

"%LocalAppData%\VirtualStore\Program Files*\Twitter\TweetDeck\*.log"ĭetectPattern: "%ProgramFiles%\USDownloader\USDownloader.exe" "%LocalAppData%\Twitter\TweetDeck\localStorage\*" "%LocalAppData%\VirtualStore\Program Files*\TunnelBear\*.log"ĭetect: "HKCU\Software\Twitter\T" (Indicator: "twitter") "%LocalAppData%\VirtualStore\Program Files*\Trillian\Users\Default\instantlookup\*"ĭetectPattern: "%ProgramFiles%\TunnelBear\" "%LocalAppData%\VirtualStore\Program Files*\Trillian\Users\Default\buddyicons\**\*" "%LocalAppData%\VirtualStore\Program Files*\Trillian\Crash Files\**\*" "%AppData%\Trillian\users\*\buddies.*.xml" "%AppData%\Trillian\users\*\instantlookup\*" "%AppData%\Trillian\users\global\skin_cache\*" "%ProgramFiles%\Trillian\Crash Files\**\*" "%AppData%\QIP\Profiles\*\TwitterAvatars\*"įilePattern: "%AppData%\QIP\Profiles\*\Logs\*" "%AppData%\QIP\Profiles\*\FacebookAvatars\*" "%LocalAppData%\VirtualStore\Program Files*\Net Vampire\Data\" (Indicator: "myspace") "%LocalAppData%\VirtualStore\Program Files*\Net Vampire\Data\Sites\**\*" "%LocalAppData%\VirtualStore\Program Files*\Net Vampire\Data\Jobs\**\*" "%ProgramFiles%\Net Vampire\Data\State\**\*" "%ProgramFiles%\Net Vampire\Data\Sites\**\*" "%ProgramFiles%\Net Vampire\Data\Jobs\**\*" RegKey: "HKCU\Software\sms.at\mysms\cookies"ĭetectPattern: "%ProgramFiles%\Net Vampire" FilePattern: "%LocalAppData%\sms.at\mysms\LocalStorage\*"
