FileKey2=%ProgramFiles%*ChromePlusUserDataDefaultCache|*|RECURSE
FileKey3=%ProgramFiles%*ChromePlusUserDataDefaultMedia Cache|*|RECURSE
[Chromium 浏览器缓存*]
LangSecRef=3029
Default=False
DetectFile=%LocalAppData%ChromiumApplicationchrome.exe
FileKey1=%LocalAppData%ChromiumUser DataDefaultCache|*.*|RECURSE
[Chromium 浏览器升级包*]
LangSecRef=3021
DetectFile=%LocalAppData%ChromiumApplicationChrome.exe
Default=False
FileKey1=%LocalAppData%ChromiumApplication*Installer|chrome.7z|RECURSE
[COMODO Dragon 浏览器缓存*]
LangSecRef=3029
Default=False
DetectFile=%Programfiles%ComodoDragonDragon.exe
DetectFile2=%LocalAppData%ComodoDragonDragon.exe
FileKey1=%LocalAppData%ComodoDragonUser DataDefaultCache|*.*|RECURSE
[Daemon Tools*]
LangSecRef=3021
DetectFile=%APPDATA%DAEMON Tools LiteIconsCache
Default=False
FileKey1=%APPDATA%DAEMON Tools LiteIconsCache|*.*
[Evernote 日志文件*]
LangSecRef=3021
Detect=HKCUSoftwareEvernote
Default=False
FileKey1=%LocalAppData%EvernoteEvernoteLogs|*.txt|RECURSE
[Flash Player 缓存*]
LangSecRef=3023
DetectFile=%APPDATA%MacromediaFlash Player
Default=False
FileKey1=%APPDATA%MacromediaFlash Player|*.*|RECURSE
上述规则随着时间变动会有所变动,请各位大神自行尝试!










