//========================================================================= // FILE: DIRCTRL.DAT // APPLIES TO: Windows // // This file has three sections used for controlling various aspects // of DG with regards to directories. // // SECTION AFE // ----------- // Each line consists of a directory specification, using DOS style // wildcards (*,?), that will be excluded from the encryption engine. // // SECTION SCAN // ------------ // Each line consists of a directory or directory pattern, using DOS style // wildcards (*,?), that will be included or excluded from scanning. // If no wildcard is used at the beginning of the directory then the directory // should start with a UNC "\\" specifier or a drive letter. // // SECTION ACI // ----------- // Eache line consists of a directory to exclude from ACI. // (Currently no wildcards) // // All comments begin with '//', and blank lines and whitespace are // ignored. Exception: whitespace within a directory name. // //(Version 9.3.0) //========================================================================= // //========================================================================= // AFE SECTION // // PATTERN EXPECTED PATH // // V16 // *PROGRA* C:\Program files\* // *DOCUME*\APPLIC*; C:\Documents and Settings\ANY USER\APPLICATION DATA // *DOCUME*\LOCAL* C:\Documents and Settings\ANY USER\Local Settings // *DOCUME*\USERD* C:\Documents and Settings\ANY USER\USERDATA // *DOCUME*\WINDO* C:\Documents and Settings\ANY USER\WINDOWS // *DOCUME*\COOKIE* C:\Documents and Settings\ANY USER\COOKIES // *DOCUME*\TEMPLA* C:\Documents and Settings\ANY USER\TEMPLATES // *DOCUME*\NETWO* C:\Documents and Settings\NetworkService // *DOCUME*\SENDTO* C:\Documents and Settings\ANY USER\SENDTO (avoid *.desklink, *.mapimail, *compressed folder*) // *SYSTEM* C:\SYSTEM VOLUME INFORMATION\ (Used for SYSTEM RESTORE) // C:\SYSTEM.SAV\ (HP Laptop) // *INETPUB\* C:\INETPUB\ (used by IIS) // *CONFIG.MS* C:\CONFIG.MSI (used by windows update) // For specific customers // For specific machines // *DELL\* C:\DELL (when dell machine is used) // *DRIVERS\* C:\DRIVERS (IBM Thinkpad drivers) // *SWSHARE\* C:\SWSHARE (IBM Thinkpad) // *SWSETUP\* C:\SWSETUP (HP laptop) // *SYSTEM* C:\SYSTEM.SAV\ (HP Laptop) // *IBMTOOLS\* C:\IBMTOOLS\ // FOR Specific apps // *CL32V* C:\CL32V (when Novell Ver X is used) // *DGAGENT* Agent Directory (Agent may be outside Program files) // *MSOCAC* C:\MSOCACHE\ // *LOTUS\* C:\LOTUS\ // Filed based should be added to registry through PENDING_UPDATE // *NTUSER.* C:\Documents and Settings\ANY USER\NTUSER.* and C:\Documents and Settings\NTUSER.DAT (file) // *.??_ Files compressed using CAB // // *.EXE*;*.DLL*;*.SYS*;*.COM*;*.LNK*;*NTUSER*.*;*NTLDR*;*BOOT.INI*;*.??_ // *.UTX*;*.XTU*;*.INI*;*.JAR*;*.LSL*;*.FON*;*.DAT* All Lotus Notes file exclusions // // Full string: // *.EXE*;*.DLL*;*.SYS*;*.COM*;*.LNK*;*.UTX*;*.XTU*;*.INI*;*.JAR*;*.LSL*;*.FON*;*.DAT*;*NTUSER*.*;*NTLDR*;*BOOT.INI*;*.??_ // // Full string: // *PROGRA*;*DOCUME*\APPLIC*;*DOCUME*\LOCAL*;*DOCUME*\USERDA*;*DOCUME*\WINDO*;*DOCUME*\COOKIE*;*DOCUME*\TEMPL*;*DOCUME*\NETWO*;*DOCUME*\SENDTO*;*INETPUB\*;*SYSTEM*;*CONFIG.MS*;*DELL\*;*DRIVERS\*;*SWSHARE\*;*SWSETUP\*;*IBMTOOLS\*;*DGAGENT\*;*CL32V*;*MSOCAC*;*LOTUS\* //========================================================================= //========================================================================= // SECTION AFE IS USED ONLY BY PRE-5.2 AGENTS! //========================================================================= SECTION AFE: *PROGRA*\*;*DOCUME*\APPLIC*\*;*DOCUME*\LOCAL*\*;*DOCUME*\USERDA*\*;*DOCUME*\WINDO*\* *DOCUME*\COOKIE*\*;*DOCUME*\TEMPL*\*;*DOCUME*\NETWO*\*;*DOCUME*\SENDTO*\* *INETPUB\*;*SYSTEM*\*;*CONFIG.MS* *DELL\*;*DRIVERS\*;*SWSHARE\*;*SWSETUP\*;*IBMTOOLS\* *DGAGENT\*;*CL32V*;*MSOCAC*\*;*LOTUS\* *DOCUME*\ALL*\NTUSER*\* SECTION END: //========================================================================= // SCANNER SECTION - directories to include or exclude from scanning //========================================================================= SECTION ADJUST SCAN: INCLUDE: END: EXCLUDE: *.PST *.PST.TMP *.OST END: SECTION END: //========================================================================= // AFE Directory Exclusions - These directories will be ignored by AFE in NON-FDE mode //========================================================================= AFE DIR EXCLUSIONS: // Entire System root is now excluded %SystemRoot%\* // Program files ?:\PROGRA*\*; *\COOKIE*\*; *\TEMPL*\*; *\NETWO*\*; *\SENDTO*\* *\ALL*\NTUSER*\* ?:\INETPUB\*; ?:\*CONFIG.MS* ?:\*DELL\*; ?:\*SWSETUP\*; ?:\*IBMTOOLS\* ?:\*DGAGENT\*; ?:\*CL32V*; ?:\*MSOCAC*\*; ?:\*LOTUS\* ?:\SWSHARE\* // Java directory \* // OPTIONAL - System Restore and System Drive-State functions temp files. Removal could // cause performance issues. Highly recommend keeping. ?:\System Volume Information\* ?:\SYSTEM~1*\* // OPTIONAL - Symantec AV working locations ?:\Progra*\Symant*\* ?:\Progra*\Common*\Symant*\* %ALLUSERSPROFILE%\App*\Symant*\* SECTION END: //========================================================================= // AFE File Exclusions - these files will not be encrypted in NON-FDE mode //========================================================================= AFE FILE EXCLUSIONS: *.EXE;*.DLL;*.SYS;*.COM;*.LNK;*.UTX;*.XTU;*.INI;*.JAR;*.LSL;*.FON;*.DAT; // REQUIRED Windows Boot sequence & Registry %SystemDrive%\*NTUSER*.*; %SystemDrive%\IO.SYS %SystemDrive%\MSDOS.SYS %SystemDrive%\boot.ini %SystemDrive%\ntldr %SystemDrive%\autoexec.bat ?:\pagefile.sys ?:\hiberfil.sys ?:\*.??_ // REQUIRED Windows Recycle Bin ?:\RECYCLE*\*\INFO2 // REQUIRED DG Agent temp files during uninstall via Add/Remove Programs \*\APPLIC*\*\DGAgen*.* \*\APPLIC*\{*\instance.dat // REQUIRED - Windows New User Creation and Roaming Profile Temp Files ?:\*\PRF*.tmp // OPTIONAL - example to avoid PerfectDisk conflict ?:\Perfec*\Perfec*.adm ?:\Perfec*\PDHelpEN.chm ?:\Perfec*\Config.ini ?:\Perfec*\Upd.ini ?:\Perfec*\PDAgen*.mof // OPTIONAL - example to avoid IBM / Lenovo ThinkVantage and Biometric Fingerprint Scanner %SystemDrive%\SWSHARE\sfr.log %SystemDrive%\Progra*\*Fingerprint*\*.xml %SystemDrive%\Progra*\*Fingerprint*\rsc\sheetcc.css // OPTIONAL - PointSec Driver %SystemDrive%\prot_ins.sys SECTION END: //========================================================================= // AFE FDE DGCIPHER FOLDERS - where to copy dgcipher for cd burns if file is encrypted with password //========================================================================= AFE FDE DGCIPHER FOLDERS: \Desktop\CdBurn %SystemDrive%\CdBurnTemp SECTION END: //========================================================================= // AFE FDE SYSTEM KEY - these files will be encryped by a random key, which // in turn will be encrypted by the SYSTEM KEY // ALGORITHM: // If a file/directory is not found in this ("SYSTEM KEY") section, // including its "exception" subsection, then or "SESSION KEY" section // is checked (exception entries are checked first then inlusion entries) // If a file or a directory could not be found there either // than "afe-DefaultKeyProtectionType" value of config.xml is used // 0 is for SYSTEM KEY, and 1 is for SESSION KEY. If there is no such // configuration value than SYSTEM KEY is used by default for FDE installation // and SESSION KEY is used for AFE installation. // // For removable media, these path are not checked, SESSION KEY are always used //========================================================================= AFE FDE SYSTEM KEY: %SystemRoot%\* %ProgramFiles%\* ?:\Progra~?\* %SystemDrive%\autoexec.bat //"c:\Documents and Settings\user\Application Data\Sun\Java\Deployment\deployment.properties" ?:\DOCUME~?\*\deployment.properties ?:\DOCUME~?\*\ntuser.ini ?:\RRbackups\* ?:\RRback~?\* ?:\SWSHARE\* \* // everything in documents in settings except user data ?:\DOCUME~?\* ?:\Documents?and?Settings\* // except my documents and desktop, which are encrypted with session key -|\My?Documents\* -|\Desktop\* -|?:\DOCUME~?\*\MyDocu~?\* -|?:\DOCUME~?\*\Desktop\* SECTION END: //========================================================================= // AFE FDE SESSION KEY - these files will be encryped by a random key, which // in turn will be encrypted by the SESSION KEY // // If, previously, a file/directory is not found "SYSTEM KEY" section, // including its "exception" subsection, then or this ("SESSION KEY") section // is checked (exception entries are checked first then inlusion entries). // If a file or a directory could not be found here either // than "afe-DefaultKeyProtectionType" value of config.xml is used // 0 is for SYSTEM KEY, and 1 is for SESSION KEY. If there is no such // configuration value than SYSTEM KEY is used by default for FDE installation // and SESSION KEY is used for AFE installation. // // For removable media, these path are not checked, SESSION KEY are always used //========================================================================= AFE FDE SESSION KEY: *.DOC;*.DOCX;*.RTF;*.XLS;*.XLSX;*.PPT;*.PPTX;*.OST;*.PST;*.PDF; \* -|\Local Settings\Temp\* ?:\DOCUME~?\* -|?:\DOCUME~?\*\LOCALS~1\Temp\* ?:\* -|%SystemRoot%\* SECTION END: //========================================================================= // FDE Directory Exclusions - FDE does not exclude any directories // except these SYMANTEC SEP related directories. //========================================================================= FDE DIR EXCLUSIONS: // REQUIRED registry avoidance vs. extensionless registry files %SystemRoot%\system32\config\* // OPTIONAL - System Restore and System Drive-State functions temp files. Removal could // cause performance issues. Highly recommend keeping. ?:\System Volume Information\* ?:\SYSTEM~1*\* // OPTIONAL - Symantec AV working locations ?:\Progra*\Symant*\* ?:\Progra*\Common*\Symant*\* %ALLUSERSPROFILE%\App*\Symant*\* SECTION END: //========================================================================= // FDE File Exclusions - these files will not be encrypted in FDE mode //========================================================================= FDE FILE EXCLUSIONS: // REQUIRED Windows Boot sequence & Registry %SystemDrive%\IO.SYS %SystemDrive%\MSDOS.SYS %SystemDrive%\boot.ini %SystemDrive%\ntldr ?:\pagefile.sys ?:\hiberfil.sys %SystemRoot%\system32\hal.dll %SystemRoot%\system32\ntoskrnl.exe %SystemRoot%\system32\atiicdxx.dat %SystemRoot%\security\logs\winlogon.log %SystemRoot%\Regist*\*.crmlog %SystemRoot%\inf\*.inf %SystemRoot%\inf\*.pnf %SystemRoot%\inf\*.adm %SystemRoot%\inf\*.iem %SystemRoot%\bootstat.dat // REQUIRED Windows Boot sequence - User Profiles %SystemRoot%\system32\Micros*\Protect\*\Prefer* %SystemRoot%\system32\Micros*\Protect\*\User\Prefer* // REQIURED Windows Product Activation %SystemRoot%\system32\wpa.dbl %SystemRoot%\system32\wpa.bak // REQUIRED Windows Recycle Bin ?:\RECYCLE*\*\INFO2 // REQUIRED DG Agent temp files during uninstall via Add/Remove Programs ?:\DOCUME*\*\APPLIC*\*\DGAgen*.* ?:\DOCUME*\*\APPLIC*\{*\instance.dat // REQUIRED - Windows New User Creation and Roaming Profile Temp Files ?:\*\PRF*.tmp // OPTIONAL - example to permit Windows user-mode debugging %SystemRoot%\debug\UserMode\userenv.log // OPTIONAL - example to avoid PerfectDisk conflict ?:\Perfec*\Perfec*.adm ?:\Perfec*\PDHelpEN.chm ?:\Perfec*\Config.ini ?:\Perfec*\Upd.ini ?:\Perfec*\PDAgen*.mof // OPTIONAL - example to avoid IBM / Lenovo ThinkVantage and Biometric Fingerprint Scanner %SystemDrive%\SWSHARE\sfr.log %SystemDrive%\Progra*\*Fingerprint*\*.xml %SystemDrive%\Progra*\*Fingerprint*\rsc\sheetcc.css // OPTIONAL - PointSec Driver %SystemDrive%\prot_ins.sys SECTION END: //========================================================================= // ACI SECTION - old style for old agents who don't understand the new format // specify directories where files are not classified //========================================================================= SECTION ACI: c:\program files\common files\symantec shared c:\program files\symantec c:\program files\symantec client security c:\program files\norton internet security c:\windows c:\winnt C:\documents and settings\all users\application data\microsoft\crypto c:\system volume information c:\msocache c:\config.msi c:\inetpub //Customer specific requirements c:\drivers SECTION END: //========================================================================= // ACI2 SECTION - new and improved version (5.3.1+) // specify directories where files are not classified //========================================================================= SECTION ACI2: %SystemDrive%\windows\* %SystemDrive%\progra*\common*\symant*\* %SystemDrive%\progra*\symant*\* %SystemDrive%\progra*\norton*\* %SystemDrive%\winnt\* %SystemDrive%\docume*\all*\applic*\micros*\crypto\* %SystemDrive%\system*\* %SystemDrive%\msocache\* %SystemDrive%\config.msi\* %SystemDrive%\inetpub\* %SystemDrive%\progra*\citrix\person*\logs\* %SystemDrive%\progra*\citrix\pvsage*\* %SystemDrive%\progra*\vmware\vmware*\* %SystemDrive%\progra*\dgagent\readops\* %SystemDrive%\progra*\malwarebytes endpoint agent\logs* //Customer specific requirements %SystemDrive%\drivers\* // more filtering for IE %SystemDrive%\users*\appdata\local\microsoft\windows\webcache\*.log %SystemDrive%\users*\appdata\roaming\microsoft\windows\recent\customdestinations\*.tmp %SystemDrive%\users*\appdata\roaming\microsoft\windows\recent\customdestinations\*-ms // Windows 8 Apps special directories \* \* // Customer specific, filtering for AppSense desktop redirection with Office \\mmfiles\*\appsense\*\*tmp // Windows 10 Performance improvements %SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\*.html %SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\static\images\*.png %SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\*.png %SystemDrive%\Program Files (x86)\apple software update\softwareupdate.resources\software update.tiff %SystemDrive%\Program Files (x86)\cisco systems\cisco jabber\*.xml %SystemDrive%\Program Files (x86)\cisco systems\cisco jabber\avatars\*.svg %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxcrashhandler.exe %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdate.exe %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdatebroker.exe %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdatehelper.msi %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdateondemand.exe %SystemDrive%\Program Files (x86)\dropbox\update\*\goopdate.dll %SystemDrive%\Program Files (x86)\dropbox\update\*\goopdateres_*.dll %SystemDrive%\Program Files (x86)\dropbox\update\*\npdropboxupdate*.dll %SystemDrive%\Program Files (x86)\dropbox\update\*\psmachine.dll %SystemDrive%\Program Files (x86)\dropbox\update\*\psuser.dll %SystemDrive%\Program Files (x86)\dropbox\update\install\{*}\dropboxupdatesetup_*.exe %SystemDrive%\Program Files (x86)\dyn\updater\*.txt %SystemDrive%\Program Files (x86)\dyn\updater\images\*.png %SystemDrive%\Program Files\itunes\itunes.resources\missingartworkloading.png %SystemDrive%\Program Files*\microsoft office\*.thmx %SystemDrive%\Program Files\microsoft office\appxmanifest.xml %SystemDrive%\Program Files\microsoft office\filesystemmetadata.xml %SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.model.zip %SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.utilities.controls.zip %SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.utilities.zip %SystemDrive%\Program Files\microsoft office\root\office16\ocomprivate.zip %SystemDrive%\Program Files\microsoft office\root\office16\system.windows.controls.theming.toolkit.zip %SystemDrive%\Program Files\microsoft office\updates\detection\*\versiondescriptor.xml %SystemDrive%\users\*\appdata\local\microsoft\olk\cache\* %SystemDrive%\users\*\appdata\local\microsoft\olk\ebwebview\* %SystemDrive%\users\*\appdata\local\microsoft\olk\logs\* %SystemDrive%\Program Files\windowsapps\microsoft.skypeapp*\skypeapp\assets\images\*.png %SystemDrive%\ProgramData\{*}.zip %SystemDrive%\ProgramData\apple computer\itunes\sc info\sc info.txt %SystemDrive%\ProgramData\application data\dyn\updater\frontend.log %SystemDrive%\ProgramData\application data\dyn\updater\frontend.log.* %SystemDrive%\ProgramData\cisco\cisco anyconnect secure mobility client\*.xml %SystemDrive%\ProgramData\cisco\cisco anyconnect secure mobility client\logs\updatehistory_*_log.txt %SystemDrive%\programdata\dropbox\update\log\* %SystemDrive%\ProgramData\dropbox\update\log\dropboxupdate.log-* %SystemDrive%\ProgramData\dropbox\update\log\dropboxupdate.log-*-finished %SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\deploymentconfiguration.xml %SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\manifest.xml %SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\userdeploymentconfiguration.xml %SystemDrive%\ProgramData\microsoft\clicktorun\productreleases\*\en-us.16\masterdescriptor.en-us.xml %SystemDrive%\ProgramData\microsoft\clicktorun\productreleases\*\x-none.16\masterdescriptor.x-none.xml %SystemDrive%\ProgramData\microsoft\diagnosis\downloadedscenarios\windows.siuf.xml %SystemDrive%\ProgramData\microsoft\office\heartbeat\heartbeatcache.xml %SystemDrive%\ProgramData\microsoft\provisioning\*\masterdatastore.xml %SystemDrive%\ProgramData\microsoft\provisioning\*\prov\runtime.xml %SystemDrive%\ProgramData\microsoft\windows\power efficiency diagnostics\energy-report-*.xml %SystemDrive%\ProgramData\microsoft\windows\power efficiency diagnostics\energy-report-latest.xml %SystemDrive%\programdata\microsoft\windows\power efficiency diagnostics\energy-report* %SystemDrive%\ProgramData\microsoft\windows\wer\reportqueue\*.txt %SystemDrive%\ProgramData\microsoft\windows\wer\reportqueue\*.xml %SystemDrive%\programdata\microsoft\windows\wer\reportqueue\*\report.wer %SystemDrive%\programdata\microsoft\windows\wer\reportqueue\*\report.wer.tmp %SystemDrive%\ProgramData\microsoft\windows\wer\temp\*.xml %SystemDrive%\programdata\nvidia corporation\drs\update.bin %SystemDrive%\ProgramData\nvidia corporation\shadowplay\capturecore.log %SystemDrive%\ProgramData\nvidia corporation\shadowplay\capturecore.old %SystemDrive%\ProgramData\sccomm\Logs\sccomm.txt %SystemDrive%\ProgramData\sccomm\sccomm.txt %SystemDrive%\ProgramData\vmware\*.txt %SystemDrive%\Users\*\AppData\Local\{*} %SystemDrive%\Users\*\AppData\Local\cisco\cisco anyconnect secure mobility client\preferences.xml %SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\history\*\_db.key %SystemDrive%\users\*\appdata\local\cisco\unified communications\jabber\csf\logs\jabber.log.* %SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\photo cache\*.png %SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\telemetry\*.txt %SystemDrive%\users\*\appdata\local\google\chrome\user data\* %SystemDrive%\Users\*\AppData\Local\microsoft\clr_v4.0\ngendisable.txt %SystemDrive%\Users\*\AppData\Local\microsoft\internet explorer\urlblock\urlblock_*.bin %SystemDrive%\Users\*\AppData\Local\microsoft\msoidentitycrl\production\fplist.xml %SystemDrive%\Users\*\AppData\Local\microsoft\office\*\lync.exe_rules.xml %SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.etl %SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.etl.bak %SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.uccapilog %SystemDrive%\users\*\appdata\local\microsoft\office\*\msoia.exe_rules.xml %SystemDrive%\Users\*\AppData\Local\microsoft\office\*\outlook.exe_rules.xml %SystemDrive%\users\*\appdata\local\microsoft\onedrive\logs\* %SystemDrive%\users\*\appdata\local\microsoft\onedrive\settings\* %SystemDrive%\Users\*\AppData\Local\microsoft\onedrive\standaloneupdater\update.xml %SystemDrive%\Users\*\AppData\Local\microsoft\onedrive\update\update.xml %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.nst.tmp %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.ost %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.ost.tmp %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*\autod.*.com.xml %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*autodiscover.xml %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\inferences*.xml %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\oab2.xml %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\oab3.xml %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\dropbox-desktop-client_*.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\flipboard-flipboard_*.jpg %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-explorer-notification--*.png %SystemDrive%\users\*\appdata\local\microsoft\windows\actioncentercache\microsoft-explorer-notification*.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-office-outlook-exe-*.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-skypeapp_*-app_*.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\explorer\notifyicon\microsoft.explorer.notification.*.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*.htm %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*.jpg %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\compare_1_5_6_uni_dll1.zip %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist[*].xml %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist*.xml %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist1.xml %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\img_spacer1.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\jabber_logo1.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\pluginmanager_*.zip %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\plugins*.zip %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.htm %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.txt %SystemDrive%\Users\*\AppData\Local\microsoft\windows\notifications\wpnidm\*.jpg %SystemDrive%\users\*\appdata\local\microsoft\windows\webcache\* %SystemDrive%\Users\*\AppData\Local\microsoft\windows\webcache\*.log %SystemDrive%\Users\*\AppData\Local\microsoftedge\sharedcachecontainers\microsoftedge_iecompat\iecompatdata.xml %SystemDrive%\Users\*\AppData\Local\nvidia corporation\shadowplay\capturecore.old %SystemDrive%\users\*\appdata\local\nvidia\nvbackend\* %SystemDrive%\Users\*\AppData\Local\nvidia\nvbackend\*.xml %SystemDrive%\Users\*\AppData\Local\packages\*.dropbox_*\localstate\dbxdata.dat %SystemDrive%\Users\*\AppData\Local\packages\*.dropbox_*\localstate\dbxdata.dat.bak %SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\offlineinfo* %SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\onlineinfo* %SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\resumeinfo* %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.htm %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.jpg %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.png %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.txt %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\microsoft\internet explorer\domstore\*\*.xml %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\temp\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\localstate\*.xml %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\localstate\*.xml.~tmp %SystemDrive%\Users\*\AppData\Local\packages\facebook.facebook_*\localstate\appdata\local\osmeta\_store_*\image_cache.v*\fbimagedownloader-*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\ac\temp\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\localstate\* %SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\localstate\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\ac\inetcache\*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\ac\inetcache\*.png %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\localstate\*.xml %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\localstate\*.xml*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.flv %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.htm %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.png %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.svg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.svg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.swf %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.txt %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.xml %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\microsoftedge\urlblock\urlblock_*.bin %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\temp\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.oneconnect_*\localstate\* %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\contactsonprimarytile.txt %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\contactsonprimarytile.txt.~tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\diagoutputdir\peoplebackgroundtasklog.etl %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\diagoutputdir\peoplebackgroundtasklog.last.etl %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\tilethumbnails\primarytileimage_*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\tilethumbnails\primarytileimage_*.jpgtemp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\ac\temp\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\assets\* %SystemDrive%\users\*\appdata\local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\* %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\* %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\stagedassets\* %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\tips\*.xml %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\appcache\*.htm %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\nvidia corporation\shadowplay\capturecore.log %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\temp\*.tmp %SystemDrive%\users\*\appdata\local\packages\microsoft.windows.cortana_*\localstate\* %SystemDrive%\users\*\appdata\local\packages\microsoft.windows.cortana_*\tempstate\* %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\ac\nvidia corporation\shadowplay\capturecore.log %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\ac\nvidia corporation\shadowplay\capturecore.old %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\framenavigationservicestate.xml %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\photosapptile\tile*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\timelineprefetchthumbnails.xml %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscalculator_*\ac\nvidia corporation\shadowplay\capturecore.log %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\nvidia corporation\shadowplay\capturecore.log %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\nvidia corporation\shadowplay\capturecore.old %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\temp\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.pdf %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.png %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\s0\*\image00*.png %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.pdf %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.png %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\content.mso\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\syncenginesnapshot.xml %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\syncenginesnapshotold.xml %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.htm %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.png %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\nvidia corporation\shadowplay\capturecore.log %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\nvidia corporation\shadowplay\capturecore.old %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\temp\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\*\LocalState\* %SystemDrive%\Users\*\AppData\Local\publishers\*\fonts\fontcache\2\fontcachemetadata.xml %SystemDrive%\users\*\appdata\local\temp\* %SystemDrive%\Users\*\appdata\local\xo communications\worktime\* %SystemDrive%\Users\*\AppData\Locallow\lastpass\debug.txt %SystemDrive%\Users\*\AppData\Roaming\apple computer\itunes\cookies\cookies.binarycookies %SystemDrive%\Users\*\AppData\Roaming\apple computer\itunes\cookies\cookies.binarycookies_tmp_*.dat %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\byhost\com.apple.itunes.{*}.plist %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\byhost\com.apple.itunes.{*}.plist.* %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\com.apple.itunes.plist %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\com.apple.itunes.plist.* %SystemDrive%\users\*\appdata\roaming\cisco\unified communications\jabber\csf\config\* %SystemDrive%\Users\*\AppData\roaming\microsoft\templates\livecontent\*.thmx %SystemDrive%\users\*\appdata\roaming\microsoft\office\*\*\proofing\*.tmp %SystemDrive%\users\*\appdata\roaming\microsoft\office\*\*\proofing\roamingcustom.dic %SystemDrive%\Users\*\AppData\Roaming\microsoft\outlook\outlook.xml %SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*.htm %SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*\colorschememapping.xml %SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*\themedata.thmx %SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\~$rmalemail.dotm %SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\~wrd*.tmp %SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\normalemail.dotm %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\~ictures.tmp %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\~ocuments.tmp %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\documents.library-ms %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\documents.library-ms~*.tmp %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\pictures.library-ms %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\pictures.library-ms~*.tmp %SystemDrive%\users\*\appdata\roaming\microsoft\windows\recent\customdestinations\* %SystemDrive%\Users\*\AppData\Roaming\notepad++\config.xml %SystemDrive%\Users\*\AppData\Roaming\notepad++\contextmenu.xml %SystemDrive%\Users\*\AppData\Roaming\notepad++\langs.xml %SystemDrive%\Users\*\AppData\Roaming\notepad++\plugins\config\pluginmanagerplugins.zip %SystemDrive%\Users\*\AppData\Roaming\notepad++\session.xml %SystemDrive%\Users\*\AppData\Roaming\notepad++\shortcuts.xml %SystemDrive%\Users\*\AppData\Roaming\notepad++\stylers.xml %SystemDrive%\Users\*\evernote\logs\applog_*.txt %SystemDrive%\Users\*\music\itunes\*.tmp %SystemDrive%\Users\*\music\itunes\it.tmp %SystemDrive%\Users\*\music\itunes\itunes library.itl %SystemDrive%\Users\*\music\itunes\temp*.tmp %SystemDrive%\windows\inf\wmiaprpl\* %SystemDrive%\windows\system32\perfstringbackup.tmp %SystemDrive%\windows\system32\wbem\performance\* %SystemDrive%\windows\temp\*.exe SECTION END: //========================================================================= // DOCPROPS SECTION - specify directories where files are not docprops done //========================================================================= SECTION DOCPROPS: %SystemDrive%\windows\* %SystemDrive%\progra*\common*\symant*\* %SystemDrive%\progra*\symant*\* %SystemDrive%\progra*\norton*\* %SystemDrive%\winnt\* %SystemDrive%\docume*\all*\applic*\micros*\crypto\* %SystemDrive%\system*\* %SystemDrive%\msocache\* %SystemDrive%\config.msi\* %SystemDrive%\inetpub\* %SystemDrive%\progra*\citrix\person*\logs\* %SystemDrive%\progra*\citrix\pvsage*\* %SystemDrive%\progra*\vmware\vmware*\* %SystemDrive%\progra*\dgagent\readops\* //Customer specific requirements %SystemDrive%\drivers\* // Windows 8 Apps special directories \* \* // Windows 10 Performance improvements %SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\*.html %SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\static\images\*.png %SystemDrive%\Program Files (x86)\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\*.png %SystemDrive%\Program Files (x86)\apple software update\softwareupdate.resources\software update.tiff %SystemDrive%\Program Files (x86)\cisco systems\cisco jabber\*.xml %SystemDrive%\Program Files (x86)\cisco systems\cisco jabber\avatars\*.svg %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxcrashhandler.exe %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdate.exe %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdatebroker.exe %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdatehelper.msi %SystemDrive%\Program Files (x86)\dropbox\update\*\dropboxupdateondemand.exe %SystemDrive%\Program Files (x86)\dropbox\update\*\goopdate.dll %SystemDrive%\Program Files (x86)\dropbox\update\*\goopdateres_*.dll %SystemDrive%\Program Files (x86)\dropbox\update\*\npdropboxupdate*.dll %SystemDrive%\Program Files (x86)\dropbox\update\*\psmachine.dll %SystemDrive%\Program Files (x86)\dropbox\update\*\psuser.dll %SystemDrive%\Program Files (x86)\dropbox\update\install\{*}\dropboxupdatesetup_*.exe %SystemDrive%\Program Files (x86)\dyn\updater\*.txt %SystemDrive%\Program Files (x86)\dyn\updater\images\*.png %SystemDrive%\Program Files\itunes\itunes.resources\missingartworkloading.png %SystemDrive%\Program Files*\microsoft office\*.thmx %SystemDrive%\Program Files\microsoft office\appxmanifest.xml %SystemDrive%\Program Files\microsoft office\filesystemmetadata.xml %SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.model.zip %SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.utilities.controls.zip %SystemDrive%\Program Files\microsoft office\root\office16\microsoft.lync.utilities.zip %SystemDrive%\Program Files\microsoft office\root\office16\ocomprivate.zip %SystemDrive%\Program Files\microsoft office\root\office16\system.windows.controls.theming.toolkit.zip %SystemDrive%\Program Files\microsoft office\updates\detection\*\versiondescriptor.xml %SystemDrive%\Program Files\windowsapps\microsoft.skypeapp*\skypeapp\assets\images\*.png %SystemDrive%\ProgramData\{*}.zip %SystemDrive%\ProgramData\apple computer\itunes\sc info\sc info.txt %SystemDrive%\ProgramData\application data\dyn\updater\frontend.log %SystemDrive%\ProgramData\application data\dyn\updater\frontend.log.* %SystemDrive%\ProgramData\cisco\cisco anyconnect secure mobility client\*.xml %SystemDrive%\ProgramData\cisco\cisco anyconnect secure mobility client\logs\updatehistory_*_log.txt %SystemDrive%\programdata\dropbox\update\log\* %SystemDrive%\ProgramData\dropbox\update\log\dropboxupdate.log-* %SystemDrive%\ProgramData\dropbox\update\log\dropboxupdate.log-*-finished %SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\deploymentconfiguration.xml %SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\manifest.xml %SystemDrive%\ProgramData\microsoft\clicktorun\machinedata\catalog\packages\*\userdeploymentconfiguration.xml %SystemDrive%\ProgramData\microsoft\clicktorun\productreleases\*\en-us.16\masterdescriptor.en-us.xml %SystemDrive%\ProgramData\microsoft\clicktorun\productreleases\*\x-none.16\masterdescriptor.x-none.xml %SystemDrive%\ProgramData\microsoft\diagnosis\downloadedscenarios\windows.siuf.xml %SystemDrive%\ProgramData\microsoft\office\heartbeat\heartbeatcache.xml %SystemDrive%\ProgramData\microsoft\provisioning\*\masterdatastore.xml %SystemDrive%\ProgramData\microsoft\provisioning\*\prov\runtime.xml %SystemDrive%\ProgramData\microsoft\windows\power efficiency diagnostics\energy-report-*.xml %SystemDrive%\ProgramData\microsoft\windows\power efficiency diagnostics\energy-report-latest.xml %SystemDrive%\programdata\microsoft\windows\power efficiency diagnostics\energy-report* %SystemDrive%\ProgramData\microsoft\windows\wer\reportqueue\*.txt %SystemDrive%\ProgramData\microsoft\windows\wer\reportqueue\*.xml %SystemDrive%\programdata\microsoft\windows\wer\reportqueue\*\report.wer %SystemDrive%\programdata\microsoft\windows\wer\reportqueue\*\report.wer.tmp %SystemDrive%\ProgramData\microsoft\windows\wer\temp\*.xml %SystemDrive%\programdata\nvidia corporation\drs\update.bin %SystemDrive%\ProgramData\nvidia corporation\shadowplay\capturecore.log %SystemDrive%\ProgramData\nvidia corporation\shadowplay\capturecore.old %SystemDrive%\ProgramData\sccomm\Logs\sccomm.txt %SystemDrive%\ProgramData\sccomm\sccomm.txt %SystemDrive%\ProgramData\vmware\*.txt %SystemDrive%\Users\*\AppData\Local\{*} %SystemDrive%\Users\*\AppData\Local\cisco\cisco anyconnect secure mobility client\preferences.xml %SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\history\*\_db.key %SystemDrive%\users\*\appdata\local\cisco\unified communications\jabber\csf\logs\jabber.log.* %SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\photo cache\*.png %SystemDrive%\Users\*\AppData\Local\cisco\unified communications\jabber\csf\telemetry\*.txt %SystemDrive%\users\*\appdata\local\google\chrome\user data\* %SystemDrive%\Users\*\AppData\Local\microsoft\clr_v4.0\ngendisable.txt %SystemDrive%\Users\*\AppData\Local\microsoft\internet explorer\urlblock\urlblock_*.bin %SystemDrive%\Users\*\AppData\Local\microsoft\msoidentitycrl\production\fplist.xml %SystemDrive%\Users\*\AppData\Local\microsoft\office\*\lync.exe_rules.xml %SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.etl %SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.etl.bak %SystemDrive%\users\*\appdata\local\microsoft\office\*\lync\tracing\*.uccapilog %SystemDrive%\users\*\appdata\local\microsoft\office\*\msoia.exe_rules.xml %SystemDrive%\Users\*\AppData\Local\microsoft\office\*\outlook.exe_rules.xml %SystemDrive%\users\*\appdata\local\microsoft\onedrive\logs\* %SystemDrive%\users\*\appdata\local\microsoft\onedrive\settings\* %SystemDrive%\Users\*\AppData\Local\microsoft\onedrive\standaloneupdater\update.xml %SystemDrive%\Users\*\AppData\Local\microsoft\onedrive\update\update.xml %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.nst.tmp %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.ost %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*.com.ost.tmp %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*\autod.*.com.xml %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\*autodiscover.xml %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\inferences*.xml %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\oab2.xml %SystemDrive%\Users\*\AppData\Local\microsoft\outlook\oab3.xml %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\dropbox-desktop-client_*.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\flipboard-flipboard_*.jpg %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-explorer-notification--*.png %SystemDrive%\users\*\appdata\local\microsoft\windows\actioncentercache\microsoft-explorer-notification*.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-office-outlook-exe-*.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\actioncentercache\microsoft-skypeapp_*-app_*.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\explorer\notifyicon\microsoft.explorer.notification.*.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*.htm %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*.jpg %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\compare_1_5_6_uni_dll1.zip %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist[*].xml %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist*.xml %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\edgecompatviewlist1.xml %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\img_spacer1.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\jabber_logo1.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\pluginmanager_*.zip %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\ie\*\plugins*.zip %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.htm %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.png %SystemDrive%\Users\*\AppData\Local\microsoft\windows\inetcache\low\ie\*.txt %SystemDrive%\Users\*\AppData\Local\microsoft\windows\notifications\wpnidm\*.jpg %SystemDrive%\users\*\appdata\local\microsoft\windows\webcache\* %SystemDrive%\Users\*\AppData\Local\microsoft\windows\webcache\*.log %SystemDrive%\Users\*\AppData\Local\microsoftedge\sharedcachecontainers\microsoftedge_iecompat\iecompatdata.xml %SystemDrive%\Users\*\AppData\Local\nvidia corporation\shadowplay\capturecore.old %SystemDrive%\users\*\appdata\local\nvidia\nvbackend\* %SystemDrive%\Users\*\AppData\Local\nvidia\nvbackend\*.xml %SystemDrive%\Users\*\AppData\Local\packages\*.dropbox_*\localstate\dbxdata.dat %SystemDrive%\Users\*\AppData\Local\packages\*.dropbox_*\localstate\dbxdata.dat.bak %SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\offlineinfo* %SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\onlineinfo* %SystemDrive%\users\*\appdata\local\packages\*.netflix_*\localstate\resumeinfo* %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.htm %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.jpg %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.png %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\inetcache\*\*.txt %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\microsoft\internet explorer\domstore\*\*.xml %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\ac\temp\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\localstate\*.xml %SystemDrive%\Users\*\AppData\Local\packages\amazon.com.amazon_*\localstate\*.xml.~tmp %SystemDrive%\Users\*\AppData\Local\packages\facebook.facebook_*\localstate\appdata\local\osmeta\_store_*\image_cache.v*\fbimagedownloader-*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\ac\temp\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\localstate\* %SystemDrive%\Users\*\AppData\Local\packages\microsoft.aad.brokerplugin_*\localstate\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\ac\inetcache\*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\ac\inetcache\*.png %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\localstate\*.xml %SystemDrive%\Users\*\AppData\Local\packages\microsoft.bingweather_*\localstate\*.xml*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.flv %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.htm %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.png %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.svg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.svg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.swf %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.txt %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\*\microsoftedge\cache\*.xml %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\microsoftedge\urlblock\urlblock_*.bin %SystemDrive%\Users\*\AppData\Local\packages\microsoft.microsoftedge_*\ac\temp\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.oneconnect_*\localstate\* %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\contactsonprimarytile.txt %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\contactsonprimarytile.txt.~tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\diagoutputdir\peoplebackgroundtasklog.etl %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\diagoutputdir\peoplebackgroundtasklog.last.etl %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\tilethumbnails\primarytileimage_*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.people_*\localstate\tilethumbnails\primarytileimage_*.jpgtemp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\ac\temp\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\assets\* %SystemDrive%\users\*\appdata\local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\* %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\* %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\contentmanagementsdk\creatives\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\stagedassets\* %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.contentdeliverymanager_*\localstate\tips\*.xml %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\appcache\*.htm %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\nvidia corporation\shadowplay\capturecore.log %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.cortana_*\ac\temp\*.tmp %SystemDrive%\users\*\appdata\local\packages\microsoft.windows.cortana_*\localstate\* %SystemDrive%\users\*\appdata\local\packages\microsoft.windows.cortana_*\tempstate\* %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\ac\nvidia corporation\shadowplay\capturecore.log %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\ac\nvidia corporation\shadowplay\capturecore.old %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\framenavigationservicestate.xml %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\photosapptile\tile*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windows.photos_*\localstate\timelineprefetchthumbnails.xml %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscalculator_*\ac\nvidia corporation\shadowplay\capturecore.log %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\nvidia corporation\shadowplay\capturecore.log %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\nvidia corporation\shadowplay\capturecore.old %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\ac\temp\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.pdf %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\*.png %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\files\s0\*\image00*.png %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.pdf %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\localstate\localfiles\*.png %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\content.mso\*.tmp %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\syncenginesnapshot.xml %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowscommunicationsapps_*\tempstate\syncenginesnapshotold.xml %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.htm %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.jpg %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\inetcache\*.png %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\nvidia corporation\shadowplay\capturecore.log %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\nvidia corporation\shadowplay\capturecore.old %SystemDrive%\Users\*\AppData\Local\packages\microsoft.windowsstore_*\ac\temp\*.tmp %SystemDrive%\Users\*\AppData\Local\publishers\*\fonts\fontcache\2\fontcachemetadata.xml %SystemDrive%\users\*\appdata\local\temp\* %SystemDrive%\Users\*\AppData\Locallow\lastpass\debug.txt %SystemDrive%\Users\*\AppData\Roaming\apple computer\itunes\cookies\cookies.binarycookies %SystemDrive%\Users\*\AppData\Roaming\apple computer\itunes\cookies\cookies.binarycookies_tmp_*.dat %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\byhost\com.apple.itunes.{*}.plist %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\byhost\com.apple.itunes.{*}.plist.* %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\com.apple.itunes.plist %SystemDrive%\Users\*\AppData\Roaming\apple computer\preferences\com.apple.itunes.plist.* %SystemDrive%\users\*\appdata\roaming\cisco\unified communications\jabber\csf\config\* %SystemDrive%\Users\*\AppData\roaming\microsoft\templates\livecontent\*.thmx %SystemDrive%\users\*\appdata\roaming\microsoft\office\*\*\proofing\*.tmp %SystemDrive%\users\*\appdata\roaming\microsoft\office\*\*\proofing\roamingcustom.dic %SystemDrive%\Users\*\AppData\Roaming\microsoft\outlook\outlook.xml %SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*.htm %SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*\colorschememapping.xml %SystemDrive%\Users\*\AppData\Roaming\microsoft\signatures\*\themedata.thmx %SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\~$rmalemail.dotm %SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\~wrd*.tmp %SystemDrive%\Users\*\AppData\Roaming\microsoft\templates\normalemail.dotm %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\~ictures.tmp %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\~ocuments.tmp %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\documents.library-ms %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\documents.library-ms~*.tmp %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\pictures.library-ms %SystemDrive%\Users\*\AppData\Roaming\microsoft\windows\libraries\pictures.library-ms~*.tmp %SystemDrive%\users\*\appdata\roaming\microsoft\windows\recent\customdestinations\* %SystemDrive%\Users\*\AppData\Roaming\notepad++\config.xml %SystemDrive%\Users\*\AppData\Roaming\notepad++\contextmenu.xml %SystemDrive%\Users\*\AppData\Roaming\notepad++\langs.xml %SystemDrive%\Users\*\AppData\Roaming\notepad++\plugins\config\pluginmanagerplugins.zip %SystemDrive%\Users\*\AppData\Roaming\notepad++\session.xml %SystemDrive%\Users\*\AppData\Roaming\notepad++\shortcuts.xml %SystemDrive%\Users\*\AppData\Roaming\notepad++\stylers.xml %SystemDrive%\Users\*\evernote\logs\applog_*.txt %SystemDrive%\Users\*\music\itunes\*.tmp %SystemDrive%\Users\*\music\itunes\it.tmp %SystemDrive%\Users\*\music\itunes\itunes library.itl %SystemDrive%\Users\*\music\itunes\temp*.tmp %SystemDrive%\windows\inf\wmiaprpl\* %SystemDrive%\windows\system32\perfstringbackup.tmp %SystemDrive%\windows\system32\wbem\performance\* %SystemDrive%\windows\temp\*.exe %SystemDrive%\users\*\appdata\local\microsoft\edge\user data\* SECTION END: //========================================================================= // AFE FDE NO REPARSE FILES - // These are meant to suppress warning dialogs from firewalls //========================================================================= SECTION AFE FDE FILE NO REPARSE: //Transactional NTFS and registry // Legacy entries - not needed any more ... //*\USERS\*\NTUSER* //*\USERS\*\USRCLASS* *\TxR\* // OPTIONAL - Symantec AV // *\PROGRA*\SYMANT*\*\*.exe // *\PROGRA*\COMMON*\SYMANT*\*.exe // *\PROG*\*\SRTSP*\* // OPTIONAL - Symantec Tamper Protection *\NOMADIC\DBENG8.EXE *\SYSTEM32\SERVICES.EXE // OPTIONAL - McAfee AV *\PROGRA*\MCAFEE*\* // OPTIONAL - VMWare Workstation and VMWare Player *\VMWARE-AUTHD.exe // OPTIONAL - Siebel DB client *\sfadialer\SFADial.exe // AME DGFS: without this AFE will decrypt temporary files // that AME encrypted when replacing attachment //*\09D849B6-32D3-4A40-85EE-6B84BA29E35B\msgs\* // This is a fix for DGAGENT-1448, HP systems running out of stack space. *\system32\atiok3*.dll // This is a fix for DGAGENT-1893 Cannot launch start menu when AFE is enabled on Win8 // On start Explorer tries to open .lnk files in this directory with OpLocks *\USERS\*\APPDATA\LOCAL\MICRO*\WINDOWS\WINX\* // Fix For Universal Apps *\USERS\*\APPDATA\LOCAL\PACKAGE?\* *\WINDOWS\SYSTEM32\WWAHOST.EXE *\WINDOWS\SYSTEM32\BYTECODEGENERATOR.EXE *\WINDOWS\SYSTEM32\RUNTIMEBROKER.EXE *\WINDOWS\SYSTEM32\BACKGROUNDTASKHOST.EXE *\USERS\*\APPDATA\LOCAL\MICRO*\WINDOWS\APPLIC*\* *\WINDOWS\WINSTOR* *\PROG*\WINDOWSAPP* //SA-24054: Fixed RS3 AFE compatibility issue. *\WINDOWS\FONTS* // Fix for DGAGENT-2893 (Sep12 RU3) and DGAGENT-3507 (Sep12 RU4) and future versions of // Symantec Endpoint Protection Client Installations *\SYMANT*12.1.* *\PROGRA*\SYMANT*\SYMANT*\CURRENT* // This is a fix for DGAGENT-5975, [Kraft Group] Latency accessing network shares with AFE enabled? *\SRVSVC* *WINDOWS\WINSX* *WINDOWS\SOFTWAREDISTRIBUTIO* *WINDOWS\SOFTWA~1* *WINDOWS\CBSTEM* *\CBSTEM*PACKAGE*KB*.CAT* *WINDOWS\SERVICIN* *WINDOWS\SERVIC*\PACK* *WINDOWS\REGISTRATIO* *WINDOWS\REGIST~1* *WINDOWS\GLOBALIZATION* *WINDOWS\GLOBAL~1* *TIWORKER.EX* *WINDOWS\LOGS* *WINDOWS\SYS*\SMI\STORE* *PROGRAMDATA\USOPRIVAT* *PROGRAMDATA\MICROSOFT* *WINDOWS\SYS*\CONFIG* *WINDOWS\APPPATC* *SYS*\CATROO* *\WINDOWS\INF* // Don't reparse any basic EXE types // Fix for DGAGENT-17152 *.EXE*;*.DLL*;*.SYS*;*.COM;*.CPL SECTION END: //========================================================================= // AFE PROCESS NO REPARSE FILES - // No reparse of the specified files. Effeects processses marked with RP flag. // e.g sfttray.exe,RP+PR - see prcsflgs.dat for example(s) //======================================================================== SECTION AFE PROCESS NO REPARSE FILES: // OPTIONAL - AppV Application (see sfttray.exe in prcsflgs.dat ) sfttray.exe:*.DLL // OPTIONAL - Adobe Reader X 10.0.0 (see acrord32.exe in prcsflgs.dat) acrord32.exe:*\USERS\*\APPDATA\*\ADOBE\* acrord32.exe:*\DOC*\*\APP*\ADOBE\* // SEP12 has issues during install ccSvcHst.exe:*SYMANTEC* // SCEP 2015 msmpeng.exe:*.CMD // Universal Apps :aka MetroApps - Excluded for AFE sihost.exe:*.JPG SECTION END: