey1=HKCU\Software\Aiseesoft Studio\Aiseesoft Media Converter Ultimate\Edit|LastVideoFilePath
[Alarms & Clock *]
DetectOS=10.0|
LangSecRef=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.WindowsAlarms_8wekyb3d8bbwe
FileKey1=%LocalAppData%\Packages\Microsoft.WindowsAlarms_*\AC\INet*|*.*|RECURSE
FileKey2=%LocalAppData%\Packages\Microsoft.WindowsAlarms_*\AC\Temp|*.*|RECURSE
FileKey3=%LocalAppData%\Packages\Microsoft.WindowsAlarms_*\LocalCache|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.WindowsAlarms_*\LocalState|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.WindowsAlarms_*\TempState|*.*|RECURSE
[AlbumPlayer *]
LangSecRef=3023
DetectFile=%AppData%\AlbumPlayer
FileKey1=%SystemDrive%\AlbumPlayerData\Logging|*.*|RECURSE
[AlbumPlayer Cache *]
LangSecRef=3023
DetectFile=%AppData%\AlbumPlayer
FileKey1=%SystemDrive%\AlbumPlayerData\Cache|*.*|RECURSE
[Alchemy Mindworks GIF Construction Set *]
LangSecRef=3023
DetectFile=%AppData%\Alchemy Mindworks\GIF Construction Set Professional*
FileKey1=%AppData%\Alchemy Mindworks\GIF Construction Set Professional*|FileMenuHistory.txt
FileKey2=%AppData%\Alchemy Mindworks\GIF Construction Set Professional*\temp|*.*
FileKey3=%AppData%\Alchemy Mindworks\Up To Date\temp|*.*
[Alcohol 52% *]
LangSecRef=3023
Detect=HKCU\Software\Alcohol Soft
RegKey1=HKCU\Software\Alcohol Soft\Alcohol 52%\Basic|Image File Path
RegKey2=HKCU\Software\Alcohol Soft\Alcohol 52%\Images
RegKey3=HKCU\Software\Alcohol Soft\Alcohol 52%\Options\Image Making Wizard|ImageName
[Algorius Net Viewer *]
LangSecRef=3022
Detect=HKLM\Software\Algorius Software\Algorius Net Viewer
FileKey1=%AppData%\Algorius Software\Algorius Net Viewer*\install|*.*|REMOVESELF
FileKey2=%LocalAppData%\Algorius\Algorius Net Viewer|*.log;Log.db*
[Alibaba *]
LangSecRef=3021
DetectFile=%LocalAppData%\Alibaba\AliSetup
FileKey1=%LocalAppData%\Alibaba\AliSetup\*|*.log
[Alien Swarm *]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\630
FileKey1=%ProgramFiles%\Steam\steamapps\common\alien swarm\swarm|tilegen_log.txt
[Aliens: Colonial Marines *]
Section=Games
Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Aliens: Colonial Marines_is1
FileKey1=%Documents%\My Games\Aliens Colonial Marines\PecanGame\Logs|*.*
[All in One Runtimes *]
LangSecRef=3024
DetectFile1=%SystemDrive%\AiO-Files
DetectFile2=%SystemDrive%\AiOLog.txt
FileKey1=%SystemDrive%|AiOLog.txt
FileKey2=%SystemDrive%\AiO-Files|*.*|RECURSE
[All Office Converter *]
LangSecRef=3021
DetectFile=%ProgramFiles%\All Office Converter Platinum
FileKey1=%ProgramFiles%\All Office Converter Platinum|Eventlog.txt
[All Zombies Must Die! *]
Section=Games
Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\All Zombies Must Die!_is1
FileKey1=%Documents%\My Games\UnrealEngine3\Bzb2Game\Logs|*.*
[All Zombies Must Die! Installers *]
Section=Games
Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\All Zombies Must Die!_is1
FileKey1=%ProgramFiles%\Doublesix Games\All Zombies Must Die!\Prerequisites|*.*|REMOVESELF
[AllDup *]
LangSecRef=3024
DetectFile=%AppData%\AllDup
FileKey1=%AppData%\AllDup|*.log
[Alternate File Shredder *]
LangSecRef=3024
Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Alternate File Shredder_is1
FileKey1=%AppData%\Alternate\FileShredder|FileShredderLog*.txt
[Always Right Backups *]
LangSecRef=3024
Detect=HKCU\Software\AlwaysRight
FileKey1=%ProgramFiles%\Superhunter\Always Right\*Backup|*.*
[Alwin 6 *]
LangSecRef=3023
DetectFile=%SystemDrive%\alwin6
FileKey1=%SystemDrive%\alwin6\postgresql\9.0\data\pg_log|*.*
[AM-DeadLink *]
LangSecRef=3022
Detect=HKCU\Software\aignes\deadlink
FileKey1=%AppData%\aignes\AM-DeadLink|deadlink.log
[Amaya *]
LangSecRef=3022
DetectFile=%UserProfile%\amaya
FileKey1=%UserProfile%\amaya|list_url_utf8.dat
FileKey2=%UserProfile%\amaya\*|*.*|REMOVESELF
[Amazing World *]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\293500
FileKey1=%ProgramFiles%\Steam\SteamApps\common\Amazing World\AmazingWorld_Data|output_log.txt
FileKey2=%ProgramFiles%\Steam\SteamApps\Common\Amazing World\Cache|*.*|REMOVESELF
[Amazon Cloud Player *]
LangSecRef=3024
DetectFile=%LocalAppData%\Amazon Cloud Player
FileKey1=%LocalAppData%\Amazon Cloud Player\Logs|*.*
[Amazon Downloader *]
LangSecRef=3024
DetectFile=%Documents%\Amazon Downloader Logs
FileKey1=%Documents%\Amazon Downloader Logs|*.*|RECURSE
[Amazon Kindle for PC Session *]
LangSecRef=3023
Detect=HKCU\Software\Amazon\Kindle
RegKey1=HKCU\Software\Amazon\Kindle\User Settings|last_getitems_date
RegKey2=HKCU\Software\Amazon\Kindle\User Settings|last_syncmetadata_date
RegKey3=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate0
RegKey4=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate1
RegKey5=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate2
RegKey6=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate3
RegKey7=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate4
RegKey8=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate5
RegKey9=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate6
RegKey10=HKCU\Software\Amazon\Kindle\User Settings|LastSyncDate7
RegKey11=HKCU\Software\Amazon\Kindle\User Settings|OpenBook
[Amazon MP3 Downloader *]
LangSecRef=3023
Detect1=HKCR\Amazon.AmazonMP3DownloaderPlugin
Detect2=HKCR\Software\Amazon\MP3 Downloader
FileKey1=%Documents%\Amazon MP3\Logs|*.*|REMOVESELF
FileKey2=%LocalAppData%\Program Files\Amazon\MP3 Downloader|InstallerLog.txt
[Amazon Music *]
LangSecRef=3023
Detect=HKCU\Software\Amazon\Amazon Music
FileKey1=%LocalAppData%\Amazon Music\crash dumps|*.*
FileKey2=%LocalAppData%\Amazon Music\data\app cache|*-journal;ChromeDWriteFontCache;data_*;f_*;index
FileKey3=%LocalAppData%\Amazon Music\data\app cache\application cache|*.*|RECURSE
FileKey4=%LocalAppData%\Amazon Music\data\app cache\gpucache|*.*
FileKey5=%LocalAppData%\Amazon Music\data\artwork cache|*.jpg;*.png
FileKey6=%LocalAppData%\Amazon Music\data\artwork cache\tmp|*.jpeg
FileKey7=%LocalAppData%\Amazon Music\data\hammer cache|*.*
FileKey8=%LocalAppData%\Amazon Music\data\streaming cache|cache.ini;*.stream
[AMD/ATI *]
LangSecRef=3024
Detect1=HKLM\Software\AMD
Detect2=HKLM\Software\ATI
Detect3=HKLM\Software\ATI Technologies
DetectFile=%ProgramFiles%\ATI Technologies\ATI.ACE
FileKey1=%CommonAppData%\AMD\Fuel|*.txt
FileKey2=%CommonAppData%\AMD\KDB|*.log
FileKey3=%LocalAppData%\AMD\*Cache|*.*|RECURSE
FileKey4=%LocalAppData%\AMD\Fuel|ClientProxyLog*.*
FileKey5=%LocalAppData%\ATI\ACE|*.txt
FileKey6=%LocalAppData%\Packages\*\AC\*\AMD\DxCache|*.*
FileKey7=%LocalAppData%\Packages\*\AC\AMD\DxCache|*.*
FileKey8=%LocalLowAppData%\AMD\DxCache|*.*
FileKey9=%ProgramFiles%\AMD\amdkmpfd|*.*|REMOVESELF
FileKey10=%ProgramFiles%\AMD\CIM\Log|*.log;*.txt
FileKey11=%ProgramFiles%\AMD\CIM\Reports|*.xml;*.xsl
FileKey12=%ProgramFiles%\AMD\OverDrive|*.log
FileKey13=%ProgramFiles%\ATI Technologies|*.log|RECURSE
FileKey14=%ProgramFiles%\ATI Technologies|cccutil64.txt
FileKey15=%ProgramFiles%\ATI\CIM\Reports|*.*
FileKey16=%SystemDrive%\AMD|*.*|REMOVESELF
FileKey17=%SystemDrive%\ATI|*.*|REMOVESELF
FileKey18=%UserProfile%|AMD_Chipset_Drivers.log;ChipsetExtraction.log;Device_ID.log
FileKey19=%WinDir%\System32|CCCInstall*.log
FileKey20=%WinDir%\SysWOW64|CCCInstall*.log
[America's Army 2 *]
Section=Games
DetectFile=%ProgramFiles%\USArmy\America's Army 2
FileKey1=%LocalAppData%\AA2DeployClient|debug*.*
FileKey2=%ProgramFiles%\USArmy\America's Army 2|*.log|RECURSE
[AMID EVIL *]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\673130
FileKey1=%LocalAppData%\AmidEvil\Saved\Logs|*.*
[Amigabit Registry Cleaner *]
LangSecRef=3024
DetectFile=%ProgramFiles%\Amigabit\Registry Cleaner\RegistryCleaner.exe
FileKey1=%ProgramFiles%\Amigabit\Registry Cleaner\Purchase|*.*|REMOVESELF
FileKey2=%ProgramFiles%\Amigabit\Registry Cleaner\Update|update.log
[Amnesia: The Dark Descent *]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\57300
FileKey1=%Documents%\Amnesia|*.log|RECURSE
[AMP Font Viewer *]
LangSecRef=3024
Detect=HKCU\Software\AMP Soft\Font Viewer
RegKey1=HKCU\Software\AMP Soft\Font Viewer|Default copy folder
RegKey2=HKCU\Software\AMP Soft\Font Viewer|Last file operarion folder
RegKey3=HKCU\Software\AMP Soft\Font Viewer|Not installed tab path
[Amsn *]
LangSecRef=3022
Detect=HKCU\Software\aMSN
FileKey1=%ProgramFiles%\amsn\scripts\amsn_received|*.incomplete
FileKey2=%UserProfile%\amsn\*\FT\cache|*.*
FileKey3=%UserProfile%\amsn\*\logs\*|*.log
FileKey4=%UserProfile%\amsn\*\winks\cache\tmp|*.*
FileKey5=%UserProfile%\amsn\displaypic\cache|*.*
[AMYUNI PDF Converter *]
LangSecRef=3021
DetectFile=%CommonAppData%\Package Cache\3DBECED19CFC2819A7E0BE14463CF18FC8720D91\amyuni_pdfconverter_5_00
FileKey1=%CommonAppData%\Package Cache\3DBECED19CFC2819A7E0BE14463CF18FC8720D91\amyuni_pdfconverter_5_00|*.log|RECURSE
[And Yet It Moves *]
Section=Games
Detect=HKCU\Software\Valve\Steam\Apps\18700
FileKey1=%AppData%\Broken Rules\And Yet It Moves Steam|console.log
[Android Notifier Desktop *]
LangSecRef=3022
DetectFile=%UserProfile%\.android\android-notifier-desktop
FileKey1=%UserProfile%\.android\android-notifier-desktop|android-notifier-desktop.*
[Android SDK Tools *]