| //========================================================================= | |
| // FILE: DIRCTRL.DAT | |
| // APPLIES TO: Windows | |
| // | |
| // This file has three sections used for controlling various aspects | |
| // of DG with regards to directories. | |
| // | |
| // SECTION AFE | |
| // ----------- | |
| // Each line consists of a directory specification, using DOS style | |
| // wildcards (*,?), that will be excluded from the encryption engine. | |
| // | |
| // SECTION SCAN | |
| // ------------ | |
| // Each line consists of a directory or directory pattern, using DOS style | |
| // wildcards (*,?), that will be included or excluded from scanning. | |
| // If no wildcard is used at the beginning of the directory then the directory | |
| // should start with a UNC "\\" specifier or a drive letter. | |
| // | |
| // SECTION ACI | |
| // ----------- | |
| // Eache line consists of a directory to exclude from ACI. | |
| // (Currently no wildcards) | |
| // | |
| // All comments begin with '//', and blank lines and whitespace are | |
| // ignored. Exception: whitespace within a directory name. | |
| // | |
| //(Version 9.3.0) | |
| //========================================================================= | |
| // | |
| //========================================================================= | |
| // AFE SECTION | |
| // | |
| // PATTERN EXPECTED PATH | |
| // | |
| // V16 | |
| // *PROGRA* C:\Program files\* | |
| // *DOCUME*\APPLIC*; C:\Documents and Settings\ANY USER\APPLICATION DATA | |
| // *DOCUME*\LOCAL* C:\Documents and Settings\ANY USER\Local Settings | |
| // *DOCUME*\USERD* C:\Documents and Settings\ANY USER\USERDATA | |
| // *DOCUME*\WINDO* C:\Documents and Settings\ANY USER\WINDOWS | |
| // *DOCUME*\COOKIE* C:\Documents and Settings\ANY USER\COOKIES | |
| // *DOCUME*\TEMPLA* C:\Documents and Settings\ANY USER\TEMPLATES | |
| // *DOCUME*\NETWO* C:\Documents and Settings\NetworkService | |
| // *DOCUME*\SENDTO* C:\Documents and Settings\ANY USER\SENDTO (avoid *.desklink, *.mapimail, *compressed folder*) | |
| // *SYSTEM* C:\SYSTEM VOLUME INFORMATION\ (Used for SYSTEM RESTORE) | |
| // C:\SYSTEM.SAV\ (HP Laptop) | |
| // *INETPUB\* C:\INETPUB\ (used by IIS) | |
| // *CONFIG.MS* C:\CONFIG.MSI (used by windows update) | |
| // For specific customers | |
| // For specific machines | |
| // *DELL\* C:\DELL (when dell machine is used) | |
| // *DRIVERS\* C:\DRIVERS (IBM Thinkpad drivers) | |
| // *SWSHARE\* C:\SWSHARE (IBM Thinkpad) | |
| // *SWSETUP\* C:\SWSETUP (HP laptop) | |
| // *SYSTEM* C:\SYSTEM.SAV\ (HP Laptop) | |
| // *IBMTOOLS\* C:\IBMTOOLS\ | |
| // FOR Specific apps | |
| // *CL32V* C:\CL32V (when Novell Ver X is used) | |
| // *DGAGENT* Agent Directory (Agent may be outside Program files) | |
| // *MSOCAC* C:\MSOCACHE\ | |
| // *LOTUS\* C:\LOTUS\ | |
| // Filed based should be added to registry through PENDING_UPDATE | |
| // *NTUSER.* C:\Documents and Settings\ANY USER\NTUSER.* and C:\Documents and Settings\NTUSER.DAT (file) | |
| // *.??_ Files compressed using CAB | |
| // | |
| // *.EXE*;*.DLL*;*.SYS*;*.COM*;*.LNK*;*NTUSER*.*;*NTLDR*;*BOOT.INI*;*.??_ | |
| // *.UTX*;*.XTU*;*.INI*;*.JAR*;*.LSL*;*.FON*;*.DAT* All Lotus Notes file exclusions | |
| // | |
| // Full string: | |
| // *.EXE*;*.DLL*;*.SYS*;*.COM*;*.LNK*;*.UTX*;*.XTU*;*.INI*;*.JAR*;*.LSL*;*.FON*;*.DAT*;*NTUSER*.*;*NTLDR*;*BOOT.INI*;*.??_ | |
| // | |
| // Full string: | |
| // *PROGRA*;*DOCUME*\APPLIC*;*DOCUME*\LOCAL*;*DOCUME*\USERDA*;*DOCUME*\WINDO*;*DOCUME*\COOKIE*;*DOCUME*\TEMPL*;*DOCUME*\NETWO*;*DOCUME*\SENDTO*;*INETPUB\*;*SYSTEM*;*CONFIG.MS*;*DELL\*;*DRIVERS\*;*SWSHARE\*;*SWSETUP\*;*IBMTOOLS\*;*DGAGENT\*;*CL32V*;*MSOCAC*;*LOTUS\* | |
| //========================================================================= | |
| //========================================================================= | |
| // SECTION AFE IS USED ONLY BY PRE-5.2 AGENTS! | |
| //========================================================================= | |
| SECTION AFE: | |
| *PROGRA*\*;*DOCUME*\APPLIC*\*;*DOCUME*\LOCAL*\*;*DOCUME*\USERDA*\*;*DOCUME*\WINDO*\* | |
| *DOCUME*\COOKIE*\*;*DOCUME*\TEMPL*\*;*DOCUME*\NETWO*\*;*DOCUME*\SENDTO*\* | |
| *INETPUB\*;*SYSTEM*\*;*CONFIG.MS* | |
| *DELL\*;*DRIVERS\*;*SWSHARE\*;*SWSETUP\*;*IBMTOOLS\* | |
| *DGAGENT\*;*CL32V*;*MSOCAC*\*;*LOTUS\* | |
| *DOCUME*\ALL*\NTUSER*\* | |
| <java home> | |
| SECTION END: | |
| //========================================================================= | |
| // SCANNER SECTION - directories to include or exclude from scanning | |
| //========================================================================= | |
| SECTION ADJUST SCAN: | |
| INCLUDE: | |
| END: | |
| EXCLUDE: | |
| *.PST | |
| *.PST.TMP | |
| *.OST | |
| END: | |
| SECTION END: | |
| //========================================================================= | |
| // AFE Directory Exclusions - These directories will be ignored by AFE in NON-FDE mode | |
| //========================================================================= | |
| AFE DIR EXCLUSIONS: | |
| // Entire System root is now excluded | |
| %SystemRoot%\* | |
| // Program files | |
| ?:\PROGRA*\*; | |
| <user profile>*\COOKIE*\*; | |
| <user profile>*\TEMPL*\*; | |
| <user profile>*\NETWO*\*; | |
| <user profile>*\SENDTO*\* | |
| <user profile>*\ALL*\NTUSER*\* | |
| ?:\INETPUB\*; | |
| ?:\*CONFIG.MS* | |
| ?:\*DELL\*; | |
| ?:\*SWSETUP\*; | |
| ?:\*IBMTOOLS\* | |
| ?:\*DGAGENT\*; | |
| ?:\*CL32V*; | |
| ?:\*MSOCAC*\*; | |
| ?:\*LOTUS\* | |
| ?:\SWSHARE\* | |
| // Java directory | |
| <java home>\* | |
| // OPTIONAL - System Restore and System Drive-State functions temp files. Removal could | |
| // cause performance issues. Highly recommend keeping. | |
| ?:\System Volume Information\* | |
| ?:\SYSTEM~1*\* | |
| // OPTIONAL - Symantec AV working locations | |
| ?:\Progra*\Symant*\* | |
| ?:\Progra*\Common*\Symant*\* | |
| %ALLUSERSPROFILE%\App*\Symant*\* | |
| SECTION END: | |
| //========================================================================= | |
| // AFE File Exclusions - these files will not be encrypted in NON-FDE mode | |
| //========================================================================= | |
| AFE FILE EXCLUSIONS: | |
| *.EXE;*.DLL;*.SYS;*.COM;*.LNK;*.UTX;*.XTU;*.INI;*.JAR;*.LSL;*.FON;*.DAT; | |
| // REQUIRED Windows Boot sequence & Registry | |
| %SystemDrive%\*NTUSER*.*; | |
| %SystemDrive%\IO.SYS | |
| %SystemDrive%\MSDOS.SYS | |
| %SystemDrive%\boot.ini | |
| %SystemDrive%\ntldr | |
| %SystemDrive%\autoexec.bat | |
| ?:\pagefile.sys | |
| ?:\hiberfil.sys | |
| ?:\*.??_ | |
| // REQUIRED Windows Recycle Bin | |
| ?:\RECYCLE*\*\INFO2 | |
| // REQUIRED DG Agent temp files during uninstall via Add/Remove Programs | |
| <user profile>\*\APPLIC*\*\DGAgen*.* | |
| <user profile>\*\APPLIC*\{*\instance.dat | |
| // REQUIRED - Windows New User Creation and Roaming Profile Temp Files | |
| ?:\*\PRF*.tmp | |
| // OPTIONAL - example to avoid PerfectDisk conflict | |
| ?:\Perfec*\Perfec*.adm | |
| ?:\Perfec*\PDHelpEN.chm | |
| ?:\Perfec*\Config.ini | |
| ?:\Perfec*\Upd.ini | |
| ?:\Perfec*\PDAgen*.mof | |
| // OPTIONAL - example to avoid IBM / Lenovo ThinkVantage and Biometric Fingerprint Scanner | |
| %SystemDrive%\SWSHARE\sfr.log | |
| %SystemDrive%\Progra*\*Fingerprint*\*.xml | |
| %SystemDrive%\Progra*\*Fingerprint*\rsc\sheetcc.css | |
| // OPTIONAL - PointSec Driver | |
| %SystemDrive%\prot_ins.sys | |
| SECTION END: | |
| //========================================================================= | |
| // AFE FDE DGCIPHER FOLDERS - where to copy dgcipher for cd burns if file is encrypted with password | |
| //========================================================================= | |
| AFE FDE DGCIPHER FOLDERS: | |
| <user profile>\Desktop\CdBurn | |
| %SystemDrive%\CdBurnTemp | |
| SECTION END: | |
| //========================================================================= | |
| // AFE FDE SYSTEM KEY - these files will be encryped by a random key, which | |
| // in turn will be encrypted by the SYSTEM KEY | |
| // ALGORITHM: | |
| // If a file/directory is not found in this ("SYSTEM KEY") section, | |
| // including its "exception" subsection, then or "SESSION KEY" section | |
| // is checked (exception entries are checked first then inlusion entries) | |
| // If a file or a directory could not be found there either | |
| // than "afe-DefaultKeyProtectionType" value of config.xml is used | |
| // 0 is for SYSTEM KEY, and 1 is for SESSION KEY. If there is no such | |
| // configuration value than SYSTEM KEY is used by default for FDE installation | |
| // and SESSION KEY is used for AFE installation. | |
| // | |
| // For removable media, these path are not checked, SESSION KEY are always used | |
| //========================================================================= | |
| AFE FDE SYSTEM KEY: | |
| %SystemRoot%\* | |
| %ProgramFiles%\* | |
| ?:\Progra~?\* | |
| %SystemDrive%\autoexec.bat | |
| //"c:\Documents and Settings\user\Application Data\Sun\Java\Deployment\deployment.properties" | |
| ?:\DOCUME~?\*\deployment.properties | |
| ?:\DOCUME~?\*\ntuser.ini | |
| ?:\RRbackups\* | |
| ?:\RRback~?\* | |
| ?:\SWSHARE\* | |
| <java home>\* | |
| // everything in documents in settings except user data | |
| ?:\DOCUME~?\* | |
| ?:\Documents?and?Settings\* | |
| // except my documents and desktop, which are encrypted with session key | |
| -|<user profile>\My?Documents\* | |
| -|<user profile>\Desktop\* | |
| -|?:\DOCUME~?\*\MyDocu~?\* | |
| -|?:\DOCUME~?\*\Desktop\* | |
| SECTION END: | |
| //========================================================================= | |
| // AFE FDE SESSION KEY - these files will be encryped by a random key, which | |
| // in turn will be encrypted by the SESSION KEY | |
| // | |
| // If, previously, a file/directory is not found "SYSTEM KEY" section, | |
| // including its "exception" subsection, then or this ("SESSION KEY") section | |
| // is checked (exception entries are checked first then inlusion entries). | |
| // If a file or a directory could not be found here either | |
| // than "afe-DefaultKeyProtectionType" value of config.xml is used | |
| // 0 is for SYSTEM KEY, and 1 is for SESSION KEY. If there is no such | |
| // configuration value than SYSTEM KEY is used by default for FDE installation | |
| // and SESSION KEY is used for AFE installation. | |
| // | |
| // For removable media, these path are not checked, SESSION KEY are always used | |
| //========================================================================= | |
| AFE FDE SESSION KEY: | |
| *.DOC;*.DOCX;*.RTF;*.XLS;*.XLSX;*.PPT;*.PPTX;*.OST;*.PST;*.PDF; | |
| <user profile>\* | |
| -|<user profile>\Local Settings\Temp\* | |
| ?:\DOCUME~?\* | |
| -|?:\DOCUME~?\*\LOCALS~1\Temp\* | |
| ?:\* | |
| -|%SystemRoot%\* | |
| SECTION END: | |
| //========================================================================= | |
| // FDE Directory Exclusions - FDE does not exclude any directories | |
| // except these SYMANTEC SEP related directories. | |
| //========================================================================= | |
| FDE DIR EXCLUSIONS: | |
| // REQUIRED registry avoidance vs. extensionless registry files | |
| %SystemRoot%\system32\config\* | |
| // OPTIONAL - System Restore and System Drive-State functions temp files. Removal could | |
| // cause performance issues. Highly recommend keeping. | |
| ?:\System Volume Information\* | |
| ?:\SYSTEM~1*\* | |
| // OPTIONAL - Symantec AV working locations | |
| ?:\Progra*\Symant*\* | |
| ?:\Progra*\Common*\Symant*\* | |
| %ALLUSERSPROFILE%\App*\Symant*\* | |
| SECTION END: | |
| //========================================================================= | |
| // FDE File Exclusions - these files will not be encrypted in FDE mode | |
| //========================================================================= | |
| FDE FILE EXCLUSIONS: | |
| // REQUIRED Windows Boot sequence & Registry | |
| %SystemDrive%\IO.SYS | |
| %SystemDrive%\MSDOS.SYS | |
| %SystemDrive%\boot.ini | |
| %SystemDrive%\ntldr | |
| ?:\pagefile.sys | |
| ?:\hiberfil.sys | |
| %SystemRoot%\system32\hal.dll | |
| %SystemRoot%\system32\ntoskrnl.exe | |
| %SystemRoot%\system32\atiicdxx.dat | |
| %SystemRoot%\security\logs\winlogon.log | |
| %SystemRoot%\Regist*\*.crmlog | |
| %SystemRoot%\inf\*.inf | |
| %SystemRoot%\inf\*.pnf | |
| %SystemRoot%\inf\*.adm | |
| %SystemRoot%\inf\*.iem | |
| %SystemRoot%\bootstat.dat | |
| // REQUIRED Windows Boot sequence - User Profiles | |
| %SystemRoot%\system32\Micros*\Protect\*\Prefer* | |
| %SystemRoot%\system32\Micros*\Protect\*\User\Prefer* | |
| // REQIURED Windows Product Activation | |
| %SystemRoot%\system32\wpa.dbl | |
| %SystemRoot%\system32\wpa.bak | |
| // REQUIRED Windows Recycle Bin | |
| ?:\RECYCLE*\*\INFO2 | |
| // REQUIRED DG Agent temp files during uninstall via Add/Remove Programs | |
| ?:\DOCUME*\*\APPLIC*\*\DGAgen*.* | |
| ?:\DOCUME*\*\APPLIC*\{*\instance.dat | |
| // REQUIRED - Windows New User Creation and Roaming Profile Temp Files | |
| ?:\*\PRF*.tmp | |
| // OPTIONAL - example to permit Windows user-mode debugging | |
| %SystemRoot%\debug\UserMode\userenv.log | |
| // OPTIONAL - example to avoid PerfectDisk conflict | |
| ?:\Perfec*\Perfec*.adm | |
| ?:\Perfec*\PDHelpEN.chm | |
| ?:\Perfec*\Config.ini | |
| ?:\Perfec*\Upd.ini | |
| ?:\Perfec*\PDAgen*.mof | |
| // OPTIONAL - example to avoid IBM / Lenovo ThinkVantage and Biometric Fingerprint Scanner | |
| %SystemDrive%\SWSHARE\sfr.log | |
| %SystemDrive%\Progra*\*Fingerprint*\*.xml | |
| %SystemDrive%\Progra*\*Fingerprint*\rsc\sheetcc.css | |
| // OPTIONAL - PointSec Driver | |
| %SystemDrive%\prot_ins.sys | |
| SECTION END: | |
| //========================================================================= | |
| // ACI SECTION - old style for old agents who don't understand the new format | |
| // specify directories where files are not classified | |
| //========================================================================= | |
| SECTION ACI: | |
| c:\program files\common files\symantec shared | |
| c:\program files\symantec | |
| c:\program files\symantec client security | |
| c:\program files\norton internet security | |
| c:\windows | |
| c:\winnt | |
| C:\documents and settings\all users\application data\microsoft\crypto | |
| c:\system volume information | |
| c:\msocache | |
| c:\config.msi | |
| c:\inetpub | |
| //Customer specific requirements | |
| c:\drivers | |
| SECTION END: | |
| //========================================================================= | |
| // ACI2 SECTION - new and improved version (5.3.1+) | |
| // specify directories where files are not classified | |
| //========================================================================= | |
| SECTION ACI2: | |
| %SystemDrive%\windows\* | |
| %SystemDrive%\progra*\common*\symant*\* | |
| %SystemDrive%\progra*\symant*\* | |
| %SystemDrive%\progra*\norton*\* | |
| %SystemDrive%\winnt\* | |
| %SystemDrive%\docume*\all*\applic*\micros*\crypto\* | |
| %SystemDrive%\system*\* | |
| %SystemDrive%\msocache\* | |
| %SystemDrive%\config.msi\* | |
| %SystemDrive%\inetpub\* | |
| %SystemDrive%\progra*\citrix\person*\logs\* | |
| %SystemDrive%\progra*\citrix\pvsage*\* | |
| %SystemDrive%\progra*\vmware\vmware*\* | |
| %SystemDrive%\progra*\dgagent\readops\* | |
| %SystemDrive%\progra*\malwarebytes endpoint agent\logs* | |
| //Customer specific requirements | |
| %SystemDrive%\drivers\* | |
| // more filtering for IE | |
| %SystemDrive%\users*\appdata\local\microsoft\windows\webcache\*.log | |
| %SystemDrive%\users*\appdata\roaming\microsoft\windows\recent\customdestinations\*.tmp | |
| %SystemDrive%\users*\appdata\roaming\microsoft\windows\recent\customdestinations\*-ms | |
| // Windows 8 Apps special directories | |
| <windows apps home>\* | |
| <windows apps repository>\* | |
| // Customer specific, filtering for AppSense desktop redirection with Office | |
| \\mmfiles\*\appsense\*\*tmp | |
| // Windows 10 Performance improvements | |
| %SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\*.html | |
| %SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\static\images\*.png | |
| %SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\*.png | |
| %SystemDrive%\Program Files (x86)\apple software update\softwareupdate.resources\software update.tiff | |
| %SystemDrive%\Program Files (x86)\cisco systems\cisco jabber\*.xml | |
| %SystemDrive%\Program Files (x86)\cisco systems\cisco jabber\avatars\*.svg | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxcrashhandler.exe | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdate.exe | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdatebroker.exe | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdatehelper.msi | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdateondemand.exe | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\goopdate.dll | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\goopdateres_*.dll | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\npdropboxupdate*.dll | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\psmachine.dll | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\psuser.dll | |
| %SystemDrive%\Program Files (x86)\dropbox\update\install\{*}\dropboxupdatesetup_*.exe | |
| %SystemDrive%\Program Files (x86)\dyn\updater\*.txt | |
| %SystemDrive%\Program Files (x86)\dyn\updater\images\*.png | |
| %SystemDrive%\Program Files\itunes\itunes.resources\missingartworkloading.png | |
| %SystemDrive%\Program Files*\microsoft office\*.thmx | |
| %SystemDrive%\Program Files\microsoft office\appxmanifest.xml | |
| %SystemDrive%\Program Files\microsoft office\filesystemmetadata.xml | |
| %SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.model.zip | |
| %SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.utilities.controls.zip | |
| %SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.utilities.zip | |
| %SystemDrive%\Program Files\microsoft office\root\office16\ocomprivate.zip | |
| %SystemDrive%\Program Files\microsoft office\root\office16\system.windows.controls.theming.toolkit.zip | |
| %SystemDrive%\Program Files\microsoft office\updates\detection\*\versiondescriptor.xml | |
| %SystemDrive%\users\*\appdata\local\microsoft\olk\cache\* | |
| %SystemDrive%\users\*\appdata\local\microsoft\olk\ebwebview\* | |
| %SystemDrive%\users\*\appdata\local\microsoft\olk\logs\* | |
| %SystemDrive%\Program Files\windowsapps\microsoft.skypeapp*\skypeapp\assets\images\*.png | |
| %SystemDrive%\ProgramData\{*}.zip | |
| %SystemDrive%\ProgramData\apple computer\itunes\sc info\sc info.txt | |
| %SystemDrive%\ProgramData\application data\dyn\updater\frontend.log | |
| %SystemDrive%\ProgramData\application data\dyn\updater\frontend.log.* | |
| %SystemDrive%\ProgramData\cisco\cisco anyconnect secure mobility client\*.xml | |
| %SystemDrive%\ProgramData\cisco\cisco anyconnect secure mobility client\logs\updatehistory_*_log.txt | |
| %SystemDrive%\programdata\dropbox\update\log\* | |
| %SystemDrive%\ProgramData\dropbox\update\log\dropboxupdate.log-* | |
| %SystemDrive%\ProgramData\dropbox\update\log\dropboxupdate.log-*-finished | |
| %SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\deploymentconfiguration.xml | |
| %SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\manifest.xml | |
| %SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\userdeploymentconfiguration.xml | |
| %SystemDrive%\ProgramData\microsoft\clicktorun\productreleases\*\en-us.16\masterdescriptor.en-us.xml | |
| %SystemDrive%\ProgramData\microsoft\clicktorun\productreleases\*\x-none.16\masterdescriptor.x-none.xml | |
| %SystemDrive%\ProgramData\microsoft\diagnosis\downloadedscenarios\windows.siuf.xml | |
| %SystemDrive%\ProgramData\microsoft\office\heartbeat\heartbeatcache.xml | |
| %SystemDrive%\ProgramData\microsoft\provisioning\*\masterdatastore.xml | |
| %SystemDrive%\ProgramData\microsoft\provisioning\*\prov\runtime.xml | |
| %SystemDrive%\ProgramData\microsoft\windows\power efficiency diagnostics\energy-report-*.xml | |
| %SystemDrive%\ProgramData\microsoft\windows\power efficiency diagnostics\energy-report-latest.xml | |
| %SystemDrive%\programdata\microsoft\windows\power efficiency diagnostics\energy-report* | |
| %SystemDrive%\ProgramData\microsoft\windows\wer\reportqueue\*.txt | |
| %SystemDrive%\ProgramData\microsoft\windows\wer\reportqueue\*.xml | |
| %SystemDrive%\programdata\microsoft\windows\wer\reportqueue\*\report.wer | |
| %SystemDrive%\programdata\microsoft\windows\wer\reportqueue\*\report.wer.tmp | |
| %SystemDrive%\ProgramData\microsoft\windows\wer\temp\*.xml | |
| %SystemDrive%\programdata\nvidia corporation\drs\update.bin | |
| %SystemDrive%\ProgramData\nvidia corporation\shadowplay\capturecore.log | |
| %SystemDrive%\ProgramData\nvidia corporation\shadowplay\capturecore.old | |
| %SystemDrive%\ProgramData\sccomm\Logs\sccomm.txt | |
| %SystemDrive%\ProgramData\sccomm\sccomm.txt | |
| %SystemDrive%\ProgramData\vmware\*.txt | |
| %SystemDrive%\Users\*\AppData\Local\{*} | |
| %SystemDrive%\Users\*\AppData\Local\cisco\cisco anyconnect secure mobility client\preferences.xml | |
| %SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\history\*\_db.key | |
| %SystemDrive%\users\*\appdata\local\cisco\unified communications\jabber\csf\logs\jabber.log.* | |
| %SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\photo cache\*.png | |
| %SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\telemetry\*.txt | |
| %SystemDrive%\users\*\appdata\local\google\chrome\user data\* | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\clr_v4.0\ngendisable.txt | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\internet explorer\urlblock\urlblock_*.bin | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\msoidentitycrl\production\fplist.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\office\*\lync.exe_rules.xml | |
| %SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.etl | |
| %SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.etl.bak | |
| %SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.uccapilog | |
| %SystemDrive%\users\*\appdata\local\microsoft\office\*\msoia.exe_rules.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\office\*\outlook.exe_rules.xml | |
| %SystemDrive%\users\*\appdata\local\microsoft\onedrive\logs\* | |
| %SystemDrive%\users\*\appdata\local\microsoft\onedrive\settings\* | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\onedrive\standaloneupdater\update.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\onedrive\update\update.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.nst.tmp | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.ost | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.ost.tmp | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*\autod.*.com.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*autodiscover.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\inferences*.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\oab2.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\oab3.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\dropbox-desktop-client_*.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\flipboard-flipboard_*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-explorer-notification--*.png | |
| %SystemDrive%\users\*\appdata\local\microsoft\windows\actioncentercache\microsoft-explorer-notification*.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-office-outlook-exe-*.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-skypeapp_*-app_*.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\explorer\notifyicon\microsoft.explorer.notification.*.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*.htm | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\compare_1_5_6_uni_dll1.zip | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist[*].xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist*.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist1.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\img_spacer1.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\jabber_logo1.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\pluginmanager_*.zip | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\plugins*.zip | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.htm | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.txt | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\notifications\wpnidm\*.jpg | |
| %SystemDrive%\users\*\appdata\local\microsoft\windows\webcache\* | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\webcache\*.log | |
| %SystemDrive%\Users\*\AppData\Local\microsoftedge\sharedcachecontainers\microsoftedge_iecompat\iecompatdata.xml | |
| %SystemDrive%\Users\*\AppData\Local\nvidia corporation\shadowplay\capturecore.old | |
| %SystemDrive%\users\*\appdata\local\nvidia\nvbackend\* | |
| %SystemDrive%\Users\*\AppData\Local\nvidia\nvbackend\*.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\*.dropbox_*\localstate\dbxdata.dat | |
| %SystemDrive%\Users\*\AppData\Local\packages\*.dropbox_*\localstate\dbxdata.dat.bak | |
| %SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\offlineinfo* | |
| %SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\onlineinfo* | |
| %SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\resumeinfo* | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.htm | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.png | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.txt | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\microsoft\internet explorer\domstore\*\*.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\temp\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\localstate\*.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\localstate\*.xml.~tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\facebook.facebook_*\localstate\appdata\local\osmeta\_store_*\image_cache.v*\fbimagedownloader-*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\ac\temp\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\localstate\* | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\localstate\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\ac\inetcache\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\ac\inetcache\*.png | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\localstate\*.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\localstate\*.xml*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.flv | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.htm | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.png | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.svg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.svg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.swf | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.txt | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\microsoftedge\urlblock\urlblock_*.bin | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\temp\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.oneconnect_*\localstate\* | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\contactsonprimarytile.txt | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\contactsonprimarytile.txt.~tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\diagoutputdir\peoplebackgroundtasklog.etl | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\diagoutputdir\peoplebackgroundtasklog.last.etl | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\tilethumbnails\primarytileimage_*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\tilethumbnails\primarytileimage_*.jpgtemp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\ac\temp\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\assets\* | |
| %SystemDrive%\users\*\appdata\local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\* | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\* | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\stagedassets\* | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\tips\*.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\appcache\*.htm | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\nvidia corporation\shadowplay\capturecore.log | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\temp\*.tmp | |
| %SystemDrive%\users\*\appdata\local\packages\microsoft.windows.cortana_*\localstate\* | |
| %SystemDrive%\users\*\appdata\local\packages\microsoft.windows.cortana_*\tempstate\* | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\ac\nvidia corporation\shadowplay\capturecore.log | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\ac\nvidia corporation\shadowplay\capturecore.old | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\framenavigationservicestate.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\photosapptile\tile*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\timelineprefetchthumbnails.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscalculator_*\ac\nvidia corporation\shadowplay\capturecore.log | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\nvidia corporation\shadowplay\capturecore.log | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\nvidia corporation\shadowplay\capturecore.old | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\temp\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.pdf | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.png | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\s0\*\image00*.png | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.pdf | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.png | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\content.mso\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\syncenginesnapshot.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\syncenginesnapshotold.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.htm | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.png | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\nvidia corporation\shadowplay\capturecore.log | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\nvidia corporation\shadowplay\capturecore.old | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\temp\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\*\LocalState\* | |
| %SystemDrive%\Users\*\AppData\Local\publishers\*\fonts\fontcache\2\fontcachemetadata.xml | |
| %SystemDrive%\users\*\appdata\local\temp\* | |
| %SystemDrive%\Users\*\appdata\local\xo communications\worktime\* | |
| %SystemDrive%\Users\*\AppData\Locallow\lastpass\debug.txt | |
| %SystemDrive%\Users\*\AppData\Roaming\apple computer\itunes\cookies\cookies.binarycookies | |
| %SystemDrive%\Users\*\AppData\Roaming\apple computer\itunes\cookies\cookies.binarycookies_tmp_*.dat | |
| %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\byhost\com.apple.itunes.{*}.plist | |
| %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\byhost\com.apple.itunes.{*}.plist.* | |
| %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\com.apple.itunes.plist | |
| %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\com.apple.itunes.plist.* | |
| %SystemDrive%\users\*\appdata\roaming\cisco\unified communications\jabber\csf\config\* | |
| %SystemDrive%\Users\*\AppData\roaming\microsoft\templates\livecontent\*.thmx | |
| %SystemDrive%\users\*\appdata\roaming\microsoft\office\*\*\proofing\*.tmp | |
| %SystemDrive%\users\*\appdata\roaming\microsoft\office\*\*\proofing\roamingcustom.dic | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\outlook\outlook.xml | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*.htm | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*\colorschememapping.xml | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*\themedata.thmx | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\~$rmalemail.dotm | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\~wrd*.tmp | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\normalemail.dotm | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\~ictures.tmp | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\~ocuments.tmp | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\documents.library-ms | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\documents.library-ms~*.tmp | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\pictures.library-ms | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\pictures.library-ms~*.tmp | |
| %SystemDrive%\users\*\appdata\roaming\microsoft\windows\recent\customdestinations\* | |
| %SystemDrive%\Users\*\AppData\Roaming\notepad++\config.xml | |
| %SystemDrive%\Users\*\AppData\Roaming\notepad++\contextmenu.xml | |
| %SystemDrive%\Users\*\AppData\Roaming\notepad++\langs.xml | |
| %SystemDrive%\Users\*\AppData\Roaming\notepad++\plugins\config\pluginmanagerplugins.zip | |
| %SystemDrive%\Users\*\AppData\Roaming\notepad++\session.xml | |
| %SystemDrive%\Users\*\AppData\Roaming\notepad++\shortcuts.xml | |
| %SystemDrive%\Users\*\AppData\Roaming\notepad++\stylers.xml | |
| %SystemDrive%\Users\*\evernote\logs\applog_*.txt | |
| %SystemDrive%\Users\*\music\itunes\*.tmp | |
| %SystemDrive%\Users\*\music\itunes\it.tmp | |
| %SystemDrive%\Users\*\music\itunes\itunes library.itl | |
| %SystemDrive%\Users\*\music\itunes\temp*.tmp | |
| %SystemDrive%\windows\inf\wmiaprpl\* | |
| %SystemDrive%\windows\system32\perfstringbackup.tmp | |
| %SystemDrive%\windows\system32\wbem\performance\* | |
| %SystemDrive%\windows\temp\*.exe | |
| SECTION END: | |
| //========================================================================= | |
| // DOCPROPS SECTION - specify directories where files are not docprops done | |
| //========================================================================= | |
| SECTION DOCPROPS: | |
| %SystemDrive%\windows\* | |
| %SystemDrive%\progra*\common*\symant*\* | |
| %SystemDrive%\progra*\symant*\* | |
| %SystemDrive%\progra*\norton*\* | |
| %SystemDrive%\winnt\* | |
| %SystemDrive%\docume*\all*\applic*\micros*\crypto\* | |
| %SystemDrive%\system*\* | |
| %SystemDrive%\msocache\* | |
| %SystemDrive%\config.msi\* | |
| %SystemDrive%\inetpub\* | |
| %SystemDrive%\progra*\citrix\person*\logs\* | |
| %SystemDrive%\progra*\citrix\pvsage*\* | |
| %SystemDrive%\progra*\vmware\vmware*\* | |
| %SystemDrive%\progra*\dgagent\readops\* | |
| //Customer specific requirements | |
| %SystemDrive%\drivers\* | |
| // Windows 8 Apps special directories | |
| <windows apps home>\* | |
| <windows apps repository>\* | |
| // Windows 10 Performance improvements | |
| %SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\*.html | |
| %SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\static\images\*.png | |
| %SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\*.png | |
| %SystemDrive%\Program Files (x86)\apple software update\softwareupdate.resources\software update.tiff | |
| %SystemDrive%\Program Files (x86)\cisco systems\cisco jabber\*.xml | |
| %SystemDrive%\Program Files (x86)\cisco systems\cisco jabber\avatars\*.svg | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxcrashhandler.exe | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdate.exe | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdatebroker.exe | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdatehelper.msi | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdateondemand.exe | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\goopdate.dll | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\goopdateres_*.dll | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\npdropboxupdate*.dll | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\psmachine.dll | |
| %SystemDrive%\Program Files (x86)\dropbox\update\*\psuser.dll | |
| %SystemDrive%\Program Files (x86)\dropbox\update\install\{*}\dropboxupdatesetup_*.exe | |
| %SystemDrive%\Program Files (x86)\dyn\updater\*.txt | |
| %SystemDrive%\Program Files (x86)\dyn\updater\images\*.png | |
| %SystemDrive%\Program Files\itunes\itunes.resources\missingartworkloading.png | |
| %SystemDrive%\Program Files*\microsoft office\*.thmx | |
| %SystemDrive%\Program Files\microsoft office\appxmanifest.xml | |
| %SystemDrive%\Program Files\microsoft office\filesystemmetadata.xml | |
| %SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.model.zip | |
| %SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.utilities.controls.zip | |
| %SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.utilities.zip | |
| %SystemDrive%\Program Files\microsoft office\root\office16\ocomprivate.zip | |
| %SystemDrive%\Program Files\microsoft office\root\office16\system.windows.controls.theming.toolkit.zip | |
| %SystemDrive%\Program Files\microsoft office\updates\detection\*\versiondescriptor.xml | |
| %SystemDrive%\Program Files\windowsapps\microsoft.skypeapp*\skypeapp\assets\images\*.png | |
| %SystemDrive%\ProgramData\{*}.zip | |
| %SystemDrive%\ProgramData\apple computer\itunes\sc info\sc info.txt | |
| %SystemDrive%\ProgramData\application data\dyn\updater\frontend.log | |
| %SystemDrive%\ProgramData\application data\dyn\updater\frontend.log.* | |
| %SystemDrive%\ProgramData\cisco\cisco anyconnect secure mobility client\*.xml | |
| %SystemDrive%\ProgramData\cisco\cisco anyconnect secure mobility client\logs\updatehistory_*_log.txt | |
| %SystemDrive%\programdata\dropbox\update\log\* | |
| %SystemDrive%\ProgramData\dropbox\update\log\dropboxupdate.log-* | |
| %SystemDrive%\ProgramData\dropbox\update\log\dropboxupdate.log-*-finished | |
| %SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\deploymentconfiguration.xml | |
| %SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\manifest.xml | |
| %SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\userdeploymentconfiguration.xml | |
| %SystemDrive%\ProgramData\microsoft\clicktorun\productreleases\*\en-us.16\masterdescriptor.en-us.xml | |
| %SystemDrive%\ProgramData\microsoft\clicktorun\productreleases\*\x-none.16\masterdescriptor.x-none.xml | |
| %SystemDrive%\ProgramData\microsoft\diagnosis\downloadedscenarios\windows.siuf.xml | |
| %SystemDrive%\ProgramData\microsoft\office\heartbeat\heartbeatcache.xml | |
| %SystemDrive%\ProgramData\microsoft\provisioning\*\masterdatastore.xml | |
| %SystemDrive%\ProgramData\microsoft\provisioning\*\prov\runtime.xml | |
| %SystemDrive%\ProgramData\microsoft\windows\power efficiency diagnostics\energy-report-*.xml | |
| %SystemDrive%\ProgramData\microsoft\windows\power efficiency diagnostics\energy-report-latest.xml | |
| %SystemDrive%\programdata\microsoft\windows\power efficiency diagnostics\energy-report* | |
| %SystemDrive%\ProgramData\microsoft\windows\wer\reportqueue\*.txt | |
| %SystemDrive%\ProgramData\microsoft\windows\wer\reportqueue\*.xml | |
| %SystemDrive%\programdata\microsoft\windows\wer\reportqueue\*\report.wer | |
| %SystemDrive%\programdata\microsoft\windows\wer\reportqueue\*\report.wer.tmp | |
| %SystemDrive%\ProgramData\microsoft\windows\wer\temp\*.xml | |
| %SystemDrive%\programdata\nvidia corporation\drs\update.bin | |
| %SystemDrive%\ProgramData\nvidia corporation\shadowplay\capturecore.log | |
| %SystemDrive%\ProgramData\nvidia corporation\shadowplay\capturecore.old | |
| %SystemDrive%\ProgramData\sccomm\Logs\sccomm.txt | |
| %SystemDrive%\ProgramData\sccomm\sccomm.txt | |
| %SystemDrive%\ProgramData\vmware\*.txt | |
| %SystemDrive%\Users\*\AppData\Local\{*} | |
| %SystemDrive%\Users\*\AppData\Local\cisco\cisco anyconnect secure mobility client\preferences.xml | |
| %SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\history\*\_db.key | |
| %SystemDrive%\users\*\appdata\local\cisco\unified communications\jabber\csf\logs\jabber.log.* | |
| %SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\photo cache\*.png | |
| %SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\telemetry\*.txt | |
| %SystemDrive%\users\*\appdata\local\google\chrome\user data\* | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\clr_v4.0\ngendisable.txt | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\internet explorer\urlblock\urlblock_*.bin | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\msoidentitycrl\production\fplist.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\office\*\lync.exe_rules.xml | |
| %SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.etl | |
| %SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.etl.bak | |
| %SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.uccapilog | |
| %SystemDrive%\users\*\appdata\local\microsoft\office\*\msoia.exe_rules.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\office\*\outlook.exe_rules.xml | |
| %SystemDrive%\users\*\appdata\local\microsoft\onedrive\logs\* | |
| %SystemDrive%\users\*\appdata\local\microsoft\onedrive\settings\* | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\onedrive\standaloneupdater\update.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\onedrive\update\update.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.nst.tmp | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.ost | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.ost.tmp | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*\autod.*.com.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*autodiscover.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\inferences*.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\oab2.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\oab3.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\dropbox-desktop-client_*.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\flipboard-flipboard_*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-explorer-notification--*.png | |
| %SystemDrive%\users\*\appdata\local\microsoft\windows\actioncentercache\microsoft-explorer-notification*.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-office-outlook-exe-*.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-skypeapp_*-app_*.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\explorer\notifyicon\microsoft.explorer.notification.*.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*.htm | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\compare_1_5_6_uni_dll1.zip | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist[*].xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist*.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist1.xml | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\img_spacer1.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\jabber_logo1.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\pluginmanager_*.zip | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\plugins*.zip | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.htm | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.png | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.txt | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\notifications\wpnidm\*.jpg | |
| %SystemDrive%\users\*\appdata\local\microsoft\windows\webcache\* | |
| %SystemDrive%\Users\*\AppData\Local\microsoft\windows\webcache\*.log | |
| %SystemDrive%\Users\*\AppData\Local\microsoftedge\sharedcachecontainers\microsoftedge_iecompat\iecompatdata.xml | |
| %SystemDrive%\Users\*\AppData\Local\nvidia corporation\shadowplay\capturecore.old | |
| %SystemDrive%\users\*\appdata\local\nvidia\nvbackend\* | |
| %SystemDrive%\Users\*\AppData\Local\nvidia\nvbackend\*.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\*.dropbox_*\localstate\dbxdata.dat | |
| %SystemDrive%\Users\*\AppData\Local\packages\*.dropbox_*\localstate\dbxdata.dat.bak | |
| %SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\offlineinfo* | |
| %SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\onlineinfo* | |
| %SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\resumeinfo* | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.htm | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.png | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.txt | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\microsoft\internet explorer\domstore\*\*.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\temp\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\localstate\*.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\localstate\*.xml.~tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\facebook.facebook_*\localstate\appdata\local\osmeta\_store_*\image_cache.v*\fbimagedownloader-*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\ac\temp\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\localstate\* | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\localstate\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\ac\inetcache\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\ac\inetcache\*.png | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\localstate\*.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\localstate\*.xml*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.flv | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.htm | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.png | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.svg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.svg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.swf | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.txt | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\microsoftedge\urlblock\urlblock_*.bin | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\temp\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.oneconnect_*\localstate\* | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\contactsonprimarytile.txt | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\contactsonprimarytile.txt.~tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\diagoutputdir\peoplebackgroundtasklog.etl | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\diagoutputdir\peoplebackgroundtasklog.last.etl | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\tilethumbnails\primarytileimage_*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\tilethumbnails\primarytileimage_*.jpgtemp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\ac\temp\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\assets\* | |
| %SystemDrive%\users\*\appdata\local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\* | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\* | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\stagedassets\* | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\tips\*.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\appcache\*.htm | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\nvidia corporation\shadowplay\capturecore.log | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\temp\*.tmp | |
| %SystemDrive%\users\*\appdata\local\packages\microsoft.windows.cortana_*\localstate\* | |
| %SystemDrive%\users\*\appdata\local\packages\microsoft.windows.cortana_*\tempstate\* | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\ac\nvidia corporation\shadowplay\capturecore.log | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\ac\nvidia corporation\shadowplay\capturecore.old | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\framenavigationservicestate.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\photosapptile\tile*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\timelineprefetchthumbnails.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscalculator_*\ac\nvidia corporation\shadowplay\capturecore.log | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\nvidia corporation\shadowplay\capturecore.log | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\nvidia corporation\shadowplay\capturecore.old | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\temp\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.pdf | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.png | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\s0\*\image00*.png | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.pdf | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.png | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\content.mso\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\syncenginesnapshot.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\syncenginesnapshotold.xml | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.htm | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.jpg | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.png | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\nvidia corporation\shadowplay\capturecore.log | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\nvidia corporation\shadowplay\capturecore.old | |
| %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\temp\*.tmp | |
| %SystemDrive%\Users\*\AppData\Local\publishers\*\fonts\fontcache\2\fontcachemetadata.xml | |
| %SystemDrive%\users\*\appdata\local\temp\* | |
| %SystemDrive%\Users\*\AppData\Locallow\lastpass\debug.txt | |
| %SystemDrive%\Users\*\AppData\Roaming\apple computer\itunes\cookies\cookies.binarycookies | |
| %SystemDrive%\Users\*\AppData\Roaming\apple computer\itunes\cookies\cookies.binarycookies_tmp_*.dat | |
| %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\byhost\com.apple.itunes.{*}.plist | |
| %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\byhost\com.apple.itunes.{*}.plist.* | |
| %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\com.apple.itunes.plist | |
| %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\com.apple.itunes.plist.* | |
| %SystemDrive%\users\*\appdata\roaming\cisco\unified communications\jabber\csf\config\* | |
| %SystemDrive%\Users\*\AppData\roaming\microsoft\templates\livecontent\*.thmx | |
| %SystemDrive%\users\*\appdata\roaming\microsoft\office\*\*\proofing\*.tmp | |
| %SystemDrive%\users\*\appdata\roaming\microsoft\office\*\*\proofing\roamingcustom.dic | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\outlook\outlook.xml | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*.htm | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*\colorschememapping.xml | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*\themedata.thmx | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\~$rmalemail.dotm | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\~wrd*.tmp | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\normalemail.dotm | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\~ictures.tmp | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\~ocuments.tmp | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\documents.library-ms | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\documents.library-ms~*.tmp | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\pictures.library-ms | |
| %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\pictures.library-ms~*.tmp | |
| %SystemDrive%\users\*\appdata\roaming\microsoft\windows\recent\customdestinations\* | |
| %SystemDrive%\Users\*\AppData\Roaming\notepad++\config.xml | |
| %SystemDrive%\Users\*\AppData\Roaming\notepad++\contextmenu.xml | |
| %SystemDrive%\Users\*\AppData\Roaming\notepad++\langs.xml | |
| %SystemDrive%\Users\*\AppData\Roaming\notepad++\plugins\config\pluginmanagerplugins.zip | |
| %SystemDrive%\Users\*\AppData\Roaming\notepad++\session.xml | |
| %SystemDrive%\Users\*\AppData\Roaming\notepad++\shortcuts.xml | |
| %SystemDrive%\Users\*\AppData\Roaming\notepad++\stylers.xml | |
| %SystemDrive%\Users\*\evernote\logs\applog_*.txt | |
| %SystemDrive%\Users\*\music\itunes\*.tmp | |
| %SystemDrive%\Users\*\music\itunes\it.tmp | |
| %SystemDrive%\Users\*\music\itunes\itunes library.itl | |
| %SystemDrive%\Users\*\music\itunes\temp*.tmp | |
| %SystemDrive%\windows\inf\wmiaprpl\* | |
| %SystemDrive%\windows\system32\perfstringbackup.tmp | |
| %SystemDrive%\windows\system32\wbem\performance\* | |
| %SystemDrive%\windows\temp\*.exe | |
| %SystemDrive%\users\*\appdata\local\microsoft\edge\user data\* | |
| SECTION END: | |
| //========================================================================= | |
| // AFE FDE NO REPARSE FILES - | |
| // These are meant to suppress warning dialogs from firewalls | |
| //========================================================================= | |
| SECTION AFE FDE FILE NO REPARSE: | |
| //Transactional NTFS and registry | |
| // Legacy entries - not needed any more ... | |
| //*\USERS\*\NTUSER* | |
| //*\USERS\*\USRCLASS* | |
| *\TxR\* | |
| // OPTIONAL - Symantec AV | |
| // *\PROGRA*\SYMANT*\*\*.exe | |
| // *\PROGRA*\COMMON*\SYMANT*\*.exe | |
| // *\PROG*\*\SRTSP*\* | |
| // OPTIONAL - Symantec Tamper Protection | |
| *\NOMADIC\DBENG8.EXE | |
| *\SYSTEM32\SERVICES.EXE | |
| // OPTIONAL - McAfee AV | |
| *\PROGRA*\MCAFEE*\* | |
| // OPTIONAL - VMWare Workstation and VMWare Player | |
| *\VMWARE-AUTHD.exe | |
| // OPTIONAL - Siebel DB client | |
| *\sfadialer\SFADial.exe | |
| // AME DGFS: without this AFE will decrypt temporary files | |
| // that AME encrypted when replacing attachment | |
| //*\09D849B6-32D3-4A40-85EE-6B84BA29E35B\msgs\* | |
| // This is a fix for DGAGENT-1448, HP systems running out of stack space. | |
| *\system32\atiok3*.dll | |
| // This is a fix for DGAGENT-1893 Cannot launch start menu when AFE is enabled on Win8 | |
| // On start Explorer tries to open .lnk files in this directory with OpLocks | |
| *\USERS\*\APPDATA\LOCAL\MICRO*\WINDOWS\WINX\* | |
| // Fix For Universal Apps | |
| *\USERS\*\APPDATA\LOCAL\PACKAGE?\* | |
| *\WINDOWS\SYSTEM32\WWAHOST.EXE | |
| *\WINDOWS\SYSTEM32\BYTECODEGENERATOR.EXE | |
| *\WINDOWS\SYSTEM32\RUNTIMEBROKER.EXE | |
| *\WINDOWS\SYSTEM32\BACKGROUNDTASKHOST.EXE | |
| *\USERS\*\APPDATA\LOCAL\MICRO*\WINDOWS\APPLIC*\* | |
| *\WINDOWS\WINSTOR* | |
| *\PROG*\WINDOWSAPP* | |
| //SA-24054: Fixed RS3 AFE compatibility issue. | |
| *\WINDOWS\FONTS* | |
| // Fix for DGAGENT-2893 (Sep12 RU3) and DGAGENT-3507 (Sep12 RU4) and future versions of | |
| // Symantec Endpoint Protection Client Installations | |
| *\SYMANT*12.1.* | |
| *\PROGRA*\SYMANT*\SYMANT*\CURRENT* | |
| // This is a fix for DGAGENT-5975, [Kraft Group] Latency accessing network shares with AFE enabled? | |
| *\SRVSVC* | |
| *WINDOWS\WINSX* | |
| *WINDOWS\SOFTWAREDISTRIBUTIO* | |
| *WINDOWS\SOFTWA~1* | |
| *WINDOWS\CBSTEM* | |
| *\CBSTEM*PACKAGE*KB*.CAT* | |
| *WINDOWS\SERVICIN* | |
| *WINDOWS\SERVIC*\PACK* | |
| *WINDOWS\REGISTRATIO* | |
| *WINDOWS\REGIST~1* | |
| *WINDOWS\GLOBALIZATION* | |
| *WINDOWS\GLOBAL~1* | |
| *TIWORKER.EX* | |
| *WINDOWS\LOGS* | |
| *WINDOWS\SYS*\SMI\STORE* | |
| *PROGRAMDATA\USOPRIVAT* | |
| *PROGRAMDATA\MICROSOFT* | |
| *WINDOWS\SYS*\CONFIG* | |
| *WINDOWS\APPPATC* | |
| *SYS*\CATROO* | |
| *\WINDOWS\INF* | |
| // Don't reparse any basic EXE types | |
| // Fix for DGAGENT-17152 | |
| *.EXE*;*.DLL*;*.SYS*;*.COM;*.CPL | |
| SECTION END: | |
| //========================================================================= | |
| // AFE PROCESS NO REPARSE FILES - | |
| // No reparse of the specified files. Effeects processses marked with RP flag. | |
| // e.g sfttray.exe,RP+PR - see prcsflgs.dat for example(s) | |
| //======================================================================== | |
| SECTION AFE PROCESS NO REPARSE FILES: | |
| // OPTIONAL - AppV Application (see sfttray.exe in prcsflgs.dat ) | |
| sfttray.exe:*.DLL | |
| // OPTIONAL - Adobe Reader X 10.0.0 (see acrord32.exe in prcsflgs.dat) | |
| acrord32.exe:*\USERS\*\APPDATA\*\ADOBE\* | |
| acrord32.exe:*\DOC*\*\APP*\ADOBE\* | |
| // SEP12 has issues during install | |
| ccSvcHst.exe:*SYMANTEC* | |
| // SCEP 2015 | |
| msmpeng.exe:*.CMD | |
| // Universal Apps :aka MetroApps - Excluded for AFE | |
| sihost.exe:*.JPG | |
| SECTION END: | |