Closed aquila-XP closed 2 years ago
Thank you very much!
[Temporary Internet Files Software Quality Management Logs *]
"%LocalAppData%\Microsoft\Windows\Temporary Internet Files" is only a link to "%LocalAppData%\Microsoft\Windows\INetCache" and is already completely cleaned by the entry [Internet Explorer *].
@aquila-XP Just for your information: Please wait with new updates until @MoscaDotTo has finished her big overhaul (#895). Thanks a lot!
[Opera Bookmarks Backup *]
...FileKey1=%AppData%\Opera Software\Opera*|*Bookmarks.bak;Bookmarks-*.backup
[Opera Logs *]
...FileKey5=%AppData%\Opera Software\Opera*|*.backup
[A Space Adventure - Remastered Edition *]
Section=Games
DetectFile=%LocalAppData%\Simon Says Play\ASA Remastered
FileKey1=%LocalAppData%\Simon Says Play\ASA Remastered|*.log
[Abvent Artlantis *]
LangSecRef=3021
DetectFile1=%AppData%\Abvent\Artlantis*
DetectFile2=%AppData%\Abvent_Artlantis*
FileKey1=%AppData%\Abvent\Artlantis*|*Log.txt
FileKey2=%AppData%\Abvent\Artlantis*\*_DiagnosticReports_*|*.*|REMOVESELF
FileKey3=%AppData%\Abvent_Artlantis*|*Log.txt
FileKey4=%AppData%\Abvent_Artlantis*\*_DiagnosticReports_*|*.*|REMOVESELF
[Adobe Acrobat DC *]
...FileKey5=%LocalAppData%\Adobe\Acrobat\DC|*.lst;Exchange-ProMessages;IconCacheAcro*.dat;SharedDataEvents;UserCache*.bin
FileKey6=%LocalAppData%\Adobe\Acrobat\DC\ProtectedView|*.lst;UserCache*.bin
...FileKey18=%LocalAppData%\Adobe\AcroCef\DC\Acrobat\Cache|*.*|RECURSE
FileKey19=%LocalLowAppData%\Adobe\Acrobat\DC\Acrobat\Eureka\AcroCoreSync\Adobe\CoreSync\EntitySync|*.db-shm;*.db-wal
FileKey20=%LocalLowAppData%\Adobe\AcroCef\DC\Acrobat\Cookie|*-journal
[Adobe Reader DC *]
...FileKey2=%LocalAppData%\Adobe\Acrobat\DC|DCAPIDiscoveryCacheReader;IconCacheRdr*.dat;UserCache*.bin;SharedDataEvents
...FileKey15=%LocalAppData%\Adobe\AcroCef\DC\Acrobat\Cache|*.*|RECURSE
FileKey16=%LocalLowAppData%\Adobe\Acrobat\DC\Reader\Eureka\AcroCoreSync\Adobe\CoreSync\EntitySync|*.db-shm;*.db-wal
FileKey17=%LocalLowAppData%\Adobe\AcroCef\DC\Acrobat\Cookie|*-journal
[Affinity Designer *]
LangSecRef=302
DetectFile=%AppData%\Affinity\Designer
FileKey1=%AppData%\Affinity\Designer\*|Log.txt
FileKey2=%AppData%\Affinity\Designer\*\CrashReports|*.*|RECURSE
[Aiseesoft Burnova *]
LangSecRef=3021
DetectFile=%Documents%\Log Files\dvdcore*.log
FileKey1=%Documents%\Log Files|dvdcore*.log
[Aiseesoft Screen Recorder *]
LangSecRef=3023
DetectFile=%ProgramFiles%\Aiseesoft Studio\Aiseesoft Screen Recorder
FileKey1=%ProgramFiles%\Aiseesoft Studio\Aiseesoft Screen Recorder|*.mdmp
FileKey2=%SystemDrive%\Log Files|Screencast*.log
[Amazon Music *]
...FileKey10=%UserProfile%\.amu\updates|*.exe
[Anfibia Deskman *]
LangSecRef=3024
DetectFile=%CommonAppData%\DNET*
FileKey1=%CommonAppData%\DNET*|.log
[AnyMusic *]
LangSecRef=3022
DetectFile=%LocalAppData%\AnyMusic
FileKey1=%LocalAppData%\AnyMusic\Cache\QtWebEngine\Default\Cache|*.*
FileKey2=%LocalAppData%\AnyMusic\QtWebEngine\Default|*-journal;*.old;LOG|RECURSE
FileKey3=%LocalAppData%\AnyMusic\QtWebEngine\Default|Network Persistent State;Visited Links
FileKey4=%LocalAppData%\AnyMusic\QtWebEngine\Default\blob_storage|*.*|RECURSE
FileKey5=%LocalAppData%\AnyMusic\QtWebEngine\Default\GPUCache|*.*
[AOL *]
...FileKey6=%LocalAppData%\AOL\C_AOL*|*-journal;*.tmp|RECURSE
FileKey7=%LocalAppData%\AOL\C_AOL*\BrowserCache|*.*|RECURSE
FileKey8=%LocalAppData%\AOL\C_AOL*\ToolbarCache|data_*;f_*;index;VisitedLinks
FileKey9=%LocalAppData%\AOL\C_AOL*\ToolbarCache\AppCache\Cache|*.*
[Apple Software Update *]
LangSecRef=3021
DetectFile=%LocalAppData%\Apple Software Update
FileKey1=%LocalAppData%\Apple Software Update|*.msi
FileKey2=%LocalAppData%\Apple Software Update\DistCache|*.*|RECURSE
[Ashampoo Snap *]
...DetectFile=%ProgramFiles%\Ashampoo Snap*
[Autodesk AutoCAD *]
...FileKey2=%LocalAppData%\Autodesk\AutoCAD*|*.log|RECURSE
FileKey3=%LocalAppData%\Autodesk\AutoCAD*\r*\*\BrowserCache|data_*;index
FileKey6=%AppData%\Autodesk\ADPSDK\JSON\Upload|logstats.json
[Autodesk AutoCAD Architecture *]
LangSecRef=3021
DetectFile=%AppData%\Autodesk\ACA*
FileKey1=%AppData%\Autodesk\ACA*\*\Recent|*.lnk|RECURSE
[Autodesk AutoCAD Plot to PDF *]
LangSecRef=3021
DetectFile=%Documents%\plot.log
FileKey1=%Documents%|plot.log
[Autodesk Installer *]
LangSecRef=3021
DetectFile=%AppData%\Autodesk Installer
FileKey1=%AppData%\Autodesk Installer|Network Persistent State
FileKey2=%AppData%\Autodesk Installer\blob_storage|*.*|RECURSE
FileKey3=%AppData%\Autodesk Installer\GPUCache|*.*
FileKey4=%AppData%\Autodesk Installer\Logs|*.*
[Autodesk Revit *]
LangSecRef=3021
DetectFile=%AppData%\Autodesk\Revit\Autodesk Revit*
FileKey1=%AppData%\Autodesk\Revit\Autodesk Revit*\*\components|*.log
FileKey2=%AppData%\Autodesk\Revit\Autodesk Revit*\RecentFileCache|*.jpg
[Autodesk Steel Connections for Revit *]
LangSecRef=3021
DetectFile=%CommonAppData%\Autodesk\Revit Steel Connections
FileKey1=%LocalAppData%\Microsoft\Microsoft SQL Server Local DB\Instances\SteelConnections*|*.log;*.mdmp;*log.ldf;log*.trc;SQLDump*.txt;system_health_*.xel
[Batch Purifier *]
LangSecRef=3024
DetectFile=%AppData%\Digital Confidence\BatchPurifier
FileKey1=%AppData%\Digital Confidence\BatchPurifier|OutputFolderMRU
[BIMx Desktop Viewer *]
LangSecRef=3021
DetectFile=%Documents%\BIMx
FileKey1=%Documents%\BIMx|*_Log.txt
[BroadWave Streaming Audio *]
LangSecRef=3022
DetectFile=%CommonAppData%\NCH Software\BroadWave
FileKey1=%CommonAppData%\NCH Software\BroadWave\Logs|*.*
[Cricut Design Space *]
LangSecRef=3021
DetectFile=%AppData%\Cricut Design Space
FileKey1=%AppData%\Cricut Design Space|*-journal;*.old;LOG|RECURSE
FileKey2=%AppData%\Cricut Design Space|Network Persistent State
FileKey3=%AppData%\Cricut Design Space\*Cache|*.*|RECURSE
FileKey4=%AppData%\Cricut Design Space\blob_storage|*.*|RECURSE
FileKey5=%AppData%\Cricut Design Space\Native\Logs|*.*
[DAZ 3D Studio *]
LangSecRef=3021
DetectFile=%AppData%\DAZ 3D\Studio*
FileKey1=%AppData%\DAZ 3D\Studio*|log.txt
FileKey2=%AppData%\DAZ 3D\Studio*\Temp|*.*|RECURSE
[Dell Stage Suite *]
LangSecRef=3023
DetectFile1=%AppData%\Dell\*Stage
DetectFile2=%LocalAppData%\Dell\*Stage
FileKey1=%AppData%\Dell\Dell Stage|*.backup|RECURSE
FileKey2=%AppData%\Dell\MusicStage\*\Album_Images|*.*
FileKey3=%AppData%\Dell\MusicStage\*\Artist_Images|*.*
FileKey4=%AppData%\Dell\MusicStage\*\Cache|*.*
FileKey5=%AppData%\Fingertapps\AccuWeather\Cache|*.*
FileKey6=%LocalAppData%\Dell\VideoStage\CinemaNow\*|kthumb*.db;log.*
FileKey7=%LocalAppData%\Dell\VideoStage\Library\*|kthumb*.db;log.*
[DJUCED *]
LangSecRef=3023
DetectFile=%Documents%\DJUCED
FileKey1=%Documents%\DJUCED\Cache|*.*|RECURSE
FileKey2=%Documents%\DJUCED\Logs|*.*
[Dropbox *]
...FileKey11=%LocalAppData%\Dropbox\instance*\sync|*.sqlite3-shm;*.sqlite3-wal
FileKey12=%LocalAppData%\Dropbox\instance*\sync\temp|*.*
FileKey13=%LocalAppData%\Dropbox\QuitReports|*.*
[Dynamo *]
LangSecRef=3021
DetectFile=%AppData%\Dynamo
FileKey1=%AppData%\Dynamo\*\Logs|*Log_*.txt
[EA Sports FIFA *]
Section=Games
DetectFile=%ProgramFiles%\Origin Games\FIFA*
FileKey1=%ProgramFiles%\Origin Games\FIFA*\__Installer|InstallLog.txt
FileKey2=%ProgramFiles%\Origin Games\FIFA*\__Installer\dotnet|*.*|REMOVESELF
FileKey3=%ProgramFiles%\Origin Games\FIFA*\__Installer\vc|*.*|REMOVESELF
[EaseUS KeyFinder *]
LangSecRef=3024
DetectFile=%LocalAppData%\EaseUS\KeyFinder
FileKey1=%LocalAppData%\EaseUS\KeyFinder\Cache\qmlcache|*.*
[Elby CloneDVD *]
LangSecRef=3021
Detect=HKCU\Software\Elaborate Bytes\CloneDVD2
RegKey1=HKCU\Software\Elaborate Bytes\CloneDVD2|AnimationProcessingPath
RegKey2=HKCU\Software\Elaborate Bytes\CloneDVD2|AnimationWritingPath
RegKey3=HKCU\Software\Elaborate Bytes\CloneDVD2|LogFilePath
RegKey4=HKCU\Software\Elaborate Bytes\CloneDVD2|VideoFilesPath
[Epson *]
...DetectFile=%AppData%\com.epson.printlayout
FileKey2=%AppData%\com.epson.printlayout\Local Store\#SharedObjects|*.*|RECURSE
FileKey3=%AppData%\com.epson.printlayout\Local Store\tmpImageFolder|*.*
FileKey4=%AppData%\com.epson.printlayout\Local Store\tmpPageFolder|*.*
FileKey5=%AppData%\EPSON\Epson_Windows_Installer\EPSON*|*.log
[Express Burn *]
...RegKey3=HKCU\Software\NCH Software\ExpressBurn\Settings|InstallDate
RegKey4=HKCU\Software\NCH Software\ExpressBurn\Settings|InstallDateFirst
RegKey5=HKCU\Software\NCH Software\ExpressBurn\Settings|MinutesRunSinceLastInstall
RegKey6=HKCU\Software\NCH Software\ExpressBurn\Settings|Runs
RegKey7=HKCU\Software\NCH Software\ExpressBurn\Settings|RunsSinceLastInstall
[Express Rip CD Ripper *]
LangSecRef=3023
DetectFile=%ProgramFiles%\NCH Software\ExpressRip\expressrip.exe
FileKey1=%ProgramFiles%\NCH Software\ExpressRip|expressripsetup_*.exe
[File Renamer Basic *]
LangSecRef=3024
DetectFile=%LocalAppData%\File Renamer Basic
FileKey1=%LocalAppData%\File Renamer Basic|*_log.txt;Logfile.txt
[Flipshare *]
LangSecRef=3023
DetectFile=%AppData%\Flip Video\Flipshare
FileKey1=%AppData%\Flip Video\Flipshare\Logs|*.*
FileKey1=%LocalAppData%\VirtualStore|logFile.xsl
[FontBase *]
LangSecRef=3021
DetectFile=%AppData%\FontBase
FileKey1=%AppData%\FontBase|*-journal;*.old;LOG|RECURSE
FileKey2=%AppData%\FontBase|Network Persistent State;QuotaManager
FileKey3=%AppData%\FontBase\*Cache|*.*|RECURSE
FileKey4=%AppData%\FontBase\blob_storage|*.*|RECURSE
[Fort Firewall *]
LangSecRef=3022
DetectFile=%LocalAppData%\Fort Firewall
FileKey1=%LocalAppData%\Fort Firewall\Logs|*.*
[GeoVid Video Avatar *]
LangSecRef=3023
DetectFile=%ProgramFiles%\GeoVid\Video Avatar\VideoAvatar.exe
FileKey1=%ProgramFiles%\GeoVid\Video Avatar|vcredist_*.exe
[GSpot *]
...RegKey2=HKCU\Software\GSpot Appliance Corp\GSpot\v2.6 Settings|ExportFile
RegKey3=HKCU\Software\GSpot Appliance Corp\GSpot\v2.6 Settings|ExportNameOfFileForFormat
RegKey4=HKCU\Software\GSpot Appliance Corp\GSpot\v2.6 Settings|ExportPath
[Honeyview MRU *]
...RegKey15=HKCU\Software\Honeyview|sExtProg0
RegKey16=HKCU\Software\Honeyview|sLastCheckDay
RegKey17=HKCU\Software\Honeyview|transf.sFileNameHeader
Note: Please remove
RegKey12
andRegKey13
.[HP Logs *]
...FileKey15=%LocalAppData%\HP\AtInstall|*.log;*log.txt|REMOVESELF
[Icon Cache *]
LangSecRef=3025
...FileKey1=%LocalAppData%|IconCache.db;IconCache.db.backup
[Intel Wireless Solutions *]
LangSecRef=3024
DetectFile=%AppData%\Intel\Wireless
FileKey1=%AppData%\Intel\Wireless\CrashDumps|*.*
[IObit Software Updater *]
...FileKey2=%AppData%\IObit\Software Updater|*.log;UpdateInfo.ini
[iTop Screen Recorder *]
LangSecRef=3023
[Java *]
...FileKey11=%LocalLowAppData%\Sun\Java\Deployment\tmp|*.*|RECURSE
[Kaspersky *]
...FileKey15=%ProgramFiles%\Kaspersky Lab\Kaspersky Password Manager*|*.bak*
[Kerish Doctor *]
LangSecRef=3024
Detect=HKLM\Software\Kerish Products\Kerish Doctor
FileKey1=%CommonAppData%\Kerish Products\Kerish Doctor\Reports|*.*
RegKey1=HKLM\Software\Kerish Products\Kerish Doctor|InstallDate
RegKey2=HKLM\Software\Kerish Products\Kerish Doctor|LastScan
RegKey3=HKLM\Software\Kerish Products\Kerish Doctor|LastStart
RegKey4=HKLM\Software\Kerish Products\Kerish Doctor|LastUpdate
RegKey5=HKLM\Software\Kerish Products\Kerish Doctor|LastWeeklyReport
RegKey6=HKLM\Software\Kerish Products\Kerish Doctor|ServerDate
[KMS Emulator *]
...DetectFile4=%ProgramFiles%\KMSpico
FileKey4=%ProgramFiles%\KMSpico\Logs|*.*
[LDPlayer *]
LangSecRef=3021
DetectFile=%AppData%\lddownloader
FileKey1=%AppData%\lddownloader|*.log
FileKey2=%UserProfile%\.Ld2VirtualBox|VBoxSVC.log
[LG ODD Auto Firmware Update *]
LangSecRef=3024
DetectFile=%ProgramFiles%\ODD Auto Firmware Update
FileKey1=%ProgramFiles%\ODD Auto Firmware Update\Log|*.*|RECURSE
[Listary *]
...FileKey3=%AppData%\Listary\UserData|*.log;DiskSearch.db;History_v2.sqlite
[Mail and Calendar *]
...FileKey13=%LocalAppData%\Comms\UnistoreDB|*.jcp;*.jrs;*.jtx
[McAfee Safe Connect *]
LangSecRef=3024
DetectFile=%AppData%\McAfee Safe Connect
FileKey1=%AppData%\McAfee Safe Connect|*.log
[MemoQ *]
LangSecRef=3022
DetectFile=%AppData%\MemoQ
FileKey1=%AppData%\MemoQ\Log|*.log
FileKey2=%CommonAppData%\MemoQ Server\Log|*.log
[MEmu Android Emulator *]
LangSecRef=3021
DetectFile=%LocalAppData%\Microvirt\MEmu
FileKey1=%LocalAppData%\Microvirt\dump|*.*
FileKey2=%LocalAppData%\Microvirt\MEmu|*.log
FileKey3=%LocalAppData%\Microvirt\Setup|*.log
[Microsoft Picture It! *]
LangSecRef=3023
DetectFile=%AppData%\Microsoft\Picture It!*
FileKey1=%AppData%\Microsoft\Picture It!*|piorg.db
[MiniTool ShadowMaker *]
LangSecRef=3024
DetectFile=%ProgramFiles%\MiniTool ShadowMaker
FileKey1=%ProgramFiles%\MiniTool ShadowMaker|*log.txt
FileKey2=%ProgramFiles%\MiniTool ShadowMaker\dump|*.dmp
FileKey3=%ProgramFiles%\MiniTool ShadowMaker\log|*.*
[MixPad Multitrack Mixer *]
LangSecRef=3023
DetectFile=%ProgramFiles%\NCH Software\MixPad\mixpad.exe
FileKey1=%ProgramFiles%\NCH Software\MixPad|mixpadsetup_*.exe
[ModelPort Object Importer for ArchiCAD *]
LangSecRef=3021
DetectFile=%Documents%\ModelPort
FileKey1=%Documents%\ModelPort|*.log
[Movavi Screen Recorder *]
LangSecRef=3023
DetectFile=%AppData%\Movavi Screen Recorder*
FileKey1=%LocalAppData%\Movavi Screen Recorder\Cache|*.*|RECURSE
FileKey2=%LocalAppData%\Movavi\Logs|*.*|RECURSE
FileKey3=%LocalAppData%\Movavi\Screen Recorder\Cache|*.*|RECURSE
[Nextcloud *]
LangSecRef=3022
DetectFile=%AppData%\Nextcloud
FileKey1=%AppData%\Nextcloud|*.log;*.msi;nextcloud.cfg.backup_*
FileKey2=%AppData%\Nextcloud\Logs|*.*
FileKey3=%LocalAppData%\Nextcloud\Cache\qmlcache|*.*|RECURSE
[Norton *]
...FileKey5=%AppData%\Norton\logs|*.*
[Oculus *]
Section=Games
DetectFile=%AppData%\Oculus
FileKey1=%AppData%\Oculus\Logs|*.*
FileKey2=%AppData%\OculusClient|*-journal;*.old;LOG|RECURSE
FileKey3=%AppData%\OculusClient|Network Persistent State
FileKey4=%AppData%\OculusClient\*Cache|*.*|RECURSE
FileKey5=%AppData%\OculusClient\webrtc_event_logs|*.*
FileKey6=%LocalAppData%\Oculus|*.log;*.txt;PerfLog_*.json
[PhotoPad Photo Editor *]
...FileKey1=%ProgramFiles%\NCH Software\PhotoPad|photopadsetup_*.exe
RegKey2=HKCU\Software\NCH Software\PhotoPad\Settings|DefaultExt
RegKey3=HKCU\Software\NCH Software\PhotoPad\Settings|MinutesRunSinceLastInstall
RegKey4=HKCU\Software\NCH Software\PhotoPad\Settings|ProjectFolder
RegKey5=HKCU\Software\NCH Software\PhotoPad\UsageStats
Note: I renamed
[PhotoPad *]
to[PhotoPad Photo Editor *]
.[Pixillion Image Converter *]
LangSecRef=3023
DetectFile=%ProgramFiles%\NCH Software\Pixillion\pixillion.exe
FileKey1=%ProgramFiles%\NCH Software\Pixillion|pixsetup_*.exe
[Plex Media Server *]
...FileKey11=%LocalAppData%\Plex Media Server\Plug-in Support\Caches|*.*|RECURSE
FileKey12=%LocalAppData%\Plex Media Server\Plug-in Support\Databases|*.db-shm;*.db-wal
[Quest3D *]
LangSecRef=3021
DetectFile=%AppData%\Quest3D
FileKey1=%AppData%\Quest3D\Lumion*|WriteErrorLog
[R-Wipe & Clean *]
...FileKey1=%SystemDrive%|*.sys.rwc
FileKey2=%WinDir%\SoftwareDistribution|*.log.rwc
Note: Files as
swapfile.sys.rwc
andReportingEvents.log.rwc
are left behind after cleaning with "R-Wipe & Clean".[Rayman Legends *]
Section=Games
DetectFile=%ProgramFiles%\Rayman Legends
FileKey1=%ProgramFiles%\Rayman Legends\_CommonRedist|*.*|REMOVESELF
[Roxio *]
...FileKey9=%AppData%\Roxio|*.log;*Log.txt
FileKey10=%AppData%\Roxio\MediaManager*|ItemThumbnails.dat
[RuTracker proxy *]
LangSecRef=3022
DetectFile=%AppData%\rto-proxy
FileKey1=%AppData%\rto-proxy|*-journal
FileKey2=%AppData%\rto-proxy\*Cache|*.*|RECURSE
[Serious Sam *]
...DetectFile=%ProgramFiles%\Serious Sam*
FileKey1=%ProgramFiles%\Steam\steamApps\Common\Serious Sam*|*.log
FileKey2=%ProgramFiles%\Steam\steamApps\Common\Serious Sam*\Log|*.*|RECURSE
FileKey3=%ProgramFiles%\Steam\steamApps\Common\Serious Sam*\Temp|*.*
...FileKey4=%ProgramFiles%\Serious Sam*|*.log
FileKey5=%ProgramFiles%\Serious Sam*\Temp|*.*
Note: Added support for "Serious Sam Classic TFE".
[SideQuest *]
Section=Games
DetectFile=%AppData%\SideQuest
FileKey1=%AppData%\SideQuest|*-journal;*.old;LOG|RECURSE
FileKey2=%AppData%\SideQuest|Network Persistent State;QuotaManager
FileKey3=%AppData%\SideQuest\*Cache|*.*|RECURSE
FileKey4=%AppData%\SideQuest\blob_storage|*.*|RECURSE
FileKey5=%AppData%\SideQuest\tmp|*.*
FileKey6=%AppData%\SideQuest\VideoDecodeStats|*.*|RECURSE
FileKey7=%LocalAppData%\sidequest-updater|installer.exe
[Signal Messenger *]
...FileKey6=%AppData%\Signal\Temp|*.*
FileKey8=%AppData%\Signal\Crashpad|*.*|RECURSE
[Silhouette Studio *]
LangSecRef=3021
DetectFile=%AppData%\com.aspexsoftware.s*
FileKey1=%AppData%\com.aspexsoftware.Silhouette_Studio\installers|*.*
FileKey2=%AppData%\com.aspexsoftware.ss_bluetooth|*.bluetooth.txt
FileKey3=%AppData%\com.aspexsoftware.studio_helper|log
[SketchUp Make *]
...FileKey4=%AppData%\SketchUp\SketchUp*\WebCache|*-journal;*.old;LOG|RECURSE
FileKey5=%AppData%\SketchUp\SketchUp*\WebCache|data_*;debug.log;f_*;index;Visited Links
FileKey6=%AppData%\SketchUp\SketchUp*\WebCache\Cache|*.*
FileKey7=%LocalAppData%\SketchUp\SketchUp*\SketchUp|*log-sketchup.txt
[Solus *]
Section=Games
DetectFile=%LocalAppData%\Solus
FileKey1=%LocalAppData%\Solus\Saved\Config\CrashReportClient|*.*|RECURSE
FileKey2=%LocalAppData%\Solus\Saved\Logs|*.*
[Temporary Internet Files Software Quality Management Logs *]
LangSecRef=3001
DetectFile=%ProgramFiles%\Internet Explorer\sqmapi.dll
FileKey1=%LocalAppData%\Microsoft\Windows\Temporary Internet Files\Sqm|*.sqm
[Tencent WeChat *]
...DetectFile2=%LocalAppData%\Tencent\BrowsingService
FileKey1=%AppData%\Tencent\Logs|*.*
FileKey2=%AppData%\Tencent\WeChat\bak|*.*
FileKey3=%AppData%\Tencent\WeChat\Log|*.*|RECURSE
FileKey4=%LocalAppData%\Tencent\BrowsingService\TGB_Market|*.log
FileKey5=%LocalAppData%\Tencent\BrowsingService\unkwown|*.log
FileKey6=%LocalAppData%\Tencent\BrowsingService\wechat|*.log
[Tencent WeChat Work *]
LangSecRef=3022
Detect=HKCU\Software\Tencent\WXWork
FileKey1=%AppData%\Tencent\WXWork\Data\*\Cache\File\*|MEMORY.DMP
FileKey2=%AppData%\Tencent\WXWork\Data\*\Cache\Image\*|WXWorkCapture_*.jpg
FileKey3=%AppData%\Tencent\WXWork\Log|*.*|RECURSE
[Total Registry *]
LangSecRef=3024
Detect=HKCU\Software\ScorpioSoftware\TotalRegistry
RegKey1=HKCU\Software\ScorpioSoftware\TotalRegistry|LastKey
[V-Ray for Revit *]
LangSecRef=3021
DetectFile=%AppData%\ChaosGroup\V-Ray For Revit*
FileKey1=%AppData%\ChaosGroup\Cloud\Client|*.log
FileKey2=%AppData%\ChaosGroup\V-Ray For Revit*\Logs|*.*
FileKey3=%AppData%\ChaosGroup\V-Ray For Revit*\neui4fevit|*-journal;*.old;LOG|RECURSE
FileKey4=%AppData%\ChaosGroup\V-Ray For Revit*\neui4fevit|*.log;Network Persistent State
FileKey5=%AppData%\ChaosGroup\V-Ray For Revit*\neui4fevit\blob_storage|*.*|RECURSE
FileKey6=%AppData%\ChaosGroup\V-Ray For Revit*\neui4fevit\*Cache|*.*|RECURSE
FileKey7=%LocalAppData%\ChaosGroup\Telemetry|*.log
[V-Ray For SketchUp *]
LangSecRef=3021
DetectFile=%AppData%\ChaosGroup\V-Ray For SketchUp
FileKey1=%AppData%\ChaosGroup\Cloud\Client|*.log
FileKey2=%AppData%\ChaosGroup\V-Ray For SketchUp|*.log;telemetry.json
FileKey3=%LocalAppData%\ChaosGroup\Telemetry|*.log
[VideoPad Video Editor *]
LangSecRef=3023
DetectFile=%ProgramFiles%\NCH Software\VideoPad\videopad.exe
FileKey1=%ProgramFiles%\NCH Software\VideoPad|videopadsetup_*.exe
[Visual Watermark *]
LangSecRef=3023
DetectFile=%LocalAppData%\Visual Watermark*
FileKey1=%LocalAppData%\Visual Watermark Common\Temp|*.*
[Volkswagen DiscoverCare *]
LangSecRef=3021
DetectFile=%UserProfile%\DiscoverCare
FileKey1=%UserProfile%\DiscoverCare\Data|DiscoverCare.log
[WavePad Sound Editor *]
LangSecRef=3023
DetectFile=%ProgramFiles%\NCH Software\WavePad\wavepad.exe
FileKey1=%ProgramFiles%\NCH Software\WavePad|wavepadsetup_*.exe
[Windows Anytime Upgrade *]
LangSecRef=3025
DetectFile=%LocalAppData%\Microsoft\Windows\Windows Anytime Upgrade
FileKey1=%LocalAppData%\Microsoft\Windows\Windows Anytime Upgrade|Upgrade.log
[Windows Installation Assistant *]
LangSecRef=3024
DetectFile=%ProgramFiles%\WindowsInstallationAssistant
FileKey1=%ProgramFiles%\WindowsInstallationAssistant\Logs|*.*
[Windows Mail *]
...FileKey2=%LocalAppData%\Microsoft\Windows Mail\Backup\Old|*.*|REMOVESELF
[Windows Media Player *]
...FileKey1=%LocalAppData%\Microsoft\Media Player\Cache*|*.*
FileKey2=%LocalAppData%\Microsoft\Media Player\Cache*\LocalMLS|*.*|RECURSE
[Windows Portable Devices Logs *]
LangSecRef=3025
DetectFile=%ProgramFiles%\Windows Portable Devices\sqmapi.dll
FileKey1=%LocalAppData%\Microsoft\Portable Devices|wpdlog*.sqm
[WinZip Registry Optimizer *]
...DetectFile2=%ProgramFiles%\WinZip Registry Optimizer
FileKey2=%ProgramFiles%\WinZip Registry Optimizer\Backups|*.*
[WinZip Update Notifier *]
LangSecRef=3021
DetectFile=%LocalAppData%\WinZip\WinZip Update Notifier
FileKey1=%LocalAppData%\WinZip\WinZip Update Notifier\Log|*.*
[XSplit Broadcaster *]
LangSecRef=3023
DetectFile=%ProgramFiles%\SplitmediaLabs\XSplit Broadcaster
FileKey1=%ProgramFiles%\SplitmediaLabs\XSplit Broadcaster\x*|*Log.txt
[YouTubeByClick *]
LangSecRef=3022
DetectFile=%AppData%\YouTubeByClick
FileKey1=%AppData%\YouTubeByClick|History.ytb
[Zoom *]
...FileKey3=%AppData%\Zoom\data|*.tmp.db;*.tmp.enc.db;*.zmdownload;zmonitorlog.bin
FileKey9=%AppData%\Zoom\data|*-journal;*.db-shm;*.db-wal|RECURSE
FileKey10=%AppData%\Zoom\data\WebviewCache\*\ZoomApps\*\CefWebView|Visited Links
FileKey11=%AppData%\Zoom\data\WebviewCache\*\ZoomApps\*\CefWebView\blob_storage|*.*|RECURSE
FileKey12=%AppData%\Zoom\data\WebviewCache\*\ZoomApps\*\CefWebView\*Cache|*.*|RECURSE
FileKey13=%AppData%\Zoom\data\WebviewCache\*\ZoomApps\*\CefWebView\Network|Network Persistent State
FileKey14=%AppData%\Zoom\Reports|*.*