home *** CD-ROM | disk | FTP | other *** search
/ Maximum CD 2010 March / maximum-cd-2010-03.iso / DiscContents / ccsetup226.exe / CCleaner.exe / 1033 / INI / 273 < prev   
Encoding:
Text File  |  2009-11-24  |  44.6 KB  |  1,377 lines

  1. ; CCleaner - Application Cleaning file
  2.  
  3. [Global]
  4. Revision=2016
  5. NextIDValue=2148
  6.  
  7. ;
  8. ; WARNING - DO NOT EDIT THIS FILE
  9. ; If you would like to create custom entries then create a new file
  10. ; called winapp2.ini which follows the same format as this one.
  11. ; CCleaner will automatically pick up the new file.
  12. ;
  13. ; Copyright ⌐2004-2009 Piriform Ltd, All Rights Reserved.
  14. ; This file and it's contents may not be copied or distributed
  15. ; without the express permission of the author.
  16. ;
  17. ; Notes
  18. ; ---------------------------------------
  19. ; LangSecRef
  20. ;  3021 = Applications
  21. ;  3022 = Internet
  22. ;  3023 = Multimedia
  23. ;  3024 = Utilities
  24. ;  3025 = Windows
  25. ;  3026 = Firefox/Mozilla
  26. ;  3027 = Opera
  27. ;  3028 = Safari
  28.  
  29. [Mozilla - Internet Cache]
  30. ID=2001
  31. LangSecRef=3026
  32. LangRef=3161
  33. Default=True
  34. SpecialDetect=DET_MOZILLA
  35. SpecialKey1=N_MOZ_CACHE
  36.  
  37. [Mozilla - Internet History]
  38. ID=2002
  39. LangSecRef=3026
  40. LangRef=3162
  41. Default=True
  42. SpecialDetect=DET_MOZILLA
  43. SpecialKey1=N_MOZ_HISTORY
  44.  
  45. [Mozilla - Download History]
  46. ID=2003
  47. LangSecRef=3026
  48. LangRef=3163
  49. Default=True
  50. SpecialDetect=DET_MOZILLA
  51. SpecialKey1=N_MOZ_DOWNLOAD
  52.  
  53. [Mozilla - Cookies]
  54. ID=2004
  55. LangSecRef=3026
  56. LangRef=3102
  57. Default=True
  58. SpecialDetect=DET_MOZILLA
  59. SpecialKey1=N_MOZ_COOKIES
  60.  
  61. [Mozilla - Saved Form Information]
  62. ID=2005
  63. LangSecRef=3026
  64. LangRef=3164
  65. Default=False
  66. SpecialDetect=DET_MOZILLA
  67. SpecialKey1=N_MOZ_FORM
  68.  
  69. [Mozilla - Compact Databases]
  70. ID=2146
  71. LangSecRef=3026
  72. LangRef=3165
  73. Default=False
  74. SpecialDetect=DET_MOZILLA
  75. SpecialKey1=N_MOZ_COMPACT_DATABASES
  76.  
  77. [Opera - Internet Cache]
  78. ID=2006
  79. LangSecRef=3027
  80. LangRef=3161
  81. Default=True
  82. SpecialDetect=DET_OPERA
  83. SpecialKey1=N_OPERA_CACHE
  84.  
  85. [Opera - Internet History]
  86. ID=2007
  87. LangSecRef=3027
  88. LangRef=3162
  89. Default=True
  90. SpecialDetect=DET_OPERA
  91. SpecialKey1=N_OPERA_HISTORY
  92.  
  93. [Opera - Cookies]
  94. ID=2008
  95. LangSecRef=3027
  96. LangRef=3102
  97. Default=False
  98. SpecialDetect=DET_OPERA
  99. SpecialKey1=N_OPERA_COOKIES
  100.  
  101. [Safari - Internet Cache]
  102. ID=2009
  103. LangSecRef=3028
  104. LangRef=3161
  105. Default=True
  106. DetectFile=%ProgramFiles%\Safari\Safari.exe
  107. FileKey1=%localappdata%\Apple Computer\Safari|Cache.db
  108.  
  109. [Safari - Internet History]
  110. ID=2010
  111. LangSecRef=3028
  112. LangRef=3162
  113. Default=True
  114. DetectFile=%ProgramFiles%\Safari\Safari.exe
  115. FileKey1=%appdata%\Apple Computer\Safari|History.plist
  116. FileKey2=%appdata%\Apple Computer\Safari|Downloads.plist
  117. FileKey3=%localappdata%\Apple Computer\Safari\History|*.*
  118. FileKey4=%localappdata%\Apple Computer\Safari\Webpage Previews|*.*|RECURSE
  119.  
  120. [Safari - Cookies]
  121. ID=2011
  122. LangSecRef=3028
  123. LangRef=3102
  124. Default=True
  125. DetectFile=%ProgramFiles%\Safari\Safari.exe
  126. FileKey1=%appdata%\Apple Computer\Safari\Cookies|Cookies.plist
  127.  
  128. [Safari - Saved Form Information]
  129. ID=2012
  130. LangSecRef=3028
  131. LangRef=3164
  132. Default=False
  133. DetectFile=%ProgramFiles%\Safari\Safari.exe
  134. FileKey1=%appdata%\Apple Computer\Safari|Form Values.plist
  135.  
  136. [Google Chrome - Internet Cache]
  137. ID=2013
  138. Section=Google Chrome
  139. LangRef=3161
  140. Default=True
  141. DetectFile=%localappdata%\Google\Chrome\Application\chrome.exe
  142. DetectFile2=%ProgramFiles%\Google\Chrome\Application\chrome.exe
  143. SpecialKey1=N_CHROME_CACHE
  144.  
  145. [Google Chrome - Internet History]
  146. ID=2014
  147. Section=Google Chrome
  148. LangRef=3162
  149. Section = Chrome
  150. Default=True
  151. DetectFile=%localappdata%\Google\Chrome\Application\chrome.exe
  152. DetectFile2=%ProgramFiles%\Google\Chrome\Application\chrome.exe
  153. SpecialKey1=N_CHROME_HISTORY
  154.  
  155. [Google Chrome - Download History]
  156. ID=2015
  157. Section=Google Chrome
  158. LangRef=3163
  159. Default=True
  160. DetectFile=%localappdata%\Google\Chrome\Application\chrome.exe
  161. DetectFile2=%ProgramFiles%\Google\Chrome\Application\chrome.exe
  162. SpecialKey1=N_CHROME_DOWNLOAD
  163.  
  164. [Google Chrome - Cookies]
  165. ID=2016
  166. Section=Google Chrome
  167. LangRef=3102
  168. Default=True
  169. DetectFile=%localappdata%\Google\Chrome\Application\chrome.exe
  170. DetectFile2=%ProgramFiles%\Google\Chrome\Application\chrome.exe
  171. SpecialKey1=N_CHROME_COOKIES
  172.  
  173. [Google Chrome - Saved Form Information]
  174. ID=2017
  175. Section=Google Chrome
  176. LangRef=3164
  177. Default=False
  178. DetectFile=%localappdata%\Google\Chrome\Application\chrome.exe
  179. DetectFile2=%ProgramFiles%\Google\Chrome\Application\chrome.exe
  180. SpecialKey1=N_CHROME_FORM
  181.  
  182. [Google Chrome - Compact Databases]
  183. ID=2147
  184. Section=Google Chrome
  185. LangRef=3165
  186. Default=False
  187. DetectFile=%localappdata%\Google\Chrome\Application\chrome.exe
  188. DetectFile2=%ProgramFiles%\Google\Chrome\Application\chrome.exe
  189. SpecialKey1=N_CHROME_COMPACT_DATABASES
  190.  
  191. [Adobe Acrobat Reader 5.0]
  192. ID=2018
  193. LangSecRef=3021
  194. Detect=HKCU\Software\Adobe\Acrobat Reader\5.0\AVGeneral\cRecentFiles
  195. Default=True
  196. RegKey1=HKCU\Software\Adobe\Acrobat Reader\5.0\AVGeneral\cRecentFiles
  197.  
  198. [Adobe Acrobat Reader 6.0]
  199. ID=2019
  200. LangSecRef=3021
  201. Detect=HKCU\Software\Adobe\Acrobat Reader\6.0\AVGeneral
  202. Default=True
  203. RegKey1=HKCU\Software\Adobe\Acrobat Reader\6.0\AVGeneral\cRecentFiles
  204.  
  205. [Adobe Acrobat Reader 7.0]
  206. ID=2020
  207. LangSecRef=3021
  208. Detect=HKCU\Software\Adobe\Acrobat Reader\7.0\AVGeneral
  209. Default=True
  210. RegKey1=HKCU\Software\Adobe\Acrobat Reader\7.0\AVGeneral\cRecentFiles
  211. FileKey1=%localappdata%\Adobe\Acrobat\7.0\Cache\Search70|*.*
  212. FileKey2=%ProgramFiles%\Adobe\Acrobat 7.0\Reader|*.bak
  213. FileKey3=%ProgramFiles%\Adobe\Acrobat 7.0\ActiveX|*.bak
  214. FileKey4=%ProgramFiles%\Adobe\Acrobat 7.0\Reader\plug_ins|*.bak
  215. FileKey5=%ProgramFiles%\Adobe\Acrobat 7.0\Reader\Updater|*.bak
  216.  
  217. [Adobe Reader 8.0]
  218. ID=2021
  219. LangSecRef=3021
  220. Detect=HKCU\Software\Adobe\Acrobat Reader\8.0\AVGeneral
  221. Default=True
  222. RegKey1=HKCU\Software\Adobe\Acrobat Reader\8.0\AVGeneral\cRecentFiles
  223. FileKey1=%localappdata%\Adobe\Acrobat\8.0\Cache\Search80|*.*
  224.  
  225. [Adobe Reader 9.0]
  226. ID=2137
  227. LangSecRef=3021
  228. Detect=HKCU\Software\Adobe\Acrobat Reader\9.0\AVGeneral
  229. Default=True
  230. RegKey1=HKCU\Software\Adobe\Acrobat Reader\9.0\AVGeneral\cRecentFiles
  231. FileKey1=%localappdata%\Adobe\Acrobat\9.0\Cache\Search90|*.*
  232.  
  233. [Adobe Acrobat 8.0]
  234. ID=2022
  235. LangSecRef=3021
  236. Detect=HKCU\Software\Adobe\Adobe Acrobat\8.0\AVGeneral
  237. Default=True
  238. RegKey1=HKCU\Software\Adobe\Adobe Acrobat\8.0\AVGeneral\cRecentFiles
  239.  
  240. [Adobe ImageReady 7.0]
  241. ID=2023
  242. LangSecRef=3021
  243. Default=True
  244. Detect=HKCU\Software\Adobe\ImageReady 7.0
  245. RegKey1=HKCU\Software\Adobe\ImageReady 7.0\Preferences\URLHistory
  246. RegKey2=HKCU\Software\Adobe\ImageReady 7.0\Preferences|SaveDir
  247. RegKey3=HKCU\Software\Adobe\ImageReady 7.0\Preferences\RecentFiles
  248.  
  249. [Adobe Photoshop 6.0]
  250. ID=2024
  251. LangSecRef=3021
  252. Default=True
  253. Detect=HKCU\Software\Adobe\Photoshop\6.0
  254. RegKey1=HKCU\Software\Adobe\Photoshop\6.0\VisitedDirs
  255.  
  256. [Adobe Photoshop 7.0]
  257. ID=2025
  258. LangSecRef=3021
  259. Default=True
  260. Detect=HKCU\Software\Adobe\Photoshop\7.0
  261. RegKey1=HKCU\Software\Adobe\Photoshop\7.0\VisitedDirs
  262.  
  263. [Adobe Photoshop CS]
  264. ID=2026
  265. LangSecRef=3021
  266. Default=True
  267. Detect=HKCU\Software\Adobe\Photoshop\8.0
  268. RegKey1=HKCU\Software\Adobe\Photoshop\8.0\VisitedDirs
  269.  
  270. [Adobe Photoshop CS2]
  271. ID=2027
  272. LangSecRef=3021
  273. Detect=HKCU\Software\Adobe\Photoshop\9.0
  274. Default=True
  275. RegKey1=HKCU\Software\Adobe\Photoshop\9.0\VisitedDirs
  276. RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList
  277. FileKey1=%appdata%\Adobe\CameraRaw\Cache|*.*
  278.  
  279. [Adobe Photoshop CS3]
  280. ID=2139
  281. LangSecRef=3021
  282. Detect=HKCU\Software\Adobe\Photoshop\10.0
  283. Default=True
  284. RegKey1=HKCU\Software\Adobe\Photoshop\10.0\VisitedDirs
  285.  
  286. [Adobe Photoshop CS4]
  287. ID=2140
  288. LangSecRef=3021
  289. Detect=HKCU\Software\Adobe\Photoshop\11.0
  290. Default=True
  291. RegKey1=HKCU\Software\Adobe\Photoshop\11.0\VisitedDirs
  292. RegKey2=HKCU\Software\Adobe\MediaBrowser\MRU\Photoshop\FileList
  293.  
  294. [Adobe Illustrator CS4]
  295. ID=2144
  296. LangSecRef=3021
  297. Detect=HKCU\Software\Adobe\MediaBrowser\MRU\illustrator
  298. Default=True
  299. RegKey1=HKCU\Software\Adobe\MediaBrowser\MRU\illustrator\FileList
  300.  
  301. [Yahoo Toolbar]
  302. ID=2028
  303. LangSecRef=3022
  304. Detect=HKCU\Software\Yahoo\Companion
  305. Default=True
  306. RegKey1=HKCU\Software\Yahoo\Companion\SearchHistory
  307.  
  308. [Windows Live Toolbar]
  309. ID=2029
  310. LangSecRef=3022
  311. Detect=HKCU\Software\Microsoft\MSN Apps\SearchBox
  312. Default=True
  313. RegKey1=HKCU\Software\Microsoft\MSN Apps\SearchBox|History
  314. RegKey2=HKCU\Software\Microsoft\MSN Apps\MSN Toolbar|SearchStrings
  315.  
  316. [Google Toolbar]
  317. ID=2030
  318. LangSecRef=3022
  319. Detect=HKCU\Software\Google\NavClient\1.1
  320. Default=True
  321. RegKey1=HKCU\Software\Google\NavClient\1.1\History
  322. RegKey2=HKCU\Software\Google\NavClient\1.1\Options|KillPopupCount
  323.  
  324. [Google Toolbar 4.0]
  325. ID=2031
  326. LangSecRef=3022
  327. Detect=HKCU\Software\Google\Google Toolbar
  328. Default=True
  329. FileKey1=%appdata%\Google\Local Search History|*.*
  330.  
  331. [Google Deskbar]
  332. ID=2032
  333. LangSecRef=3022
  334. Detect=HKCU\Software\Google\Deskbar
  335. Default=True
  336. RegKey1=HKCU\Software\Google\Deskbar\termhistory
  337. RegKey2=HKCU\Software\Google\Deskbar\urlhistory
  338.  
  339. [Windows Media Player]
  340. ID=2033
  341. LangSecRef=3023
  342. Detect=HKCU\Software\Microsoft\MediaPlayer\Player
  343. Default=True
  344. RegKey1=HKCU\Software\Microsoft\MediaPlayer\Player\RecentFileList
  345. RegKey2=HKCU\Software\Microsoft\MediaPlayer\Player\RecentURLList
  346. RegKey3=HKCU\Software\Microsoft\MediaPlayer\Preferences|LastPlayList
  347. RegKey4=HKCU\Software\Microsoft\MediaPlayer\Preferences|LastPlayListIndex
  348. RegKey5=HKCU\Software\Microsoft\MediaPlayer\Player\Settings|SaveAsDir
  349. RegKey6=HKCU\Software\Microsoft\MediaPlayer\AutoComplete\MediaEdit
  350. RegKey7=HKCU\Software\Microsoft\MediaPlayer\Radio\MRUList
  351.  
  352. [Real Player]
  353. ID=2034
  354. LangSecRef=3023
  355. Detect=HKCU\Software\RealNetworks\RealPlayer\6.0
  356. Default=True
  357. RegKey1=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips1
  358. RegKey2=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips2
  359. RegKey3=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips3
  360. RegKey4=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips4
  361. RegKey5=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips5
  362. RegKey6=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips6
  363. RegKey7=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips7
  364. RegKey8=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentClips8
  365. RegKey9=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins1
  366. RegKey10=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins2
  367. RegKey11=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins3
  368. RegKey12=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins4
  369. RegKey13=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins5
  370. RegKey14=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins6
  371. RegKey15=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins7
  372. RegKey16=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\MostRecentSkins8
  373. RegKey17=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\LastOpenFileDir
  374. RegKey18=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips1
  375. RegKey19=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips2
  376. RegKey20=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips3
  377. RegKey21=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips4
  378. RegKey22=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips5
  379. RegKey23=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips6
  380. RegKey24=HKCU\Software\RealNetworks\RealPlayer\6.0\Preferences\OpenLocationClips7
  381. FileKey1=%appdata%\Real\RealOne Player|cookies.txt
  382. FileKey2=%appdata%\Real\RealOne Player|ctd.dat
  383. FileKey3=%appdata%\Real\RealOne Player|realplayer.ste
  384. FileKey4=%appdata%\Real\RealOne Player\History|*.*
  385. FileKey5=%appdata%\Real\RealPlayer|cookies.txt
  386. FileKey6=%appdata%\Real\RealPlayer|ctd.dat
  387. FileKey7=%appdata%\Real\RealPlayer|realplayer.ste
  388. FileKey8=%appdata%\Real\RealPlayer\History|*.*
  389. FileKey9=%ProgramFiles%\Common Files\Real\Update_OB|RealPlayer-log.txt
  390.  
  391. [Quicktime Player]
  392. ID=2035
  393. LangSecRef=3023
  394. Detect=HKLM\Software\Apple Computer, Inc.\QuickTime
  395. Default=True
  396. RegKey1=HKLM\Software\Apple Computer, Inc.\QuickTime\Recent Movies
  397. FileKey1=%userprofile%|QTPlayerSession.xml
  398. FileKey2=%appdata%\Apple Computer\QuickTime|QTPlayerSession.xml
  399.  
  400. [Quicktime Player Cache]
  401. ID=2036
  402. LangSecRef=3023
  403. Detect=HKLM\Software\Apple Computer, Inc.\QuickTime
  404. Default=True
  405. FileKey1=%localappdata%\Apple Computer\QuickTime\downloads|*.*|RECURSE
  406.  
  407. [AVI Preview]
  408. ID=2037
  409. LangSecRef=3023
  410. Detect=HKCU\Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more
  411. Default=True
  412. RegKey1=HKCU\Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more\Recent File List
  413.  
  414. [XML Spy]
  415. ID=2038
  416. LangSecRef=3021
  417. Detect=HKCU\Software\Altova\XML Spy
  418. Default=True
  419. RegKey1=HKCU\Software\Altova\XML Spy\Recent File List
  420. RegKey2=HKCU\Software\Altova\XML Spy\Recent Project List
  421.  
  422. [SWiSH]
  423. ID=2039
  424. LangSecRef=3023
  425. Detect=HKCU\Software\DJJ Holdings\SWiSH
  426. Default=True
  427. RegKey1=HKCU\Software\DJJ Holdings\SWiSH\Recent File List
  428.  
  429. [Paint Shop Pro 7.0]
  430. ID=2040
  431. LangSecRef=3023
  432. Detect=HKCU\Software\Jasc\Paint Shop Pro 7
  433. Default=True
  434. RegKey1=HKCU\Software\Jasc\Paint Shop Pro 7\Recent File List
  435. RegKey2=HKCU\Software\Jasc\Animation Shop 3\Recent File List
  436. RegKey3=HKCU\Software\Jasc\Paint Shop Pro 7\General|FolderHistory
  437. RegKey4=HKCU\Software\Jasc\Paint Shop Pro 7\General|SaveAsDirectory
  438. RegKey5=HKCU\Software\Jasc\Paint Shop Pro 7\General|SaveCopyDirectory
  439.  
  440. [Paint Shop Pro 8.0]
  441. ID=2041
  442. LangSecRef=3023
  443. Detect=HKCU\Software\Jasc\Paint Shop Pro 8
  444. Default=True
  445. RegKey1=HKCU\Software\Jasc\Paint Shop Pro 8\Recent File List
  446. RegKey2=HKCU\Software\Jasc\Paint Shop Pro 8\WorkspaceMRU
  447. RegKey3=HKCU\Software\Jasc\Paint Shop Pro 8\JascCmdPyScript\RunScript|FileName
  448. RegKey4=HKCU\Software\Jasc\Paint Shop Pro 8\JascCmdFile\FileSaveAs|FileFolder
  449. RegKey5=HKCU\Software\Jasc\Paint Shop Pro 8\JascCmdNonGraphic\SaveWorkspace|WorkspaceFilename
  450. RegKey6=HKCU\Software\Jasc\Paint Shop Pro 8\ScriptMRU
  451.  
  452. [Paint Shop Pro 9.0]
  453. ID=2042
  454. LangSecRef=3023
  455. Detect=HKCU\Software\Jasc\Paint Shop Pro 9
  456. Default=True
  457. RegKey1=HKCU\Software\Jasc\Paint Shop Pro 9\Recent File List
  458. RegKey2=HKCU\Software\Jasc\Paint Shop Pro 9\WorkspaceMRU
  459. Regkey3=HKCU\Software\Jasc\Paint Shop Pro 9\JascCmdFile\FileSaveAs|FileFolder
  460. RegKey4=HKCU\Software\Jasc\Paint Shop Pro 9\JascCmdFile\FileOpen|Folder
  461.  
  462. [Paint Shop Pro X]
  463. ID=2043
  464. LangSecRef=3023
  465. Detect=HKCU\Software\Corel\Paint Shop Pro\10
  466. Default=True
  467. RegKey1=HKCU\Software\Corel\Paint Shop Pro\10\Recent File List
  468. RegKey2=HKCU\Software\Corel\Paint Shop Pro\10\WorkspaceMRU
  469. Regkey3=HKCU\Software\Corel\Paint Shop Pro\10\CmdFile\FileSaveAs|FileFolder
  470. RegKey4=HKCU\Software\Corel\Paint Shop Pro\10\CmdFile\FileOpen|Folder
  471.  
  472. [Paint Shop Pro XI]
  473. ID=2044
  474. LangSecRef=3023
  475. Detect=HKCU\Software\Corel\Paint Shop Pro\11
  476. Default=True
  477. RegKey1=HKCU\Software\Corel\Paint Shop Pro\11\Recent File List
  478. RegKey2=HKCU\Software\Corel\Paint Shop Pro\11\WorkspaceMRU
  479. Regkey3=HKCU\Software\Corel\Paint Shop Pro\11\CmdFile\FileSaveAs|FileFolder
  480. RegKey4=HKCU\Software\Corel\Paint Shop Pro\11\CmdFile\FileOpen|Folder
  481.  
  482. [MS Works 4.0]
  483. ID=2045
  484. LangSecRef=3021
  485. Detect= HKCU\Software\Microsoft\Works\4.0
  486. Default=True
  487. RegKey1=HKCU\Software\Microsoft\Works\4.0\Recent File List
  488.  
  489. [Office 97]
  490. ID=2046
  491. LangSecRef=3021
  492. Detect=HKCU\Software\Microsoft\Office\8.0\Common
  493. Default=True
  494. FileKey1=%appdata%\Microsoft\Office\Recent|*.*
  495. RegKey1=HKCU\Software\Microsoft\Office\8.0\Excel\Recent File List
  496. RegKey2=HKCU\Software\Microsoft\Office\8.0\Project\Recent File List
  497. RegKey3=HKCU\Software\Microsoft\Office\8.0\PowerPoint\Recent File List
  498. RegKey4=HKCU\Software\Microsoft\Office\8.0\PowerPoint\Recent Folder List
  499. RegKey5=HKCU\Software\Microsoft\Office\8.0\Common\Internet\LocationOfComponents
  500. RegKey6=HKCU\Software\Microsoft\Office\8.0\Access\Settings
  501.  
  502. [Office XP]
  503. ID=2047
  504. LangSecRef=3021
  505. Detect=HKCU\Software\Microsoft\Office\10.0\Common
  506. Default=True
  507. FileKey1=%appdata%\Microsoft\Office\Recent|*.*
  508. RegKey1=HKCU\Software\Microsoft\Office\10.0\PowerPoint\Recent File List
  509. RegKey2=HKCU\Software\Microsoft\Office\10.0\Excel\Recent Files
  510. RegKey3=HKCU\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent File List
  511. RegKey4=HKCU\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent Page List
  512. RegKey5=HKCU\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Recent Web List
  513. RegKey6=HKCU\Software\Microsoft\Office\10.0\Word\Recent Templates
  514. RegKey7=HKCU\Software\Microsoft\Office\10.0\Common\Internet|UseRWHlinkNavigation
  515. RegKey8=HKCU\Software\Microsoft\Office\10.0\Word\Data|Settings
  516. RegKey9=HKCU\Software\Microsoft\Office\10.0\Access\Settings
  517.  
  518. [Office 2003]
  519. ID=2048
  520. LangSecRef=3021
  521. Detect=HKCU\Software\Microsoft\Office\11.0\Common
  522. Default=True
  523. FileKey1=%appdata%\Microsoft\Office\Recent|*.*
  524. RegKey1=HKCU\Software\Microsoft\Office\11.0\Excel\Recent Files
  525. RegKey2=HKCU\Software\Microsoft\Office\11.0\Common\Open Find\Microsoft Office Word\Settings\Save As\File Name MRU
  526. Regkey3=HKCU\Software\Microsoft\Office\11.0\PowerPoint\Recent File List
  527. Regkey4=HKCU\Software\Microsoft\Office\11.0\Publisher\Recent File List
  528. Regkey5=HKCU\Software\Microsoft\Office\11.0\InfoPath\Recent File List
  529. RegKey6=HKCU\Software\Microsoft\Office\11.0\Common\Internet\Server Cache
  530. RegKey7=HKCU\Software\Microsoft\Office\11.0\Common\Internet|UseRWHlinkNavigation
  531. RegKey8=HKCU\Software\Microsoft\MSPaper 11.0\Persist File Name
  532. RegKey9=HKCU\Software\Microsoft\MSPaper 11.0\Recent File List
  533. RegKey10=HKCU\Software\Microsoft\Office\11.0\Word\Data|Settings
  534. RegKey11=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile1
  535. RegKey12=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile2
  536. RegKey13=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile3
  537. RegKey14=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile4
  538. RegKey15=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile5
  539. RegKey16=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile6
  540. RegKey17=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile7
  541. RegKey18=HKCU\Software\Microsoft\Office\11.0\Visio\Application|LastFile8
  542. RegKey19=HKCU\Software\Microsoft\Office\11.0\Outlook\Contact|QuickFindMRU
  543. RegKey20=HKCU\Software\Microsoft\Office\11.0\Outlook\Contact|StripSearchMRU
  544. RegKey21=HKCU\Software\Microsoft\Office\11.0\Outlook\Preferences|LocationMRU
  545.  
  546. [Office 2007]
  547. ID=2049
  548. LangSecRef=3021
  549. Detect=HKCU\Software\Microsoft\Office\12.0\Common
  550. Default=True
  551. FileKey1=%appdata%\Microsoft\Office\Recent|*.*
  552. RegKey1=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Word\Settings\Save As\File Name MRU
  553. RegKey2=HKCU\Software\Microsoft\Office\12.0\Word\File MRU
  554. RegKey3=HKCU\Software\Microsoft\Office\12.0\Excel\File MRU
  555. RegKey4=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU1
  556. RegKey5=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU2
  557. RegKey6=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU3
  558. RegKey7=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU4
  559. RegKey8=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU5
  560. RegKey9=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU6
  561. RegKey10=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU7
  562. RegKey11=HKCU\Software\Microsoft\Office\12.0\Access\Settings|MRU8
  563. RegKey12=HKCU\Software\Microsoft\Office\12.0\PowerPoint\File MRU
  564. RegKey13=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office PowerPoint\Settings\Save As\File Name MRU
  565. RegKey14=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office InfoPath\Settings\Open\File Name MRU
  566. RegKey15=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office InfoPath\Settings\Save As\File Name MRU
  567. RegKey16=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Excel\Settings\Save As\File Name MRU
  568. RegKey17=HKCU\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Publisher\Settings\Save As\File Name MRU
  569. RegKey18=HKCU\Software\Microsoft\Office\12.0\Publisher\Recent File List
  570. RegKey19=HKCU\Software\Microsoft\Office\12.0\InfoPath\Recent File List
  571.  
  572. [Installshield Developer 7.0]
  573. ID=2050
  574. LangSecRef=3021
  575. Detect=HKCU\Software\InstallShield\Developer\7.0
  576. Default=True
  577. RegKey1=HKCU\Software\InstallShield\Developer\7.0\Recent File List
  578.  
  579. [Macromedia Flash 4.0]
  580. ID=2051
  581. LangSecRef=3023
  582. Detect=HKCU\Software\Macromedia\Flash 4
  583. Default=True
  584. RegKey1=HKCU\Software\Macromedia\Flash 4\Recent File List
  585.  
  586. [Macromedia Flash 5.0]
  587. ID=2052
  588. LangSecRef=3023
  589. Detect=HKCU\Software\Macromedia\Flash 5
  590. Default=True
  591. RegKey1=HKCU\Software\Macromedia\Flash 5\Recent File List
  592.  
  593. [Macromedia Flash MX]
  594. ID=2053
  595. LangSecRef=3023
  596. Detect=HKCU\Software\Macromedia\Flash 6
  597. Default=True
  598. RegKey1=HKCU\Software\Macromedia\Flash 6\Recent File List
  599.  
  600. [Macromedia Flash MX 2004]
  601. ID=2054
  602. LangSecRef=3023
  603. Detect=HKCU\Software\Macromedia\Flash 7
  604. Default=True
  605. RegKey1=HKCU\Software\Macromedia\Flash 7\Recent File List
  606.  
  607. [Adobe Flash Player]
  608. ID=2055
  609. LangSecRef=3023
  610. Detect=HKCR\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}
  611. Default=True
  612. SpecialKey1=N_FLASH_COOKIES
  613.  
  614. [Macromedia Homesite 5.0]
  615. ID=2056
  616. LangSecRef=3021
  617. Detect=HKCU\Software\Macromedia\HomeSite5
  618. Default=True
  619. RegKey1=HKCU\Software\Macromedia\HomeSite5\RecentFiles
  620.  
  621. [Macromedia Fireworks 6.0]
  622. ID=2057
  623. LangSecRef=3021
  624. Default=True
  625. Detect=HKCU\Software\Macromedia\Firework 6
  626. RegKey1=HKCU\Software\Macromedia\Firework 6\Recent File List
  627.  
  628. [Macromedia Dreamweaver MX]
  629. ID=2058
  630. LangSecRef=3021
  631. Default=True
  632. Detect=HKCU\Software\Macromedia\Dreamweaver MX 2004
  633. RegKey1=HKCU\Software\Macromedia\Dreamweaver MX 2004\Recent File List
  634.  
  635. [Ulead Smart Saver Pro 3.0]
  636. ID=2059
  637. LangSecRef=3023
  638. Detect=HKCU\Software\Ulead Systems\Ulead SmartSaver Pro\3.0
  639. Default=True
  640. RegKey1=HKCU\Software\Ulead Systems\Ulead SmartSaver Pro\3.0\Recent File List
  641.  
  642. [Norton AntiVirus]
  643. ID=2060
  644. LangSecRef=3024
  645. Detect=HKLM\SOFTWARE\Symantec\Norton AntiVirus NT\Install\7.50
  646. Default=True
  647. FileKey1=%commonappdata%\Symantec\Norton AntiVirus Corporate Edition\7.5\Logs|*.log
  648. FileKey2=%localappdata%\Symantec\Norton AntiVirus Corporate Edition\7.5\Logs|*.log
  649. FileKey3=%commonappdata%\Symantec\LiveUpdate\Downloads|*.*
  650.  
  651. [Symantec AntiVirus]
  652. ID=2061
  653. LangSecRef=3024
  654. Detect=HKLM\SOFTWARE\Symantec\Symantec AntiVirus\Install\7.50
  655. Default=True
  656. FileKey1=%commonappdata%\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs|*.log
  657. FileKey2=%localappdata%\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs|*.log
  658. FileKey3=%commonappdata%\Symantec\LiveUpdate\Downloads|*.*
  659.  
  660. [MS Snapshot Viewer]
  661. ID=2062
  662. LangSecRef=3025
  663. Detect=HKCU\Software\Microsoft\Snapshot Viewer
  664. Default=True
  665. RegKey1=HKCU\Software\Microsoft\Snapshot Viewer\Recent File List
  666.  
  667. [Remote Desktop]
  668. ID=2063
  669. LangSecRef=3025
  670. Detect=HKCU\Software\Microsoft\Terminal Server Client
  671. Default=True
  672. FileKey1=%localappdata%\Microsoft\Terminal Server Client\Cache|*.*
  673. RegKey1=HKCU\Software\Microsoft\Terminal Server Client\Default
  674.  
  675. [MS Management Console]
  676. ID=2064
  677. LangSecRef=3025
  678. Detect=HKCU\Software\Microsoft\Microsoft Management Console\Recent File List
  679. Default=True
  680. RegKey1=HKCU\Software\Microsoft\Microsoft Management Console\Recent File List
  681.  
  682. [MS Wordpad]
  683. ID=2065
  684. LangSecRef=3025
  685. Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad
  686. Default=True
  687. RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Recent File List
  688.  
  689. [MS Paint]
  690. ID=2066
  691. LangSecRef=3025
  692. Detect=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Paint
  693. Default=True
  694. RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Paint\Recent File List
  695.  
  696. [MS Photo Editor]
  697. ID=2067
  698. LangSecRef=3025
  699. Detect=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor
  700. Default=True 
  701. RegKey1=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile1
  702. RegKey2=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile2
  703. RegKey3=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile3
  704. RegKey4=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastFile4
  705. RegKey5=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType1
  706. RegKey6=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType2
  707. RegKey7=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType3
  708. RegKey8=HKCU\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor|LastType4
  709.  
  710. [Nero Burning ROM]
  711. ID=2068
  712. LangSecRef=3021
  713. Detect=HKCU\Software\ahead\Nero - Burning Rom
  714. Default=True
  715. RegKey1=HKCU\Software\ahead\Nero - Burning Rom\Settings|BrowserDir
  716. RegKey2=HKCU\Software\ahead\Nero - Burning Rom\Settings|ImageDir
  717. RegKey3=HKCU\Software\ahead\Nero - Burning Rom\Settings|WorkingDir
  718. RegKey4=HKLM\Software\Ahead\Nero - Burning Rom\Settings|ImageDir
  719. RegKey5=HKLM\Software\Ahead\Nero - Burning Rom\Settings|BootImageDir
  720. RegKey6=HKCU\Software\Ahead\Nero - Burning Rom\Recent File List
  721. RegKey7=HKCU\Software\Ahead\Cover Designer\Recent File List
  722. RegKey8=HKCU\Software\Ahead\Nero Wave Editor\Recent File List
  723. FileKey1=%ProgramFiles%\Ahead\Nero|NeroHistory.log
  724.  
  725. [Nero Burning ROM 9]
  726. ID=2142
  727. LangSecRef=3021
  728. Detect=HKCU\Software\Nero\Nero 9
  729. Default=True
  730. RegKey1=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|BrowserDir
  731. RegKey2=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|ImageDir
  732. RegKey3=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|WorkingDir
  733. RegKey4=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|ImageDir
  734. RegKey5=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Settings|BootImageDir
  735. RegKey6=HKCU\Software\Nero\Nero 9\Nero Burning ROM\Recent File List
  736. FileKey1=%appdata%\Nero\Nero 9\Nero Burning ROM|*.log
  737.  
  738. [WinAce 2.0]
  739. ID=2069
  740. LangSecRef=3024
  741. Detect=HKCU\Software\e-merge\WinAce\2.0
  742. Default=True
  743. RegKey1=HKCU\Software\e-merge\WinAce\2.0\Favorites
  744. RegKey2=HKCU\Software\e-merge\WinAce\2.0\MRU Items
  745.  
  746. [SpyBot Search and Destroy]
  747. ID=2070
  748. LangSecRef=3024
  749. Detect=HKCU\Software\Safer Networking Limited\SpybotSnD
  750. Default=True
  751. FileKey1=%commonappdata%\Spybot - Search & Destroy\Logs|*.*
  752. FileKey2=%ProgramFiles%\Spybot - Search & Destroy|advdebug.txt
  753. FileKey3=%commonappdata%\Spybot - Search & Destroy|Statistics.ini
  754. FileKey4=%windir%\All Users\Application Data\Spybot - Search & Destroy\Logs|*.*
  755. FileKey5=%windir%\All Users\Application Data\Spybot - Search & Destroy|Statistics.ini
  756. FileKey6=%commonappdata%\Spybot - Search & Destroy\Backups|*.log
  757.  
  758. [Ad-Aware SE Personal]
  759. ID=2071
  760. LangSecRef=3024
  761. DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
  762. Default=True
  763. FileKey1=%ProgramFiles%\Lavasoft\Ad-Aware SE Personal|defs.ref.old
  764. FileKey2=%appdata%\Lavasoft\Ad-Aware\Logs|*.txt
  765.  
  766. [Ad-Aware SE Professional]
  767. ID=2072
  768. LangSecRef=3024
  769. DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe
  770. Default=True
  771. FileKey1=%ProgramFiles%\Lavasoft\Ad-Aware SE Professional|defs.ref.old
  772. FileKey2=%appdata%\Lavasoft\Ad-Aware\Logs|*.txt
  773.  
  774. [Ad-Aware SE Plus]
  775. ID=2073
  776. LangSecRef=3024
  777. DetectFile=%ProgramFiles%\Lavasoft\Ad-Aware SE Plus\Ad-Aware.exe
  778. Default=True
  779. FileKey1=%ProgramFiles%\Lavasoft\Ad-Aware SE Plus|defs.ref.old
  780. FileKey2=%appdata%\Lavasoft\Ad-Aware\Logs|*.txt
  781.  
  782. [Webroot SpySweeper]
  783. ID=2074
  784. LangSecRef=3024
  785. Detect=HKCU\Software\Webroot\SpySweeper
  786. FileKey1=%ProgramFiles%\Webroot\Spy Sweeper\Temp|*.*
  787. FileKey2=%appdata%\Webroot\Spy Sweeper\Logs|*Log.txt
  788.  
  789. [Driver Cleaner Pro]
  790. ID=2075
  791. LangSecRef=3024
  792. DetectFile=%ProgramFiles%\Driver Cleaner Pro\DCleaner.exe
  793. Default=True
  794. FileKey1=%ProgramFiles%\Driver Cleaner Pro\Log|*.log
  795.  
  796. [Kazaa (Search History)]
  797. ID=2076
  798. LangSecRef=3022
  799. Detect=HKCU\Software\Kazaa
  800. Default=True
  801. RegKey1=HKCU\Software\Kazaa\Search
  802.  
  803. [Netscape Navigator 4.x]
  804. ID=2077
  805. LangSecRef=3022
  806. Detect=HKCU\Software\Netscape\Netscape Navigator\Main
  807. Default=True
  808. FileKey1=%ProgramFiles%\Netscape\Users\default|netscape.hst
  809. FileKey2=%ProgramFiles%\Netscape\Users\default|cookies.txt
  810. FileKey3=%ProgramFiles%\Netscape\Users\default\cache|*.*
  811.  
  812. [Microsoft Visual Studio 6.0]
  813. ID=2078
  814. LangSecRef=3021
  815. Detect=HKCU\Software\Microsoft\VisualStudio\6.0
  816. Default=True
  817. RegKey1=HKCU\Software\Microsoft\VisualStudio\6.0\FileMRUList
  818. RegKey2=HKCU\Software\Microsoft\VisualStudio\6.0\MenuMRUList
  819. RegKey3=HKCU\Software\Microsoft\VisualStudio\6.0\ProjectMRUList
  820. RegKey4=HKCU\Software\Microsoft\Visual Basic\6.0\RecentFiles
  821.  
  822. [Axialis IconWorkshop]
  823. ID=2079
  824. LangSecRef=3023
  825. Detect=HKCU\Software\Axialis\IconWorkshop
  826. Default=True
  827. RegKey1=HKCU\Software\Axialis\IconWorkshop\Recent File List
  828. RegKey2=HKCU\Software\Axialis\IconWorkshop\CoolBarList
  829. FileKey1=%appdata%\Axialis\Temporary Preview Files|*.*|RECURSE
  830.  
  831. [eMule (Search History)]
  832. ID=2080
  833. LangSecRef=3022
  834. Detect=HKCU\Software\eMule
  835. Default=True
  836. FileKey1=%ProgramFiles%\eMule\config|AC_SearchStrings.dat
  837.  
  838. [eMule (File Hashes)]
  839. ID=2081
  840. LangSecRef=3022
  841. Detect=HKCU\Software\eMule
  842. Default=False
  843. FileKey1=%ProgramFiles%\eMule\config|known.met
  844. FileKey2=%ProgramFiles%\eMule\config|known2.met
  845.  
  846. [WinISO]
  847. ID=2082
  848. LangSecRef=3024
  849. Detect=HKLM\Software\WinISO
  850. Default=True
  851. RegKey1=HKLM\Software\WinISO\Reopen
  852.  
  853. [IsoBuster]
  854. ID=2083
  855. LangSecRef=3021
  856. Detect=HKCU\Software\Smart Projects\IsoBuster
  857. Default=True
  858. RegKey1=HKCU\Software\Smart Projects\IsoBuster|ImageFilePath
  859.  
  860. [Media Player Classic]
  861. ID=2084
  862. LangSecRef=3023
  863. Detect=HKCU\Software\Gabest\Media Player Classic
  864. Default=True
  865. RegKey1=HKCU\Software\Gabest\Media Player Classic\Recent File List
  866. RegKey2=HKCU\Software\Gabest\Media Player Classic\Recent Dub List
  867. RegKey3=HKCU\Software\Gabest\Media Player Classic\Capture|FileName
  868.  
  869. [BSPlayer]
  870. ID=2085
  871. LangSecRef=3023
  872. Detect=HKCU\Software\BST\bsplayer
  873. Default=True
  874. RegKey1=HKCU\Software\BST\bsplayer|File0
  875. RegKey2=HKCU\Software\BST\bsplayer|File1
  876. RegKey3=HKCU\Software\BST\bsplayer|File2
  877. RegKey4=HKCU\Software\BST\bsplayer|File3
  878. RegKey5=HKCU\Software\BST\bsplayer|File4
  879. RegKey6=HKCU\Software\BST\bsplayer|File5
  880. RegKey7=HKCU\Software\BST\bsplayer|File6
  881. RegKey8=HKCU\Software\BST\bsplayer|File7
  882. RegKey9=HKCU\Software\BST\bsplayer|File8
  883. RegKey10=HKCU\Software\BST\bsplayer|File9
  884.  
  885. [Sound Forge 6.0]
  886. ID=2086
  887. LangSecRef=3022
  888. Detect=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics
  889. Default=True
  890. RegKey1=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30110
  891. RegKey2=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30111
  892. RegKey3=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30112
  893. RegKey4=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30113
  894. RegKey5=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30114
  895. RegKey6=HKCU\Software\Sonic Foundry\Sound Forge\6.0\Metrics|S30115
  896.  
  897. [Windows Live Messenger]
  898. ID=2087
  899. LangSecRef=3022
  900. Detect=HKCU\Software\Microsoft\MSNMessenger\PerPassportSettings
  901. Default=True
  902. RegKey1=HKCU\Software\Microsoft\MessengerService\ListCache\.NET Messenger Service
  903. FileKey1=%appdata%\Microsoft\MSN Messenger|*.sqm|RECURSE
  904.  
  905. [WinZip]
  906. ID=2088
  907. LangSecRef=3024
  908. Detect=HKCU\Software\Nico Mak Computing\WinZip
  909. Default=True
  910. RegKey1=HKCU\Software\Nico Mak Computing\WinZip\filemenu
  911. RegKey2=HKCU\Software\Nico Mak Computing\WinZip\extract
  912. RegKey3=HKCU\Software\Nico Mak Computing\WinZip\directories|DefDir
  913. RegKey4=HKCU\Software\Nico Mak Computing\WinZip\directories|ExtractTo
  914. RegKey5=HKCU\Software\Nico Mak Computing\WinZip\directories|gzAddDir
  915. RegKey6=HKCU\Software\Nico Mak Computing\WinZip\directories|zDefDir
  916. RegKey7=HKCU\Software\Nico Mak Computing\WinZip\directories|AddDir
  917. RegKey8=HKCU\Software\Nico Mak Computing\WinZip\directories|gzExtractTo
  918. RegKey9=HKCU\Software\Nico Mak Computing\WinZip\rrs\Opened
  919.  
  920. [WinRAR]
  921. ID=2089
  922. LangSecRef=3024
  923. Detect=HKCU\Software\WinRAR
  924. Default=True
  925. RegKey1=HKCU\Software\WinRAR\ArcHistory
  926. RegKey2=HKCU\Software\WinRAR\General|LastFolder
  927. RegKey3=HKCU\Software\WinRAR\DialogEditHistory\Arcname
  928. RegKey4=HKCU\Software\WinRAR\DialogEditHistory\ExtrPath
  929.  
  930. [7-Zip]
  931. ID=2090
  932. LangSecRef=3024
  933. Default=True
  934. Detect=HKCU\SOFTWARE\7-ZIP\
  935. RegKey1=HKCU\SOFTWARE\7-ZIP\Compression\ArcHistory
  936. RegKey2=HKCU\SOFTWARE\7-ZIP\Extraction\PathHistory
  937. RegKey3=HKCU\Software\7-Zip\FM|CopyHistory
  938. RegKey4=HKCU\Software\7-Zip\FM|FolderHistory
  939. RegKey5=HKCU\Software\7-Zip\FM|PanelPath0
  940.  
  941. [PowerArchiver]
  942. ID=2091
  943. LangSecRef=3024
  944. Detect=HKCU\Software\PowerArchiver
  945. Default=True
  946. RegKey1=HKCU\Software\PowerArchiver\Files|Active_File1
  947. RegKey2=HKCU\Software\PowerArchiver\Files|Active_File2
  948. RegKey3=HKCU\Software\PowerArchiver\Files|Active_File3
  949. RegKey4=HKCU\Software\PowerArchiver\Files|Active_File4
  950. RegKey5=HKCU\Software\PowerArchiver\Files|Active_File5
  951. RegKey6=HKCU\Software\PowerArchiver\Files|Extract1
  952. RegKey7=HKCU\Software\PowerArchiver\Files|Extract2
  953. RegKey8=HKCU\Software\PowerArchiver\Files|Extract3
  954. RegKey9=HKCU\Software\PowerArchiver\Files|Extract4
  955. RegKey10=HKCU\Software\PowerArchiver\Files|Extract5
  956. RegKey11=HKCU\Software\PowerArchiver\Files|Last open dir
  957. RegKey12=HKCU\Software\PowerArchiver\Files|Last backup dir
  958. RegKey13=HKCU\Software\PowerArchiver\Files|Last add dir
  959.  
  960. [ZipMagic]
  961. ID=2092
  962. LangSecRef=3024
  963. Default=True
  964. Detect=HKCU\Software\Mijenix\ZipMagic
  965. RegKey1=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\Recent
  966. RegKey2=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\Archive Manager\UnZip To
  967. RegKey3=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\UnZip To
  968. RegKey4=HKCU\Software\Mijenix\ZipMagic\CurrentVersion\Zip To
  969.  
  970. [PicoZip]
  971. ID=2093
  972. LangSecRef=3024
  973. Detect=HKCU\Software\PicoZip
  974. Default=True
  975. RegKey1=HKCU\Software\PicoZip\MRU Items
  976. RegKey2=HKCU\Software\PicoZip\MRUExtract
  977.  
  978. [Sun Java]
  979. ID=2094
  980. LangSecRef=3022
  981. Detect=HKLM\SOFTWARE\JavaSoft\Java Plug-in
  982. Default=True
  983. FileKey1=%appdata%\Sun\Java\Deployment\cache|*.*|RECURSE
  984. FileKey2=%appdata%\Sun\Java\Deployment\javaws\cache|*.*|RECURSE
  985.  
  986. [FreshDownload]
  987. ID=2095
  988. LangSecRef=3022
  989. Detect=HKCU\Software\FreshDevices\FreshDownload
  990. Default=True
  991. RegKey1=HKCU\Software\FreshDevices\FreshDownload\History
  992.  
  993. [Windows Movie Maker]
  994. ID=2096
  995. LangSecRef=3023
  996. Detect=HKCU\Software\Microsoft\MovieMaker
  997. Default=True
  998. FileKey1=%localappdata%\Microsoft\Movie Maker|MEDIATAB0.DAT
  999.  
  1000. [TextPad]
  1001. ID=2097
  1002. LangSecRef=3021
  1003. Detect=HKCU\Software\Helios\TextPad 4
  1004. Default=True
  1005. RegKey1=HKCU\Software\Helios\TextPad 4\Recent File List
  1006. RegKey2=HKCU\Software\Helios\TextPad 4\Recent Strings
  1007.  
  1008. [VirtualDub]
  1009. ID=2098
  1010. LangSecRef=3023
  1011. Default=True
  1012. Detect=HKCU\Software\Freeware\VirtualDub
  1013. RegKey1=HKCU\Software\Freeware\VirtualDub\MRU List
  1014.  
  1015. [RegEdit]
  1016. ID=2099
  1017. LangSecRef=3025
  1018. Default=True
  1019. RegKey1=HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit|LastKey
  1020.  
  1021. [AceHTML 5]
  1022. ID=2100
  1023. LangSecRef=3024
  1024. Default=True
  1025. Detect=HKCU\Software\Visicom Media\AceHTML 5 Freeware
  1026. RegKey1=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last URLs
  1027. RegKey2=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last Projects
  1028. RegKey3=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last Open
  1029. RegKey4=HKCU\Software\Visicom Media\AceHTML 5 Freeware\Last Files
  1030.  
  1031. [Alcohol 120%]
  1032. ID=2101
  1033. LangSecRef=3024
  1034. Default=True
  1035. Detect=HKCU\Software\Alcohol Soft\Alcohol 120%
  1036. RegKey1=HKCU\Software\Alcohol Soft\Alcohol 120%\MountedMRU
  1037.  
  1038. [LeechGet]
  1039. ID=2102
  1040. LangSecRef=3022
  1041. Default=True
  1042. Detect=HKCU\Software\Cronosoft\LeechGet
  1043. RegKey1=HKCU\Software\Cronosoft\LeechGet\History
  1044.  
  1045. [GetRight]
  1046. ID=2103
  1047. LangSecRef=3022
  1048. Default=True
  1049. Detect=HKCU\Software\Headlight\GetRight\
  1050. RegKey1=HKCU\Software\Headlight\GetRight\MRU
  1051. RegKey2=HKCU\Software\Headlight\GetRight\TypedURLS
  1052. RegKey3=HKCU\Software\Headlight\GetRight\Recent File List
  1053. FileKey1=%ProgramFiles%\GetRight|GetRight.hst
  1054.  
  1055. [Download Accelerator Plus]
  1056. ID=2104
  1057. LangSecRef=3022
  1058. Detect=HKCU\Software\SpeedBit\Download Accelerator
  1059. Default=True
  1060. RegKey1=HKLM\SOFTWARE\SpeedBit\Download Accelerator\FileList
  1061. RegKey2=HKCU\Software\SpeedBit\Download Accelerator\HistoryCombo
  1062. RegKey3=HKCU\Software\SpeedBit\Download Accelerator\ADS\SecondMedia
  1063. FileKey1=%ProgramFiles%\DAP\Temp|*.*
  1064. FileKey2=%ProgramFiles%\DAP\Ads|*.*
  1065. FileKey3=%ProgramFiles%\DAP\Log|*.*
  1066.  
  1067. [Morpheus]
  1068. ID=2105
  1069. LangSecRef=3022
  1070. Default=True
  1071. Detect=HKCU\Software\Morpheus
  1072. RegKey1=HKCU\Software\Morpheus\Morpheus\Recent File List
  1073.  
  1074. [VNCViewer 3]
  1075. ID=2106
  1076. LangSecRef=3024
  1077. Default=True
  1078. Detect=HKCU\Software\ORL\VNCviewer
  1079. RegKey1=HKCU\Software\ORL\VNCviewer\MRU
  1080.  
  1081. [VNCViewer 4]
  1082. ID=2107
  1083. LangSecRef=3024
  1084. Default=True
  1085. Detect=HKCU\Software\RealVNC\VNCviewer4
  1086. RegKey1=HKCU\Software\RealVNC\VNCviewer4\MRU
  1087.  
  1088. [DVD Shrink]
  1089. ID=2108
  1090. LangSecRef=3023
  1091. Default=True
  1092. Detect=HKCU\Software\DVD Shrink\
  1093. RegKey1=HKCU\Software\DVD Shrink\DVD Shrink 3.2\Recent Targets
  1094. RegKey2=HKCU\Software\DVD Shrink\DVD Shrink 3.2\Recent File List
  1095. RegKey3=HKCU\Software\DVD Shrink\DVDSHRINK103\TargetFiles
  1096. RegKey4=HKCU\Software\DVD Shrink\DVDSHRINK103\SourceFolders
  1097.  
  1098. [Tivo Desktop]
  1099. ID=2109
  1100. LangSecRef=3023
  1101. Default=True
  1102. Detect=HKCU\SOFTWARE\TiVo\Desktop
  1103. FileKey1=%localappdata%\TiVo Desktop\Cache|*.*
  1104.  
  1105. [CA Anti-Virus]
  1106. ID=2110
  1107. LangSecRef=3024
  1108. Default=True
  1109. Detect=HKLM\SOFTWARE\ComputerAssociates\Anti-Virus
  1110. FileKey1=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus|*.log
  1111. FileKey2=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus|*log.txt
  1112. FileKey3=%ProgramFiles%\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ArcTemp|*.tmp
  1113. FileKey4=%commonappdata%\CA\Consumer\AV|*.tmp|RECURSE
  1114. FileKey5=%commonappdata%\CA\Consumer\AV|*.txt|RECURSE
  1115. FileKey6=%commonappdata%\CA\Consumer\CCube|*.tmp|RECURSE
  1116. FileKey7=%commonappdata%\CA\Consumer\CCube|*.txt|RECURSE
  1117. FileKey8=%commonappdata%\CA\Consumer\ISS\FeedStore|*.txt|RECURSE
  1118. FileKey9=%ProgramFiles%\CA\CA Internet Security Suite\CA Anti-Virus\ArcTemp|*.*
  1119. FileKey10=%ProgramFiles%\CA\CA Internet Security Suite\CA Anti-Virus\tmp|*.*
  1120.  
  1121. [ZoneAlarm (Logs)]
  1122. ID=2111
  1123. LangSecRef=3022
  1124. Detect=HKLM\SOFTWARE\Zone Labs\ZoneAlarm
  1125. Default=True
  1126. FileKey1=%windir%\Internet Logs|ZALog*.*
  1127.  
  1128. [Google Earth]
  1129. ID=2112
  1130. LangSecRef=3021
  1131. Detect=HKLM\SOFTWARE\Google\Google Earth Plus
  1132. Detect2=HKLM\SOFTWARE\Google\Google Earth Pro
  1133. Default=True
  1134. FileKey1=%appdata%\Google\GoogleEarth|dbcache.dat
  1135. FileKey2=%appdata%\Google\GoogleEarth|dbcache.dat.index
  1136. RegKey1=HKCU\Software\Google\Google Earth Plus\Search
  1137. RegKey2=HKCU\Software\Google\Google Earth Pro\Search
  1138.  
  1139. [Microsoft AntiSpyware]
  1140. ID=2113
  1141. LangSecRef=3024
  1142. DetectFile=%ProgramFiles%\Microsoft AntiSpyware\GIANTAntiSpywareMain.exe
  1143. Default=True
  1144. FileKey1=%ProgramFiles%\Microsoft AntiSpyware|errors.log
  1145. FileKey2=%ProgramFiles%\Microsoft AntiSpyware|tracksEraser.log
  1146. FileKey3=%ProgramFiles%\Microsoft AntiSpyware|cleaner.log
  1147.  
  1148. [PerfectDisk 7.0]
  1149. ID=2114
  1150. LangSecRef=3024
  1151. Detect=HKCU\Software\Raxco\PerfectDisk\7.0
  1152. Default=True
  1153. FileKey1=%commonappdata%\Raxco\PerfectDisk\7.0|PerfectDisk.log
  1154.  
  1155. [Vuze]
  1156. ID=2115
  1157. LangSecRef=3022
  1158. Detect=HKCU\Software\Azureus
  1159. Default=True
  1160. FileKey1=%appdata%\Azureus\logs|*.log
  1161. FileKey2=%appdata%\Azureus\logs\save|*.log
  1162. FileKey3=%userprofile%\Application Data\Azureus\tmp|*.*
  1163. FileKey4=%userprofile%\Application Data\Azureus|*.bak
  1164. FileKey5=%userprofile%\Application Data\Azureus|*.log
  1165. FileKey6=%userprofile%\Application Data\Azureus\active|*.bak
  1166.  
  1167. [CuteFTP Pro 7.0]
  1168. ID=2116
  1169. LangSecRef=3022
  1170. Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 7 Professional
  1171. Default=True
  1172. FileKey1=%localappdata%\GlobalSCAPE\CuteFTP Pro\7.0\Cache|*.*|RECURSE
  1173. FileKey2=%localappdata%\GlobalSCAPE\CuteFTP Pro\7.0\CacheThumbs|*.*|RECURSE
  1174.  
  1175. [CuteFTP Home 7.0]
  1176. ID=2117
  1177. LangSecRef=3022
  1178. Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 7 Home
  1179. Default=True
  1180. FileKey1=%localappdata%\GlobalSCAPE\CuteFTP\7.0\Cache|*.*|RECURSE
  1181. FileKey2=%localappdata%\GlobalSCAPE\CuteFTP\7.0\CacheThumbs|*.*|RECURSE
  1182.  
  1183. [CuteFTP Pro 8.0]
  1184. ID=2118
  1185. LangSecRef=3022
  1186. Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 8 Professional
  1187. Default=True
  1188. FileKey1=%localappdata%\GlobalSCAPE\CuteFTP Pro\8.0\Cache|*.*|RECURSE
  1189. FileKey2=%localappdata%\GlobalSCAPE\CuteFTP Pro\8.0\CacheThumbs|*.*|RECURSE
  1190.  
  1191. [CuteFTP Home 8.0]
  1192. ID=2119
  1193. LangSecRef=3022
  1194. Detect=HKLM\SOFTWARE\GlobalSCAPE\CuteFTP 8 Home
  1195. Default=True
  1196. FileKey1=%localappdata%\GlobalSCAPE\CuteFTP\8.0\Cache|*.*|RECURSE
  1197. FileKey2=%localappdata%\GlobalSCAPE\CuteFTP\8.0\CacheThumbs|*.*|RECURSE
  1198.  
  1199. [ClamWin]
  1200. ID=2120
  1201. LangSecRef=3024
  1202. Detect=HKCU\Software\ClamWin
  1203. Default=True
  1204. FileKey1=%allusersprofile%\.clamwin\log|*.*
  1205. FileKey2=%userprofile%\.clamwin\log|*.*
  1206. FileKey3=%windir%\All Users\.clamwin\log|*.*
  1207.  
  1208. [Ewido Anti-Malware (Log)]
  1209. ID=2121
  1210. LangSecRef=3024
  1211. Detect=HKLM\Software\ewido
  1212. Default=True
  1213. FileKey1=%ProgramFiles%\Ewido\Security Suite|logfile.txt
  1214. FileKey2=%ProgramFiles%\Ewido Anti-Malware|logfile.txt
  1215.  
  1216. [AVG Anti-Spyware]
  1217. ID=2122
  1218. LangSecRef=3024
  1219. Detect=HKLM\SOFTWARE\Grisoft\AVGAntiSpyware
  1220. Default=True
  1221. FileKey1=%ProgramFiles%\Grisoft\AVG Anti-Spyware 7.5|logfile.txt
  1222.  
  1223. [Foxit Reader]
  1224. ID=2123
  1225. LangSecRef=3021
  1226. Detect=HKCU\Software\Foxit Software\Foxit Reader
  1227. Default=True
  1228. RegKey1=HKCU\Software\Foxit Software\Foxit Reader\Recent File List
  1229. RegKey2=HKCU\Software\Foxit Software\Foxit Reader\History
  1230.  
  1231. [Paint.NET]
  1232. ID=2124
  1233. LangSecRef=3021
  1234. Detect=HKCU\Software\Paint.NET
  1235. Default=True
  1236. RegKey1=HKCU\Software\Paint.NET|MRU0
  1237. RegKey2=HKCU\Software\Paint.NET|MRU1
  1238. RegKey3=HKCU\Software\Paint.NET|MRU2
  1239. RegKey4=HKCU\Software\Paint.NET|MRU3
  1240. RegKey5=HKCU\Software\Paint.NET|MRU4
  1241. RegKey6=HKCU\Software\Paint.NET|MRU5
  1242. RegKey7=HKCU\Software\Paint.NET|MRU6
  1243. RegKey8=HKCU\Software\Paint.NET|MRU7
  1244. RegKey9=HKCU\Software\Paint.NET|MRU0Thumb
  1245. RegKey10=HKCU\Software\Paint.NET|MRU1Thumb
  1246. RegKey11=HKCU\Software\Paint.NET|MRU2Thumb
  1247. RegKey12=HKCU\Software\Paint.NET|MRU3Thumb
  1248. RegKey13=HKCU\Software\Paint.NET|MRU4Thumb
  1249. RegKey14=HKCU\Software\Paint.NET|MRU5Thumb
  1250. RegKey15=HKCU\Software\Paint.NET|MRU6Thumb
  1251. RegKey16=HKCU\Software\Paint.NET|MRU7Thumb
  1252.  
  1253. [OpenOffice 1.14]
  1254. ID=2125
  1255. LangSecRef=3021
  1256. DetectFile=%ProgramFiles%\OpenOffice.org1.1.4\program\soffice.exe
  1257. Default=True
  1258. FileKey1=%ProgramFiles%\OpenOffice.org1.1.4\user\registry\data\org\openoffice\Office|Common.xcu
  1259.  
  1260. [OpenOffice 2.0]
  1261. ID=2126
  1262. LangSecRef=3021
  1263. Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\2.0
  1264. Default=True
  1265. FileKey1=%appdata%\OpenOffice.org2\user\registry\data\org\openoffice\Office|Common.xcu
  1266.  
  1267. [OpenOffice 2.1]
  1268. ID=2127
  1269. LangSecRef=3021
  1270. Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\2.1
  1271. Default=True
  1272. FileKey1=%appdata%\OpenOffice.org2\user\registry\data\org\openoffice\Office|Common.xcu
  1273.  
  1274. [OpenOffice 3.1]
  1275. ID=2143
  1276. LangSecRef=3021
  1277. Detect=HKLM\SOFTWARE\OpenOffice.org\OpenOffice.org\3.1
  1278. Default=True
  1279. FileKey1=%appdata%\OpenOffice.org\3\user\registry\data\org\openoffice\Office|Histories.xcu
  1280.  
  1281. [Grisoft AVG 7.0]
  1282. ID=2128
  1283. LangSecRef=3024
  1284. Detect=HKLM\SOFTWARE\Grisoft\Avg7
  1285. Default=True
  1286. FileKey1=%commonappdata%\Grisoft\Avg7Data|*.log
  1287. FileKey2=%commonappdata%\Grisoft\Avg7Data\upd7bin|*.*
  1288. FileKey3=%commonappdata%\Grisoft\Avg7Data\$history|*.*
  1289. FileKey4=%commonappdata%\Grisoft\Avg7Data\avg7upd|*.log
  1290. FileKey5=%windir%\All Users\Application Data\Grisoft\Avg7Data\upd7bin|*.*
  1291. FileKey6=%windir%\All Users\Application Data\Grisoft\Avg7Data\avg7upd|$history
  1292. FileKey7=%windir%\All Users\Application Data\Grisoft\Avg7Data\avg7upd|*.log
  1293. FileKey8=%windir%\All Users\Application Data\Grisoft\Avg7Data|*.log
  1294. FileKey9=%windir%\Application Data\AVG7\Log|*.log
  1295.  
  1296. [AVG AntiVirus 8.0]
  1297. ID=2141
  1298. LangSecRef=3024
  1299. Detect=HKLM\SOFTWARE\AVG\Avg8
  1300. Default=True
  1301. FileKey1=%allusersprofile%\Application Data\avg8\Log|*.log
  1302. FileKey2=%allusersprofile%\Application Data\avg8\scanlogs|*.log
  1303. FileKey3=%allusersprofile%\Application Data\avg8\Log|*.xml
  1304. FileKey4=%allusersprofile%\Application Data\avg8\update\backup|*.*
  1305. FileKey5=%allusersprofile%\Application Data\avg8\Emc\Log|*.log
  1306.  
  1307. [AVG AntiVirus 9.0]
  1308. ID=2145
  1309. LangSecRef=3024
  1310. Detect=HKLM\SOFTWARE\AVG\Avg9
  1311. Default=True
  1312. FileKey1=%allusersprofile%\Application Data\avg9\Log|*.log
  1313. FileKey2=%allusersprofile%\Application Data\avg9\scanlogs|*.log
  1314. FileKey3=%allusersprofile%\Application Data\avg9\Log|*.xml
  1315. FileKey4=%allusersprofile%\Application Data\avg9\update\backup|*.*
  1316. FileKey5=%allusersprofile%\Application Data\avg9\Emc\Log|*.log
  1317.  
  1318.  
  1319. [AntiVir Desktop]
  1320. ID=2138
  1321. LangSecRef=3024
  1322. Detect=HKLM\SOFTWARE\Avira\AntiVir Desktop
  1323. Default=True
  1324. FileKey1=%commonappdata%\Avira\AntiVir Desktop\TEMP|*.*
  1325. FileKey2=%ProgramFiles%\Avira\AntiVir Desktop|*.old
  1326. FileKey3=%ProgramFiles%\Avira\AntiVir Desktop|*.tmp
  1327. FileKey4=%ProgramFiles%\Avira\AntiVir Desktop\FAILSAFE|*.tmp
  1328.  
  1329. [TUGZip]
  1330. ID=2131
  1331. LangSecRef=3024
  1332. Detect=HKCU\Software\TUGZip
  1333. Default=True
  1334. RegKey1=HKCU\Software\TUGZip|mainRecent
  1335. RegKey2=HKCU\Software\TUGZip|extrRecent
  1336. RegKey3=HKCU\Software\TUGZip|cmpWorkingDir
  1337.  
  1338. [Windows Defender]
  1339. ID=2132
  1340. LangSecRef=3024
  1341. Detect=HKLM\SOFTWARE\Microsoft\Windows Defender
  1342. Default=True
  1343. FileKey1=%commonappdata%\Microsoft\Windows Defender\Scans\History\Results\Quick|*.*
  1344. FileKey2=%commonappdata%\Microsoft\Windows Defender\Scans\History\Results\Resource|*.*
  1345.  
  1346. [IZArc]
  1347. ID=2133
  1348. LangSecRef=3024
  1349. Detect=HKCU\Software\IZSoftware\IZArc
  1350. Default=True
  1351. RegKey1=HKCU\Software\IZSoftware\IZArc|AppCurrentDir
  1352. RegKey2=HKCU\Software\IZSoftware\IZArc|AppCurrentDir
  1353. RegKey3=HKCU\Software\IZSoftware\IZArc\Recent
  1354.  
  1355. [Google Toolbar Firefox]
  1356. ID=2134
  1357. LangSecRef=3022
  1358. Default=True
  1359. SpecialDetect=DET_MOZILLA_GOOGLE_TOOLBAR
  1360. SpecialKey1=N_MOZ_GOOGLE_TOOLBAR
  1361.  
  1362. [MS Office Picture Manager]
  1363. ID=2135
  1364. LangSecRef=3021
  1365. Detect=HKCU\Software\Microsoft\Office
  1366. Default=True
  1367. FileKey1=%LocalAppData%\Microsoft\OIS|OIScatalog.cag
  1368. FileKey2=%LocalAppData%\Microsoft\OIS\thumbnails|*.*
  1369.  
  1370. [ImgBurn]
  1371. ID=2136
  1372. LangSecRef=3021
  1373. Detect=HKCU\Software\ImgBurn
  1374. Default=True
  1375. FileKey1=%AppData%\ImgBurn|ImgBurn.log
  1376. FileKey2=%AppData%\ImgBurn\Log Files|ImgBurn.log
  1377.