; CCleaner - Application Cleaning file

[Global]
Revision=2149
NextIDValue=2407

;
; WARNING - DO NOT EDIT THIS FILE
; If you would like to create custom entries then create a new file
; called winapp2.ini which follows the same format as this one.
; CCleaner will automatically pick up the new file.
;
; Copyright ?004-2015 Piriform Ltd, All Rights Reserved.
; This file and it's contents may not be copied or distributed
; without the express permission of the author.
;
; Notes
; ---------------------------------------
; LangSecRef
;  3021 = Applications
;  3022 = Internet
;  3023 = Multimedia
;  3024 = Utilities
;  3025 = Windows
;  3026 = Firefox/Mozilla
;  3027 = Opera
;  3028 = Safari
;  3029 = Google Chrome
;  3030 = Thunderbird
;  3031 = Windows Store

[Mozilla - Internet Cache]
ID=2001
LangSecRef=3026
LangRef=3161
Default=True
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_CACHE

[Mozilla - Internet History]
ID=2002
LangSecRef=3026
LangRef=3162
Default=True
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_HISTORY

[Mozilla - Download History]
ID=2003
LangSecRef=3026
LangRef=3163
Default=True
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_DOWNLOAD

[Mozilla - Cookies]
ID=2004
LangSecRef=3026
LangRef=3102
Default=True
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_COOKIES

[Mozilla - Saved Form Information]
ID=2005
LangSecRef=3026
LangRef=3164
Default=False
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_FORM

[Mozilla - Saved Passwords]
ID=2181
LangSecRef=3026
LangRef=3109
WarningRef=3202
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_PASSWORD

[Mozilla - Session]
ID=2153
LangSecRef=3026
LangRef=3167
Default=True
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_SESSION

[Mozilla - Site Preferences]
ID=2222
LangSecRef=3026
LangRef=3168
Default=False
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_SITE_PREFERENCES

[Mozilla - Compact Databases]
ID=2146
LangSecRef=3026
LangRef=3165
Default=False
SpecialDetect=DET_MOZILLA
SpecialKey1=N_MOZ_COMPACT_DATABASES

[Thunderbird - Internet Cache]
ID=2297
LangSecRef=3030
LangRef=3161
Default=True
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_CACHE

[Thunderbird - Internet History]
ID=2298
LangSecRef=3030
LangRef=3162
Default=True
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_HISTORY

[Thunderbird - Download History]
ID=2299
LangSecRef=3030
LangRef=3163
Default=True
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_DOWNLOAD

[Thunderbird - Cookies]
ID=2300
LangSecRef=3030
LangRef=3102
Default=True
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_COOKIES

[Thunderbird - Saved Form Information]
ID=2301
LangSecRef=3030
LangRef=3164
Default=False
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_FORM

[Thunderbird - Saved Passwords]
ID=2302
LangSecRef=3030
LangRef=3109
WarningRef=3202
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_PASSWORD

[Thunderbird - Session]
ID=2303
LangSecRef=3030
LangRef=3167
Default=True
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_SESSION

[Thunderbird - Site Preferences]
ID=2304
LangSecRef=3030
LangRef=3168
Default=False
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_SITE_PREFERENCES

[Thunderbird - Compact Databases]
ID=2305
LangSecRef=3030
LangRef=3165
Default=False
SpecialDetect=DET_THUNDERBIRD
SpecialKey1=N_THUNDERBIRD_COMPACT_DATABASES

[Opera - Internet Cache]
ID=2006
LangSecRef=3027
LangRef=3161
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_CACHE

[Opera - Internet History]
ID=2007
LangSecRef=3027
LangRef=3162
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_HISTORY

[Opera - Cookies]
ID=2008
LangSecRef=3027
LangRef=3102
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_COOKIES

[Opera - Download History]
ID=2342
LangSecRef=3027
LangRef=3163
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_DOWNLOAD

[Opera - Recently Typed URLs]
ID=2224
LangSecRef=3027
LangRef=3104
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_RECENTLY_TYPED_URLS

[Opera - Last Download Location]
ID=2223
LangSecRef=3027
LangRef=3108
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_LAST_DOWNLOAD_LOCATION

[Opera - Saved Passwords]
ID=2182
LangSecRef=3027
LangRef=3109
WarningRef=3202
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_PASSWORD

[Opera - Session]
ID=2225
LangSecRef=3027
LangRef=3167
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_SESSION

[Opera - Saved Form Information]
ID=2343
LangSecRef=3027
LangRef=3164
Default=False
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_FORM

[Opera - Website Icons]
ID=2149
LangSecRef=3027
LangRef=3166
Default=True
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_WEBSITE_ICONS

[Opera - Compact Databases]
ID=2344
LangSecRef=3027
LangRef=3165
Default=False
SpecialDetect=DET_OPERA
SpecialKey1=N_OPERA_COMPACT_DATABASES

[Safari - Internet Cache]
ID=2009
LangSecRef=3028
LangRef=3161
Default=True
DetectFile=%ProgramFiles%\Safari\Safari.exe
FileKey1=%localappdata%\Apple Computer\Safari|Cache.db

[Safari - Internet History]
ID=2010
LangSecRef=3028
LangRef=3162
Default=True
DetectFile=%ProgramFiles%\Safari\Safari.exe
FileKey1=%appdata%\Apple Computer\Safari|History.plist
FileKey2=%appdata%\Apple Computer\Safari|LastSession.plist
FileKey3=%appdata%\Apple Computer\Safari|TopSites.plist
FileKey4=%appdata%\Apple Computer\Safari|Downloads.plist
FileKey5=%localappdata%\Apple Computer\Safari\History|*.*
FileKey6=%localappdata%\Apple Computer\Safari\Webpage Previews|*.*|RECURSE
SpecialKey1=N_SAFARI_HISTORY

[Safari - Cookies]
ID=2011
LangSecRef=3028
LangRef=3102
Default=True
DetectFile=%ProgramFiles%\Safari\Safari.exe
SpecialKey1=N_SAFARI_COOKIES

[Safari - Saved Form Information]
ID=2012
LangSecRef=3028
LangRef=3164
Default=False
DetectFile=%ProgramFiles%\Safari\Safari.exe
FileKey1=%appdata%\Apple Computer\Safari|Form Values.plist

[Safari - Saved Passwords]
ID=2183
LangSecRef=3028
LangRef=3109
WarningRef=3202
SpecialDetect=DET_SAFARI_PASSWORD
SpecialKey1=N_SAFARI_PASSWORD

[Google Chrome - Internet Cache]
ID=2013
LangSecRef=3029
LangRef=3161
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_CACHE

[Google Chrome - Internet History]
ID=2014
LangSecRef=3029
LangRef=3162
Section = Chrome
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_HISTORY

[Google Chrome - Download History]
ID=2015
LangSecRef=3029
LangRef=3163
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_DOWNLOAD

[Google Chrome - Last Download Location]
ID=2345
LangSecRef=3029
LangRef=3108
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_LAST_DOWNLOAD_LOCATION

[Google Chrome - Cookies]
ID=2016
LangSecRef=3029
LangRef=3102
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_COOKIES

[Google Chrome - Saved Form Information]
ID=2017
LangSecRef=3029
LangRef=3164
Default=False
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_FORM

[Google Chrome - Saved Passwords]
ID=2184
LangSecRef=3029
LangRef=3109
WarningRef=3202
Default=False
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_PASSWORD

[Google Chrome - Session]
ID=2152
LangSecRef=3029
LangRef=3167
Default=True
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_SESSION

[Google Chrome - Compact Databases]
ID=2147
LangSecRef=3029
LangRef=3165
Default=False
SpecialDetect=DET_CHROME
SpecialKey1=N_CHROME_COMPACT_DATABASES

[Adobe Acrobat Reader 5.0]
ID=2018
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\5.0\AVGeneral\cRecentFiles
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\5.0\AVGeneral\cRecentFiles

[Adobe Acrobat Reader 6.0]
ID=2019
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\6.0\AVGeneral
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\6.0\AVGeneral\cRecentFiles

[Adobe Acrobat Reader 7.0]
ID=2020
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\7.0\AVGeneral
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\7.0\AVGeneral\cRecentFiles
FileKey1=%localappdata%\Adobe\Acrobat\7.0\Cache\Search70|*.*
FileKey2=%ProgramFiles%\Adobe\Acrobat 7.0\Reader|*.bak
FileKey3=%ProgramFiles%\Adobe\Acrobat 7.0\ActiveX|*.bak
FileKey4=%ProgramFiles%\Adobe\Acrobat 7.0\Reader\plug_ins|*.bak
FileKey5=%ProgramFiles%\Adobe\Acrobat 7.0\Reader\Updater|*.bak

[Adobe Reader 8.0]
ID=2021
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\8.0
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\8.0\AVGeneral\cRecentFiles
FileKey1=%localappdata%\Adobe\Acrobat\8.0\Cache\Search80|*.*

[Adobe Reader 9.0]
ID=2137
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\9.0
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\9.0\AVGeneral\cRecentFiles
FileKey1=%LocalAppData%\Adobe\Acrobat\9.0\Cache\Search|*.*
FileKey2=%LocalLowAppData%\Adobe\Acrobat\9.0\Search|*.*

[Adobe Reader 10.0]
ID=2176
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\10.0
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\10.0\AVGeneral\cRecentFiles
FileKey1=%LocalAppData%\Adobe\Acrobat\10.0\Cache\Search|*.*
FileKey2=%LocalLowAppData%\Adobe\Acrobat\10.0\Search|*.*

[Adobe Reader 11.0]
ID=2317
LangSecRef=3021
Detect=HKCU\Software\Adobe\Acrobat Reader\11.0
Default=True
RegKey1=HKCU\Software\Adobe\Acrobat Reader\11.0\AVGeneral\cRecentFiles
FileKey1=%LocalAppData%\Adobe\Acrobat\11.0\Cache\Search|*.*
FileKey2=%LocalLowAppData%\Adobe\Acrobat\11.0\Search|*.*

[Adobe Acrobat 8.0]
ID=2022
LangSecRef=3021
Detect=HKCU\Software\Adobe\Adobe Acrobat\8.0
Default=True
RegKey1=HKCU\Software\Adobe\Adobe Acrobat\8.0\AVGeneral\cRecentFiles
FileKey1=%localappdata%\Adobe\Acrobat\8.0\Cache\Search80|*.*

[Adobe Acrobat 9.0]
ID=2185
LangSecRef=3021
Detect=HKCU\Software\Adobe\Adobe Acrobat\9.0
Default=True
RegKey1=HKCU\Software\Adobe\Adobe Acrobat\9.0\AVGeneral\cRecentFiles
FileKey1=%LocalAppData%\Adobe\Acrobat\9.0\Cache\Search|*.*
FileKey2=%LocalLowAppData%\Adobe\Acrobat\9.0\Search|*.*
FileKey3=%LocalAppData%\Adobe\Acrobat\9.0\Cache|*.lst

[Adobe Acrobat 10.0]
ID=2186
LangSecRef=3021
Detect=HKCU\Software\Adobe\Adobe Acrobat\10.0
Default=True
RegKey1=HKCU\Software\Adobe\Adobe Acrobat\10.0\AVGeneral\cRecentFiles
FileKey1=%LocalAppData%\Adobe\Acrobat\10.0\Cache\Search|*.*
FileKey2=%LocalLowAppData%\Adobe\Acrobat\10.0\Search|*.*
FileKey3=%LocalAppData%\Adobe\Acrobat\10.0\Cache|*.lst

[Adobe Acrobat XI]
ID=2326
LangSecRef=3021
Detect=HKCU\Software\Adobe\Adobe Acrobat\11.0
Default=True
RegKey1=HKCU\Software\Adobe\Adobe Acrobat\11.0\AVGeneral\cRecentFiles
RegKey2=HKCU\Software\Adobe\Adobe Acrobat\11.0\CompoundDocs\cStoredBinder
FileKey1=%LocalAppData%\Adobe\Acrobat\11.0\Cache\|*.*
FileKey2=%LocalLowAppData%\Adobe\Acrobat\11.0\Search|*.*

[Adobe ImageReady 7.0]
ID=2023
LangSecRef=3021
Default=True
Detect=HKCU\Software\Adobe\ImageReady 7.0
RegKey1=HKCU\Software\Adobe\ImageReady 7.0\Preferences\URLHistory
RegKey2=HKCU\Software\Adobe\ImageReady 7.0\Preferences|SaveDir
RegKey3=HKCU\Software\Adobe\ImageReady 7.0\Preferences\RecentFiles

[Adobe ImageReady CS]
ID=2154
LangSecRef=3021
Detect=HKCU\Software\Adobe\ImageReady 8.0
Default=True
RegKey1=HKCU\Software\Adobe\ImageReady 8.0\Preferences\URLHistory
RegKey2=HKCU\Software\Adobe\ImageReady 8.0\Preferences|SaveDir
RegKey3=HKCU\Software\Adobe\ImageReady 8.0\Preferences\RecentFiles

[Adobe Photoshop 6.0]
ID=2024
LangSecRef=3021
Default=True
Detect=HKCU\Software\Adobe\Photoshop\6.0
RegKey1=HKCU\Software\Adobe\Photoshop\6.0\VisitedDirs

[Adobe Photoshop 7.0]
ID=2025
LangSecRef=3021
Default=True
Detect=HKCU\Software\Adobe\Photoshop\7.0
RegKey1=HKCU\Software\Adobe\Photoshop\7.0\VisitedDirs

[Adobe Photoshop CS]
ID=2026
LangSecRef=3021
Default=True
Detect=HKCU\Software\Adobe\Photoshop\8.0
RegKey1=HKCU\Software\Adobe\Photoshop\8.0\VisitedDirs

[Adobe Photoshop CS2]
ID=2027
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop\9.0
Default=True
RegKey1=HKCU\Software\Adobe\Photoshop\9.0\VisitedDirs
RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList
FileKey1=%appdata%\Adobe\CameraRaw\Cache|*.*

[Adobe Photoshop CS3]
ID=2139
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop\10.0
Default=True
RegKey1=HKCU\Software\Adobe\Photoshop\10.0\VisitedDirs
RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList

[Adobe Photoshop CS4]
ID=2140
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop\11.0
Default=True
RegKey1=HKCU\Software\Adobe\Photoshop\11.0\VisitedDirs
RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList

[Adobe Photoshop CS5]
ID=2156
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop\12.0
Default=True
RegKey1=HKCU\Software\Adobe\Photoshop\12.0\VisitedDirs
RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList

[Adobe Photoshop CS6]
ID=2323
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop\60.0
Default=True
RegKey1=HKCU\Software\Adobe\Photoshop\60.0\VisitedDirs
RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList

[Adobe Photoshop Elements 12]
ID=2367
LangSecRef=3021
Detect=HKCU\Software\Adobe\Photoshop Elements\12.0
Default=True
RegKey1=HKCU\Software\Adobe\Elements Organizer\12.0\CurrentMediaFilePath
RegKey2=HKCU\Software\Adobe\Photoshop Elements\12.0\CurrentMediaFilePath
RegKey3=HKCU\Software\Adobe\Photoshop Elements\12.0\common\settings\Elements MRU
RegKey4=HKCU\Software\Adobe\Photoshop Elements\12.0\VisitedDirs|STARTUPIMAGEDIRECTORY
FileKey1=%CommonAppData%\Adobe\Photoshop Elements\12.0\Locale\*_*\Photo Creations\temp|*.dat
FileKey2=%AppData%\Adobe\Elements Organizer\12.0\Organizer|Log.txt
FileKey3=%CommonAppData%\Adobe\Elements Organizer\Catalogs\My Catalog|face.thumb.9.cache;thumb.5.cache

[Adobe Illustrator]
ID=2144
LangSecRef=3021
Detect=HKCU\Software\Adobe\MediaBrowser\MRU\illustrator
Default=True
RegKey1=HKCU\Software\Adobe\MediaBrowser\MRU\illustrator\FileList

[Adobe Air]
ID=2201
LangSecRef=3024
DetectFile=%LocalAppData%\Adobe\Air
Default=True
FileKey1=%LocalAppData%\Adobe\Air\Logs|*.*

[Adobe Dreamweaver]
ID=2314
LangSecRef=3021
Detect=HKCU\Software\Adobe\MediaBrowser\MRU\Dreamweaver
Default=True
RegKey1=HKCU\Software\Adobe\MediaBrowser\MRU\Dreamweaver\FileList
RegKey2=HKCU\Software\Adobe\Dreamweaver CS6\Recent File List

[Adobe Premiere Pro CC]
ID=2354
LangSecRef=3021
Default=True
Detect=HKLM\SOFTWARE\Adobe\Premiere Pro\7.0
Detect2=HKCU\Software\Adobe\Premiere Pro\7.0
FileKey1=%ProgramFiles%\Adobe\Adobe Premiere Pro CC\cache|*-*-*.cache
FileKey2=%ProgramFiles%\Adobe\Adobe Premiere Pro CC\Required\data\cache|*.pcache
FileKey3=%AppData%\Adobe\dynamiclinkmanager\7.0\logs|*.log
FileKey4=%AppData%\Adobe\Lumetri\7.0\log|*.log
FileKey5=%AppData%\Adobe\Premiere Pro\7.0\logs|*.log
FileKey6=%AppData%\Adobe\Premiere Pro\7.0|Plugin Loading.log
FileKey7=%AppData%\Adobe\Common\Media Cache Files|*.mediasrc
FileKey8=%AppData%\Adobe\Common\Media Cache|*.mediasrc

[Adobe Premiere Elements 12]
ID=2369
LangSecRef=3021
Default=False
Detect=HKCU\Software\Adobe\Premiere Elements\12.0
RegKey1=HKCU\Software\Adobe\Premiere Elements\12.0\MRUDocuments
FileKey1=%AppData%\Adobe\Common\Thumbnail Cache|thumbnailDB
FileKey2=%AppData%\Adobe\Premiere Elements\12.0\logs|*.log
FileKey3=%AppData%\Adobe\Premiere Elements\12.0|Plugin Loading.log;CAHeadless Plugin Loading.log
FileKey4=%AppData%\Adobe\Premiere Elements 12.0\12.0\logs|*.log

[Acrobat Distiller 10]
ID=2264
LangSecRef=3021
DetectFile=%AppData%\Adobe\Acrobat\Distiller 10
Default=True
FileKey1=%AppData%\Adobe\Acrobat\Distiller 10|messages.log
FileKey2=%AppData%\Adobe\Acrobat\Distiller 10\Cache|*.*|RECURSE

[Advanced Searchbar]
ID=2202
LangSecRef=3022
DetectFile=%ProgramFiles%\AdvancedSearchbar\advancedsearchbar.dll
Default=True
FileKey1=%ProgramFiles%\AdvancedSearchbar\Cache|*.*
RegKey1=HKCU\Software\Advanced Searchbar\Toolbar\Historysearchbox1

[Yahoo Toolbar]
ID=2028
LangSecRef=3022
Detect=HKCU\Software\Yahoo\Companion
Default=True
RegKey1=HKCU\Software\Yahoo\Companion\SearchHistory

[Windows Live Toolbar]
ID=2029
LangSecRef=3022
Detect=HKCU\Software\Microsoft\MSN Apps\SearchBox
Default=True
RegKey1=HKCU\Software\Microsoft\MSN Apps\SearchBox|History
RegKey2=HKCU\Software\Microsoft\MSN Apps\MSN Toolbar|SearchStrings

[Google Toolbar]
ID=2030
LangSecRef=3022
Detect=HKCU\Software\Google\NavClient\1.1
Default=True
RegKey1=HKCU\Software\Google\NavClient\1.1\History
RegKey2=HKCU\Software\Google\NavClient\1.1\Options|KillPopupCount

[Google Toolbar IE]
ID=2031
LangSecRef=3022
Detect=HKCU\Software\Google\Google Toolbar
Default=True
FileKey1=%appdata%\Google\Local Search History|*.*

[Google Deskbar]
ID=2032
LangSecRef=3022
Detect=HKCU\Software\Google\Deskbar
Default=True
RegKey1=HKCU\Software\Google\Deskbar\termhistory
RegKey2=HKCU\Software\Google\Deskbar\urlhistory

[Google Calendar Sync]
ID=2159
LangSecRef=3022
Detect=HKCU\Software\Google\Google Calendar Sync
Default=True
FileKey1=%localappdata%\Google\Google Calendar Sync\logs|*.log

[Google Talk]
ID=2158
LangSecRef=3022
Detect=HKCU\Software\Google\Google Talk
DetectFile1=%ProgramFiles%\Google\Google Talk
DetectFile2=%appdata%\Google\Google Talk
DetectFile3=%localappdata%\Google\Google Talk
Default=False
FileKey1=%localappdata%\Google\Google Talk\status|*.txt
FileKey2=%localappdata%\Google\Google Talk\chatlogs|*.log

[Kantaris Media Player]
ID=2232
LangSecRef=3023
DetectFile=%AppData%\Christofer Persson\Kantaris Media Player
Default=True
FileKey1=%AppData%\Christofer Persson\Kantaris Media Player|*.jpg

[KMPlayer]
ID=2233
LangSecRef=3023
Detect=HKCU\Software\KMPlayer
Default=True
RegKey1=HKCU\Software\KMPlayer\KMP2.0|LastFileName
RegKey2=HKCU\Software\KMPlayer\WideAlbum\(Default Album)
RegKey3=HKCU\Software\KMPlayer\albumart|LastAlbumName

[Windows Media Player]
ID=2033
LangSecRef=3023
Detect=HKCU\Software\Microsoft\MediaPlayer\Player
Default=True
RegKey1=HKCU\Software\Microsoft\MediaPlayer\Player\RecentFileList
RegKey2=HKCU\Software\Microsoft\MediaPlayer\Player\RecentURLList
RegKey3=HKCU\Software\Microsoft\MediaPlayer\Preferences|LastPlayList
RegKey4=HKCU\Software\Microsoft\MediaPlayer\Preferences|LastPlayListIndex
RegKey5=HKCU\Software\Microsoft\MediaPlayer\Player\Settings|SaveAsDir
RegKey6=HKCU\Software\Microsoft\MediaPlayer\AutoComplete\MediaEdit
RegKey7=HKCU\Software\Microsoft\MediaPlayer\Radio\MRUList
RegKey8=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedIconPath
RegKey9=HKCU\Software\Microsoft\MediaPlayer\Services\MediaGuide|CachedLargeLogoPath
FileKey1=%LocalAppData%\Microsoft\Media Player|lastplayed.wpl
FileKey2=%LocalAppData%\Microsoft\Media Player|cacheentry*.*|RECURSE
FileKey3=%LocalAppData%\Microsoft\Media Player\Art Cache\LocalMLS|*.*|RECURSE
FileKey4=%LocalAppData%\Microsoft\Media Player\Transcoded Files Cache|*.*|RECURSE

[Windows Media Center]
ID=2278
LangSecRef=3023
DetectFile=%windir%\ehome\ehshell.exe
Default=True
FileKey1=%CommonAppData%\Microsoft\eHome\logs|*.*
FileKey2=%LocalAppData%\Microsoft\eHome|playlistcache.db
FileKey3=%PUBLIC%\Recorded TV\TempRec\TempSBE|*.*|RECURSE

[Real Player]
ID=2034
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\6.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins1
RegKey10=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins2
RegKey11=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins3
RegKey12=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins4
RegKey13=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins5
RegKey14=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins6
RegKey15=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins7
RegKey16=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins8
RegKey17=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\LastOpenFileDir
RegKey18=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips1
RegKey19=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips2
RegKey20=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips3
RegKey21=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips4
RegKey22=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips5
RegKey23=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips6
RegKey24=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips7
FileKey1=%AppData%\Real\RealOne Player|cookies.txt;ctd.dat;realplayer.ste
FileKey2=%AppData%\Real\RealOne Player\History|*.*
FileKey3=%AppData%\Real\RealPlayer|cookies.txt;ctd.dat;realplayer.ste
FileKey4=%AppData%\Real\RealPlayer\History|*.*
FileKey5=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey6=%AppData%\Real\RealPlayer\WatchFolders|*.log|RECURSE
FileKey7=%ProgramFiles%\Common Files\Real\Update_OB|RealPlayer-log.txt

[Real Player SP]
ID=2150
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\12.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins1
RegKey10=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins2
RegKey11=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins3
RegKey12=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins4
RegKey13=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins5
RegKey14=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins6
RegKey15=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins7
RegKey16=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\MostRecentSkins8
RegKey17=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\LastOpenFileDir
RegKey18=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips1
RegKey19=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips2
RegKey20=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips3
RegKey21=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips4
RegKey22=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips5
RegKey23=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips6
RegKey24=HKCU\Software\RealNetworks\RealPlayer\12.0\Preferences\OpenLocationClips7
RegKey25=HKCU\Software\RealNetworks\RealConverter\12.0\Preferences\BrowsePath
RegKey26=HKCU\Software\RealNetworks\RealConverter\12.0\Preferences\DestinationPath
RegKey27=HKCU\Software\RealNetworks\RealTrimmer\12.0\Preferences\BrowsePath
FileKey1=%AppData%\Real\RealPlayer|cookies.txt;ctd.dat;realplayer.ste;RealPlayer-log.txt
FileKey2=%AppData%\Real\RealPlayer\History|*.*
FileKey3=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey4=%AppData%\Real\RealPlayer\WatchFolders|*.log|RECURSE

[Real Player 15]
ID=2276
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\15.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\15.0\Preferences\LastOpenFileDir
RegKey10=HKCU\Software\RealNetworks\RealConverter\15.0\Preferences\BrowsePath
RegKey11=HKCU\Software\RealNetworks\RealConverter\15.0\Preferences\DestinationPath
RegKey12=HKCU\Software\RealNetworks\RealTrimmer\15.0\Preferences\BrowsePath
FileKey1=%AppData%\Real\RealPlayer|realplayer.ste;RealPlayer-log.txt
FileKey2=%AppData%\Real\RealPlayer\History|*.*
FileKey3=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey4=%AppData%\Real\RealPlayer\WatchFolders|*.log

[Real Player 16]
ID=2325
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\16.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\16.0\Preferences\LastOpenFileDir
RegKey10=HKCU\Software\RealNetworks\RealConverter\16.0\Preferences\BrowsePath
RegKey11=HKCU\Software\RealNetworks\RealConverter\16.0\Preferences\DestinationPath
RegKey12=HKCU\Software\RealNetworks\RealTrimmer\16.0\Preferences\BrowsePath
FileKey1=%AppData%\Real\RealPlayer|realplayer.ste;RealPlayer-log.txt
FileKey2=%AppData%\Real\RealPlayer\History|*.*
FileKey3=%AppData%\Real\RealPlayer\ErrorLogs|*.*
FileKey4=%AppData%\Real\RealPlayer\WatchFolders|*.log

[Real Player Cloud]
ID=2034
LangSecRef=3023
Detect=HKCU\Software\RealNetworks\RealPlayer\17.0
Default=True
RegKey1=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips1
RegKey2=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips2
RegKey3=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips3
RegKey4=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips4
RegKey5=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips5
RegKey6=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips6
RegKey7=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips7
RegKey8=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\MostRecentClips8
RegKey9=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\LastOpenFileDir
RegKey10=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips1
RegKey11=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips2
RegKey12=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips3
RegKey13=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips4
RegKey14=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips5
RegKey15=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips6
RegKey16=HKCU\Software\RealNetworks\RealPlayer\17.0\Preferences\OpenLocationClips7
FileKey1=%AppData%\Real\RealPlayer\Temp|*.*
FileKey2=%ProgramFiles%\Real\RealPlayer\RPDS|install.log
FileKey3=%CommonAppData%\Real\RealPlayer|*-log.txt;S-*
FileKey4=%CommonAppData%\RPDS\Content\images|*.jpg
FileKey5=%CommonAppData%\Real\RPDS\Logs|*.log;error.log*
FileKey6=%AppData%\Real\RealPlayer|RealPlayer-log.txt
FileKey7=%AppData%\Real\RealPlayer\ErrorLogs|*.log
FileKey8=%AppData%\Real\RealPlayer\History|*.*
FileKey9=%AppData%\Real\RealPlayer\ThumbsCache|*.*|RECURSE
FileKey10=%AppData%\Real\RealPlayer\WatchFolders|*_scan*
FileKey11=%ProgramFiles%\Real\RealPlayer\common|cookies.txt
ExcludeKey1=FILE|%AppData%\Real\RealPlayer\WatchFolders\*scan.out

[Quicktime Player]
ID=2035
LangSecRef=3023
Detect=HKLM\Software\Apple Computer, Inc.\QuickTime
Default=True
RegKey1=HKLM\Software\Apple Computer, Inc.\QuickTime\Recent Movies
FileKey1=%LocalLowAppData%\Apple Computer\QuickTime\downloads|*.*|RECURSE
FileKey2=%localappdata%\Apple Computer\QuickTime\downloads|*.*|RECURSE
FileKey3=%localappdata%\Apple Computer\QuickTime|QTPlayerSession.xml
FileKey4=%appdata%\Apple Computer\QuickTime|QTPlayerSession.xml
FileKey5=%CommonAppData%\Apple Computer\Installer Cache\QuickTime*|QuickTime.msi.backup
FileKey6=%userprofile%|QTPlayerSession.xml

[AVI Preview]
ID=2037
LangSecRef=3023
Detect=HKCU\Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more
Default=True
RegKey1=HKCU\Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more\Recent File List

[Steam]
ID=2203
LangSecRef=3023
DetectFile=%ProgramFiles%\Steam\Steam.exe
Default=True
FileKey1=%ProgramFiles%\Steam|*.mdmp;*.log
FileKey2=%ProgramFiles%\Steam\Dumps|*.*|RECURSE
FileKey3=%ProgramFiles%\Steam\Logs|*.*|RECURSE

[Xfire]
ID=2204
LangSecRef=3023
DetectFile=%ProgramFiles%\Xfire\Xfire.exe
Default=True
FileKey1=%CommonAppData%\Xfire|*-*-*-*-*-*-*.log;xfire_exe_log.txt;xfire_toucan_log.txt
FileKey2=%ProgramFiles%\Xfire|*-*-*-*-*-*-*.log;xfire_exe_log.txt;xfire_toucan_log.txt

[XML Spy]
ID=2038
LangSecRef=3021
Detect=HKCU\Software\Altova\XML Spy
Default=True
RegKey1=HKCU\Software\Altova\XML Spy\Recent File List
RegKey2=HKCU\Software\Altova\XML Spy\Recent Project List

[Oxygen XML Editor]
ID=2327
LangSecRef=3021
DetectFile=%AppData%\com.oxygenxml\
Default=True
FileKey1=%AppData%\com.oxygenxml\usageData|usageData.xml
FileKey2=%AppData%\com.oxygenxml|file.history
FileKey3=%AppData%\com.oxygenxml|project.history

[SWiSH]
ID=2039
LangSecRef=3023
Detect=HKCU\Software\DJJ Holdings\SWiSH
Default=True
RegKey1=HKCU\Software\DJJ Holdings\SWiSH\Recent File List

[Paint Shop Pro 7.0]
ID=2040
LangSecRef=3023
Detect=HKCU\Software\Jasc\Paint Shop Pro 7
Default=True
RegKey1=HKCU\Software\Jasc\Paint Shop Pro 7\Recent File List
RegKey2=HKCU\Software\Jasc\Animation Shop 3\Recent File List
RegKey3=HKCU\Software\Jasc\Paint Shop Pro 7\General|FolderHistory
RegKey4=HKCU\Software\Jasc\Paint Shop Pro 7\General|SaveAsDirectory
RegKey5=HKCU\Software\Jasc\Paint Shop Pro 7\General|SaveCopyDirectory

[Paint Shop Pro 8.0]
ID=2041
LangSecRef=3023
Detect=HKCU\Software\Jasc\Paint Shop Pro 8
Default=True
RegKey1=HKCU\Software\Jasc\Paint Shop Pro 8\Recent File List
RegKey2=HKCU\Software\Jasc\Paint Shop Pro 8\WorkspaceMRU
RegKey3=HKCU\Software\Jasc\Paint Shop Pro 8\JascCmdPyScript\RunScript|FileName
RegKey4=HKCU\Software\Jasc\Paint Shop Pro 8\JascCmdFile\FileSaveAs|FileFolder
RegKey5=HKCU\Software\Jasc\Paint Shop Pro 8\JascCmdNonGraphic\SaveWorkspace|WorkspaceFilename
RegKey6=HKCU\Software\Jasc\Paint Shop Pro 8\ScriptMRU

[Paint Shop Pro 9.0]
ID=2042
LangSecRef=3023
Detect=HKCU\Software\Jasc\Paint Shop Pro 9
Default=True
RegKey1=HKCU\Software\Jasc\Paint Shop Pro 9\Recent File List
RegKey2=HKCU\Software\Jasc\Paint Shop Pro 9\WorkspaceMRU
RegKey3=HKCU\Software\Jasc\Paint Shop Pro 9\JascCmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Jasc\Paint Shop Pro 9\JascCmdFile\FileOpen|Folder

[Paint Shop Pro X]
ID=2043
LangSecRef=3023
Detect=HKCU\Software\Corel\Paint Shop Pro\10
Default=True
RegKey1=HKCU\Software\Corel\Paint Shop Pro\10\Recent File List
RegKey2=HKCU\Software\Corel\Paint Shop Pro\10\WorkspaceMRU
RegKey3=HKCU\Software\Corel\Paint Shop Pro\10\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\Paint Shop Pro\10\CmdFile\FileOpen|Folder

[Paint Shop Pro XI]
ID=2044
LangSecRef=3023
Detect=HKCU\Software\Corel\Paint Shop Pro\11
Default=True
RegKey1=HKCU\Software\Corel\Paint Shop Pro\11\Recent File List
RegKey2=HKCU\Software\Corel\Paint Shop Pro\11\WorkspaceMRU
RegKey3=HKCU\Software\Corel\Paint Shop Pro\11\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\Paint Shop Pro\11\CmdFile\FileOpen|Folder

[Paint Shop Pro X2]
ID=2148
LangSecRef=3023
Detect=HKCU\Software\Corel\Paint Shop Pro\12
Detect2=HKCU\Software\Corel\Paint Shop Pro\12.5
Default=True
RegKey1=HKCU\Software\Corel\Paint Shop Pro\12\Recent File List
RegKey2=HKCU\Software\Corel\Paint Shop Pro\12\WorkspaceMRU
RegKey3=HKCU\Software\Corel\Paint Shop Pro\12\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\Paint Shop Pro\12\CmdFile\FileOpen|Folder
RegKey5=HKCU\Software\Corel\Paint Shop Pro\12.5\Recent File List
RegKey6=HKCU\Software\Corel\Paint Shop Pro\12.5\WorkspaceMRU
RegKey7=HKCU\Software\Corel\Paint Shop Pro\12.5\CmdFile\FileSaveAs|FileFolder
RegKey8=HKCU\Software\Corel\Paint Shop Pro\12.5\CmdFile\FileOpen|Folder

[Paint Shop Pro X3]
ID=2167
LangSecRef=3023
Detect=HKCU\Software\Corel\Paint Shop Pro\13
Default=True
RegKey1=HKCU\Software\Corel\Paint Shop Pro\13\Recent File List
RegKey2=HKCU\Software\Corel\Paint Shop Pro\13\WorkspaceMRU
RegKey3=HKCU\Software\Corel\Paint Shop Pro\13\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\Paint Shop Pro\13\CmdFile\FileOpen|Folder

[Corel PaintShop Pro X4]
ID=2273
LangSecRef=3023
Detect=HKCU\Software\Corel\PaintShop Pro\X4
Default=True
RegKey1=HKCU\Software\Corel\PaintShop Pro\X4\Recent File List
RegKey2=HKCU\Software\Corel\PaintShop Pro\X4\UI Customization\EN\WorkspaceMRU
RegKey3=HKCU\Software\Corel\PaintShop Pro\X4\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\PaintShop Pro\X4\CmdFile\FileOpen|Folder
RegKey5=HKCU\Software\Corel\PaintShop Pro\X4\ScriptMRU

[Corel PaintShop Pro X5]
ID=2316
LangSecRef=3023
Detect=HKCU\Software\Corel\PaintShop Pro\X5
Default=True
RegKey1=HKCU\Software\Corel\PaintShop Pro\X5\Recent File List
RegKey2=HKCU\Software\Corel\PaintShop Pro\X5\UI Customization\EN\WorkspaceMRU
RegKey3=HKCU\Software\Corel\PaintShop Pro\X5\CmdFile\FileSaveAs|FileFolder
RegKey4=HKCU\Software\Corel\PaintShop Pro\X5\CmdFile\FileOpen|Folder
RegKey5=HKCU\Software\Corel\PaintShop Pro\X5\ScriptMRU

[Corel PaintShop Pro X6]
ID=2364
LangSecRef=3023
Detect=HKCU\Software\Corel\PaintShop Pro\X6
Default=True
RegKey1=HKCU\Software\Corel\PaintShop Pro\X6\Recent File List
RegKey2=HKCU\Software\Corel\PaintShop Pro\X6\CmdFile\FileSaveAs|FileFolder
RegKey3=HKCU\Software\Corel\PaintShop Pro\X6\CmdFile\FileOpen|Folder
RegKey4=HKCU\Software\Corel\PaintShop Pro\X6\ScriptMRU
FileKey1=%ProgramFiles%\Corel\Corel PaintShop Pro X6\PlugIns\*|*.log
FileKey2=%LocalAppData%\Corel PaintShop Pro\16.0\Thumbs|*.*|RECURSE

[MS Works 4.0]
ID=2045
LangSecRef=3021
Detect= HKCU\Software\Microsoft\Works\4.0
Default=True
RegKey1=HKCU\Software\Microsoft\Works\4.0\Recent File List

[Office 97]
ID=2046
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\8.0\Common
Default=True
FileKey1=%appdata%\Microsoft\Office\Recent|*.*
RegKey1=HKCU\Software\Microsoft\Office\8.0\Excel\Recent File List
RegKey2=HKCU\Software\Microsoft\Office\8.0\Project\Recent File List
RegKey3=HKCU\Software\Microsoft\Office\8.0\PowerPoint\Recent File List
RegKey4=HKCU\Software\Microsoft\Office\8.0\PowerPoint\Recent Folder List
RegKey5=HKCU\Software\Microsoft\Office\8.0\Common\Internet\LocationOfComponents
RegKey6=HKCU\Software\Microsoft\Office\8.0\Access\Settings

[Office XP]
ID=2047
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\10.0\Common
Default=True
FileKey1=%appdata%\Microsoft\Office\Recent|*.*
RegKey1=HKCU\Software\Microsoft\Office\10.0\PowerPoint\Recent File List
RegKey2=HKCU\Software\Microsoft\Office\10.0\Excel\Recent Files
RegKey3=HKCU\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent File List
RegKey4=HKCU\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent Page List
RegKey5=HKCU\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent Web List
RegKey6=HKCU\Software\Microsoft\Office\10.0\Word\Recent Templates
RegKey7=HKCU\Software\Microsoft\Office\10.0\Common\Internet|UseRWHlinkNavigation

[Office 2003]
ID=2048
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\11.0\Common
Default=True
FileKey1=%AppData%\Microsoft\Office\Recent|*.*
FileKey2=%AppData%\Microsoft\Office|*.tmp|RECURSE
RegKey1=HKCU\Software\Microsoft\Office\11.0\Excel\Recent Files
RegKey2=HKCU\Software\Microsoft\Office\11.0\Common\Open Find\Microsoft Office Word\Settings\Save As\File Name MRU
RegKey3=HKCU\Software\Microsoft\Office\11.0\PowerPoint\Recent File List
RegKey4=HKCU\Software\Microsoft\Office\11.0\Publisher\Recent File List
RegKey5=HKCU\Software\Microsoft\Office\11.0\InfoPath\Recent File List
RegKey6=HKCU\Software\Microsoft\Office\11.0\Common\Internet\Server Cache
RegKey7=HKCU\Software\Microsoft\Office\11.0\Common\Internet|UseRWHlinkNavigation
RegKey8=HKCU\Software\Microsoft\MSPaper 11.0\Persist File Name
RegKey9=HKCU\Software\Microsoft\MSPaper 11.0\Recent File List
RegKey10=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile1
RegKey11=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile2
RegKey12=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile3
RegKey13=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile4
RegKey14=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile5
RegKey15=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile6
RegKey16=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile7
RegKey17=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile8
RegKey18=HKCU\Software\Microsoft\Office\11.0\Outlook\Contact|QuickFindMRU
RegKey19=HKCU\Software\Microsoft\Office\11.0\Outlook\Contact|StripSearchMRU
RegKey20=HKCU\Software\Microsoft\Office\11.0\Outlook\Preferences|LocationMRU
RegKey21=HKCU\Software\Microsoft\Office\11.0\Excel Viewer\Recent Files
RegKey22=HKCU\Software\Microsoft\Office\Common|FontBmpCache

[Office 2007]
ID=2049
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\12.0\Common
Default=True
FileKey1=%AppData%\Microsoft\Office\Recent|*.*
FileKey2=%AppData%\Microsoft\Office|*.tmp|RECURSE
RegKey1=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Word\Settings\Save As\File Name MRU
RegKey2=HKCU\Software\Microsoft\Office\12.0\Word\File MRU
RegKey3=HKCU\Software\Microsoft\Office\12.0\Excel\File MRU
RegKey4=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU1
RegKey5=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU2
RegKey6=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU3
RegKey7=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU4
RegKey8=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU5
RegKey9=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU6
RegKey10=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU7
RegKey11=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU8
RegKey12=HKCU\Software\Microsoft\Office\12.0\PowerPoint\File MRU
RegKey13=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Save As\File Name MRU
RegKey14=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office InfoPath\Settings\Open\File Name MRU
RegKey15=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office InfoPath\Settings\Save As\File Name MRU
RegKey16=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Excel\Settings\Save As\File Name MRU
RegKey17=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Publisher\Settings\Save As\File Name MRU
RegKey18=HKCU\Software\Microsoft\Office\12.0\Publisher\Recent File List
RegKey19=HKCU\Software\Microsoft\Office\12.0\InfoPath\Recent File List
RegKey20=HKCU\Software\Microsoft\Office\12.0\Excel Viewer\Viewer File MRU
RegKey21=HKCU\Software\Microsoft\Office\12.0\Clip Organizer\Search\Last Query
RegKey22=HKCU\Software\Microsoft\Office\Common|FontBmpCache

[Office 2010]
ID=2151
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\14.0\Common
Default=True
FileKey1=%AppData%\Microsoft\Office\Recent|*.*
FileKey2=%AppData%\Microsoft\Office|*.tmp|RECURSE
FileKey3=%LocalAppData%\Microsoft\Office\14.0\OfficeFileCache|*.*|RECURSE
RegKey1=HKCU\Software\Microsoft\Office\14.0\Access\File MRU
RegKey2=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Default Database Path\File Name MRU
RegKey3=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Default Theme for New Databases\File Name MRU
RegKey4=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\File New Database\File Name MRU
RegKey5=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\File Open\File Name MRU
RegKey6=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\File Save\File Name MRU
RegKey7=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Open\File Name MRU
RegKey8=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Access\Settings\Save As\File Name MRU
RegKey9=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Default Database Path\File Name MRU
RegKey10=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Default Theme for New Databases\File Name MRU
RegKey11=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\File New Database\File Name MRU
RegKey12=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\File Open\File Name MRU
RegKey13=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\File Save\File Name MRU
RegKey14=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Open\File Name MRU
RegKey15=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Access\Settings\Save As\File Name MRU
RegKey16=HKCU\Software\Microsoft\Office\14.0\Word\File MRU
RegKey17=HKCU\Software\Microsoft\Office\14.0\Word\Place MRU
RegKey18=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\Browse\File Name MRU
RegKey19=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\File Open\File Name MRU
RegKey20=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\File Save\File Name MRU
RegKey21=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\Modify Location\File Name MRU
RegKey22=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Word\Settings\Save As\File Name MRU
RegKey23=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\Browse\File Name MRU
RegKey24=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\File Open\File Name MRU
RegKey25=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\File Save\File Name MRU
RegKey26=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\Modify Location\File Name MRU
RegKey27=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Word\Settings\Save As\File Name MRU
RegKey28=HKCU\Software\Microsoft\Office\14.0\Excel\File MRU
RegKey29=HKCU\Software\Microsoft\Office\14.0\Excel\Place MRU
RegKey30=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\Browse\File Name MRU
RegKey31=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\File Open\File Name MRU
RegKey32=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\File Save\File Name MRU
RegKey33=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\Modify Location\File Name MRU
RegKey34=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Excel\Settings\Save As\File Name MRU
RegKey35=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\Browse\File Name MRU
RegKey36=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\File Open\File Name MRU
RegKey37=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\File Save\File Name MRU
RegKey38=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\Modify Location\File Name MRU
RegKey39=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Excel\Settings\Save As\File Name MRU
RegKey40=HKCU\Software\Microsoft\Office\14.0\Publisher\File MRU
RegKey41=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\File Open\File Name MRU
RegKey42=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\File Save\File Name MRU
RegKey43=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\Open Publication\File Name MRU
RegKey44=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Publisher\Settings\Save As\File Name MRU
RegKey45=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\File Open\File Name MRU
RegKey46=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\File Save\File Name MRU
RegKey47=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\Open Publication\File Name MRU
RegKey48=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Publisher\Settings\Save As\File Name MRU
RegKey49=HKCU\Software\Microsoft\Office\14.0\PowerPoint\File MRU
RegKey50=HKCU\Software\Microsoft\Office\14.0\PowerPoint\Place MRU
RegKey51=HKCU\Software\Microsoft\Office\14.0\PowerPoint\RecentFolderList
RegKey52=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\Browse\File Name MRU
RegKey53=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\File Open\File Name MRU
RegKey54=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\File Save\File Name MRU
RegKey55=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\Open\File Name MRU
RegKey56=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft PowerPoint\Settings\Save As\File Name MRU
RegKey57=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Browse\File Name MRU
RegKey58=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\File Open\File Name MRU
RegKey59=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\File Save\File Name MRU
RegKey60=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Open\File Name MRU
RegKey61=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Save As\File Name MRU
RegKey62=HKCU\Software\Microsoft\Office\14.0\InfoPath\Designer File MRU
RegKey63=HKCU\Software\Microsoft\Office\14.0\InfoPath\Filler File MRU
RegKey64=HKCU\Software\Microsoft\Office\14.0\InfoPath\Recent Templates
RegKey65=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Browse\File Name MRU
RegKey66=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\File Open\File Name MRU
RegKey67=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\File Save\File Name MRU
RegKey68=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Open\File Name MRU
RegKey69=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Open in Design Mode\File Name MRU
RegKey70=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft InfoPath\Settings\Save As\File Name MRU
RegKey71=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Browse\File Name MRU
RegKey72=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\File Open\File Name MRU
RegKey73=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\File Save\File Name MRU
RegKey74=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Open\File Name MRU
RegKey75=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Open in Design Mode\File Name MRU
RegKey76=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office InfoPath\Settings\Save As\File Name MRU
RegKey77=HKCU\Software\Microsoft\Office\14.0\OneNote\OpenNotebooks
RegKey78=HKCU\Software\Microsoft\Office\14.0\OneNote\RecentNotebooks
RegKey79=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\File Open\File Name MRU
RegKey80=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\File Save\File Name MRU
RegKey81=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Open Backup\File Name MRU
RegKey82=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Open Notebook\File Name MRU
RegKey83=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Save As\File Name MRU
RegKey84=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Select File\File Name MRU
RegKey85=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft OneNote\Settings\Select Folder\File Name MRU
RegKey86=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\File Open\File Name MRU
RegKey87=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\File Save\File Name MRU
RegKey88=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Open Backup\File Name MRU
RegKey89=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Open Notebook\File Name MRU
RegKey90=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Save As\File Name MRU
RegKey91=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Select File\File Name MRU
RegKey92=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office OneNote\Settings\Select Folder\File Name MRU
RegKey93=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\Create or Open Outlook Data File\File Name MRU
RegKey94=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\File Open\File Name MRU
RegKey95=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\File Save\File Name MRU
RegKey96=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\Open Calendar\File Name MRU
RegKey97=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Outlook\Settings\Open Outlook Data File\File Name MRU
RegKey98=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\Create or Open Outlook Data File\File Name MRU
RegKey99=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\File Open\File Name MRU
RegKey100=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\File Save\File Name MRU
RegKey101=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\Open Calendar\File Name MRU
RegKey102=HKCU\Software\Microsoft\Office\14.0\Common\Open Find\Microsoft Office Outlook\Settings\Open Outlook Data File\File Name MRU
RegKey103=HKCU\Software\Microsoft\Office\14.0\Clip Organizer\Search\Last Query
RegKey104=HKCU\Software\Microsoft\Office\Common|FontBmpCache
RegKey105=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly1
RegKey106=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly2
RegKey107=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly3
RegKey108=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Friendly4
RegKey109=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template1
RegKey110=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template2
RegKey111=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template3
RegKey112=HKCU\Software\Microsoft\Office\14.0\Visio\Recent Templates|Template4
RegKey113=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile1
RegKey114=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile2
RegKey115=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile3
RegKey116=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile4
RegKey117=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile5
RegKey118=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile6
RegKey119=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile7
RegKey120=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile8
RegKey121=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile9
RegKey122=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile10
RegKey123=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile11
RegKey124=HKCU\Software\Microsoft\Office\14.0\Visio\Application|LastFile12
RegKey125=HKCU\Software\Microsoft\Office\14.0\Outlook\Search

[Office 2013]
ID=2318
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office\15.0\Common
Default=True
FileKey1=%AppData%\Microsoft\Office\Recent|*.*
FileKey2=%LocalAppData%\Microsoft\MSOIdentityCRL\production\temp|*.*_sync
FileKey3=%AppData%\Microsoft\PowerPoint\Sync\Temp|*.*
RegKey1=HKCU\Software\Microsoft\Office\15.0\Access\File MRU
RegKey2=HKCU\Software\Microsoft\Office\15.0\Word\File MRU
RegKey3=HKCU\Software\Microsoft\Office\15.0\Word\Place MRU
RegKey4=HKCU\Software\Microsoft\Office\15.0\Excel\File MRU
RegKey5=HKCU\Software\Microsoft\Office\15.0\Excel\Place MRU
RegKey6=HKCU\Software\Microsoft\Office\15.0\Publisher\File MRU
RegKey7=HKCU\Software\Microsoft\Office\15.0\PowerPoint\File MRU
RegKey8=HKCU\Software\Microsoft\Office\15.0\PowerPoint\Place MRU
RegKey9=HKCU\Software\Microsoft\Office\15.0\OneNote\RecentNotebooks
RegKey10=HKCU\Software\Microsoft\Office\15.0\Word\User MRU
RegKey11=HKCU\Software\Microsoft\Office\15.0\Excel\User MRU
RegKey12=HKCU\Software\Microsoft\Office\15.0\Access\User MRU
RegKey13=HKCU\Software\Microsoft\Office\15.0\Publisher\User MRU
RegKey14=HKCU\Software\Microsoft\Office\15.0\PowerPoint\User MRU
ExcludeKey1=FILE|%AppData%\Microsoft\Office\Recent\|Welcome to Word.LNK
ExcludeKey2=FILE|%AppData%\Microsoft\Office\Recent\|Welcome to Publisher.LNK
ExcludeKey3=FILE|%AppData%\Microsoft\Office\Recent\|Welcome to OneNote.LNK

[Installshield Developer 7.0]
ID=2050
LangSecRef=3021
Detect=HKCU\Software\InstallShield\Developer\7.0
Default=True
RegKey1=HKCU\Software\InstallShield\Developer\7.0\Recent File List

[Macromedia Flash 4.0]
ID=2051
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Flash 4
Default=True
RegKey1=HKCU\Software\Macromedia\Flash 4\Recent File List

[Macromedia Flash 5.0]
ID=2052
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Flash 5
Default=True
RegKey1=HKCU\Software\Macromedia\Flash 5\Recent File List

[Macromedia Flash MX]
ID=2053
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Flash 6
Default=True
RegKey1=HKCU\Software\Macromedia\Flash 6\Recent File List

[Macromedia Flash MX 2004]
ID=2054
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Flash 7
Default=True
RegKey1=HKCU\Software\Macromedia\Flash 7\Recent File List

[Adobe Flash Player]
ID=2055
LangSecRef=3023
Detect=HKCR\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}
Detect2=HKCU\Software\Macromedia\FlashPlayer
DetectFile=%SystemDirectory%\Macromed\flash\flashplayer.xpt
Default=True
SpecialKey1=N_FLASH_COOKIES
RegKey1=HKCU\Software\Macromedia\FlashPlayer|RecentMovie1
RegKey2=HKCU\Software\Macromedia\FlashPlayer|RecentMovie2
RegKey3=HKCU\Software\Macromedia\FlashPlayer|RecentMovie3
RegKey4=HKCU\Software\Macromedia\FlashPlayer|RecentMovie4
RegKey5=HKCU\Software\Macromedia\FlashPlayer|RecentMovie5
RegKey6=HKCU\Software\Macromedia\FlashPlayer|RecentMovie6
RegKey7=HKCU\Software\Macromedia\FlashPlayer|RecentMovie7
RegKey8=HKCU\Software\Macromedia\FlashPlayer|RecentMovie8
RegKey9=HKCU\Software\Macromedia\FlashPlayer|RecentMovie9

[Macromedia Homesite 5.0]
ID=2056
LangSecRef=3021
Detect=HKCU\Software\Macromedia\HomeSite5
Default=True
RegKey1=HKCU\Software\Macromedia\HomeSite5\RecentFiles

[Macromedia Fireworks 6.0]
ID=2057
LangSecRef=3021
Default=True
Detect=HKCU\Software\Macromedia\Firework 6
RegKey1=HKCU\Software\Macromedia\Firework 6\Recent File List

[Adobe Fireworks 6.0]
ID=2334
LangSecRef=3021
Detect=HKCU\Software\Adobe\Fireworks\12.0
Default=True
RegKey1=HKCU\Software\Adobe\Fireworks\12.0\ini\Recent File List
FileKey1=%AppData%\Adobe\Fireworks CS6|Project_Log.htm;Web_Log.htm

[Macromedia Dreamweaver MX]
ID=2058
LangSecRef=3021
Default=True
Detect=HKCU\Software\Macromedia\Dreamweaver MX 2004
RegKey1=HKCU\Software\Macromedia\Dreamweaver MX 2004\Recent File List

[Macromedia Shockwave 10]
ID=2189
LangSecRef=3023
Detect=HKCU\Software\Macromedia\Shockwave 10
Detect2=HKLM\Software\Macromedia\Shockwave 10
Default=True
RegKey1=HKCU\Software\Macromedia\Shockwave 10\movies
RegKey2=HKCU\Software\AppDataLow\Software\Macromedia\Shockwave 10\movies
RegKey3=HKCU\Software\AppDataLow\Software\Macromedia\Shockwave 10\statistics
FileKey1=%LocalLowAppData%\Macromedia\Shockwave Player|Shockwave Log

[Macromedia Shockwave 11]
ID=2190
LangSecRef=3023
Detect=HKLM\Software\Adobe\Shockwave 11
Detect2=HKCU\Software\Adobe\Shockwave 11
Default=True
RegKey1=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\moviestats\movies
RegKey2=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\moviestats\sessions
RegKey3=HKCU\Software\Adobe\Shockwave 11\moviestats\movies
RegKey4=HKCU\Software\Adobe\Shockwave 11\moviestats\sessions
RegKey5=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\movies
RegKey6=HKCU\Software\Adobe\Shockwave 11\movies
RegKey7=HKCU\Software\AppDataLow\Software\Adobe\Shockwave 11\statistics
FileKey1=%LocalLowAppData%\Adobe\Shockwave Player 11|Shockwave Log

[Microsoft Silverlight]
ID=2169
LangSecRef=3023
DetectFile=%LocalAppData%\Microsoft\Silverlight\is
DetectFile2=%LocalLowAppData%\Microsoft\Silverlight\is
Detect=HKLM\Software\Microsoft\Silverlight
Default=True
FileKey1=%LocalAppData%\Microsoft\Silverlight\is|*.*|RECURSE 
FileKey2=%LocalLowAppData%\Microsoft\Silverlight\is|*.*|RECURSE
FileKey3=%LocalLowAppData%\Microsoft\Silverlight|*.tmp
ExcludeKey1=FILE|%LocalAppData%\Microsoft\Silverlight\is\*\|disabled.dat
ExcludeKey2=FILE|%LocalLowAppData%\Microsoft\Silverlight\is\*\|disabled.dat

[Ulead Smart Saver Pro 3.0]
ID=2059
LangSecRef=3023
Detect=HKCU\Software\Ulead Systems\Ulead SmartSaver Pro\3.0
Default=True
RegKey1=HKCU\Software\Ulead Systems\Ulead SmartSaver Pro\3.0\Recent File List

[Norton AntiVirus]
ID=2060
LangSecRef=3024
Detect=HKLM\SOFTWARE\Symantec\Norton AntiVirus NT\Install\7.50
Default=True
FileKey1=%commonappdata%\Symantec\Norton AntiVirus Corporate Edition\7.5\Logs|*.log
FileKey2=%localappdata%\Symantec\Norton AntiVirus Corporate Edition\7.5\Logs|*.log
FileKey3=%commonappdata%\Symantec\LiveUpdate\Downloads|*.*

[Symantec AntiVirus]
ID=2061
LangSecRef=3024
Detect=HKLM\SOFTWARE\Symantec\Symantec AntiVirus\Install\7.50
Default=True
FileKey1=%commonappdata%\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs|*.log
FileKey2=%localappdata%\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs|*.log
FileKey3=%commonappdata%\Symantec\LiveUpdate\Downloads|*.*

[MS Snapshot Viewer]
ID=2062
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Snapshot Viewer
Default=True
RegKey1=HKCU\Software\Microsoft\Snapshot Viewer\Recent File List

[Remote Desktop]
ID=2063
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Terminal Server Client
Default=True
FileKey1=%localappdata%\Microsoft\Terminal Server Client\Cache|*.*
RegKey1=HKCU\Software\Microsoft\Terminal Server Client\Default
ExcludeKey1=REG|HKCU\Software\Microsoft\Terminal Server Client\Default\AddIns

[MS Management Console]
ID=2064
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Microsoft Management Console
Default=True
RegKey1=HKCU\Software\Microsoft\Microsoft Management Console\Recent File List

[MS Wordpad]
ID=2065
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad
Default=True
RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Recent File List

[MS Paint]
ID=2066
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Paint
Default=True
RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Paint\Recent File List

[MS Photo Editor]
ID=2067
LangSecRef=3025
Detect=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor
Default=True 
RegKey1=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile1
RegKey2=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile2
RegKey3=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile3
RegKey4=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile4
RegKey5=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType1
RegKey6=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType2
RegKey7=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType3
RegKey8=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType4

[MS Search]
ID=2266
LangSecRef=3025
DetectFile=%CommonAppData%\Microsoft\Search
Default=True
FileKey1=%CommonAppData%\Microsoft\Search|*.log|RECURSE

[Nero Burning ROM]
ID=2068
LangSecRef=3021
Detect=HKCU\Software\ahead\Nero - Burning Rom
Default=True
RegKey1=HKCU\Software\ahead\Nero - Burning Rom\Settings|BrowserDir
RegKey2=HKCU\Software\ahead\Nero - Burning Rom\Settings|ImageDir
RegKey3=HKCU\Software\ahead\Nero - Burning Rom\Settings|WorkingDir
RegKey4=HKLM\Software\Ahead\Nero - Burning Rom\Settings|ImageDir
RegKey5=HKLM\Software\Ahead\Nero - Burning Rom\Settings|BootImageDir
RegKey6=HKCU\Software\Ahead\Nero - Burning Rom\Recent File List
RegKey7=HKCU\Software\Ahead\Cover Designer\Recent File List
RegKey8=HKCU\Software\Ahead\Nero Wave Editor\Recent File List
FileKey1=%ProgramFiles%\Ahead\Nero|NeroHistory.log

[Nero Burning ROM 9]
ID=2142
LangSecRef=3021
Detect=HKCU\Software\Nero\Nero 9
Default=True
RegKey1=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|BrowserDir
RegKey2=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|ImageDir
RegKey3=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|WorkingDir
RegKey4=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|BootImageDir
RegKey5=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Recent File List
FileKey1=%appdata%\Nero\Nero 9\Nero Burning ROM|*.log

[Nero Burning ROM 10]
ID=2155
LangSecRef=3021
Detect=HKCU\Software\Nero\Nero 10
Default=True
RegKey1=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|BrowserDir
RegKey2=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|ImageDir
RegKey3=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|WorkingDir
RegKey4=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|BootImageDir
RegKey5=HKCU\Software\Nero\Nero 10\Nero Burning ROM\Settings|NeroCompilation
RegKey6=HKCU\Software\Nero\Nero 10\Nero\Recent File List
FileKey1=%appdata%\Nero\Nero 10\Nero Burning ROM|*.log

[Nero Burning ROM 2014]
ID=2365
LangSecRef=3021
Detect=HKCU\Software\Nero\Nero 15\Nero Burning ROM
Default=True
RegKey1=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BrowserDir
RegKey2=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|ImageDir
RegKey3=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|WorkingDir
RegKey4=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BootImageDir
RegKey5=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|NeroCompilation
RegKey6=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings\NeroIsoListView|IsoPath
RegKey7=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Recent File List
RegKey8=HKCU\Software\Nero\Nero 15\Nero Burning ROM\AutoSave|LastAutoSave
RegKey9=HKCU\Software\Nero\Nero 15\Nero Burning ROM\General|LastSaveTrackPath
FileKey1=%AppData%\Nero\Nero 15\Nero Burning ROM|NeroHistory.log

[Nero 12 Platinum HD Suite]
ID=2331
LangSecRef=3021
Detect=HKLM\Software\Nero\Nero 12
Default=True
RegKey1=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Recent File List
RegKey2=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|BrowserDir
RegKey3=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|ImageDir
RegKey4=HKCU\Software\Nero\Nero 12\Nero Burning ROM\Settings|NeroCompilation
RegKey5=HKCU\Software\Nero\Nero 12\Nero Express\Recent File List
RegKey6=HKCU\Software\Nero\Nero 12\Nero Express\Settings|WorkingDir
RegKey7=HKCU\Software\Nero\Nero 12\Nero Express\Settings|BrowserDir
RegKey8=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastISODir
RegKey9=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastAudioDir
RegKey10=HKCU\Software\Nero\Nero 12\Nero Express\General|OFDLastVideoDVDKey
RegKey11=HKCU\Software\Nero\Nero 12\Nero WaveEditor\Recent File List
RegKey12=HKCU\Software\Nero\Nero 12\Nero CoverDesigner\Recent File List
FileKey1=%CommonAppData%\Nero\PeakFiles|*.tmp
FileKey2=%AppData%\Nero\Nero 12\Nero Recode\AnalysisData|*.jpg;*.xml
FileKey3=%AppData%\Nero\Nero 12\Nero BackItUp\Cache|*.txt
FileKey4=%AppData%\Nero\Nero 12\Nero Burning ROM|*.log;*Burning*.dmp
FileKey5=%AppData%\Nero\Nero 12\Nero3D|Direct3D.log
FileKey6=%AppData%\Nero\Nero 12\Nero Vision|NeroVideoLog.txt
FileKey7=%SystemDrive%\Windows\SysWOW64|*-NeroRescueAgent.txt

[Nero 14 Platinum HD Suite]
ID=2375
LangSecRef=3021
Detect=HKLM\Software\Nero\Nero 15
Default=True
RegKey1=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|WorkingDir
RegKey2=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BootImageDir
RegKey3=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings\NeroIsoListView|IsoPath
RegKey4=HKCU\Software\Nero\Nero 15\Nero Burning ROM\AutoSave|LastAutoSave
RegKey5=HKCU\Software\Nero\Nero 15\Nero Burning ROM\General|LastSaveTrackPath
RegKey6=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Recent File List
RegKey7=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|BrowserDir
RegKey8=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|ImageDir
RegKey9=HKCU\Software\Nero\Nero 15\Nero Burning ROM\Settings|NeroCompilation
RegKey10=HKCU\Software\Nero\Nero 15\Nero Express\Recent File List
RegKey11=HKCU\Software\Nero\Nero 15\Nero Express\Settings|WorkingDir
RegKey12=HKCU\Software\Nero\Nero 15\Nero Express\Settings|BrowserDir
RegKey13=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastISODir
RegKey14=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastAudioDir
RegKey15=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastVideoDVDKey
RegKey16=HKCU\Software\Nero\Nero 15\Nero WaveEditor\Recent File List
RegKey17=HKCU\Software\Nero\Nero 15\Nero CoverDesigner\Recent File List
FileKey1=%CommonAppData%\Nero\PeakFiles|*.tmp
FileKey2=%AppData%\Nero\Nero 15\Nero Recode\AnalysisData|*.jpg;*.xml
FileKey3=%AppData%\Nero\Nero 15\Nero BackItUp\Cache|*.txt
FileKey4=%AppData%\Nero\Nero 15\Nero Burning ROM|*.log;*Burning*.dmp
FileKey5=%SystemDrive%\Windows\SysWOW64|*-NeroRescueAgent.txt
FileKey6=%AppData%\Nero\Nero 15\Nero3D|Direct3D.log
FileKey7=%AppData%\Nero\Nero 15\Nero Vision|NeroVideoLog.txt
FileKey8=%AppData%\Nero\Nero 15\Nero Welcome|LogFile.txt
FileKey9=%AppData%\Nero\Nero Blu-ray Player|LogFile.txt
FileKey10=%AppData%\Nero\OnlineServices|LoadData.tmp;LoadData_bak.tmp
FileKey11=%AppData%\Nero\ControlCenter|Sync.log
FileKey12=%CommonAppData%\Nero\Nero 11\ACME|ACME.log
FileKey13=%CommonAppData%\Nero\ACME|ACME.log

[Nero Video 11]
ID=2274
LangSecRef=3023
Detect=HKCU\Software\Nero\Nero 11\Nero Vision
Default=True
FileKey1=%AppData%\Nero\Nero 11\Nero Vision|*.log;*.txt
FileKey2=%AppData%\Nero\Nero 11\Nero Vision\Log|*.*
FileKey3=%AppData%\Nero\Nero 11\Nero Vision\NVFACache|*.*
FileKey4=%AppData%\Nero\Nero 11\Nero3D|*.log

[Nero Vision 10]
ID=2275
LangSecRef=3023
Detect=HKCU\Software\Nero\Nero 10\Nero Vision
Default=True
FileKey1=%AppData%\Nero\Nero 10\Nero Vision\Log|*.*
FileKey2=%AppData%\Nero\Nero 10\Nero Vision\NVFACache|*.*
FileKey3=%AppData%\Nero\Nero 10\Nero Vision|*.txt
FileKey4=%AppData%\Nero\Nero 10\Nero3D|*.log

[Nero BackItUp 2014]
ID=2370
LangSecRef=3021
Detect=HKLM\SOFTWARE\Wow6432Node\Nero\Nero 15\Nero BackItUp
Detect2=HKCU\Software\Nero\Nero 15\Nero BackItUp
Default=True
FileKey1=%AppData%\Nero\Nero 15\Nero BackItUp\Cache|*.txt

[Nero Express 2014]
ID=2371
LangSecRef=3021
Detect=HKLM\SOFTWARE\Wow6432Node\Nero\Nero 15\Nero Express
Detect2=HKCU\Software\Nero\Nero 15\Nero Express
Default=True
RegKey1=HKCU\Software\Nero\Nero 15\Nero Express\Recent File List
RegKey2=HKCU\Software\Nero\Nero 15\Nero Express\Settings|WorkingDir
RegKey3=HKCU\Software\Nero\Nero 15\Nero Express\Settings|BrowserDir
RegKey4=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastISODir
RegKey5=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastAudioDir
RegKey6=HKCU\Software\Nero\Nero 15\Nero Express\General|OFDLastVideoDVDKey

[WinAce 2.0]
ID=2069
LangSecRef=3024
Detect=HKCU\Software\e-merge\WinAce\2.0
Default=True
RegKey1=HKCU\Software\e-merge\WinAce\2.0\Favorites
RegKey2=HKCU\Software\e-merge\WinAce\2.0\MRU Items

[SpyBot Search and Destroy]
ID=2070
LangSecRef=3024
Detect=HKCU\Software\Safer Networking Limited\SpybotSnD
Default=True
FileKey1=%commonappdata%\Spybot - Search & Destroy\Logs|*.*
FileKey2=%ProgramFiles%\Spybot - Search & Destroy|advdebug.txt
FileKey3=%commonappdata%\Spybot - Search & Destroy|Statistics.ini
FileKey4=%windir%\All Users\Application Data\Spybot - Search & Destroy\Logs|*.*
FileKey5=%windir%\All Users\Application Data\Spybot - Search & Destroy|Statistics.ini
FileKey6=%commonappdata%\Spybot - Search & Destroy\Backups|*.log

[Ad-Aware SE Personal]
ID=2071
LangSecRef=3024
DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
Default=True
FileKey1=%ProgramFiles%\Lavasoft\Ad-Aware SE Personal|defs.ref.old
FileKey2=%appdata%\Lavasoft\Ad-Aware\Logs|*.txt

[Ad-Aware SE Professional]
ID=2072
LangSecRef=3024
DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe
Default=True
FileKey1=%ProgramFiles%\Lavasoft\Ad-Aware SE Professional|defs.ref.old
FileKey2=%appdata%\Lavasoft\Ad-Aware\Logs|*.txt

[Ad-Aware SE Plus]
ID=2073
LangSecRef=3024
DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware SE Plus\Ad-Aware.exe
Default=True
FileKey1=%ProgramFiles%\Lavasoft\Ad-Aware SE Plus|defs.ref.old
FileKey2=%appdata%\Lavasoft\Ad-Aware\Logs|*.txt

[Ad-Aware]
ID=2163
LangSecRef=3024
DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware\Ad-Aware.exe
Default=True
Filekey1=%commonappdata%\Lavasoft\Ad-Aware\Logs|*.log

[Webroot SpySweeper]
ID=2074
LangSecRef=3024
Detect=HKCU\Software\Webroot\SpySweeper
FileKey1=%ProgramFiles%\Webroot\Spy Sweeper\Temp|*.*
FileKey2=%appdata%\Webroot\Spy Sweeper\Logs|*Log.txt

[Driver Cleaner Pro]
ID=2075
LangSecRef=3024
DetectFile=%ProgramFiles%\Driver Cleaner Pro\DCleaner.exe
Default=True
FileKey1=%ProgramFiles%\Driver Cleaner Pro\Log|*.log

[Kazaa (Search History)]
ID=2076
LangSecRef=3022
Detect=HKCU\Software\Kazaa
Default=True
RegKey1=HKCU\Software\Kazaa\Search

[Netscape Navigator 4.x]
ID=2077
LangSecRef=3022
Detect=HKCU\Software\Netscape\Netscape Navigator\Main
Default=True
FileKey1=%ProgramFiles%\Netscape\Users\default|netscape.hst;cookies.txt
FileKey2=%ProgramFiles%\Netscape\Users\default\cache|*.*

[Microsoft Visual Studio 6.0]
ID=2078
LangSecRef=3021
Detect=HKCU\Software\Microsoft\VisualStudio\6.0
Default=True
RegKey1=HKCU\Software\Microsoft\VisualStudio\6.0\FileMRUList
RegKey2=HKCU\Software\Microsoft\VisualStudio\6.0\MenuMRUList
RegKey3=HKCU\Software\Microsoft\VisualStudio\6.0\ProjectMRUList
RegKey4=HKCU\Software\Microsoft\Visual Basic\6.0\RecentFiles

[Axialis IconWorkshop]
ID=2079
LangSecRef=3023
Detect=HKCU\Software\Axialis\IconWorkshop
Default=True
RegKey1=HKCU\Software\Axialis\IconWorkshop\Recent File List
RegKey2=HKCU\Software\Axialis\IconWorkshop\Axialis Recent Files
RegKey3=HKCU\Software\Axialis\IconWorkshop\CoolBarList
FileKey1=%appdata%\Axialis\Temporary Preview Files|*.*|RECURSE
FileKey2=%LocalAppData%\Axialis\Temporary Preview Files|*.*|RECURSE

[eMule (Search History)]
ID=2080
LangSecRef=3022
Detect=HKCU\Software\eMule
Default=True
FileKey1=%ProgramFiles%\eMule\config|AC_SearchStrings.dat
FileKey2=%LocalAppData%\eMule\config|AC_SearchStrings.dat
FileKey3=%CommonAppData%\eMule\config|AC_SearchStrings.dat

[eMule (File Hashes)]
ID=2081
LangSecRef=3022
Detect=HKCU\Software\eMule
Default=False
FileKey1=%ProgramFiles%\eMule\config|known.met;known2.met;known2_64.met
FileKey2=%LocalAppData%\eMule\config|known.met;known2.met;known2_64.met
FileKey3=%CommonAppData%\eMule\config|known.met;known2.met;known2_64.met

[WinISO]
ID=2082
LangSecRef=3024
Detect=HKLM\Software\WinISO
Default=True
RegKey1=HKLM\Software\WinISO\Reopen

[IsoBuster]
ID=2083
LangSecRef=3021
Detect=HKCU\Software\Smart Projects\IsoBuster
Default=True
RegKey1=HKCU\Software\Smart Projects\IsoBuster|ImageFilePath

[Media Player Classic]
ID=2084
LangSecRef=3023
Detect=HKCU\Software\Gabest\Media Player Classic
Default=True
RegKey1=HKCU\Software\Gabest\Media Player Classic\Recent File List
RegKey2=HKCU\Software\Gabest\Media Player Classic\Recent Dub List
RegKey3=HKCU\Software\Gabest\Media Player Classic\Capture|FileName
FileKey1=%appdata%\Media Player Classic|default.mpcpl

[BSPlayer]
ID=2085
LangSecRef=3023
Detect=HKCU\Software\BST\bsplayer
Default=True
RegKey1=HKCU\Software\BST\bsplayer|File0
RegKey2=HKCU\Software\BST\bsplayer|File1
RegKey3=HKCU\Software\BST\bsplayer|File2
RegKey4=HKCU\Software\BST\bsplayer|File3
RegKey5=HKCU\Software\BST\bsplayer|File4
RegKey6=HKCU\Software\BST\bsplayer|File5
RegKey7=HKCU\Software\BST\bsplayer|File6
RegKey8=HKCU\Software\BST\bsplayer|File7
RegKey9=HKCU\Software\BST\bsplayer|File8
RegKey10=HKCU\Software\BST\bsplayer|File9

[VLC Media Player]
ID=2164
LangSecRef=3023
Detect=HKLM\Software\VideoLAN\VLC
DetectFile=%ProgramFiles%\videolan\vlc\vlc.exe
Default=True
FileKey1=%appdata%\vlc\art\artistalbum\|*.*|REMOVESELF
FileKey2=%appdata%\vlc\art\arturl\|*.*|REMOVESELF

[MediaMonkey]
ID=2165
LangSecRef=3023
Detect=HKCU\Software\MediaMonkey
DetectFile=%ProgramFiles%\MediaMonkey\MediaMonkey.exe
Default=True
FileKey1=%localappdata%\MediaMonkey|MediaMonkey.m3u
FileKey2=%localappdata%\MediaMonkey\Previews|*.*|RECURSE

[Winamp]
ID=2166
LangSecRef=3023
Detect=HKCU\Software\Winamp
Default=True
FileKey1=%ProgramFiles%\Winamp\Plugins\ml|recent.dat
FileKey2=%ProgramFiles%\Winamp\Plugins\ml\cache|*.*|RECURSE
FileKey3=%AppData%\Winamp\Plugins\ml|recent.dat
FileKey4=%AppData%\Winamp\Plugins\ml\Cache|*.*|RECURSE

[MusicMatch Jukebox]
ID=2231
LangSecRef=3023
Detect=HKCU\Software\Musicmatch\Musicmatch Jukebox
Default=True
FileKey1=%LocalAppData%\Musicmatch\Jukebox|*.log;*log.txt
FileKey2=%ProgramFiles%\MUSICMATCH\Musicmatch Jukebox\TEMP|*.*

[Sound Forge 6.0]
ID=2086
LangSecRef=3022
Detect=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics
Default=True
RegKey1=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30110
RegKey2=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30111
RegKey3=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30112
RegKey4=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30113
RegKey5=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30114
RegKey6=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30115

[Audacity]
ID=2171
LangSecRef=3023
Detect=HKCU\Software\Audacity
Default=True
RegKey1=HKCU\Software\Audacity\Audacity\RecentFiles

[Windows Live Messenger]
ID=2087
LangSecRef=3022
Detect=HKCU\Software\Microsoft\MSNMessenger\PerPassportSettings
Default=True
RegKey1=HKCU\Software\Microsoft\MessengerService\ListCache\.NET Messenger Service
FileKey1=%AppData%\Microsoft\MSN Messenger|*.sqm|RECURSE
FileKey2=%LocalAppData%\Microsoft\Messenger|*.uccapilog;*.bak
FileKey3=%UserProfile%\Tracing|WindowsLiveMessenger*.uccapilog;WindowsLiveMessenger*.uccapilog.bak

[Skype]
ID=2205
LangSecRef=3022
DetectFile=%ProgramFiles%\Skype\Phone\Skype.exe
Default=True
FileKey1=%AppData%\Skype|temp*

[AOL Instant Messenger]
ID=2206
LangSecRef=3022
DetectFile=%ProgramFiles%\AIM\aim.exe
Default=True
FileKey1=%AppData%\acccore\caches\bart|*.*|RECURSE
FileKey2=%AppData%\acccore\caches\users|*.*|REMOVESELF
FileKey3=%LocalAppData%\AIM\Settings\aolbartcache|*.*|RECURSE

[Camfrog Video Chat]
ID=2207
LangSecRef=3022
DetectFile=%ProgramFiles%\Camfrog\Camfrog Video Chat
DetectFile2=%AppData%\Camfrog\history.db
Default=True
FileKey1=%LocalAppData%\CrashRpt|*.*|REMOVESELF
FileKey2=%AppData%\Camfrog\cache|*.*|RECURSE

[Miranda Instant Messenger]
ID=2208
LangSecRef=3022
DetectFile1=%ProgramFiles%\Miranda IM\miranda32.exe
DetectFile2=%ProgramFiles%\Miranda IM\miranda64.exe
Default=True
FileKey1=%AppData%\Miranda|*.jpg|REMOVESELF

[Pidgin]
ID=2209
LangSecRef=3022
DetectFile=%ProgramFiles%\Pidgin\pidgin.exe
Default=True
FileKey1=%AppData%\.purple\autoaccept|*.*|REMOVESELF
FileKey2=%AppData%\.purple\icons|*.*

[Yahoo Messenger]
ID=2210
LangSecRef=3022
DetectFile=%ProgramFiles%\Yahoo!\Messenger\YahooMessenger.exe
Default=True
FileKey1=%ProgramFiles%\Yahoo!\Messenger\Cache|*.*|RECURSE
FileKey2=%ProgramFiles%\Yahoo!\Messenger\IMVCache|*.*|RECURSE
FileKey3=%ProgramFiles%\Yahoo!\Messenger|ypager.log
FileKey4=%ProgramFiles%\Yahoo!\Messenger\Logs|*.*
FileKey5=%ProgramFiles%\Yahoo!\Messenger\Games|*.gif|RECURSE

[ooVoo]
ID=2211
LangSecRef=3022
DetectFile=%ProgramFiles%\ooVoo\ooVoo.exe
Default=True
FileKey1=%AppData%\ooVoo Details\cache|*.*
FileKey2=%AppData%\ooVoo Details\logs|*.*

[TeamSpeak]
ID=2212
LangSecRef=3022
DetectFile1=%ProgramFiles%\TeamSpeak 3 Client\ts3client_win32.exe
DetectFile2=%ProgramFiles%\TeamSpeak 3 Client\ts3client_win64.exe
Default=True
FileKey1=%AppData%\TS3Client\cache|*.*|REMOVESELF
FileKey2=%AppData%\TS3Client\Logs|*.*

[Ventrilo Client]
ID=2213
LangSecRef=3022
DetectFile=%ProgramFiles%\Ventrilo\Ventrilo.exe
Default=True
FileKey1=%AppData%\Ventrilo|ventrilo.log
FileKey2=%AppData%\Ventrilo\temp|*.*
FileKey3=%AppData%\Ventrilo\recordings|*.*

[Ventrilo Server]
ID=2214
LangSecRef=3022
DetectFile=%ProgramFiles%\VentSrv\ventrilo_srv.exe
Default=True
FileKey1=%ProgramFiles%\VentSrv|ventrilo_srv.log

[MySpaceIM]
ID=2230
LangSecRef=3022
Detect=HKCU\Software\MySpace\IM
Default=True
FileKey1=%AppData%\MySpace\IM\Install|*.*
FileKey2=%AppData%\MySpace\IM\Logs|*.*

[Acronis True Image]
ID=2175
LangSecRef=3024
Detect=HKCU\Software\Acronis\TrueImage
Detect2=HKCU\Software\Acronis\TrueImageHome
Detect3=HKCU\Software\Acronis\ True Image Home
Detect4=HKLM\Software\Acronis\TrueImage
Default=False
FileKey1=%AppData%\Acronis\TrueImage\Logs|*.log
FileKey2=%AppData%\Acronis\TrueImageHome\Logs|*.log
FileKey3=%CommonAppData%\Acronis\TrueImage\Logs|*.log
FileKey4=%CommonAppData%\Acronis\TrueImageHome\Logs|*.log

[WinZip]
ID=2088
LangSecRef=3024
Detect=HKCU\Software\Nico Mak Computing\WinZip
Default=True
RegKey1=HKCU\Software\Nico Mak Computing\WinZip\filemenu
RegKey2=HKCU\Software\Nico Mak Computing\WinZip\extract
RegKey3=HKCU\Software\Nico Mak Computing\WinZip\directories|DefDir
RegKey4=HKCU\Software\Nico Mak Computing\WinZip\directories|ExtractTo
RegKey5=HKCU\Software\Nico Mak Computing\WinZip\directories|gzAddDir
RegKey6=HKCU\Software\Nico Mak Computing\WinZip\directories|zDefDir
RegKey7=HKCU\Software\Nico Mak Computing\WinZip\directories|AddDir
RegKey8=HKCU\Software\Nico Mak Computing\WinZip\directories|gzExtractTo
RegKey9=HKCU\Software\Nico Mak Computing\WinZip\rrs\Opened
RegKey10=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|0
RegKey11=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|1
RegKey12=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|2
RegKey13=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|3
RegKey14=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|4
RegKey15=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|5
RegKey16=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|6
RegKey17=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|7
RegKey18=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|8
RegKey19=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|9
RegKey20=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|10
RegKey21=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|11
RegKey22=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|12
RegKey23=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|13
RegKey24=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|14
RegKey25=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|15
RegKey26=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|16
RegKey27=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|17
RegKey28=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|18
RegKey29=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|19
RegKey30=HKCU\Software\Nico Mak Computing\WinZip\mru\archives|20
FileKey1=%AppData%\WinZip\WINZIPSCANNER\Registry Cleaner|log_*.log
FileKey2=%AppData%\WinZip\WINZIPSCANNER\System Cleaner|log_*.log

[WinRAR]
ID=2089
LangSecRef=3024
Detect=HKCU\Software\WinRAR
Default=True
RegKey1=HKCU\Software\WinRAR\ArcHistory
RegKey2=HKCU\Software\WinRAR\General|LastFolder
RegKey3=HKCU\Software\WinRAR\DialogEditHistory\Arcname
RegKey4=HKCU\Software\WinRAR\DialogEditHistory\ExtrPath
RegKey5=HKCU\Software\WinRAR\DialogEditHistory\FindArcNames
RegKey6=HKCU\Software\WinRAR\DialogEditHistory\FindNames
RegKey7=HKCU\Software\WinRAR\DialogEditHistory\FindText
RegKey8=HKCU\Software\WinRAR\DialogEditHistory\ArcCmtName

[7-Zip]
ID=2090
LangSecRef=3024
Default=True
Detect=HKCU\Software\7-Zip\
RegKey1=HKCU\Software\7-Zip\Compression\ArcHistory
RegKey2=HKCU\Software\7-Zip\Extraction\PathHistory
RegKey3=HKCU\Software\7-Zip\FM|CopyHistory
RegKey4=HKCU\Software\7-Zip\FM|FolderHistory
RegKey5=HKCU\Software\7-Zip\FM|PanelPath0
RegKey6=HKCU\Software\7-Zip\Compression|ArcHistory
RegKey7=HKCU\Software\7-Zip\Extraction|PathHistory

[BitZipper]
ID=2270
LangSecRef=3024
Detect=HKCU\Software\Bitberry\BitZipper
Default=True
RegKey1=HKCU\Software\Bitberry\BitZipper\Open
RegKey2=HKCU\Software\Bitberry\BitZipper\Preferences|ExtractLastFolder
RegKey3=HKCU\Software\Bitberry\BitZipper\Preferences|AddLastFolder
RegKey4=HKCU\Software\Bitberry\BitZipper\Preferences|NewLastFolder
RegKey5=HKCU\Software\Bitberry\BitZipper\Preferences|OpenLastFolder
RegKey6=HKCU\Software\Bitberry\BitZipper\Preferences\FolderMRU
RegKey7=HKCU\Software\Bitberry\BitZipper\Preferences\FilterMRU

[PowerArchiver]
ID=2091
LangSecRef=3024
Detect=HKCU\Software\PowerArchiver
Default=True
RegKey1=HKCU\Software\PowerArchiver\Files|Active_File1
RegKey2=HKCU\Software\PowerArchiver\Files|Active_File2
RegKey3=HKCU\Software\PowerArchiver\Files|Active_File3
RegKey4=HKCU\Software\PowerArchiver\Files|Active_File4
RegKey5=HKCU\Software\PowerArchiver\Files|Active_File5
RegKey6=HKCU\Software\PowerArchiver\Files|Extract1
RegKey7=HKCU\Software\PowerArchiver\Files|Extract2
RegKey8=HKCU\Software\PowerArchiver\Files|Extract3
RegKey9=HKCU\Software\PowerArchiver\Files|Extract4
RegKey10=HKCU\Software\PowerArchiver\Files|Extract5
RegKey11=HKCU\Software\PowerArchiver\Files|Last open dir
RegKey12=HKCU\Software\PowerArchiver\Files|Last backup dir
RegKey13=HKCU\Software\PowerArchiver\Files|Last add dir

[PowerArchiver 2013]
ID=2388
LangSecRef=3024
Detect=HKLM\SOFTWARE\PowerArchiverInt
Default=True
RegKey1=HKCU\Software\PowerArchiverInt\Files|Last open dirW
RegKey2=HKCU\Software\PowerArchiverInt\Files|Last backup dirW
RegKey3=HKCU\Software\PowerArchiverInt\Files|Last add dirW
RegKey4=HKCU\Software\PowerArchiverInt\Files|Active_File1W
RegKey5=HKCU\Software\PowerArchiverInt\Files|Active_File2W
RegKey6=HKCU\Software\PowerArchiverInt\Files|Active_File3W
RegKey7=HKCU\Software\PowerArchiverInt\Files|Active_File4W
RegKey8=HKCU\Software\PowerArchiverInt\Files|Active_File5W
RegKey9=HKCU\Software\PowerArchiverInt\Files|Active_File6W
RegKey10=HKCU\Software\PowerArchiverInt\Files|Active_File7W
RegKey11=HKCU\Software\PowerArchiverInt\Files|Active_File8W
RegKey12=HKCU\Software\PowerArchiverInt\Files|Active_File9W
RegKey13=HKCU\Software\PowerArchiverInt\Files|Active_File10W
RegKey14=HKCU\Software\PowerArchiverInt\Files|Active_File11W
RegKey15=HKCU\Software\PowerArchiverInt\Files|Active_File12W
RegKey16=HKCU\Software\PowerArchiverInt\Files|Active_File13W
RegKey17=HKCU\Software\PowerArchiverInt\Files|Active_File14W
RegKey18=HKCU\Software\PowerArchiverInt\Files|Active_File15W
RegKey19=HKCU\Software\PowerArchiverInt\Files|Extract1W
RegKey20=HKCU\Software\PowerArchiverInt\Files|Extract2W
RegKey21=HKCU\Software\PowerArchiverInt\Files|Extract3W
RegKey22=HKCU\Software\PowerArchiverInt\Files|Extract4W
RegKey23=HKCU\Software\PowerArchiverInt\Files|Extract5W
RegKey24=HKCU\Software\PowerArchiverInt\Files|Extract6W
RegKey25=HKCU\Software\PowerArchiverInt\Files|Extract7W
RegKey26=HKCU\Software\PowerArchiverInt\Files|Extract8W
RegKey27=HKCU\Software\PowerArchiverInt\Files|Extract9W
RegKey28=HKCU\Software\PowerArchiverInt\Files|Extract10W
RegKey29=HKCU\Software\PowerArchiverInt\Files|SelDir1W
RegKey30=HKCU\Software\PowerArchiverInt\Files|SelDir2W
RegKey31=HKCU\Software\PowerArchiverInt\Files|SelDir3W
RegKey32=HKCU\Software\PowerArchiverInt\Files|SelDir4W
RegKey33=HKCU\Software\PowerArchiverInt\Files|SelDir5W
RegKey34=HKCU\Software\PowerArchiverInt\Files|BFile1W
RegKey35=HKCU\Software\PowerArchiverInt\Files|BFile2W
RegKey36=HKCU\Software\PowerArchiverInt\Files|BFile3W
RegKey37=HKCU\Software\PowerArchiverInt\Files|BFile4W
RegKey38=HKCU\Software\PowerArchiverInt\Files|BFile5W

[ZipMagic]
ID=2092
LangSecRef=3024
Default=True
Detect=HKCU\Software\Mijenix\ZipMagic
RegKey1=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\Recent
RegKey2=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\Archive Manager\UnZip To
RegKey3=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\UnZip To
RegKey4=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\Zip To

[PicoZip]
ID=2093
LangSecRef=3024
Detect=HKCU\Software\PicoZip
Default=True
RegKey1=HKCU\Software\PicoZip\MRU Items
RegKey2=HKCU\Software\PicoZip\MRUExtract

[PKZip]
ID=2312
LangSecRef=3024
Detect=HKCU\Software\PKWARE\PKZIP70
Default=True
RegKey1=HKCU\Software\PKWARE\PKZIP70\History

[Java]
ID=2094
LangSecRef=3022
Detect=HKLM\SOFTWARE\JavaSoft\Java Plug-in
Detect2=HKLM\SOFTWARE\JavaSoft\Java Runtime Environment
Detect3=HKLM\SOFTWARE\JavaSoft\Java Web Start
Default=False
FileKey1=%AppData%\Sun\Java\Deployment\cache|*.*|RECURSE
FileKey2=%AppData%\Sun\Java\Deployment\javaws\cache|*.*|RECURSE
FileKey3=%AppData%\Sun\Java\Deployment\Log|*.*
FileKey4=%AppData%\Sun\Java\Deployment\tmp|*.*|RECURSE
FileKey5=%LocalLowAppData%\Sun\Java\Deployment\cache|*.*|RECURSE
FileKey6=%LocalLowAppData%\Sun\Java\Deployment\Log|*.*
FileKey7=%WinDir%\System32|jupdate*.log
FileKey8=%WinDir%\SysWOW64|jupdate*.log
FileKey9=%AppData%\java\webview|*.*
ExcludeKey1=FILE|%AppData%\java\webview\.lock

[FreshDownload]
ID=2095
LangSecRef=3022
Detect=HKCU\Software\FreshDevices\FreshDownload
Default=True
RegKey1=HKCU\Software\FreshDevices\FreshDownload\History

[Windows Movie Maker]
ID=2096
LangSecRef=3023
Detect=HKCU\Software\Microsoft\MovieMaker
Default=True
FileKey1=%localappdata%\Microsoft\Movie Maker|MEDIATAB0.DAT

[TextPad]
ID=2097
LangSecRef=3021
Detect=HKCU\Software\Helios\TextPad 4
Default=True
RegKey1=HKCU\Software\Helios\TextPad 4\Recent File List
RegKey2=HKCU\Software\Helios\TextPad 4\Recent Strings

[VirtualDub]
ID=2098
LangSecRef=3023
Default=True
Detect=HKCU\Software\Freeware\VirtualDub
RegKey1=HKCU\Software\Freeware\VirtualDub\MRU List

[RegEdit]
ID=2099
LangSecRef=3025
Default=True
RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit|LastKey

[Game Explorer]
ID=2174
LangSecRef=3025
DetectOS=6.0
DetectFile=%%LocalAppData%\Microsoft Games
DetectFile2=%LocalAppData%\Microsoft\Windows\GameExplorer
DetectFile3=%LocalAppData%\Microsoft\GFWLive
Default=False
FileKey1=%LocalAppData%\Microsoft Games|*.xml.bak|RECURSE
FileKey2=%LocalAppData%\Microsoft\Windows\GameExplorer\GameStatistics|*.*|REMOVESELF
FileKey3=%LocalAppData%\Microsoft\GFWLive|*.log|RECURSE

[AceHTML 5]
ID=2100
LangSecRef=3024
Default=True
Detect=HKCU\Software\Visicom Media\AceHTML 5 Freeware
RegKey1=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last URLs
RegKey2=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last Projects
RegKey3=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last Open
RegKey4=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last Files

[Alcohol 120%]
ID=2101
LangSecRef=3024
Detect=HKCU\Software\Alcohol Soft\Alcohol 120%
Default=True
RegKey1=HKCU\Software\Alcohol Soft\Alcohol 120%\MountedMRU
RegKey2=HKCU\Software\Alcohol Soft\Alcohol 120%\Basic\Image Finder|Current Dir
RegKey3=HKCU\Software\Alcohol Soft\Alcohol 120%\Options\Burning Wizard|ImageFile
FileKey1=%ProgramFiles%\Alcohol Soft\Alcohol 120|alcohol.log

[Alcohol 52%]
ID=2373
LangSecRef=3023
Detect=HKCU\Software\Alcohol Soft\Alcohol 52%
Default=True
RegKey1=HKCU\Software\Alcohol Soft\Alcohol 52%\MountedMRU
RegKey2=HKCU\Software\Alcohol Soft\Alcohol 52%\Options\Image Making Wizard|ImageFilePath
RegKey3=HKCU\Software\Alcohol Soft\Alcohol 52%\Options\Image Making Wizard|ImageFileName
RegKey4=HKCU\Software\Alcohol Soft\Alcohol 52%\Basic\Image Finder|Current Dir

[LeechGet]
ID=2102
LangSecRef=3022
Default=True
Detect=HKCU\Software\Cronosoft\LeechGet
RegKey1=HKCU\Software\Cronosoft\LeechGet\History

[GetRight]
ID=2103
LangSecRef=3022
Default=True
Detect=HKCU\Software\Headlight\GetRight\
RegKey1=HKCU\Software\Headlight\GetRight\MRU
RegKey2=HKCU\Software\Headlight\GetRight\TypedURLS
RegKey3=HKCU\Software\Headlight\GetRight\Recent File List
FileKey1=%ProgramFiles%\GetRight|GetRight.hst

[Download Accelerator Plus]
ID=2104
LangSecRef=3022
Detect=HKCU\Software\SpeedBit\Download Accelerator
DetectFile=%CommonAppData%\Speedbit\DAP
Default=True
RegKey1=HKLM\SOFTWARE\SpeedBit\Download Accelerator\FileList
RegKey2=HKCU\Software\SpeedBit\Download Accelerator\HistoryCombo
RegKey3=HKCU\Software\SpeedBit\Download Accelerator\ADS\SecondMedia
FileKey1=%ProgramFiles%\DAP\Temp|*.*
FileKey2=%ProgramFiles%\DAP\Ads|*.*
FileKey3=%ProgramFiles%\DAP\Log|*.*
FileKey4=%CommonAppData%\Speedbit\DAP\Log|*.*
FileKey5=%CommonAppData%\Speedbit\DAP\temp|*.tmp
FileKey6=%CommonAppData%\Speedbit\DAP\History|*.dat|RECURSE

[Free Download Manager]
ID=2194
LangSecRef=3022
DetectFile=%ProgramFiles%\Free Download Manager\fdm.exe
DetectFile2=%AppData%\Free Download Manager
Default=True
RegKey1=HKCU\Software\FreeDownloadManager.ORG\Free Download Manager\Settings|Find
RegKey2=HKCU\Software\FreeDownloadManager.ORG\Free Download Manager\Settings|History
FileKey1=%AppData%\Free Download Manager|*.bak;dlmgrsi.sav;downloads.his.sav;history.sav;spider.sav

[Internet Download Accelerator]
ID=2195
LangSecRef=3022
Detect=HKCU\Software\2VG\Internet Download Accelerator
Default=True
FileKey1=%AppData%\Internet Download Accelerator|history.xml
FileKey2=%AppData%\Internet Download Accelerator\temp|*.hnt;lastnews.*;playflv.html
FileKey3=%AppData%\Internet Download Accelerator\temp\Preview|*.*
FileKey4=%AppData%\Internet Download Accelerator\lists|default.xml

[Internet Download Manager]
ID=2196
LangSecRef=3022
Detect=HKLM\Software\Internet Download Manager
Default=True
FileKey1=%AppData%\IDM|UrlHistory*.txt;foldresHistory.txt
FileKey2=%AppData%\IDM\DwnlData\*|Log.log
FileKey3=%CommonAppData%\IDM\Cache|*.*
FileKey4=%AppData%\IDM\Grabber\Projects|project*.bak

[Orbit Downloader]
ID=2234
LangSecRef=3022
Detect=HKLM\SOFTWARE\Orbit
Default=True
FileKey1=%AppData%\Orbit|fileinfo.dat;filesave.dat

[Morpheus]
ID=2105
LangSecRef=3022
Default=True
Detect=HKCU\Software\Morpheus
RegKey1=HKCU\Software\Morpheus\Morpheus\Recent File List

[VNCViewer 3]
ID=2106
LangSecRef=3024
Default=True
Detect=HKCU\Software\ORL\VNCviewer
RegKey1=HKCU\Software\ORL\VNCviewer\MRU

[VNCViewer 4]
ID=2107
LangSecRef=3024
Default=True
Detect=HKCU\Software\RealVNC\VNCviewer4
RegKey1=HKCU\Software\RealVNC\VNCviewer4\MRU

[DVD Shrink]
ID=2108
LangSecRef=3023
Default=True
Detect=HKCU\Software\DVD Shrink\
RegKey1=HKCU\Software\DVD Shrink\DVD Shrink 3.2\Recent Targets
RegKey2=HKCU\Software\DVD Shrink\DVD Shrink 3.2\Recent File List
RegKey3=HKCU\Software\DVD Shrink\DVDSHRINK103\TargetFiles
RegKey4=HKCU\Software\DVD Shrink\DVDSHRINK103\SourceFolders

[Tivo Desktop]
ID=2109
LangSecRef=3023
Default=True
Detect=HKCU\SOFTWARE\TiVo\Desktop
FileKey1=%localappdata%\TiVo Desktop\Cache|*.*

[CA Anti-Virus]
ID=2110
LangSecRef=3024
Default=True
Detect=HKLM\SOFTWARE\ComputerAssociates\Anti-Virus
FileKey1=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus|*.log;*log.txt
FileKey2=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ArcTemp|*.tmp
FileKey3=%CommonAppData%\CA\Consumer\AV|*.tmp;*.txt|RECURSE
FileKey4=%CommonAppData%\CA\Consumer\CCube|*.tmp;*.txt|RECURSE
FileKey5=%CommonAppData%\CA\Consumer\ISS\FeedStore|*.txt|RECURSE
FileKey6=%ProgramFiles%\CA\CA Internet Security Suite\CA Anti-Virus\ArcTemp|*.*
FileKey7=%ProgramFiles%\CA\CA Internet Security Suite\CA Anti-Virus\tmp|*.*

[ZoneAlarm (Logs)]
ID=2111
LangSecRef=3022
Detect=HKLM\SOFTWARE\Zone Labs\ZoneAlarm
Default=True
FileKey1=%windir%\Internet Logs|ZALog*.*

[Google Earth]
ID=2112
LangSecRef=3021
Detect=HKLM\SOFTWARE\Google\Google Earth Plus
Detect2=HKLM\SOFTWARE\Google\Google Earth Pro
Detect3=HKCU\SOFTWARE\Google\Google Earth Plus
Detect4=HKCU\SOFTWARE\Google\Google Earth Pro
Default=True
RegKey1=HKCU\Software\Google\Google Earth Plus\Search
RegKey2=HKCU\Software\Google\Google Earth Pro\Search
FileKey1=%AppData%\Google\GoogleEarth|dbcache.dat
FileKey2=%AppData%\Google\GoogleEarth|dbcache.dat.index
FileKey3=%LocalAppData%\Google\GoogleEarth|dbcache.dat
FileKey4=%localappdata%\Google\GoogleEarth|dbcache.dat.index
FileKey5=%LocalLowAppData%\Google\GoogleEarth|dbcache.dat
FileKey6=%LocalLowAppData%\Google\GoogleEarth|dbcache.dat.index
FileKey7=%LocalLowAppData%\Google\GoogleEarth\webdata|*.*
FileKey8=%LocalLowAppData%\Google\GoogleEarth\unified_cache_leveldb_*|*.*

[PerfectDisk 7.0]
ID=2114
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\7.0
Default=True
FileKey1=%commonappdata%\Raxco\PerfectDisk\7.0|PerfectDisk.log

[Daemon Tools]
ID=2187
LangSecRef=3024
Detect=HKCU\Software\DT Soft
DetectFile=%AppData%\DAEMON Tools Lite\
DetectFile2=%AppData%\DAEMON Tools Pro\
DetectFile3=%AppData%\DAEMON Tools\
Default=True
FileKey1=%AppData%\Daemon Tools lite\iconscache|*.*
FileKey2=%AppData%\DAEMON Tools Lite|imagecatalog.xml
FileKey3=%AppData%\DAEMON Tools|imagecatalog.xml
FileKey4=%AppData%\DAEMON Tools Pro|imagecatalog.xml

[Vuze]
ID=2115
LangSecRef=3022
Detect=HKCU\Software\Azureus
DetectFile=%AppData%\Azureus\.lock
Default=True
FileKey1=%AppData%\Azureus\logs|*.*|RECURSE
FileKey2=%AppData%\Azureus\logs\save|*.log
FileKey3=%AppData%\Azureus\tmp|*.*|RECURSE
FileKey4=%AppData%\Azureus|*.bak;*.log
FileKey5=%AppData%\Azureus\active|*.bak

[BitTorrent]
ID=2173
LangSecRef=3022
Detect=HKCU\Software\BitTorrent\BitTorrent
DetectFile=%ProgramFiles%\BitTorrent\BitTorrent.exe
Default=true
FileKey1=%appdata%\BitTorrent|*.old

[FrostWire]
ID=2215
LangSecRef=3022
DetectFile=%ProgramFiles%\FrostWire\FrostWire.exe
Default=True
FileKey1=%AppData%\FrostWire|*.cache;*.bak;gnutella.net;checkandupdate.txt
FileKey2=%AppData%\FrostWire\image_cache|*.*|REMOVESELF

[uTorrent]
ID=2216
LangSecRef=3022
DetectFile=%ProgramFiles%\uTorrent\uTorrent.exe
Detect=HKCU\Software\BitTorrent\uTorrent
Default=True
FileKey1=%ProgramFiles%\uTorrent|*.dmp
FileKey2=%AppData%\utorrent|*.old
FileKey3=%AppData%\utorrent\dlimagecache|*.*|RECURSE
FileKey4=%AppData%\uTorrent\ie|*.tmp
FileKey5=%LocalLowAppData%\uTorrentBar\CacheIcons|*.*

[Shareaza]
ID=2217
LangSecRef=3022
DetectFile=%ProgramFiles%\Shareaza Applications\Shareaza\Shareaza.exe
Default=True
FileKey1=%LocalAppData%\Shareaza\Temp|*.*
FileKey2=%LocalAppData%\Shareaza|shistory.im
FileKey3=%LocalAppData%\Shareaza\Artwork|*.*

[iMesh]
ID=2218
LangSecRef=3022
DetectFile=%ProgramFiles%\iMesh Applications\iMesh\iMesh.exe
Default=True
FileKey1=%LocalAppData%\iMesh\Temp|*.*
FileKey2=%LocalAppData%\iMesh|shistory.im
FileKey3=%LocalAppData%\iMesh\Artwork|*.*

[BearShare]
ID=2219
LangSecRef=3022
DetectFile=%ProgramFiles%\BearShare Applications\BearShare\BearShare.exe
Default=True
FileKey1=%LocalAppData%\BearShare\Temp|*.*
FileKey2=%LocalAppData%\BearShare|shistory.im
FileKey3=%LocalAppData%\BearShare\Artwork|*.*

[DC++]
ID=2220
LangSecRef=3022
DetectFile=%ProgramFiles%\DC++\DCPlusPlus.exe
Default=True
FileKey1=%ProgramFiles%\DC++|files.xml.bz2
FileKey2=%ProgramFiles%\DC++\FileLists|*.*
FileKey3=%ProgramFiles%\DC++\Logs|*.*
FileKey4=%LocalAppData%\DC++|files.xml.bz2
FileKey5=%LocalAppData%\DC++\FileLists|*.*
FileKey6=%LocalAppData%\DC++\Logs|*.*

[Ares]
ID=2221
LangSecRef=3022
DetectFile=%ProgramFiles%\Ares\Ares.exe
Default=True
Regkey1=HKCU\Software\Ares\Search.History

[CuteFTP Pro 7.0]
ID=2116
LangSecRef=3022
Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 7 Professional
Default=True
FileKey1=%localappdata%\GlobalSCAPE\CuteFTP Pro\7.0\Cache|*.*|RECURSE
FileKey2=%localappdata%\GlobalSCAPE\CuteFTP Pro\7.0\CacheThumbs|*.*|RECURSE

[CuteFTP Home 7.0]
ID=2117
LangSecRef=3022
Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 7 Home
Default=True
FileKey1=%localappdata%\GlobalSCAPE\CuteFTP\7.0\Cache|*.*|RECURSE
FileKey2=%localappdata%\GlobalSCAPE\CuteFTP\7.0\CacheThumbs|*.*|RECURSE

[CuteFTP Pro 8.0]
ID=2118
LangSecRef=3022
Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 8 Professional
Default=True
FileKey1=%localappdata%\GlobalSCAPE\CuteFTP Pro\8.0\Cache|*.*|RECURSE
FileKey2=%localappdata%\GlobalSCAPE\CuteFTP Pro\8.0\CacheThumbs|*.*|RECURSE

[CuteFTP Home 8.0]
ID=2119
LangSecRef=3022
Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 8 Home
Default=True
RegKey1=HKCU\Software\GlobalSCAPE\CuteFTP 8 Home\Recent|LastSiteID
FileKey1=%localappdata%\GlobalSCAPE\CuteFTP Home\8.0\Cache|*.*|RECURSE
FileKey2=%localappdata%\GlobalSCAPE\CuteFTP Home\8.0\CacheThumbs|*.*|RECURSE
FileKey3=%AppData%\GlobalSCAPE\CuteFTP Home\8.0|*.log|RECURSE

[CuteFTP 9]
ID=2355
LangSecRef=3022
Detect=HKU\.DEFAULT\Software\Globalscape\CuteFTP 9
Detect2=HKLM\SOFTWARE\Wow6432Node\Globalscape\CuteFTP 9
Default=True
RegKey1=HKCU\Software\Globalscape\CuteFTP 9\Recent|LastSiteID
FileKey1=%LocalAppData%\Globalscape\CuteFTP\9.0\Cache|*.*
FileKey2=%LocalAppData%\Globalscape\CuteFTP\9.0\CacheThumbs|*.*
FileKey3=%AppData%\Globalscape\CuteFTP\9.0\Logs|*-*_*.log
FileKey4=%CommonAppData%\Globalscape\CuteFTP 9|TRB_BACKUP.dat;TR_BACKUP.dat

[Core FTP]
ID=2226
LangSecRef=3022
Detect=HKCU\Software\FTPWare
Default=True
FileKey1=%AppData%\CoreFTP|*.dir
FileKey2=%ProgramFiles%\CoreFTP|COREFTP.LOG

[FileZilla]
ID=2227
LangSecRef=3022
Detect=HKLM\SOFTWARE\FileZilla Client
Detect2=HKCU\SOFTWARE\FileZilla Client
Default=True
FileKey1=%AppData%\FileZilla|recentservers.xml;search.xml

[SmartFTP]
ID=2228
LangSecRef=3022
Detect=HKCU\Software\SmartFTP
Default=True
RegKey1=HKCU\Software\SmartFTP\Client 2.0\Settings\History\Items
FileKey1=%AppData%\SmartFTP\Client 2.0\Log|*.*|RECURSE
FileKey2=%AppData%\SmartFTP\Client 2.0\Storage|*.*

[ClamWin]
ID=2120
LangSecRef=3024
Detect=HKCU\Software\ClamWin
Default=True
FileKey1=%allusersprofile%\.clamwin\log|*.*
FileKey2=%userprofile%\.clamwin\log|*.*
FileKey3=%windir%\All Users\.clamwin\log|*.*

[Ewido Anti-Malware (Log)]
ID=2121
LangSecRef=3024
Detect=HKLM\Software\ewido
Default=True
FileKey1=%ProgramFiles%\Ewido\Security Suite|logfile.txt
FileKey2=%ProgramFiles%\Ewido Anti-Malware|logfile.txt

[AVG Anti-Spyware]
ID=2122
LangSecRef=3024
Detect=HKLM\SOFTWARE\Grisoft\AVGAntiSpyware
Default=True
FileKey1=%ProgramFiles%\Grisoft\AVG Anti-Spyware 7.5|logfile.txt

[Malwarebytes Anti-Malware]
ID=2162
LangSecRef=3024
Detect=HKLM\Software\Malwarebytes' Anti-Malware
DetectFile=%ProgramFiles%\Malwarebytes' Anti-Malware\mbam.exe
Default=False
FileKey1=%appdata%\Malwarebytes\Malwarebytes' Anti-Malware\Logs|*.txt
FileKey2=%appdata%\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine|*.*

[Spyware Terminator]
ID=2262
LangSecRef=3024
Detect=HKCU\Software\Spyware Terminator
Default=False
FileKey1=%ProgramFiles%\Spyware Terminator\update|*.*
FileKey2=%AppData%\Spyware Terminator\Reports|*.*

[SUPERAntiSpyware]
ID=2263
LangSecRef=3024
Detect=HKLM\Software\SUPERAntiSpyware.com\SUPERAntiSpyware
Default=True
FileKey1=%AppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\Logs|*.log
FileKey2=%AppData%\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs|*.dmp;*.SDB

[A-Squared]
ID=2229
LangSecRef=3024
Detect=HKLM\Software\Emsi Software GmbH\a-squared Free
Default=True
FileKey1=%MyDocuments%\a-squared Free\Reports|*.txt

[Foxit Reader]
ID=2123
LangSecRef=3021
Detect=HKCU\Software\Foxit Software\Foxit Reader
Default=True
RegKey1=HKCU\Software\Foxit Software\Foxit Reader\Recent File List
RegKey2=HKCU\Software\Foxit Software\Foxit Reader\History

[Foxit Reader 6.0]
ID=2332
LangSecRef=3021
Detect=HKCU\Software\Foxit Software\Foxit Reader 6.0
Default=True
RegKey1=HKCU\Software\Foxit Software\Foxit Reader 6.0\Recent File List
RegKey2=HKCU\Software\Foxit Software\Foxit Reader 6.0\RecentFiles
RegKey3=HKCU\Software\Foxit Software\Foxit Reader 6.0\Preferences\History\LastOpen
RegKey4=HKCU\Software\Foxit Software\Foxit Reader 6.0\Preferences\History\LastSession
RegKey5=HKCU\Software\Foxit Software\Foxit Reader 6.0\Preferences\Others|csInitialOpenDir
RegKey6=HKCU\Software\Foxit Software\Foxit Reader 6.0\ImageTool|ImageDefPath
FileKey1=%LocalAppData%\Foxit Reader\|*_old.DMP
FileKey2=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud\DownloadCache|*.cache
FileKey3=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud\FileIDCache|*.ids
FileKey4=%AppData%\Foxit Software\Foxit Reader\Foxit Cloud|foxitcloud.log

[Paint.NET]
ID=2124
LangSecRef=3021
Detect=HKCU\Software\Paint.NET
Default=True
RegKey1=HKCU\Software\Paint.NET|MRU0
RegKey2=HKCU\Software\Paint.NET|MRU1
RegKey3=HKCU\Software\Paint.NET|MRU2
RegKey4=HKCU\Software\Paint.NET|MRU3
RegKey5=HKCU\Software\Paint.NET|MRU4
RegKey6=HKCU\Software\Paint.NET|MRU5
RegKey7=HKCU\Software\Paint.NET|MRU6
RegKey8=HKCU\Software\Paint.NET|MRU7
RegKey9=HKCU\Software\Paint.NET|MRU0Thumb
RegKey10=HKCU\Software\Paint.NET|MRU1Thumb
RegKey11=HKCU\Software\Paint.NET|MRU2Thumb
RegKey12=HKCU\Software\Paint.NET|MRU3Thumb
RegKey13=HKCU\Software\Paint.NET|MRU4Thumb
RegKey14=HKCU\Software\Paint.NET|MRU5Thumb
RegKey15=HKCU\Software\Paint.NET|MRU6Thumb
RegKey16=HKCU\Software\Paint.NET|MRU7Thumb

[OpenOffice 1.14]
ID=2125
LangSecRef=3021
DetectFile=%ProgramFiles%\OpenOffice.org1.1.4\program\soffice.exe
Default=True
FileKey1=%ProgramFiles%\OpenOffice.org1.1.4\user\registry\data\org\openoffice\Office|Common.xcu

[OpenOffice 2.0]
ID=2126
LangSecRef=3021
Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\2.0
Default=True
FileKey1=%appdata%\OpenOffice.org2\user\registry\data\org\openoffice\Office|Common.xcu

[OpenOffice 2.1]
ID=2127
LangSecRef=3021
Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\2.1
Default=True
FileKey1=%appdata%\OpenOffice.org2\user\registry\data\org\openoffice\Office|Common.xcu

[OpenOffice 3]
ID=2143
LangSecRef=3021
Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.0
Detect2=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.1
Detect3=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.2
Detect4=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.0
Detect5=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.1
Detect6=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.2
Detect7=HKCU\SOFTWARE\OpenOffice.org\OpenOffice.org\3.3
Detect8=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.3
Default=True
FileKey1=%appdata%\OpenOffice.org\3\user\registry\data\org\openoffice\Office|Histories.xcu

[OpenOffice 4]
ID=2356
LangSecRef=3021
Detect=HKLM\SOFTWARE\Wow6432Node\OpenOffice\OpenOffice\4.0.0
Detect2=HKLM\SOFTWARE\OpenOffice\OpenOffice\4.0.0
Default=True
FileKey1=%AppData%\OpenOffice\4\user\backup|*.ubackup
FileKey2=%AppData%\OpenOffice\4\user\temp|document_io_logring.txt
FileKey3=%AppData%\OpenOffice\4\user\uno_packages\cache|log.txt;*.cache
FileKey4=%ProgramFiles%\OpenOffice 4\presets\backup|*.cbackup
FileKey5=%ProgramFiles%\OpenOffice 4\presets\temp|*.tmp
FileKey6=%ProgramFiles%\OpenOffice 4\presets\uno_packages\cache|log.txt

[Grisoft AVG 7.0]
ID=2128
LangSecRef=3024
Detect=HKLM\SOFTWARE\Grisoft\Avg7
Default=True
FileKey1=%commonappdata%\Grisoft\Avg7Data|*.log
FileKey2=%commonappdata%\Grisoft\Avg7Data\upd7bin|*.*
FileKey3=%commonappdata%\Grisoft\Avg7Data\$history|*.*
FileKey4=%commonappdata%\Grisoft\Avg7Data\avg7upd|*.log
FileKey5=%windir%\All Users\Application Data\Grisoft\Avg7Data\upd7bin|*.*
FileKey6=%windir%\All Users\Application Data\Grisoft\Avg7Data\avg7upd|$history
FileKey7=%windir%\All Users\Application Data\Grisoft\Avg7Data\avg7upd|*.log
FileKey8=%windir%\All Users\Application Data\Grisoft\Avg7Data|*.log
FileKey9=%windir%\Application Data\AVG7\Log|*.log

[AVG AntiVirus 8.0]
ID=2141
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\Avg8
Default=True
FileKey1=%CommonAppData%\avg8\Log|*.log;*.xml
FileKey2=%CommonAppData%\avg8\scanlogs|*.log
FileKey3=%CommonAppData%\avg8\update\backup|*.*
FileKey4=%CommonAppData%\avg8\Emc\Log|*.log

[AVG AntiVirus 9.0]
ID=2145
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\Avg9
Default=True
FileKey1=%CommonAppData%\avg9\Log|*.log;*.xml
FileKey2=%CommonAppData%\avg9\scanlogs|*.log
FileKey3=%CommonAppData%\avg9\update\backup|*.*
FileKey4=%CommonAppData%\avg9\Emc\Log|*.log

[AVG AntiVirus 10.0]
ID=2170
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\Avg10
Default=True
FileKey1=%CommonAppData%\avg10\Log|*.log;*.xml
FileKey2=%CommonAppData%\avg10\scanlogs|*.log
FileKey3=%CommonAppData%\avg10\update\backup|*.*
FileKey4=%CommonAppData%\avg10\Emc\Log|*.log
FileKey5=%CommonAppData%\avg10\IDS\config|*List.zip.bak
FileKey6=%CommonAppData%\avg10\IDS\profile|globalLoadable.bak
FileKey7=%CommonAppData%\avg10\Temp|*.tmp

[AVG AntiVirus 2012]
ID=2268
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\AVG2012
Default=True
FileKey1=%CommonAppData%\AVG2012\Log|*.log;history.xml
FileKey2=%CommonAppData%\AVG2012\scanlogs|*.log
FileKey3=%CommonAppData%\AVG2012\update\backup|*.*
FileKey4=%CommonAppData%\AVG2012\Emc\Log|*.log
FileKey5=%CommonAppData%\AVG2012\IDS\config|*List.zip.bak
FileKey6=%CommonAppData%\AVG2012\IDS\profile|globalLoadable.bak
FileKey7=%CommonAppData%\AVG2012\Temp|*.tmp

[AVG AntiVirus 2013]
ID=2313
LangSecRef=3024
Detect=HKLM\SOFTWARE\AVG\AVG2013
Default=True
FileKey1=%CommonAppData%\AVG2013\Log|*.log;history.xml
FileKey2=%CommonAppData%\AVG2013\scanlogs|*.log
FileKey3=%CommonAppData%\AVG2013\update\backup|*.*
FileKey4=%CommonAppData%\AVG2013\Emc\Log|*.log
FileKey5=%CommonAppData%\AVG2013\IDS\config|*List.zip.bak
FileKey6=%CommonAppData%\AVG2013\IDS\profile|globalLoadable.bak
FileKey7=%CommonAppData%\AVG2013\Temp|*.tmp

[AntiVir Desktop]
ID=2138
LangSecRef=3024
Detect=HKLM\SOFTWARE\Avira\AntiVir Desktop
Default=True
FileKey1=%CommonAppData%\Avira\AntiVir Desktop|*.old
FileKey2=%CommonAppData%\Avira\AntiVir Desktop|*.tmp
FileKey3=%CommonAppData%\Avira\Antivir Desktop\BACKUP\FAILSAFE|*.tmp
FileKey4=%CommonAppData%\Avira\AntiVir Desktop\LOGFILES|*.*
FileKey5=%CommonAppData%\Avira\AntiVir Desktop\TEMP|*.*
FileKey6=%CommonAppData%\Avira\My Avira\Logfiles|*.*
FileKey7=%CommonAppData%\Avira\My Avira\Temp|*.*
FileKey8=%ProgramFiles%\Avira\AntiVir Desktop|*.old
FileKey9=%ProgramFiles%\Avira\AntiVir Desktop|*.tmp
FileKey10=%ProgramFiles%\Avira\AntiVir Desktop\FAILSAFE|*.tmp

[Avast! Antivirus 4]
ID=2160
LangSecRef=3024
Detect=HKCU\Software\ALWIL Software\Avast\4.0
Default=True
FileKey1=%ProgramFiles%\Alwil Software\Avast4\DATA\report|avast.xsl;Resident protection.txt;Simple user interface.txt;Simple user interface*.xml
FileKey2=%ProgramFiles%\Alwil Software\Avast4\DATA\log|*.*

[Avast! Antivirus 5]
ID=2161
LangSecRef=3024
Detect=HKCU\Software\ALWIL Software\Avast\5.0
Default=True
FileKey1=%ProgramData%\Alwil Software\Avast5\report|avast.xsl;avast.xsl;Resident protection.txt;Simple user interface.txt;Simple user interface*.xml
FileKey2=%ProgramData%\Alwil Software\Avast5\log|*.*

[Avast! Antivirus 6]
ID=2271
LangSecRef=3024
Detect=HKLM\Software\Avast Software\Avast
Detect2=HKCU\Software\Avast Software\Avast
Default=True
FileKey1=%ProgramData%\Avast Software\Avast\log|*.*

[Avast! Antivirus 8]
ID=2324
LangSecRef=3024
Detect=HKLM\Software\Avast Software\Avast
Detect2=HKCU\Software\Avast Software\Avast
Default=True
FileKey1=%ProgramData%\AVAST Software\Avast\log|*.txt
FileKey2=%ProgramData%\AVAST Software\Avast\Spamconf|*.bin.tmp*
FileKey3=%ProgramData%\AVAST Software\Avast\report|*.txt

[BitDefender]
ID=2306
LangSecRef=3024
Detect=HKLM\Software\Softwin\BitDefender Desktop
Default=False
FileKey1=%ProgramFiles%\BitDefender\BitDefender 2009\Logs|*.*|RECURSE
FileKey2=%CommonAppData%\BitDefender\Desktop\Profiles\Logs|*.xml|RECURSE
FileKey3=%AppData%\BitDefender\Desktop\Profiles\Logs|*.xml|RECURSE

[TUGZip]
ID=2131
LangSecRef=3024
Detect=HKCU\Software\TUGZip
Default=True
RegKey1=HKCU\Software\TUGZip|mainRecent
RegKey2=HKCU\Software\TUGZip|extrRecent
RegKey3=HKCU\Software\TUGZip|cmpWorkingDir

[Windows Defender]
ID=2132
LangSecRef=3024
Detect=HKLM\SOFTWARE\Microsoft\Windows Defender
DetectFile=%ProgramFiles%\Microsoft AntiSpyware\GIANTAntiSpywareMain.exe
Default=True
FileKey1=%CommonAppData%\Microsoft\Windows Defender\Scans\History\Results\Quick|*.*
FileKey2=%CommonAppData%\Microsoft\Windows Defender\Scans\History\Results\Resource|*.*
FileKey3=%CommonAppData%\Microsoft\Windows Defender\Support|*.log
FileKey4=%ProgramFiles%\Microsoft AntiSpyware|errors.log;tracksEraser.log;cleaner.log

[IZArc]
ID=2133
LangSecRef=3024
Detect=HKCU\Software\IZSoftware\IZArc
Default=True
RegKey1=HKCU\Software\IZSoftware\IZArc|AppCurrentDir
RegKey2=HKCU\Software\IZSoftware\IZArc\Recent
RegKey3=HKCU\Software\IZSoftware\IZArc\History

[Google Toolbar Firefox]
ID=2134
LangSecRef=3022
Default=True
SpecialDetect=DET_MOZILLA_GOOGLE_TOOLBAR
SpecialKey1=N_MOZ_GOOGLE_TOOLBAR

[MS Search Helper Extension]
ID=2191
LangSecRef=3021
DetectFile=%ProgramFiles%\Microsoft\Search Enhancement Pack\Search Helper
Default=True
FileKey1=%LocalAppData%\Microsoft\Search Enhancement Pack\Search Box Extension|searchhs.dat
FileKey2=%LocalLowAppData%\Microsoft\Search Enhancement Pack\Search Box Extension|searchhs.dat

[MS Office Picture Manager]
ID=2135
LangSecRef=3021
Detect=HKCU\Software\Microsoft\Office
Default=True
FileKey1=%LocalAppData%\Microsoft\OIS|OIScatalog.cag
FileKey2=%LocalAppData%\Microsoft\OIS\thumbnails|*.*

[ImgBurn]
ID=2136
LangSecRef=3021
Detect=HKCU\Software\ImgBurn
DetectFile=%ProgramFiles%\Imgburn\imgburn.exe
Default=False
RegKey1=HKCU\Software\ImgBurn|ISOBUILD_MRUBootImage
RegKey2=HKCU\Software\ImgBurn|ISOBUILD_MRUDeviceName
RegKey3=HKCU\Software\ImgBurn|ISOBUILD_MRUSourceFile
RegKey4=HKCU\Software\ImgBurn|ISOBUILD_MRUSourceFolder
RegKey5=HKCU\Software\ImgBurn|ISOBUILD_RecentFiles_Destination
RegKey6=HKCU\Software\ImgBurn|ISOBUILD_RecentFiles_Source
RegKey7=HKCU\Software\ImgBurn|ISOBUILD_RecentFolders_Destination
RegKey8=HKCU\Software\ImgBurn|ISOWRITE_MRUDeviceName
RegKey9=HKCU\Software\ImgBurn|ISOWRITE_RecentFiles_Source
RegKey10=HKCU\Software\ImgBurn|FILELOCATIONS_ProjectFiles
RegKey11=HKCU\Software\ImgBurn|FILELOCATIONS_QueueFiles
FileKey1=%AppData%\ImgBurn|ImgBurn.log
FileKey2=%AppData%\ImgBurn\IBG Files|*.*
FileKey3=%AppData%\imgburn\graph data files|*.*
FileKey4=%AppData%\imgburn\Log Files|*.*

[CloneCD]
ID=2177
LangSecRef=3021
Detect=HKLM\Software\SlySoft\CloneCD
Default=False
RegKey1=HKCU\Software\SlySoft\CloneCD\Settings|ImageFileName

[Virtual Clone Drive]
ID=2333
LangSecRef=3021
Default=True
Detect=HKCU\Software\Elaborate Bytes\VirtualCloneDrive
RegKey1=HKCU\Software\Elaborate Bytes\VirtualCloneDrive\LRU

[WinPatrol]
ID=2168
LangSecRef=3024
Detect=HKCU\Software\BillP Studios\WinPatrol
Default=True
FileKey1=%ProgramFiles%\BillP Studios\WinPatrol|WinPatrolLog.*
FileKey2=%SystemDrive%|HijackPatrol.log

[LogMeIn]
ID=2172
LangSecRef=3022
Detect=HKCU\Software\LogMeIn
Detect2=HKLM\SOFTWARE\LogMeIn, Inc.
Default=True
FileKey1=%LocalAppData%\LogMeIn Hamachi|*.log
FileKey2=%LocalAppData%\LogMeIn Hamachi|*.old
FileKey3=%LocalAppData%\LogMeIn Hamachi|*.bak
FileKey4=%ProgramFiles%\Logmein|LMI*.log
FileKey5=%ProgramData%\Logmein|LMI*.log

[Ashampoo Burning Studio 10]
ID=2178
LangSecRef=3024
Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 10
Default=False
FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 10|backupmetainfo.xml
FileKey2=%AppData%\Ashampoo\Ashampoo Burning Studio 10\Log|*.xml
FileKey3=%AppData%\Ashampoo\Log|*.txt

[Ashampoo Burning Studio 11]
ID=2281
LangSecRef=3024
Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 11
Default=True
FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 11|backupmetainfo.xml
FileKey2=%AppData%\Ashampoo\Ashampoo Burning Studio 11\Log|*.xml
FileKey3=%AppData%\Ashampoo\Log|*.txt

[Ashampoo Burning Studio 14]
ID=2403
LangSecRef=3024
Detect=HKCU\Software\Ashampoo\Ashampoo Burning Studio 14
Default=True
FileKey1=%AppData%\Ashampoo\Ashampoo Burning Studio 14\log|*log.txt
FileKey2=%AppData%\Ashampoo\Ashampoo Burning Studio 14\log|*.xml

[ExamDiff]
ID=2179
LangSecRef=3024
Detect=HKCU\Software\PrestoSoft\ExamDiff
Default=False
RegKey1=HKCU\Software\PrestoSoft\ExamDiff\AutoPick
RegKey2=HKCU\Software\PrestoSoft\ExamDiff\Recent Find Strings
RegKey3=HKCU\Software\PrestoSoft\ExamDiff\Recent Left Files
RegKey4=HKCU\Software\PrestoSoft\ExamDiff\Recent Right Files
RegKey5=HKCU\Software\PrestoSoft\ExamDiff\Settings|File 1
RegKey6=HKCU\Software\PrestoSoft\ExamDiff\Settings|File 2

[ExamDiff Pro]
ID=2180
LangSecRef=3024
Detect=HKCU\Software\PrestoSoft\ExamDiff Pro
Default=False
RegKey1=HKCU\Software\PrestoSoft\ExamDiff Pro\AutoPick
RegKey2=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Find Strings Bin
RegKey3=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Left Directories
RegKey4=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Left Files
RegKey5=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Right Directories
RegKey6=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Right Files
RegKey7=HKCU\Software\PrestoSoft\ExamDiff Pro\Recent Session Files
RegKey8=HKCU\Software\PrestoSoft\ExamDiff Pro\Settings|File 1
RegKey9=HKCU\Software\PrestoSoft\ExamDiff Pro\Settings|File 2

[Compare It!]
ID=2188
LangSecRef=3024
Detect=HKCU\Software\grigsoft.com\Compare It!
Default=False
RegKey1=HKCU\Software\grigsoft.com\Compare It!\Combos
RegKey2=HKCU\Software\grigsoft.com\Compare It!\dirs
RegKey3=HKCU\Software\grigsoft.com\Compare It!\options|Recent0
RegKey4=HKCU\Software\grigsoft.com\Compare It!\options|Recent1
RegKey5=HKCU\Software\grigsoft.com\Compare It!\options|Recent2
RegKey6=HKCU\Software\grigsoft.com\Compare It!\options|Recent3
RegKey7=HKCU\Software\grigsoft.com\Compare It!\options|Recent4
RegKey8=HKCU\Software\grigsoft.com\Compare It!\options|Recent5
RegKey9=HKCU\Software\grigsoft.com\Compare It!\options|Recent6
RegKey10=HKCU\Software\grigsoft.com\Compare It!\options|Recent7
RegKey11=HKCU\Software\grigsoft.com\Compare It!\options|Recent8
RegKey12=HKCU\Software\grigsoft.com\Compare It!\options|Recent9
RegKey13=HKCU\Software\grigsoft.com\Compare It!\options|Recent10

[WinDiff]
ID=2198
LangSecRef=3024
Detect=HKCU\Software\Microsoft\Windiff
Default=True
RegKey1=HKCU\Software\Microsoft\Windiff|NameLeft
RegKey2=HKCU\Software\Microsoft\Windiff|NameRight

[FeedDemon]
ID=2193
LangSecRef=3022
Detect=HKCU\Software\Bradbury\FeedDemon\1.0
DetectFile=%LocalAppData%\FeedDemon\v1
Default=True
RegKey1=HKCU\Software\Bradbury\FeedDemon\1.0\SavedLists\TypedURLs
RegKey2=HKCU\Software\Bradbury\FeedDemon\1.0\SavedLists\TabbedBrowserUrls
RegKey3=HKCU\Software\Bradbury\FeedDemon\1.0\SearchFeedKeywords

[Last.FM]
ID=2200
LangSecRef=3023
DetectFile=%ProgramFiles%\Last.fm\LastFM.exe
Default=True
FileKey1=%LocalAppData%\Last.fm\client\cache|*.*
FileKey2=%LocalAppData%\Last.fm\client|*.log

[Pando]
ID=2235
LangSecRef=3021
DetectFile=%LocalAppData%\Pando\Pando Files
Default=True
FileKey1=%LocalAppData%\Pando\Pando Files|*.log

[Sandboxie]
ID=2236
LangSecRef=3024
DetectFile=%ProgramFiles%\Sandboxie\Start.exe
Default=False
FileKey1=%SystemDrive%\Sandbox\%UserName%|*.*|RECURSE
ExcludeKey1=FILE|%SystemDrive%\Sandbox\%UserName%\DONT-USE.TXT
ExcludeKey2=FILE|%SystemDrive%\Sandbox\%UserName%\desktop.ini

[Snagit 9]
ID=2237
LangSecRef=3024
Detect=HKCU\Software\TechSmith\SnagIt\9
Default=True
RegKey1=HKCU\Software\TechSmith\SnagIt\9\Recent Captures
RegKey2=HKCU\Software\TechSmith\SnagIt\9\SnagItEditor\Recent File List
FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin

[Snagit 10]
ID=2238
LangSecRef=3024
Detect=HKCU\Software\TechSmith\SnagIt\10
Default=True
RegKey1=HKCU\Software\TechSmith\SnagIt\10\Recent Captures
RegKey2=HKCU\Software\TechSmith\SnagIt\10\SnagItEditor\Recent File List
FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin
FileKey2=%LocalAppData%\TechSmith\SnagIt\DataStore\AppIcons|*.*
FileKey3=%LocalAppData%\TechSmith\SnagIt\DataStore\WebSiteIcons|*.*
FileKey4=%LocalAppData%\TechSmith\SnagIt\Thumbnails|*.*

[Snagit 11]
ID=2293
LangSecRef=3024
Detect=HKCU\Software\TechSmith\SnagIt\11
Default=True
RegKey1=HKCU\Software\TechSmith\SnagIt\11\Recent Captures
RegKey2=HKCU\Software\TechSmith\SnagIt\11\SnagItEditor\Recent File List
FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin
FileKey2=%LocalAppData%\TechSmith\SnagIt\DataStore\AppIcons|*.*
FileKey3=%LocalAppData%\TechSmith\SnagIt\DataStore\WebSiteIcons|*.*
FileKey4=%LocalAppData%\TechSmith\SnagIt\Thumbnails|*.*

[Snagit 12]
ID=2391
LangSecRef=3024
Detect=HKCU\Software\TechSmith\SnagIt\12
Default=True
RegKey1=HKCU\Software\TechSmith\SnagIt\12\Recent Captures
RegKey2=HKCU\Software\TechSmith\SnagIt\12\SnagItEditor\Recent File List
FileKey1=%LocalAppData%\TechSmith\SnagIt|Tray.bin
FileKey2=%LocalAppData%\TechSmith\SnagIt\DataStore\AppIcons|*.ico
FileKey3=%LocalAppData%\TechSmith\SnagIt\DataStore\WebSiteIcons|*.ico
FileKey4=%LocalAppData%\TechSmith\SnagIt\Thumbnails|*.*

[Ditto]
ID=2239
LangSecRef=3021
DetectFile=%AppData%\Ditto
Default=False
FileKey1=%AppData%\Ditto|ditto.db

[Evernote]
ID=2240
LangSecRef=3021
Detect=HKCU\Software\Evernote
Default=True
FileKey1=%LocalAppData%\Evernote\Evernote\Logs|*.*

[I2P]
ID=2241
LangSecRef=3022
DetectFile=%AppData%\I2P
Default=True
FileKey1=%AppData%\I2P\logs|*.*

[McAfee AntiVirus]
ID=2242
LangSecRef=3021
DetectFile=%CommonAppData%\McAfee\MCLOGS
Default=True
FileKey1=%CommonAppData%\McAfee\MCLOGS|*.log|RECURSE

[PerfectDisk 8]
ID=2244
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\8.0
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\8.0|PDBootLog

[PerfectDisk 9]
ID=2245
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\9.0
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\9.0|PDBootLog

[PerfectDisk 10]
ID=2246
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\10.0
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\10.0|PDBootLog

[PerfectDisk 11]
ID=2247
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\11.0
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\11.0|PDBootLog

[PerfectDisk 12]
ID=2248
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\12.0
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\12.0|PDBootLog

[PerfectDisk 12.5]
ID=2277
LangSecRef=3024
Detect=HKCU\Software\Raxco\PerfectDisk\12.5
Default=True
FileKey1=%CommonAppData%\Raxco\PerfectDisk\12.5|PDBootLog

[PowerISO]
ID=2249
LangSecRef=3024
Detect=HKCU\Software\PowerISO
Default=True
RegKey1=HKCU\Software\PowerISO|Reopen0
RegKey2=HKCU\Software\PowerISO|Reopen1
RegKey3=HKCU\Software\PowerISO|Reopen2
RegKey4=HKCU\Software\PowerISO|Reopen3
RegKey5=HKCU\Software\PowerISO|ExtractPath0
RegKey6=HKCU\Software\PowerISO|ExtractPath1
RegKey7=HKCU\Software\PowerISO|ExtractPath2
RegKey8=HKCU\Software\PowerISO|ExtractPath3
RegKey9=HKCU\Software\PowerISO|ExtractPath4
RegKey10=HKCU\Software\PowerISO|ExtractPath5
RegKey11=HKCU\Software\PowerISO|ExtractPath6
RegKey12=HKCU\Software\PowerISO|ExtractPath7

[UltraISO]
ID=2250
LangSecRef=3024
Detect=HKCU\Software\EasyBoot Systems\UltraISO\5.0
Default=True
RegKey1=HKCU\Software\EasyBoot Systems\UltraISO\5.0|Reopen
RegKey2=HKCU\Software\EasyBoot Systems\UltraISO\5.0|a
RegKey3=HKCU\Software\EasyBoot Systems\UltraISO\5.0|b
RegKey4=HKCU\Software\EasyBoot Systems\UltraISO\5.0|c
RegKey5=HKCU\Software\EasyBoot Systems\UltraISO\5.0|d
RegKey6=HKCU\Software\EasyBoot Systems\UltraISO\5.0|e
RegKey7=HKCU\Software\EasyBoot Systems\UltraISO\5.0|f
RegKey8=HKCU\Software\EasyBoot Systems\UltraISO\5.0|g
RegKey9=HKCU\Software\EasyBoot Systems\UltraISO\5.0|h
RegKey10=HKCU\Software\EasyBoot Systems\UltraISO\5.0|i

[GIMP 2.4]
ID=2251
LangSecRef=3021
DetectFile=%UserProfile%\.gimp-2.4
Default=True
FileKey1=%UserProfile%\.thumbnails\normal|*.*
FileKey2=%UserProfile%\.gimp-2.4|documents

[GIMP 2.6]
ID=2252
LangSecRef=3021
Default=True
DetectFile=%UserProfile%\.gimp-2.6
FileKey1=%UserProfile%\.thumbnails\normal|*.*

[GIMP 2.8]
ID=2295
LangSecRef=3021
Default=True
DetectFile=%UserProfile%\.gimp-2.8
FileKey1=%UserProfile%\.thumbnails\normal|*.*

[Go!Zilla]
ID=2253
LangSecRef=3022
DetectFile=%AppData%\Go!Zilla
Default=True
FileKey1=%AppData%\Go!Zilla|GoZilla.hst

[MagicISO]
ID=2254
LangSecRef=3024
Detect=HKCU\Software\MagicISO
Default=True
RegKey1=HKCU\Software\MagicISO\Reopen

[Zune]
ID=2255
LangSecRef=3023
DetectFile=%LocalAppData%\Microsoft\zune
Default=True
FileKey1=%LocalAppData%\Microsoft\zune\art cache|*.*|REMOVESELF
FileKey2=%LocalAppData%\Microsoft\Zune|NowPlaying.dat

[BreezeBrowser Pro]
ID=2256
LangSecRef=3021
Detect=HKCU\Software\BreezeSystems\BreezeBrowserPro
Default=True
RegKey1=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU0
RegKey2=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU1
RegKey3=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU2
RegKey4=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU3
RegKey5=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU4
RegKey6=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU5
RegKey7=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU6
RegKey8=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU7
RegKey9=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU8
RegKey10=HKCU\Software\BreezeSystems\BreezeBrowserPro\100|MRU9

[FastStone Image Viewer]
ID=2257
LangSecRef=3023
DetectFile=%AppData%\FastStone\FSIV
Default=True
FileKey1=%AppData%\FastStone\FSIV|HisFolderList.db

[FastStone Capture]
ID=2404
LangSecRef=3024
Detect=HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\FSCapture.exe
Default=True
RegKey1=HKCU\Software\FastStone|_GrbId
FileKey1=%LocalAppData%\FastStone\FSC\EditWith|*.*
FileKey2=%LocalAppData%\FastStone\FSC\Email|*.*
FileKey3=%LocalAppData%\FastStone\FSC\FTP|*.*

[AkelPad]
ID=2267
LangSecRef=3021
Detect=HKCU\Software\Akelsoft\AkelPad
Default=True
RegKey1=HKCU\Software\Akelsoft\AkelPad\Recent
RegKey2=HKCU\Software\Akelsoft\AkelPad\Search

[Notepad++]
ID=2258
LangSecRef=3021
DetectFile=%AppData%\notepad++
Default=False
FileKey1=%AppData%\notepad++|session.xml

[NoteXpad]
ID=2259
LangSecRef=3021
Detect=HKLM\Software\NoteXpad
Default=False
RegKey1=HKLM\Software\NoteXpad\Recent

[RegEditX]
ID=2260
LangSecRef=3024
Detect=HKLM\SOFTWARE\DCSoft\RegEditX
Default=True
FileKey1=%ProgramFiles%\DCSoft\RegEditX\x86|RegEditX.sav
FileKey2=%ProgramFiles%\DCSoft\RegEditX\x64|RegEditX.sav
FileKey3=%ProgramFiles%\DCSoft\RegEditX\x86|RegEditX.bak
FileKey4=%ProgramFiles%\DCSoft\RegEditX\x64|RegEditX.bak

[Foxit Reader 5.0]
ID=2265
LangSecRef=3021
Detect=HKCU\Software\Foxit Software\Foxit Reader 5.0
Default=True
RegKey1=HKCU\Software\Foxit Software\Foxit Reader 5.0\Recent File List
RegKey2=HKCU\Software\Foxit Software\Foxit Reader 5.0\RecentFiles
RegKey3=HKCU\Software\Foxit Software\Foxit Reader 5.0\Preferences\History\LastOpen
RegKey4=HKCU\Software\Foxit Software\Foxit Reader 5.0\Preferences\History\LastSession
RegKey5=HKCU\Software\Foxit Software\Foxit Reader 5.0\Preferences\Others|csInitialOpenDir

[ACDSee 14]
ID=2269
LangSecRef=3021
Default=True
DetectFile=%ProgramFiles%\ACD Systems\ACDSee\14.0\ACDSeeInTouch2.exe
Detect=HKLM\SOFTWARE\ACD Systems\ACDSee\140
RegKey1=HKCU\Software\ACD Systems\ACDSee\140|LastOptionPage
RegKey2=HKCU\Software\ACD Systems\ACDSee\140|LastOptionPageName
RegKey3=HKCU\Software\ACD Systems\ACDSee\140|OpenFolder
RegKey4=HKCU\Software\ACD Systems\ACDSee\140|HistSearchFileName
RegKey5=HKCU\Software\ACD Systems\ACDSee\140|HistSearchQuickText
RegKey6=HKCU\Software\ACD Systems\ACDSee\140|SimpleSearchHistory

[Camtasia Studio 7.0]
ID=2279
LangSecRef=3024
Detect=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio
Default=True
RegKey1=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|FileSaveAsMru
RegKey2=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|ExportAsZipMru
RegKey3=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUImportFolder
RegKey4=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUOpenProjectFolder
RegKey5=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUBatchAddFilesProjectsFolder
RegKey6=HKCU\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio\7.0|MRUImportExportCaptions

[CoffeeCup HTML Editor]
ID=2280
LangSecRef=3024
DetectFile=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor
Default=True
FileKey1=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|mru.ini
FileKey2=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|links.ini
FileKey3=%AppData%\CoffeeCup Software\CoffeeCup HTML Editor\Settings|lastopen.dat

[Any Video Converter Ultimate]
ID=2282
LangSecRef=3023
Detect=HKCU\Software\AnvSoft\Any Video Converter Ultimate
Default=True
FileKey1=%appdata%\AnvSoft\Any Video Converter Ultimate|history*.db
FileKey2=%appdata%\AnvSoft\Any Video Converter Ultimate|*.log

[Freemake Video Downloader]
ID=2283
LangSecRef=3022
Detect=HKCU\Software\Freemake\FreemakeVideoDownloader
Default=True
FileKey1=%ProgramFiles%\Freemake\Freemake Video Downloader|trace.log
FileKey2=%CommonAppData%\Freemake\FreemakeVideoDownloader|*.txt
FileKey3=%Documents%\Freemake\FreemakeVideoDownloader\History\Thumbnails|*.*
FileKey4=%Documents%\Freemake\FreemakeVideoDownloader\History|*.xml

[Freemake Audio Converter]
ID=2284
LangSecRef=3023
Detect=HKCU\Software\Freemake\FreemakeAudioConverter
Default=True
FileKey1=%CommonAppData%\Freemake\FreemakeAudioConverter|*.txt
RegKey1=HKCU\Software\Freemake\FreemakeAudioConverter|InitVideoFileDirectory
RegKey2=HKCU\Software\Freemake\FreemakeAudioConverter|InitAudioFileDirectory
RegKey3=HKCU\Software\Freemake\FreemakeAudioConverter|InitImageFileDirectory

[Freemake Video Converter]
ID=2285
LangSecRef=3023
Detect=HKCU\Software\Freemake\FreemakeVideoConverter
Default=True
FileKey1=%CommonAppData%\Freemake\FreemakeVideoConverter|*.txt
RegKey1=HKCU\Software\Freemake\FreemakeVideoConverter|InitVideoFileDirectory
RegKey2=HKCU\Software\Freemake\FreemakeVideoConverter|InitAudioFileDirectory
RegKey3=HKCU\Software\Freemake\FreemakeVideoConverter|InitImageFileDirectory
RegKey4=HKCU\Software\Freemake\FreemakeVideoConverter|CurrentDVDDirectory
RegKey5=HKCU\Software\Freemake\FreemakeVideoConverter|AudioForSlideshow_0
RegKey6=HKCU\Software\Freemake\FreemakeVideoConverter|AudioForSlideshow_1
RegKey7=HKCU\Software\Freemake\FreemakeVideoConverter|AudioForSlideshow_2
RegKey8=HKCU\Software\Freemake\FreemakeVideoConverter|InitAudioDirectoryForSlideshow
RegKey9=HKCU\Software\Freemake\FreemakeVideoConverter|OutputDVDDirectory
RegKey10=HKCU\Software\Freemake\FreemakeVideoConverter|DVDOutputPath_0
RegKey11=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath1
RegKey12=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath2
RegKey13=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath3
RegKey14=HKCU\Software\Freemake\FreemakeVideoConverter|OutputPath4
RegKey15=HKCU\Software\Freemake\FreemakeVideoConverter|OutputDirectory

[ConvertXToDVD]
ID=2286
LangSecRef=3023
Detect=HKCU\Software\VSO\ConvertXToDVD
Detect2=HKCU\Software\VSO\ConvertXtoDVD\5
Default=True
FileKey1=%AppData%\Vso|*.log
FileKey2=%Documents%\PcSetup|*.log|REMOVESELF
FileKey3=%CommonAppData%\VSO|*.cache
FileKey4=%CommonAppData%\VSO\ConvertXToDVD\5\log|*.log;*.crashlist|REMOVESELF
RegKey1=HKCU\Software\VSO\ConvertXtoDVD\4.0|Dvd_Folder
RegKey2=HKCU\Software\VSO\ConvertXtoDVD\4.0\settings\Gen_MRU_Pathes
RegKey3=HKCU\Software\VSO\ConvertXtoDVD\5\Gen_MRU_Pathes

[VSO Blu-ray Converter Ultimate]
ID=2328
LangSecRef=3023
Detect=HKCU\Software\VSO\Blu-ray Converter Ultimate\2
Default=True
FileKey1=%CommonAppData%\VSO\Blu-ray Converter Ultimate\2\Log|*.log

[VSO DVD Converter Ultimate]
ID=2329
LangSecRef=3023
Detect=HKCU\Software\VSO\DVD Converter Ultimate\2
Default=True
FileKey1=%CommonAppData%\VSO\DVD Converter Ultimate\2\Log|*.log

[AIMP 3]
ID=2287
LangSecRef=3023
DetectFile=%AppData%\AIMP3
Default=True
FileKey1=%AppData%\AIMP3|AIMP3.bak
FileKey2=%AppData%\AIMP3|AIMP3ate.bak
FileKey3=%AppData%\AIMP3|AIMP3lib.bak
FileKey4=%AppData%\AIMP3|AIMP3ac.bak

[Corel VideoStudio Pro X4]
ID=2288
LangSecRef=3023
Detect=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0
Default=True
FileKey1=%AppData%\Corel\Messages|*.*|RECURSE
FileKey2=%AppData%\Ulead Systems\Corel VideoStudio Pro\14.0\en-US|VS_Pro.log
FileKey3=%Documents%\Corel VideoStudio Pro\14.0\SmartProxy|*.upx
RegKey1=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\HerRFL
RegKey2=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\Library Manager|Latest Export Folder
RegKey3=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\14.0\VIO\Recent Dir
ExcludeKey1=FILE|%AppData%\Corel\Messages|*.policy

[Corel VideoStudio Pro X5]
ID=2296
LangSecRef=3023
Detect=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0
Default=True
FileKey1=%AppData%\Corel\Messages|*.*|RECURSE
FileKey2=%AppData%\Ulead Systems\Corel VideoStudio Pro\15.0\en-US|VS_Pro.log
FileKey3=%Documents%\Corel VideoStudio Pro\15.0\SmartProxy|*.upx
RegKey1=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\HerRFL
RegKey2=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\Library Manager|Latest Export Folder
RegKey3=HKCU\Software\Ulead Systems\Corel VideoStudio Pro\15.0\VIO\Recent Dir
ExcludeKey1=FILE|%AppData%\Corel\Messages|*.policy

[AlZip]
ID=2289
LangSecRef=3024
Detect=HKCU\Software\ESTsoft\ALZip
Default=True
RegKey1=HKCU\Software\ESTsoft\ALZip\MRUOpen
RegKey2=HKCU\Software\ESTsoft\ALZip\MRUExtract

[CyberLink PhotoDirector 3]
ID=2290
LangSecRef=3023
Detect=HKCU\Software\CyberLink\PhotoDirector3
Default=True
FileKey1=%LocalAppData%\Cyberlink\PhotoDirector\3.0|*.cache

[CyberLink PowerDirector 10]
ID=2291
LangSecRef=3023
Detect=HKCU\Software\CyberLink\PowerDirector\10.0
Default=True
FileKey1=%AppData%\CyberLink\MediaCache|*.*
FileKey2=%AppData%\CyberLink\PowerDirector\10.0|Recentfiles.ini
FileKey3=%AppData%\CyberLink\PowerDirector\10.0\DSPCache|*.*|RECURSE
FileKey4=%AppData%\CyberLink\PowerDirector\10.0\photoTmp|*.*|RECURSE
FileKey5=%AppData%\CyberLink\PowerDirector\10.0\SpltrCache|*.*|RECURSE
RegKey1=HKCU\Software\CyberLink\Hanuman\Waveform
RegKey2=HKCU\Software\CyberLink\MediaCache5\Data5
RegKey3=HKCU\Software\CyberLink\MediaCache5\Thumbnail5

[CyberLink PowerDirector 12]
ID=2368
LangSecRef=3023
Detect=HKCU\Software\CyberLink\PowerDirector12
Default=True
RegKey1=HKCU\Software\CyberLink\PowerDirector12\MediaObj\MediaCache5\Data5
RegKey2=HKCU\Software\CyberLink\PowerDirector12\MediaObj\MediaCache5\Thumbnail5
RegKey3=HKCU\Software\CyberLink\PowerDirector12|ImportFilePath
FileKey1=%CommonAppData%\CyberLink\PowerDirector\12.0\AnalyzeCacheFiles|CLZoetrope.fdb
FileKey2=%AppData%\CyberLink\PowerDirector\12.0\DSPCache|*.*|RECURSE
FileKey3=%AppData%\CyberLink\PowerDirector\12.0\photoTmp|*.*
FileKey4=%AppData%\CyberLink\PowerDirector\12.0\SpltrCache|*.*
FileKey5=%AppData%\CyberLink\PowerDirector\12.0\WaveForms|PD_0000.txt
FileKey6=%AppData%\CyberLink\PowerDirector\12.0|Recentfiles.ini
FileKey7=%AppData%\CyberLink\MediaCache|*.*

[CyberLink AudioDirector 4]
ID=2366
LangSecRef=3023
Detect=HKCU\Software\CyberLink\AudioDirector4
Default=True
RegKey1=HKCU\Software\CyberLink\AudioDirector4\MediaObj\MediaCache5\Data5
FileKey1=%CommonAppData%\CyberLink\Downloader|Item0.bak;Item1.bak;Item2.bak;Item3.bak;Item4.bak
FileKey2=%CommonAppData%\install_clap|*.*|RECURSE
FileKey3=%LocalAppData%\Cyberlink\AudioDirector\4.0\Temp|*.txt;*.pk

[DivX player]
ID=2292
LangSecRef=3023
DetectFile=%AppData%\DivX\Player
Default=True
FileKey1=%AppData%\DivX\Player|Media Library

[Universal Extractor]
ID=2307
LangSecRef=3024
Detect=HKCU\Software\UniExtract
Default=False
RegKey1=HKCU\Software\UniExtract\Directory
RegKey2=HKCU\Software\UniExtract\File

[4Sync]
ID=2308
LangSecRef=3024
Detect=HKCU\Software\4Sync
Default=True
FileKey1=%AppData%\4Sync|*.log

[Copernic]
ID=2309
LangSecRef=3021
DetectFile1=%AppData%\Copernic\Agent
DetectFile2=%AppData%\Copernic\Agent Pro
Detect=HKCU\Software\Copernic\DesktopSearch2
Default=False
FileKey1=%AppData%\Copernic\*\Searches|*.*|RECURSE
RegKey1=HKCU\Software\Copernic\DesktopSearch2\Config\SearchHistory

[DVDFab]
ID=2310
LangSecRef=3023
Detect1=HKLM\Software\DVDFab
Detect2=HKCU\Software\DVDFab
Default=True
FileKey1=%Documents%\DVDFab|*.log|RECURSE
FileKey2=%Documents%\DVDFab Passkey|*.log|RECURSE

[InkScape]
ID=2311
LangSecRef=3023
Detect=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\inkscape.exe
Default=True
FileKey1=%AppData%\InkScape|*.log|RECURSE
FileKey2=%UserProfile%|.recently-used.xbel

[Anonymizer]
ID=2315
LangSecRef=3022
DetectFile=%AppData%\Anonymizer\Anonymizer Universal
Default=True
FileKey1=%AppData%\Anonymizer\Anonymizer Universal|*.log

[Gadu-Gadu]
ID=2319
LangSecRef=3022
Detect1=HKCU\Software\GG
Detect2=HKCU\Software\Gadu-Gadu 10
Detect3=HKCU\Software\Nowe Gadu-Gadu
Detect4=HKCU\Software\Gadu-Gadu
Default=True
FileKey1=%AppData%\GG\Profiles\*\*Cache|*|RECURSE
FileKey2=%AppData%\GG\logs|*.log
FileKey3=%AppData%\GG\Crash Reports|*|RECURSE
FileKey4=%AppData%\Gadu-Gadu 10\Profiles\*\*Cache|*|RECURSE
FileKey5=%AppData%\Gadu-Gadu 10\logs|*.log
FileKey6=%AppData%\Gadu-Gadu 10\Crash Reports|*|RECURSE
FileKey7=%AppData%\Gadu-Gadu\Profiles\*\*Cache|*|RECURSE
FileKey8=%AppData%\Gadu-Gadu\logs|*.log
FileKey9=%AppData%\Gadu-Gadu\Crash Reports|*|RECURSE
FileKey10=%AppData%\Nowe Gadu-Gadu\Profiles\*\*Cache|*|RECURSE
FileKey11=%AppData%\Nowe Gadu-Gadu\logs|*.log
FileKey12=%AppData%\Nowe Gadu-Gadu\Crash Reports|*|RECURSE
FileKey13=%LocalAppData%\GG\Profiles\*\*Cache|*|RECURSE
FileKey14=%LocalAppData%\GG\logs|*.log
FileKey15=%LocalAppData%\GG\Crash Reports|*|RECURSE
FileKey16=%LocalAppData%\Gadu-Gadu 10\Profiles\*\*Cache|*|RECURSE
FileKey17=%LocalAppData%\Gadu-Gadu 10\logs|*.log
FileKey18=%LocalAppData%\Gadu-Gadu 10\Crash Reports|*|RECURSE
FileKey19=%LocalAppData%\Gadu-Gadu\Profiles\*\*Cache|*|RECURSE
FileKey20=%LocalAppData%\Gadu-Gadu\logs|*.log
FileKey21=%LocalAppData%\Gadu-Gadu\Crash Reports|*|RECURSE
FileKey22=%LocalAppData%\Nowe Gadu-Gadu\Profiles\*\*Cache|*|RECURSE
FileKey23=%LocalAppData%\Nowe Gadu-Gadu\logs|*.log
FileKey24=%LocalAppData%\Nowe Gadu-Gadu\Crash Reports|*|RECURSE

[Foxit Phantom PDF]
ID=2320
LangSecRef=3021
Detect1=HKCU\Software\Foxit Software\Foxit PhantomPDF 5.0
Detect2=HKLM\Software\Foxit Software\Foxit PhantomPDF
Detect3=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0
Default=True
RegKey1=HKCU\Software\Foxit Software\Foxit PhantomPDF 5.0\Recent File List
RegKey2=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0\Recent File List
RegKey3=HKCU\Software\Foxit Software\Foxit PhantomPDF 6.0\Foxit PhantomPDF Advanced Editor\Recent File List

[PDFCreator]
ID=2335
LangSecRef=3021
Default=True
Detect1=HKCU\Software\PDFCreator
Detect2=HKCU\Software\PDFCreator.net
FileKey1=%ProgramFiles%\PDFCreator|SetupLog.txt
FileKey2=%AppData%\pdfforge\Images2PDF|Print-*.log
FileKey3=%AppData%\pdfforge\Images2PDF|PrintPDF-*.log
FileKey4=%AppData%\pdfforge\Images2PDF\Tmp|*.prnt|REMOVESELF
FileKey5=%LocalAppData%\Temp\PDFCreator\Spool|*.*
FileKey6=%LocalAppData%\PDFCreator|PDFCreator.log
RegKey1=HKCU\Software\PDFCreator\Program|LastsaveDirectory

[PDF Architect]
ID=2336
LangSecRef=3021
Default=True
Detect1=HKCU\Software\PDF Architect
Detect2=HKCU\Software\PDF Architect 2
FileKey1=%AppData%\PDF Architect\Thumbnails|*.*
RegKey1=HKCU\Software\PDF Architect\Recent File List
RegKey2=HKCU\Software\PDF Architect 2\Options\RecentDocuments\List

[MailWasher Pro]
ID=2321
LangSecRef=3022
Detect1=HKCU\Software\FireTrust\MailWasher Pro
Detect2=HKCU\Software\FireTrust\MailWasher
Detect3=HKCU\Software\FireTrust\MailWasherPro
Default=True
FileKey1=%AppData%\Firetrust\MailWasher\logs|*.*|RECURSE
FileKey2=%AppData%\Firetrust\MailWasher|log_*|RECURSE
FileKey3=%AppData%\Firetrust\MailWasher|regex.txt
FileKey4=%AppData%\Firetrust\MailWasher|updatesAIU.txt
ExcludeKey1=FILE|%AppData%\Firetrust\MailWasher\cache|*mwp_exw.dat;*mwp_conv.dat;*mwp_inw.dat;*mwp_pmap.dat;*MWP.db3

[Samsung Kies]
ID=2322
LangSecRef=3023
Detect=HKCU\Software\Samsung\Kies2.0
Default=True
FileKey1=%AppData%\Samsung\Kies|UpdateLog.txt;UpdateList.txt;*.log|RECURSE 
FileKey2=%AppData%\Samsung\Kies\UpdateTemp|*.*|RECURSE
FileKey3=%CommonAppData%\Samsung\Kies|ConnectionManager.log;Kiesairmessage.log
FileKey4=%AppData%\Samsung\Kies\TempFiles|*.*|RECURSE
FileKey5=%CommonAppData%\Samsung\Device Error Recovery|*.log
FileKey6=%LocalAppData%\Temp\KiesTemporary|*.dll

[Connectify Hotspot]
ID=2330
LangSecRef=3022
Detect=HKLM\SOFTWARE\Connectify
Default=True
FileKey1=%ProgramFiles%\Connectify|install.log
FileKey2=%CommonAppData%\Connectify\logs|*.log
ExcludeKey1=%CommonAppData%\Connectify\logs|deamon.log

[Express Scribe]
ID=2340
LangSecRef=3021
Detect=HKCU\Software\NCH Software\Scribe
Default=False
FileKey1=%AppData%\NCH Software\Scribe\Logs|*.*

[Gom Player]
ID=2341
LangSecRef=3023
Detect=HKCU\Software\GRETECH\GomPlayer
Default=False
FileKey1=%AppData%\GRETECH\GomPlayer\Log|*.*
FileKey2=%AppData%\GRETECH\GomPlayer\DCache|*.*
RegKey1=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME000
RegKey2=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME001
RegKey3=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME002
RegKey4=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME003
RegKey5=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME004
RegKey6=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME005
RegKey7=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME006
RegKey8=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME007
RegKey9=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME008
RegKey10=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME009
RegKey11=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME010
RegKey12=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME011
RegKey13=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME012
RegKey14=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME013
RegKey15=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME014
RegKey16=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME015
RegKey17=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME016
RegKey18=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME017
RegKey19=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME018
RegKey20=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME019
RegKey21=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME020
RegKey22=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME021
RegKey23=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME022
RegKey24=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME023
RegKey25=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME024
RegKey26=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME025
RegKey27=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME026
RegKey28=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME027
RegKey29=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME028
RegKey30=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME029
RegKey31=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME030
RegKey32=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME031
RegKey33=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME032
RegKey34=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME033
RegKey35=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME034
RegKey36=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME035
RegKey37=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME036
RegKey38=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME037
RegKey39=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME038
RegKey40=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME039
RegKey41=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME040
RegKey42=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME041
RegKey43=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME042
RegKey44=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME043
RegKey45=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME044
RegKey46=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME045
RegKey47=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME046
RegKey48=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME047
RegKey49=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME048
RegKey50=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIANAME049
RegKey51=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS000
RegKey52=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS001
RegKey53=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS002
RegKey54=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS003
RegKey55=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS004
RegKey56=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS005
RegKey57=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS006
RegKey58=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS007
RegKey59=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS008
RegKey60=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS009
RegKey61=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS010
RegKey62=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS011
RegKey63=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS012
RegKey64=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS013
RegKey65=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS014
RegKey66=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS015
RegKey67=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS016
RegKey68=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS017
RegKey69=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS018
RegKey70=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS019
RegKey71=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS020
RegKey72=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS021
RegKey73=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS022
RegKey74=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS023
RegKey75=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS024
RegKey76=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS025
RegKey77=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS026
RegKey78=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS027
RegKey79=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS028
RegKey80=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS029
RegKey81=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS030
RegKey82=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS031
RegKey83=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS032
RegKey84=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS033
RegKey85=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS034
RegKey86=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS035
RegKey87=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS036
RegKey88=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS037
RegKey89=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS038
RegKey90=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS039
RegKey91=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS040
RegKey92=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS041
RegKey93=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS042
RegKey94=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS043
RegKey95=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS044
RegKey96=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS045
RegKey97=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS046
RegKey98=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS047
RegKey99=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS048
RegKey100=HKCU\Software\GRETECH\GomPlayer\OPTION|_RECENTMEDIAPOS049
RegKey101=HKCU\Software\GRETECH\GomPlayer\OPTION|sRecentFolder
RegKey102=HKCU\Software\GRETECH\GomPlayer\OPTION|sRecentFile
RegKey103=HKCU\Software\GRETECH\GomPlayer\OPTION|sRecentURL

[Skype Metro App]
ID=2337
LangSecRef=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.SkypeApp_kzf8qxf38zg5c
DetectFile=%LocalAppData%\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.SkypeApp_*\AC\Temp|*.*
FileKey2=%LocalAppData%\Packages\Microsoft.SkypeApp_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey3=%LocalAppData%\Packages\Microsoft.SkypeApp_*\LocalState\*\logs|*.skypelog
FileKey4=%LocalAppData%\Packages\Microsoft.SkypeApp_*\TempState\Sync_*TempCache|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.SkypeApp_*\Settings|LastModified.txt
RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.SkypeApp_kzf8qxf38zg5c\SearchHistory
RegKey2=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.SkypeApp_kzf8qxf38zg5c\PSR\AddedContactSince

[Twitter Metro]
ID=2338
LangSecRef=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\9E2F88E3.Twitter_wgeqdkkx372wm
DetectFile=%LocalAppData%\Packages\9E2F88E3.Twitter_wgeqdkkx372wm
Default=True
FileKey1=%LocalAppData%\Packages\*Twitter_*\AC\Microsoft\CLR_v4.0\|Twitter-*.LOG|RECURSE
FileKey2=%LocalAppData%\Packages\*Twitter_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey3=%LocalAppData%\Packages\*Twitter_*\AC\Microsoft\CryptnetUrlCache\MetaData|Twitter-*.*
FileKey4=%LocalAppData%\Packages\*Twitter_*\AC\Temp|*.*
FileKey5=%LocalAppData%\Packages\*Twitter_*\LocalState\CameraPicker\|*.png|RECURSE
FileKey6=%LocalAppData%\Packages\*Twitter_*\TempState|*.*|RECURSE
RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\9E2F88E3.Twitter_wgeqdkkx372wm\SearchHistory
ExcludeKey1=FILE|%LocalAppData%\Packages\*Twitter_*\AC\Microsoft\CryptnetUrlCache\Content\|Twitter-SyncNow.db

[Adobe Reader Touch]
ID=2339
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_ynb6jyjzte8ga
Default=True
FileKey1=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\INetCache|*.*
FileKey2=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\INetCookies|*.*
FileKey3=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\INetHistory|*.*
FileKey4=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\Microsoft\CLR_v4.0\UsageLogs|AdobeReader*.log
FileKey5=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\AC\Temp|*.*
FileKey6=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\LocalState\*\logs|Adobe-*.log
FileKey7=%LocalAppData%\Packages\AdobeSystemsIncorporated.AdobeReader_*\TempState|*.*|RECURSE

[Bing Search]
ID=2346
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.Bing_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.Bing_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey2=%LocalAppData%\Packages\Microsoft.Bing_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey3=%LocalAppData%\Packages\Microsoft.Bing_*\AC\INetCache|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.Bing_*\AC\INetCookies|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.Bing_*\AC\INetHistory|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.Bing_*\AC\AppCache|*.*
FileKey7=%LocalAppData%\Packages\Microsoft.Bing_*\AC\Temp|*.*
FileKey8=%LocalAppData%\Packages\Microsoft.Bing_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE
FileKey9=%LocalAppData%\Packages\Microsoft.Bing_*\AC\PRICache|*_sync.dac
FileKey10=%LocalAppData%\Packages\Microsoft.Bing_*\TempState|*.*|RECURSE

[Bing Finance]
ID=2347
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.BingFinance_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey2=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey3=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\INetCache|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\INetCookies|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\INetHistory|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\Temp|*.*
FileKey7=%LocalAppData%\Packages\Microsoft.BingFinance_*\LocalState\Cache|*.*
FileKey8=%LocalAppData%\Packages\Microsoft.BingFinance_*\LocalState\navigationHistory|*.*|RECURSE
FileKey9=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\Microsoft\Internet Explorer\DOMStore|*.*
FileKey10=%LocalAppData%\Packages\Microsoft.BingFinance_*\AC\PriAppCache|*.*
RegKey1=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.bingfinance_8wekyb3d8bbwe\Internet Explorer\DOMStorage\microsoft.bingfinance\SearchHistory
RegKey2=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.bingfinance_8wekyb3d8bbwe\Internet Explorer\DOMStorage\microsoft.bingfinance\RecentVisit

[Bing Maps]
ID=2348
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.BingMaps_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.BingMaps_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey2=%LocalAppData%\Packages\Microsoft.BingMaps_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey3=%LocalAppData%\Packages\Microsoft.BingMaps_*\AC\INetCache|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.BingMaps_*\AC\INetCookies|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.BingMaps_*\AC\INetHistory|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.BingMaps_*\LocalState\Cache|*.*|RECURSE
FileKey7=%LocalAppData%\Packages\Microsoft.BingMaps_*\TempState|*.state

[Bing News]
ID=2349
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.BingNews_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey2=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey3=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\INetCache|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\INetCookies|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\INetHistory|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\AppCache|*.*|RECURSE
FileKey7=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\Temp|*.*
FileKey8=%LocalAppData%\Packages\Microsoft.BingNews_*\LocalState\Cache|*.*|RECURSE
FileKey9=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE
FileKey10=%LocalAppData%\Packages\Microsoft.BingNews_*\TempState|*.sync
FileKey11=%LocalAppData%\Packages\Microsoft.BingNews*\LocalState\appCache|*.rfc
FileKey12=%LocalAppData%\Packages\Microsoft.BingNews_*\AC\Microsoft\CLR_v4.0\UsageLogs|*.log

[Bing Sports]
ID=2350
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.BingSports_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey2=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey3=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\INetCache|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\INetCookies|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\INetHistory|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\Temp|*.*
FileKey7=%LocalAppData%\Packages\Microsoft.BingSports_*\LocalState\Cache|*.*|RECURSE
FileKey8=%LocalAppData%\Packages\Microsoft.BingSports_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE
ExcludeKey1=FILE|%LocalAppData%\Packages\Microsoft.BingSports_*\LocalState\Cache|_sessionState2.xml

[Bing Travel]
ID=2351
LangSecRef=3031
DetectFile=%LocalAppData%\Packages\Microsoft.BingTravel_8wekyb3d8bbwe
Default=True
FileKey1=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey2=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey3=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\INetCache|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\INetCookies|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\INetHistory|*.*|RECURSE
FileKey6=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\Temp|*.*
FileKey7=%LocalAppData%\Packages\Microsoft.BingTravel_*\LocalState\Cache|*.*|RECURSE
FileKey8=%LocalAppData%\Packages\Microsoft.BingTravel_*\LocalState\navigationHistory|*.*|RECURSE
FileKey9=%LocalAppData%\Packages\Microsoft.BingTravel_*\AC\Microsoft\Internet Explorer\DOMStore|*.*|RECURSE

[Sony Vegas Pro 12.0]
ID=2352
LangSecRef=3023
Detect=HKLM\SOFTWARE\Sony Creative Software\Vegas Pro\12.0
Default=True
FileKey1=%LocalAppData%\Sony\ErrorReport|*.erpt
FileKey2=%LocalAppData%\Sony\Vegas Pro\12.0|*.log
FileKey3=%AppData%\Sony|SCS_INSTALLER_1.log
FileKey4=%AppData%\Sony|*.dmp
FileKey5=%AppData%\Sony\Vegas Pro\12.0|localstorage_*.tmp
FileKey6=%AppData%\Sony\Vegas Pro\12.0|_lastsession.log

[Directory Opus 10]
ID=2353
LangSecRef=3024
Detect=HKLM\SOFTWARE\GPSoftware\Directory Opus
Default=True
FileKey1=%AppData%\GPSoftware\Directory Opus\Logs|*.*
FileKey2=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|find_name.osd
FileKey3=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|find_path.osd
FileKey4=%LocalAppData%\GPSoftware\Directory Opus\State Data\MRU|zippy.osd
FileKey5=%AppData%\GPSoftware\Directory Opus\Thumbnail Cache|*_do.cache
RegKey1=HKLM\SOFTWARE\Wow6432Node\GPSoftware\Directory Opus\10.5.2.0|ItemListFilter

[NVIDIA Install Files]
ID=2357
LangSecRef=3024
Detect=HKCU\Software\NVIDIA Corporation
Default=True
FileKey1=%SystemDrive%\NVIDIA|*.*|REMOVESELF
FileKey2=%SystemDrive%\NV|*.*|REMOVESELF

[CDBurnerXP]
ID=2358
LangSecRef=3024
Detect=HKLM\SOFTWARE\Wow6432Node\Canneverbe Limited\CDBurnerXP
Detect2=HKCU\Software\Canneverbe Limited\CDBurnerXP
Default=True
FileKey1=%ProgramData%\Canneverbe Limited\CDBurnerXP\*.*.*.*|OperationLog.log
FileKey2=%AppData%\Canneverbe Limited\CDBurnerXP|StarBurn.log
FileKey3=%AppData%\Canneverbe Limited\CDBurnerXP\*.*.*.*|*.tmp
RegKey1=HKCU\Software\Canneverbe Limited\CDBurnerXP\PathsPrev

[UltraEdit]
ID=2359
LangSecRef=3021
Detect=HKCU\Software\IDM Computer Solutions\UltraEdit
Default=True
FileKey1=%AppData%\IDMComp\UltraEdit|projects.lst
FileKey2=%AppData%\IDMComp\Common\FTP Accounts|IdmFTPAccounts_bak.txt
FileKey3=%LocalAppData%\Downloaded Installations\UltraEdit\*|UltraEdit_.msi

[Photodex ProShow Producer]
ID=2360
LangSecRef=3021
Detect=HKLM\SOFTWARE\Photodex Media Sources
Detect2=HKLM\SOFTWARE\Wow6432Node\Photodex Media Sources
Default=True
FileKey1=%CommonAppData%\Photodex\ProShow|photodex-presenter-install.log
FileKey2=%CommonAppData%\Photodex\ProShow Producer|photodex-presenter-install.log
FileKey3=%ProgramFiles%\Photodex\ProShow Producer|install.log

[SketchUp Make 2013]
ID=2361
LangSecRef=3021
Detect=HKCU\Software\SketchUp
Default=True
FileKey1=%AppData%\SketchUp\SketchUp 2013\SketchUp|~*.tmp
RegKey1=HKCU\Software\SketchUp\SketchUp 2013\Recent File List

[HandBrake]
ID=2362
LangSecRef=3021
Detect=HKLM\SOFTWARE\Microsoft\Tracing\Handbrake_RASAPI32
Detect2=HKLM\SOFTWARE\Microsoft\Tracing\Handbrake_RASMANCS
Detect3=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Handbrake.exe
Default=True
FileKey1=%AppData%\HandBrake\logs|*.txt
FileKey2=%AppData%\HandBrake\HandBrake\*|*.tmp

[ABBYY FineReader 11.0]
ID=2363
LangSecRef=3021
Detect=HKCU\Software\ABBYY\FineReader\11.00
Default=True
RegKey1=HKCU\Software\ABBYY\FineReader\11.00\Shell\MainFrame\RecentFileList
RegKey2=HKCU\Software\ABBYY\FineReader\11.00\Shell\Dialogs|LoadImagePath
RegKey3=HKCU\Software\ABBYY\FineReader\11.00\Shell\Dialogs|SaveImagePath
FileKey1=%ProgramFiles%\ABBYY FineReader 11|ABBYY FineReader 11.log
FileKey2=%ProgramData%\ABBYY\Bonus.ScreenshotReader\11.00|*.thumbnail
FileKey3=%ProgramData%\ABBYY\FineReader\11.00\Licenses|ProductLicensing.log

[The Bat]
ID=2374
LangSecRef=3022
Detect=HKCU\Software\RIT\The Bat!
Default=True
FileKey1=%AppData%\The Bat!|TheBat_Exceptions.log
FileKey2=%AppData%\The Bat!\*|ACCOUNT_LOG.TXT

[Wondershare Video Converter Ultimate]
ID=2376
LangSecRef=3023
Detect=HKLM\SOFTWARE\Wondershare\Wondershare Video Converter Ultimate
Default=True
FileKey1=%commonprogramfiles%\Wondershare\Wondershare Helper Compact\log\Data|*.*|RECURSE
FileKey2=%ProgramFiles%\Wondershare\Video Converter Ultimate\Log|*.*
FileKey3=%CommonAppData%\Wondershare Video Converter Ultimate|*.dat.bak
FileKey4=%CommonAppData%\Wondershare Video Converter Ultimate\TempSiteIconDir|*.*
FileKey5=%CommonAppData%\Wondershare Video Converter Ultimate\TempThumbDir|*.*

[Sublime Text]
ID=2377
LangSecRef=3024
DetectFile=%AppData%\Sublime Text 3
Default=True
FileKey1=%LocalAppData%\Sublime Text 3\Index|LOG.old
FileKey2=%LocalAppData%\Sublime Text 3\Index|00*.log

[Picasa 3]
ID=2378
LangSecRef=3021
Detect=HKLM\SOFTWARE\Wow6432Node\Google\Picasa
Default=True
FileKey1=%LocalAppData%\Google\Picasa2|network.log;network_expwebsites.log
FileKey2=%LocalAppData%\Google\GBScreensaver|network.log
FileKey3=%LocalAppData%\Google\Google+ Auto Backup|network.log
FileKey4=%LocalAppData%\Google\Picasa2\cache|*.*|RECURSE
FileKey5=%LocalAppData%\Google\Picasa2\temp|*.*|RECURSE
FileKey6=%LocalAppData%\Google\Picasa2\tmp|PluginRec.dat;PluginRec.dat_bak

[Kingsoft Office 2013]
ID=2379
LangSecRef=3021
Detect=HKCU\SOFTWARE\Kingsoft\Kingsoft\Office\6.0
Detect2=HKLM\SOFTWARE\Wow6432Node\Kingsoft\Office\6.0
Default=True
RegKey1=HKCU\Software\Kingsoft\Office\6.0\et\RecentFiles
RegKey2=HKCU\Software\Kingsoft\Office\6.0\et\RecentFunction
RegKey3=HKCU\Software\Kingsoft\Office\6.0\wpp\RecentFiles
RegKey4=HKCU\Software\Kingsoft\Office\6.0\wps\RecentFiles
FileKey1=%AppData%\Kingsoft\*|*.bak2
FileKey2=%CommonAppData%\Kingsoft\Office6\LocalTemp|*.*
FileKey3=%LocalAppData%\Kingsoft\et\cache\http|*.*|RECURSE
FileKey4=%LocalAppData%\Kingsoft\et\cache\https|*.*|RECURSE
FileKey5=%LocalAppData%\Kingsoft\wpp\cache\http|*.*|RECURSE
FileKey6=%LocalAppData%\Kingsoft\wps\cache\http|*.*|RECURSE
FileKey7=%LocalAppData%\Kingsoft\wps\cache\https|*.*|RECURSE
FileKey8=%AppData%\Kingsoft\office6\backup|*.*
FileKey9=%AppData%\Kingsoft\office6\log\*|*.log
FileKey10=%AppData%\Kingsoft\office6\update\log|*.log
FileKey11=%AppData%\Kingsoft\office6\update\down|*.src
FileKey12=%AppData%\Kingsoft\office6\update\dump|*.dmp
FileKey13=%AppData%\Kingsoft\office6\update\log\package|*.pkg

[Facebook Metro]
ID=2380
LangSecRef=3031
Detect=HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Facebook.Facebook_8xx8rvfyw5nnt
Default=True
FileKey1=%LocalAppData%\Packages\*Facebook_*\AC\AppCache|*.*|RECURSE
FileKey2=%LocalAppData%\Packages\*Facebook_*\AC\INetCache|*.*|RECURSE
FileKey3=%LocalAppData%\Packages\*Facebook_*\AC\INetCookies|*.*|RECURSE
FileKey4=%LocalAppData%\Packages\*Facebook_*\AC\INetHistory|*.*|RECURSE
FileKey5=%LocalAppData%\Packages\*Facebook_*\AC\Microsoft\CLR_v4.0|*.log|RECURSE
FileKey6=%LocalAppData%\Packages\*Facebook_*\AC\Microsoft\CryptnetUrlCache\Content|*.*
FileKey7=%LocalAppData%\Packages\*Facebook_*\AC\Microsoft\CryptnetUrlCache\MetaData|*.*
FileKey8=%LocalAppData%\Packages\*Facebook_*\AC\PRICache|*.*
FileKey9=%LocalAppData%\Packages\*Facebook_*\AC\Temp|*.*

[Xilisoft Video Converter]
ID=2381
LangSecRef=3023
Detect=HKLM\Software\Xilisoft\Video Converter Platinum
Detect2=HKLM\Software\Xilisoft\Video Converter Ultimate
Detect3=HKLM\Software\Xilisoft\Video Converter Standard
Default=True
RegKey1=Software\Xilisoft\Video Converter Platinum\Settings|last_output_dir
RegKey2=Software\Xilisoft\Video Converter Platinum\Settings|last_profile_group
RegKey3=Software\Xilisoft\Video Converter Platinum\Settings|last_profile_url
RegKey4=Software\Xilisoft\Video Converter Platinum\Settings|recent_profiles
RegKey5=Software\Xilisoft\Video Converter Platinum\Settings\output
Filekey1=%CommonAppData%\Xilisoft\Video Converter Platinum\customdata|settings.old

[Xilisoft DVD Ripper]
ID=2382
LangSecRef=3023
Detect=HKLM\Software\Xilisoft\DVD Ripper Ultimate SE
Default=True
RegKey1=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|last_output_dir
RegKey2=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|last_profile_group
RegKey3=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|last_profile_url
RegKey4=Software\Xilisoft\DVD Ripper Ultimate SE\Settings|recent_profiles
RegKey5=Software\Xilisoft\DVD Ripper Ultimate SE\Settings\output
FileKey1=%CommonAppData%\Xilisoft\DVD Ripper Ultimate SE\customdata|settings.old

[dBpoweramp]
ID=2383
LangSecRef=3023
Detect=HKCU\Software\Illustrate\dBpoweramp
Default=True
RegKey1=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder0
RegKey2=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder1
RegKey3=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder2
RegKey4=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder3
RegKey5=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder4
RegKey6=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder5
RegKey7=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder6
RegKey8=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder7
RegKey9=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder8
RegKey10=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder9
RegKey11=HKCU\Software\Illustrate\dBpoweramp|dMCLastFolder10
RegKey12=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\AAC (Advanced Audio Compression)|DMCUserFolderStr
RegKey13=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Aiff|DMCUserFolderStr
RegKey14=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Apple Lossless|DMCUserFolderStr
RegKey15=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\FLAC|DMCUserFolderStr
RegKey16=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\mp3 (Lame)|DMCUserFolderStr
RegKey17=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\ogg vorbis|DMCUserFolderStr
RegKey18=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Wave|DMCUserFolderStr
RegKey19=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Windows Media Audio 10|DMCUserFolderStr
RegKey20=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\[Multi Encoder]|DMCUserFolderStr
RegKey21=HKCU\Software\Illustrate\dBpoweramp\dMCCodec\Test Conversion|DMCUserFolderStr
RegKey22=HKCU\Software\Illustrate\dBpoweramp|LastAccessedFolder

[SyncBackFree]
ID=2384
LangSecRef=3024
Detect=HKCU\Software\2BrightSparks\SyncBackFree
Default=True
FileKey1=%LocalAppData%\2BrightSparks\SyncBackFree\Logs|*.*
FileKey2=%LocalAppData%\2BrightSparks\SyncBackFree|Debug*.txt

[Wondershare Video Converter Pro]
ID=2385
LangSecRef=3023
Detect=HKLM\SOFTWARE\Wondershare\Wondershare Video Converter Pro
Default=True
FileKey1=%ProgramFiles%\Wondershare Video Converter Pro\TempThumbDir|*.*|RECURSE
FileKey2=%ProgramFiles%\Wondershare Video Converter Pro\Log|*.*|RECURSE
FileKey3=%CommonAppData%\Wondershare Video Converter Pro|*.dat.bak
FileKey4=%CommonAppData%\Wondershare Video Converter Pro\TempSiteIconDir|*.*
FileKey5=%CommonAppData%\Wondershare Video Converter Pro\TempThumbDir|*.*
FileKey6=%CommonProgramFiles%\Wondershare\Wondershare Helper Compact\Temp|video*.exe
FileKey7=%ProgramFiles%\Wondershare\Video Converter Pro\Output|Thumbnail.dat

[Aimersoft Video Converter Ultimate]
ID=2386
LangSecRef=3023
Detect=HKLM\SOFTWARE\Aimersoft\Aimersoft Video Converter Ultimate
Default=True
FileKey1=%ProgramFiles%\Aimersoft\Video Converter Ultimate\Log|*.*
FileKey2=%ProgramFiles%\Aimersoft\Video Converter Ultimate\Snapshot|snap*.dat
FileKey3=%ProgramFiles%\Common Files\Aimersoft\Aimersoft Helper Compact\log|*.*|RECURSE
FileKey4=%CommonAppData%\Aimersoft Video Converter Ultimate\TempSiteIconDir|*.*
FileKey5=%CommonAppData%\Aimersoft Video Converter Ultimate\TempThumbDir|*.*
FileKey6=%CommonAppData%\Aimersoft Video Converter Ultimate|*.dat.bak
FileKey7=%LocalAppData%\Aimersoft\ASHelper|*.exe.tmp
FileKey8=%AppData%\Aimersoft Video Converter Ultimate\Temp|*.*

[Stardock WindowBlinds]
ID=2389
LangSecRef=3021
Detect=HKCU\Software\Stardock\WindowBlinds
Default=True
RegKey1=HKCU\Software\Stardock\WindowBlinds\WB5.ini\Recent
FileKey1=%Public%\Documents\Stardock\WindowBlinds|StardockB*.dmp

[Nitro Pro 9]
ID=2390
LangSecRef=3024
Detect=HKCU\Software\Nitro\Pro\9.0
Default=True
RegKey1=HKCU\Software\Nitro\Pro\9.0\Recent File List
RegKey2=HKCU\Software\Nitro\Pro\9.0\Settings\Preferences\kPreferences|kCurrentOpenPath
FileKey1=%CommonProgramFiles%\Nitro\Pro\9.0|*.backup
FileKey2=%CommonAppData%\Package Cache|*.rsm
FileKey3=%AppData%\Downloaded Installations|*_temp.msi|RECURSE
FileKey4=%AppData%\Nitro\Pro\9.0|DocLog.txt

[Nitro PDF Reader 3]
ID=2392
LangSecRef=3024
Detect=HKCU\Software\Nitro\Reader\3.0
Default=True
RegKey1=HKCU\Software\Nitro PDF\Reader\3.0\Recent File List

[VirtualDJ 7]
ID=2393
LangSecRef=3023
Detect=HKCU\Software\VirtualDJ
Default=True
FileKey1=%Documents%\VirtualDJ\TrackListing|tracklist.txt

[Format Factory 3.3.5]
ID=2394
LangSecRef=3023
Detect=HKCU\Software\FreeTime\FormatFactory
Default=True
RegKey1=HKCU\Software\FreeTime\FormatFactory|LastUse
FileKey1=%Documents%\FormatFactory|*.task

[TeamViewer]
ID=2395
LangSecRef=3024
Detect=HKCU\Software\TeamViewer
Default=True
RegKey1=HKCU\Software\TeamViewer\Version9|MRU
FileKey1=%ProgramFiles%\TeamViewer\*|*.tmp|RECURSE
FileKey2=%LocalAppData%\VirtualStore\Program Files*\TeamViewer\*|*.tmp|RECURSE
FileKey3=%ProgramFiles%\TeamViewer\Version9|Connections_incoming.txt
FileKey4=%AppData%\TeamViewer|Connections.txt
FileKey5=%AppData%\TeamViewer\MRU\RemoteSupport|*.tvc

[MS OneDrive]
ID=2396
LangSecRef=3021
Detect=HKCU\Software\Microsoft\SkyDrive
Default=True
FileKey1=%LocalAppData%\Microsoft\SkyDrive\logs|*.log;*.etl

[VNCViewer 5]
ID=2397
LangSecRef=3024
Detect=HKCU\Software\RealVNC\vncviewer
Default=True
RegKey1=HKCU\Software\RealVNC\vncviewer\MRU
FileKey1=%LocalAppData%\RealVNC|vncviewer.log

[Tag&Rename 3.8]
ID=2398
LangSecRef=3024
Detect=HKCU\Software\Softpointer\Tag&Rename3.7\Config
Default=True
RegKey1=HKCU\Software\Softpointer\Tag&Rename3.7\Config|CurrentFolder
RegKey2=HKCU\Software\Softpointer\Tag&Rename3.7\Config|HistoryList

[Tango]
ID=2399
LangSecRef=3022
DetectFile=%ProgramFiles%\Tango\Tango.exe
Default=True
FileKey1=%LocalAppData%\tango|call_log.dat

[PhotoScape 3.6.5]
ID=2400
LangSecRef=3023
Detect=HKCU\Software\Mooii\PhotoScape
Default=True
FileKey1=%AppData%\PhotoScape|*.lst;*.cfg;*.jpg

[BlueStacks]
ID=2401
LangSecRef=3021
Detect=HKLM\Software\Bluestacks
Default=True
FileKey1=%CommonAppData%\BlueStacks\logs|*.log;*.log.*|RECURSE
FileKey2=%LocalAppData%\BlueStacks\logs|*.log
FileKey3=%CommonAppData%\BlueStacksSetup\Images\|*.*|REMOVESELF
FileKey4=%CommonAppData%\BlueStacksSetup|runtimedata_*.zip;runtimedata_*.zip.manifest
FileKey5=%CommonAppData%\BlueStacksSetup|bstInstall.log

[ManyCam 4.0.109]
ID=2402
LangSecRef=3023
Detect=HKCU\Software\Visicom Media\ManyCam
Default=True
RegKey1=HKCU\Software\Visicom Media\ManyCam\ui|open_media_folder
RegKey2=HKCU\Software\Visicom Media\ManyCam\ui|open_audio_folder
RegKey3=HKCU\Software\Visicom Media\ManyCam\ui|open_game_folder
RegKey4=HKCU\Software\Visicom Media\ManyCam\ui|open_playlist_folder
FileKey1=%LocalAppData%\ManyCam\game_capture|*.log

[XnView]
ID=2406
LangSecRef=3024
Detect=HKLM\Software\XnView
Default=True
FileKey1=%AppData%\XnView|XnView.db;category.bak
FileKey2=%ProgramFiles%\XnView|category.bak
FileKey3=%LocalAppData%\VirtualStore\Program Files*\XnView|category.bak
FileKey4=%ProgramFiles%\XnView\cache|*.db
FileKey5=%LocalAppData%\VirtualStore\Program Files*\XnView\cache|*.db