Closed aquila-XP closed 2 years ago
[BranchCache *] LangSecRef=3025 DetectFile=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\PeerDist* FileKey1=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\PeerDist*|*.chk;*.jrs
[BranchCache *]
LangSecRef=3025
DetectFile=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\PeerDist*
FileKey1=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\PeerDist*|*.chk;*.jrs
[HP Remote Graphics Receiver *] LangSecRef=3021 DetectFile=%UserProfile%\HPRemote\RGReceiver FileKey1=%UserProfile%\HPRemote\RGReceiver|*.log
[HP Remote Graphics Receiver *]
LangSecRef=3021
DetectFile=%UserProfile%\HPRemote\RGReceiver
FileKey1=%UserProfile%\HPRemote\RGReceiver|*.log
[Intel Logs *] ... FileKey17=%WinDir%\System32|Gms.log
[Intel Logs *]
FileKey17=%WinDir%\System32|Gms.log
[LastPass *] LangSecRef=3024 DetectFile=%LocalLowAppData%\LastPass FileKey1=%LocalLowAppData%\LastPass|debug.txt
[LastPass *]
LangSecRef=3024
DetectFile=%LocalLowAppData%\LastPass
FileKey1=%LocalLowAppData%\LastPass|debug.txt
[PowerENGAGE *] LangSecRef=3021 DetectFile=%AppData%\PowerENGAGE FileKey1=%AppData%\PowerENGAGE|*-journal;*.old;LOG FileKey2=%AppData%\PowerENGAGE\*Cache|*.* FileKey3=%AppData%\PowerENGAGE\Logs|*.*
[PowerENGAGE *]
DetectFile=%AppData%\PowerENGAGE
FileKey1=%AppData%\PowerENGAGE|*-journal;*.old;LOG
FileKey2=%AppData%\PowerENGAGE\*Cache|*.*
FileKey3=%AppData%\PowerENGAGE\Logs|*.*
[Samsung Software Upgrade Assistant *] LangSecRef=3021 DetectFile=%LocalAppData%\MSU FileKey1=%LocalAppData%\MSU|*.log;*-logs.txt
[Samsung Software Upgrade Assistant *]
DetectFile=%LocalAppData%\MSU
FileKey1=%LocalAppData%\MSU|*.log;*-logs.txt
[Webroot SecureAnywhere *] LangSecRef=3024 DetectFile=%LocalLowAppData%\Webroot FileKey1=%LocalAppData%\lptmp*|*.*|REMOVESELF FileKey2=%AppData%\Local\Temp\lptmp*|*.*|REMOVESELF
[Webroot SecureAnywhere *]
DetectFile=%LocalLowAppData%\Webroot
FileKey1=%LocalAppData%\lptmp*|*.*|REMOVESELF
FileKey2=%AppData%\Local\Temp\lptmp*|*.*|REMOVESELF
[Windows Logs *] ... FileKey20=%WinDir%\INF|*.etl;*.log* ... FileKey42=%WinDir%\ServiceProfiles\NetworkService\debug|*.log
[Windows Logs *]
FileKey20=%WinDir%\INF|*.etl;*.log*
FileKey42=%WinDir%\ServiceProfiles\NetworkService\debug|*.log
[Intel Logs ] The file "Gms.log" is already cleaned by FileKey13: FileKey13=%WinDir%\System32|Default_error_Stack-\.txt;Gms.log
[BranchCache *]
LangSecRef=3025
DetectFile=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\PeerDist*
FileKey1=%WinDir%\ServiceProfiles\NetworkService\AppData\Local\PeerDist*|*.chk;*.jrs
[HP Remote Graphics Receiver *]
LangSecRef=3021
DetectFile=%UserProfile%\HPRemote\RGReceiver
FileKey1=%UserProfile%\HPRemote\RGReceiver|*.log
[Intel Logs *]
...FileKey17=%WinDir%\System32|Gms.log
[LastPass *]
LangSecRef=3024
DetectFile=%LocalLowAppData%\LastPass
FileKey1=%LocalLowAppData%\LastPass|debug.txt
[PowerENGAGE *]
LangSecRef=3021
DetectFile=%AppData%\PowerENGAGE
FileKey1=%AppData%\PowerENGAGE|*-journal;*.old;LOG
FileKey2=%AppData%\PowerENGAGE\*Cache|*.*
FileKey3=%AppData%\PowerENGAGE\Logs|*.*
[Samsung Software Upgrade Assistant *]
LangSecRef=3021
DetectFile=%LocalAppData%\MSU
FileKey1=%LocalAppData%\MSU|*.log;*-logs.txt
[Webroot SecureAnywhere *]
LangSecRef=3024
DetectFile=%LocalLowAppData%\Webroot
FileKey1=%LocalAppData%\lptmp*|*.*|REMOVESELF
FileKey2=%AppData%\Local\Temp\lptmp*|*.*|REMOVESELF
[Windows Logs *]
...FileKey20=%WinDir%\INF|*.etl;*.log*
...FileKey42=%WinDir%\ServiceProfiles\NetworkService\debug|*.log